This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: lJlkcGVmrqxPSpzJ2fIM+UJncaFw3Yj781vLAHk4Kbg= Subject key identifier: 5F:8C:C1:FE:0D:93:42:C5:14:FA:E0:F0:17:D4:64:74:2F:18:C4:EB Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019BF6BE753EEBF85F987281A841A368D5FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 17F8 Signing time: Sun 25 Jan 2026 20:00:35 +0000 Manifest this update: Sun 25 Jan 2026 20:00:35 +0000 Manifest next update: Mon 26 Jan 2026 20:00:35 +0000 Files and hashes: 1: 1wr8QIeSM3CIv5J7uap933hLaGs.roa (hash: Y6lFO4ooFEDBG8EOKNjhhaIJIuCCzVgscAraR7wX8B4=) 2: 4nJ0h3kxVoLTGLl-KMMdIGNO3U4.roa (hash: yXSTzPv+VSMPQEsmFJQmVgwkS8AYD6u5M83BtbV+VIE=) 3: 5h7nMBydUVPaOlFP-jldFT3enCQ.roa (hash: +rXXd2KMjjrhcbSdyv1pypNJANUYaaOEd90M4umJew8=) 4: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (hash: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY=) 5: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (hash: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8=) 6: LTj2PGdyu1TZVch3WwkoLN3benA.roa (hash: 0uIInrnjr5BRMLrYPZ3TlKAb12B+T0z8Pu5nxkwhOwA=) 7: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: CoFY8bBfO0mwCUbUlut6dZ+Eu640R396SrgYIHuu4+E=) 8: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (hash: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U=) 9: UJVwk9mntlMFjdR5x6Gz4DwAego.roa (hash: Y9Qzk1ZJNkQeeN5SL4rk7tJNNAoeHg7LXp+c5rv1kJY=) 10: XkdalcQg6hGFzhglm3gQzCnpww4.roa (hash: 8jItQEffXXa+ZvcKZLLyn2RNT/EfLCbVUQe+TOkVNeM=) 11: YWsBcXgsO8gZFuZAgXqc8mQzIPQ.roa (hash: FIq3otCEvunZWYD7V3EpFGXTGzchT90RBkn3PHEPtpE=) 12: fPatpWdNAbZy6ojdptQs2lNi1EE.roa (hash: X9tWk7+bmsyMGDUglxjA0jdRl4uO9c2P7cIjkiKVhfo=) 13: fny2WANL9Kakl_hzClrFytLGIbA.roa (hash: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE=) 14: lqG4TiS1VcHtRo5hXtYqEofYXQY.roa (hash: lQ0va2Pv+RAccp1R5C/OndWZWgx6m66STBo/DZ6jbSw=) 15: snScws96TnQnAtgCESncYf2cHQI.roa (hash: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU=) 16: zyiTueEsxpcD3PrX5wVtwGJMZ_Y.roa (hash: 7R1f/73J/Qx3gYsQEvvU8YVQZND5dDU9/Elan9+1kYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:75:3e:eb:f8:5f:98:72:81:a8:41:a3:68:d5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 25 20:00:35 2026 GMT Not After : Jan 26 20:00:35 2026 GMT Subject: CN=5f8cc1fe0d9342c514fae0f017d464742f18c4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d0:b9:d5:8e:00:eb:88:4d:63:b7:e9:4e:3d: ff:79:a7:ab:2c:66:43:03:0c:ad:aa:d8:36:6f:f1: be:3d:fc:b1:45:ce:20:aa:ff:4c:1a:49:54:70:20: a0:1f:96:ff:61:d0:8b:4d:4e:9f:21:88:38:e4:9c: a6:0d:a6:06:b5:fd:6e:d4:f8:63:9c:80:4c:f3:c0: 1f:35:28:7b:f1:48:24:2d:50:ef:94:59:1b:52:52: cf:9b:cd:43:ab:2d:2f:dd:65:d9:49:e4:3f:0f:69: 99:49:fc:e0:31:00:9e:e1:d2:07:16:05:74:e2:35: 1b:1b:14:4e:78:89:90:66:5d:f9:52:44:4f:5a:bb: 98:66:72:c0:cf:6a:d4:1a:ec:18:b8:2f:f9:cd:ca: 31:4f:20:c7:d4:6b:94:c6:09:09:01:bb:c3:af:a8: 9c:0d:75:b3:63:72:1d:e6:84:d2:09:01:33:ff:1e: 75:18:a1:f6:61:e7:f6:23:1b:ed:be:9d:d0:a1:5f: 96:ae:14:93:84:9c:f6:4c:13:b7:b0:0c:8a:3f:14: c4:91:32:36:ac:76:10:e0:32:fd:72:77:79:24:7a: 0e:7b:9b:3f:82:03:7f:43:97:07:1b:0b:33:13:2e: cd:22:2e:35:6c:2b:e9:bb:3f:a7:fa:30:29:c9:60: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8C:C1:FE:0D:93:42:C5:14:FA:E0:F0:17:D4:64:74:2F:18:C4:EB X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:68:b4:64:82:8f:0b:ae:48:d9:6b:bf:2c:ca:fb:0d:50:a0: db:9c:01:c0:9c:51:99:ca:78:6a:1e:2e:b4:ec:26:7f:12:78: 11:d8:68:2c:ea:69:a7:a2:a9:e1:23:4f:ef:b8:66:e9:6e:ad: c9:07:4b:eb:d2:53:c4:46:a3:f9:f1:ec:e1:9d:18:80:fd:22: 95:8e:c5:64:cc:d1:21:40:a1:b2:ff:d6:27:f7:82:85:01:99: 9b:9f:f9:44:fe:f9:ed:c0:b1:96:ee:e2:2a:e6:72:38:0b:59: b3:c5:d5:76:5a:07:53:d4:9d:a3:af:f3:c8:c8:97:a3:fb:2d: bb:90:68:f9:9f:f5:e5:e5:e2:69:aa:72:13:2d:ff:1e:41:b3: 4a:69:54:2d:97:ea:d0:a1:f1:ae:a1:3a:dd:50:53:c6:1a:f8: 92:24:ab:8b:76:b1:8d:61:88:f8:de:b1:57:a6:9f:12:de:d6: 13:39:a7:df:6f:48:72:f7:b6:e4:0b:d0:7d:4c:f2:33:8a:5d: 17:17:6f:92:3b:bc:24:79:d4:fe:23:13:b0:99:9c:cc:00:b4: af:5e:10:97:f0:08:83:3d:80:0a:4b:68:bd:0d:47:f4:b2:36: f9:7a:91:ea:69:cf:7c:60:a4:bc:1e:c2:79:7f:0a:23:7e:54: 4f:74:3f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vnU+6/hfmHKBqEGjaNX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTI1MjAwMDM1WhcNMjYwMTI2MjAwMDM1WjAzMTEwLwYDVQQD Eyg1ZjhjYzFmZTBkOTM0MmM1MTRmYWUwZjAxN2Q0NjQ3NDJmMThjNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NC51Y4A64hNY7fpTj3/eaerLGZD Awytqtg2b/G+PfyxRc4gqv9MGklUcCCgH5b/YdCLTU6fIYg45JymDaYGtf1u1Phj nIBM88AfNSh78UgkLVDvlFkbUlLPm81Dqy0v3WXZSeQ/D2mZSfzgMQCe4dIHFgV0 4jUbGxROeImQZl35UkRPWruYZnLAz2rUGuwYuC/5zcoxTyDH1GuUxgkJAbvDr6ic DXWzY3Id5oTSCQEz/x51GKH2Yef2Ixvtvp3QoV+WrhSThJz2TBO3sAyKPxTEkTI2 rHYQ4DL9cnd5JHoOe5s/ggN/Q5cHGwszEy7NIi41bCvpuz+n+jApyWAShwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+Mwf4Nk0LFFPrg8BfUZHQvGMTrMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmi0ZIKP C65I2Wu/LMr7DVCg25wBwJxRmcp4ah4utOwmfxJ4EdhoLOppp6Kp4SNP77hm6W6t yQdL69JTxEaj+fHs4Z0YgP0ilY7FZMzRIUChsv/WJ/eChQGZm5/5RP757cCxlu7i KuZyOAtZs8XVdloHU9Sdo6/zyMiXo/stu5Bo+Z/15eXiaapyEy3/HkGzSmlULZfq 0KHxrqE63VBTxhr4kiSri3axjWGI+N6xV6afEt7WEzmn329Icve25AvQfUzyM4pd Fxdvkju8JHnU/iMTsJmczAC0r14Ql/AIgz2ACktovQ1H9LI2+XqR6mnPfGCkvB7C eX8KI35UT3Q/ZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:01 2026 by rpki-client