This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json) Hash identifier: WJr+/P03FV0uncT3mIgG91aLu/6mi/Nvf4PTD2ZY39k= Subject key identifier: F3:E6:B7:0D:4D:88:DD:3C:44:E5:11:07:F3:C1:EE:D2:98:27:52:EE Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Certificate serial: 019BF951A229DBE40F8CF65ECEBE16BBAE4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft Manifest number: 142E Signing time: Mon 26 Jan 2026 08:00:35 +0000 Manifest this update: Mon 26 Jan 2026 08:00:35 +0000 Manifest next update: Tue 27 Jan 2026 08:00:35 +0000 Files and hashes: 1: nq8_lKkxUGSnEnuUf5aIJh8XOp8.roa (hash: 4zAGZ6DVsgtkjmO+59u3bkrnGCMoQnzivE/ro2iUVRA=) 2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: xZQJrLVcq1Rj7Q77gBNQBkdtGl4BFjr5a1lZnns8cS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:a2:29:db:e4:0f:8c:f6:5e:ce:be:16:bb:ae:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80 Validity Not Before: Jan 26 08:00:35 2026 GMT Not After : Jan 27 08:00:35 2026 GMT Subject: CN=f3e6b70d4d88dd3c44e51107f3c1eed2982752ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:e3:2c:bd:d8:2e:f3:00:31:e6:cf:b1:5a: 1f:a1:c7:d9:0f:1f:67:d7:67:5f:3c:9c:cb:de:68: 4d:b6:93:b2:02:c8:44:bb:8e:a3:a3:2d:6c:de:d6: 9b:ec:82:09:2c:a7:bd:d6:05:9e:9a:0b:b1:06:16: 84:ff:60:f7:95:ec:56:c4:9e:78:da:d2:3f:be:00: 11:5c:71:b1:03:9b:7a:6d:ae:a4:c3:0d:d4:36:ef: 7f:ed:d1:e3:3c:3a:4e:81:f5:f3:ca:65:3b:cd:9f: 0e:e6:62:5e:fc:12:da:03:4a:e6:c8:c7:44:da:b6: 56:f8:e6:27:ec:0e:75:4a:24:9b:f4:e7:2a:7f:00: a3:b2:e5:b0:49:53:02:4f:03:39:ae:be:80:fe:5b: 71:33:16:d7:0a:09:c5:f3:34:9b:e4:6f:ae:42:8a: 57:67:94:dc:cd:14:ad:55:e1:99:b8:ca:fa:5f:dc: e5:0b:7a:d8:54:a4:e1:ab:32:76:b1:db:81:b6:6f: e3:3f:2a:c9:0f:6e:10:1f:b7:28:32:19:f0:59:a2: db:0a:94:11:9b:4d:6c:9e:3e:94:7b:5d:c6:0b:d0: 8d:03:75:c1:02:79:d8:fb:32:00:f0:25:55:89:39: de:e4:92:f6:17:4a:12:52:a8:86:49:21:a8:75:44: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E6:B7:0D:4D:88:DD:3C:44:E5:11:07:F3:C1:EE:D2:98:27:52:EE X509v3 Authority Key Identifier: keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ef:ea:11:ee:3a:1d:7a:af:d2:06:63:6c:6a:0e:3b:22:3b: b5:73:75:8d:3d:37:75:b8:bb:d0:ae:78:a6:d5:0d:ae:e8:94: 6a:59:06:2a:8a:ac:b1:5f:a6:13:b0:a0:39:56:9f:5e:47:2b: c0:b0:65:7f:db:46:36:8f:7d:ab:ce:3a:c9:bc:a7:1c:fc:97: df:86:04:a8:34:fa:81:2c:46:9b:84:fd:29:f2:22:09:18:52: 4c:c7:a5:aa:93:47:f5:19:6f:c1:4e:18:01:d1:84:ba:66:85: c8:41:8f:54:7c:51:ee:9b:6f:43:b6:25:2a:ac:91:74:6f:1e: da:3a:4f:4c:1f:bd:91:c2:41:ea:7a:f2:52:99:b9:a7:a7:fa: 0b:6a:68:7e:c7:e8:56:e6:40:bc:83:b9:3c:4e:83:34:8b:a2: 0c:68:f4:e2:01:1a:80:58:8c:59:36:d3:de:06:6b:d6:01:92: 1d:a8:7c:41:9d:05:e1:2b:7a:8e:80:62:df:17:f1:58:70:1c: f0:86:dd:de:a7:79:9a:aa:4a:3f:b4:60:35:4d:0f:45:52:e3: 4d:ce:19:2b:fc:f9:a2:d7:aa:97:c8:8b:8c:f3:39:27:65:ed: 25:a5:9b:00:c9:b1:6e:33:93:7d:3c:d2:de:7e:11:65:49:ec: 11:fe:1c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UaIp2+QPjPZezr4Wu65MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi ZjVlODAwHhcNMjYwMTI2MDgwMDM1WhcNMjYwMTI3MDgwMDM1WjAzMTEwLwYDVQQD EyhmM2U2YjcwZDRkODhkZDNjNDRlNTExMDdmM2MxZWVkMjk4Mjc1MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmfjLL3YLvMAMebPsVofocfZDx9n 12dfPJzL3mhNtpOyAshEu46joy1s3tab7IIJLKe91gWemguxBhaE/2D3lexWxJ54 2tI/vgARXHGxA5t6ba6kww3UNu9/7dHjPDpOgfXzymU7zZ8O5mJe/BLaA0rmyMdE 2rZW+OYn7A51SiSb9OcqfwCjsuWwSVMCTwM5rr6A/ltxMxbXCgnF8zSb5G+uQopX Z5TczRStVeGZuMr6X9zlC3rYVKThqzJ2sduBtm/jPyrJD24QH7coMhnwWaLbCpQR m01snj6Ue13GC9CNA3XBAnnY+zIA8CVViTne5JL2F0oSUqiGSSGodUQtAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPmtw1NiN08ROURB/PB7tKYJ1LuMB8GA1UdIwQY MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4 LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+/qEe46 HXqv0gZjbGoOOyI7tXN1jT03dbi70K54ptUNruiUalkGKoqssV+mE7CgOVafXkcr wLBlf9tGNo99q846ybynHPyX34YEqDT6gSxGm4T9KfIiCRhSTMelqpNH9RlvwU4Y AdGEumaFyEGPVHxR7ptvQ7YlKqyRdG8e2jpPTB+9kcJB6nryUpm5p6f6C2pofsfo VuZAvIO5PE6DNIuiDGj04gEagFiMWTbT3gZr1gGSHah8QZ0F4St6joBi3xfxWHAc 8Ibd3qd5mqpKP7RgNU0PRVLjTc4ZK/z5oteql8iLjPM5J2XtJaWbAMmxbjOTfTzS 3n4RZUnsEf4c0w== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:52 2026 by rpki-client