This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json) Hash identifier: hQLA2u6qvJPUlyVkugypAvTmQ4vXwS7vcyFxgeKSim8= Subject key identifier: 15:31:AF:CB:67:B3:83:53:AB:53:F3:0E:7E:8A:EA:6F:AA:25:8A:94 Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019BF274136A062347DD15E81707D677281F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft Manifest number: 11C4 Signing time: Sun 25 Jan 2026 00:00:51 +0000 Manifest this update: Sun 25 Jan 2026 00:00:51 +0000 Manifest next update: Mon 26 Jan 2026 00:00:51 +0000 Files and hashes: 1: 0Zesq0AbB4PradrYOoKeAmLgmoo.roa (hash: uyAIf7m1jJ9F7/DZjhCImbWm0xh75pqBE+0Iul58rXo=) 2: 1-Xka6nhHlTAY0IkAtp7cisl4Q0o.roa (hash: cYSQflXuM4PG35Mh50PGE2nbDxv/tnzYwdWGgGNp7kU=) 3: 3-zjNQeLr2VYnGvtAQl3wPrAttQ.roa (hash: oZEc3kU6X6afeD3VVmtRDKKInN6hBgwdLqV0FrQL9OA=) 4: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (hash: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs=) 5: B7UyS94iVj1DJiAES7AGdZBkhvU.roa (hash: LvNOB6rKBIqz8zy85DW3nACAYVwrAZC+twiA7P7L6S8=) 6: gr24W9hYxDP-t_iDnbRQ3OZdbjk.roa (hash: 3hVp+1R1qAZlY2bc8T6diQXm1af3Uw7Bq4eqKsz2fRA=) 7: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: 6d9SkYqduxczkghhD10/UBp+TcjE3za1tFYwvpTGmQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:13:6a:06:23:47:dd:15:e8:17:07:d6:77:28:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Jan 25 00:00:51 2026 GMT Not After : Jan 26 00:00:51 2026 GMT Subject: CN=1531afcb67b38353ab53f30e7e8aea6faa258a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:7d:1c:25:19:b0:ce:75:f1:14:bb:07:8e: c1:73:c1:da:5a:18:b4:0f:3d:cb:c7:c2:6f:a5:82: a3:89:b9:57:c2:2c:66:9d:44:64:4b:b5:f4:f2:c9: a2:1c:78:3b:73:d6:b2:47:9d:8e:62:24:2b:d4:b2: 1f:fa:26:11:fe:aa:5c:0e:c2:00:d0:72:34:72:92: c2:eb:83:e9:98:8c:5b:ef:0f:30:e0:a7:3a:70:07: 78:fd:c1:f0:78:03:fb:eb:f0:24:86:be:94:9f:19: 25:01:9b:e2:27:15:ef:b3:9f:f0:c2:4c:4c:bd:d1: 00:ae:a2:e8:ca:e0:fa:cb:cf:b7:9e:3b:5b:ff:f4: 10:06:8f:32:a1:fc:0a:c3:66:f5:d7:82:91:20:d3: 62:b5:18:a0:f6:2e:2b:3b:fc:e5:44:7a:83:05:3b: 50:1e:1e:ef:d1:bb:42:c9:2d:49:cd:b9:3e:49:e8: d0:dc:e3:8a:6f:ff:e1:c6:f5:78:f8:32:ba:cc:db: 3e:fb:b8:79:c0:80:fb:24:05:69:7a:53:9e:ff:06: a6:67:0b:9a:b7:a5:b6:25:a6:99:1b:22:1d:53:11: 7b:f8:7c:03:61:b0:4d:43:77:c5:89:2c:53:fa:93: a3:36:8f:00:08:94:5b:ac:be:f4:1c:8e:ca:57:8f: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:31:AF:CB:67:B3:83:53:AB:53:F3:0E:7E:8A:EA:6F:AA:25:8A:94 X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:80:41:9b:f7:5e:3b:9b:f2:15:1e:c7:be:22:59:2e:39:43: 1e:90:ae:73:83:ae:91:8f:63:75:f3:4d:82:ed:af:9f:34:96: a1:06:99:00:ba:e6:ae:63:dc:f9:79:97:eb:c6:5c:d7:e8:f2: 80:28:1a:a5:2d:1c:ef:1d:9d:5e:fd:f0:72:8e:64:5b:e3:ab: e6:83:2a:98:f7:c9:a4:5b:1e:a4:5c:ce:0e:d7:59:fb:9f:03: 2e:64:11:6e:2c:06:ba:1c:ff:f5:96:62:9a:79:1f:b6:0f:89: a2:2b:96:8d:55:6f:54:4e:ec:d7:c5:c8:54:ea:43:da:02:70: a5:06:5f:c9:74:d6:32:87:d1:63:b5:05:c4:6a:dd:a2:58:0d: 87:2d:7a:f1:85:67:55:f5:38:65:c0:a7:e8:fa:14:dc:ec:53: 74:5b:f2:58:7f:21:c2:67:43:1d:9d:cf:77:09:84:3e:8f:0f: 99:b0:87:0e:64:f1:98:13:d8:13:3d:37:80:0e:c8:bd:86:f4: 17:d1:04:24:3f:de:86:d7:e5:07:c4:47:a8:84:51:70:e5:fe: 84:20:37:78:92:34:27:f1:f9:8d:48:57:9e:f7:0e:df:e8:c2: 68:30:8a:e6:eb:2b:b9:b1:a2:17:d5:22:e2:f8:21:b6:4b:30: 91:a8:7c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydBNqBiNH3RXoFwfWdygfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjYwMTI1MDAwMDUxWhcNMjYwMTI2MDAwMDUxWjAzMTEwLwYDVQQD EygxNTMxYWZjYjY3YjM4MzUzYWI1M2YzMGU3ZThhZWE2ZmFhMjU4YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY19HCUZsM518RS7B47Bc8HaWhi0 Dz3Lx8JvpYKjiblXwixmnURkS7X08smiHHg7c9ayR52OYiQr1LIf+iYR/qpcDsIA 0HI0cpLC64PpmIxb7w8w4Kc6cAd4/cHweAP76/Akhr6UnxklAZviJxXvs5/wwkxM vdEArqLoyuD6y8+3njtb//QQBo8yofwKw2b114KRINNitRig9i4rO/zlRHqDBTtQ Hh7v0btCyS1Jzbk+SejQ3OOKb//hxvV4+DK6zNs++7h5wID7JAVpelOe/wamZwua t6W2JaaZGyIdUxF7+HwDYbBNQ3fFiSxT+pOjNo8ACJRbrL70HI7KV4/TfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUxr8tns4NTq1PzDn6K6m+qJYqUMB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4BBm/de O5vyFR7HviJZLjlDHpCuc4OukY9jdfNNgu2vnzSWoQaZALrmrmPc+XmX68Zc1+jy gCgapS0c7x2dXv3wco5kW+Or5oMqmPfJpFsepFzODtdZ+58DLmQRbiwGuhz/9ZZi mnkftg+JoiuWjVVvVE7s18XIVOpD2gJwpQZfyXTWMofRY7UFxGrdolgNhy168YVn VfU4ZcCn6PoU3OxTdFvyWH8hwmdDHZ3PdwmEPo8PmbCHDmTxmBPYEz03gA7IvYb0 F9EEJD/ehtflB8RHqIRRcOX+hCA3eJI0J/H5jUhXnvcO3+jCaDCK5usrubGiF9Ui 4vghtkswkah8AA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:28 2026 by rpki-client