This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json) Hash identifier: uzZCCl1whUpEeedIp4OQ7UnWc+8ffzw7LH+R8SisOyk= Subject key identifier: F9:F5:6F:A5:54:C2:4E:DB:DC:FB:BF:0F:D1:83:57:0A:3D:BD:E1:15 Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Certificate serial: 019BF91B82CF8A3BA5B5C00A2C8FBFD95918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft Manifest number: 177E Signing time: Mon 26 Jan 2026 07:01:28 +0000 Manifest this update: Mon 26 Jan 2026 07:01:28 +0000 Manifest next update: Tue 27 Jan 2026 07:01:28 +0000 Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: sGNF33egi7YntywoIsgPhOyLPtsCBHpwABpTnToUMqY=) 2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:82:cf:8a:3b:a5:b5:c0:0a:2c:8f:bf:d9:59:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Validity Not Before: Jan 26 07:01:28 2026 GMT Not After : Jan 27 07:01:28 2026 GMT Subject: CN=f9f56fa554c24edbdcfbbf0fd183570a3dbde115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:c0:9f:42:21:90:47:0b:33:5e:aa:f1:86: 09:31:33:15:c1:7d:89:2e:00:17:2d:cd:70:90:05: 30:b5:47:52:aa:87:aa:92:d9:4e:94:71:bf:bd:5b: 41:30:59:f0:15:8a:f5:84:2d:be:cf:25:d5:b4:1f: 7e:3a:be:1d:0b:3f:18:1d:33:88:47:37:9e:c6:94: 67:38:fb:50:ec:fe:2a:2c:2f:cc:6c:62:c2:cd:eb: ed:d4:1f:f1:67:5e:be:80:6f:2f:fa:ec:ec:97:2d: 76:ba:fa:22:d1:3d:96:cb:6e:ac:00:ba:e8:24:c5: e5:33:3f:44:36:1a:3e:39:2b:32:f5:5c:25:81:67: 5b:0d:09:cd:40:1d:ff:b6:44:54:cb:e3:79:d2:6f: b5:c6:ee:19:c8:14:6b:e4:93:58:c6:19:c0:f5:63: 86:fc:45:04:a8:4a:7c:ca:03:81:80:cb:e7:99:be: e9:99:87:d7:01:97:1f:7a:b0:cd:9d:3f:0c:3d:f8: ef:ee:b7:99:d8:dc:41:af:bc:e1:9e:45:50:57:1e: 62:31:84:5e:18:03:2f:fd:77:90:02:9e:d4:b6:36: e0:c8:2d:6e:00:c3:a5:a5:e0:f4:90:41:ab:b4:e7: b8:bd:6d:c6:86:17:58:a9:ba:a3:86:d6:48:da:a6: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F5:6F:A5:54:C2:4E:DB:DC:FB:BF:0F:D1:83:57:0A:3D:BD:E1:15 X509v3 Authority Key Identifier: keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e8:e3:60:28:26:f7:77:f7:ef:d3:d9:19:38:68:cf:dd:a9: 88:9d:a8:41:1b:7c:04:a7:d4:0f:c4:59:9e:c2:11:e8:48:90: cd:c5:91:02:93:97:96:07:3b:23:2c:e9:74:3b:7e:57:f8:3b: d6:21:0a:99:b4:db:09:1b:89:e5:31:a7:91:15:10:46:a1:f0: 41:f3:0a:dd:d9:5b:99:b0:04:1c:22:ca:ad:3d:67:39:8a:b8: f0:9b:c8:d8:ac:99:aa:ae:db:99:ae:f2:4f:3e:a3:b6:27:29: da:ab:eb:03:e2:03:a9:c4:95:a1:2b:8b:1a:fc:b9:06:70:be: 8c:92:f4:35:9b:2c:76:ee:1a:75:1b:6f:69:ad:54:10:4c:60: 67:57:ab:c0:2d:34:38:15:ad:40:f5:0c:78:a9:38:ba:5a:12: b0:db:53:ac:d8:aa:3c:f0:b1:7c:71:13:fd:ec:10:45:9e:09: ca:ae:d2:3d:a9:8a:a3:00:00:67:8e:a0:83:34:06:28:39:23: 2f:a8:5c:ff:31:b8:9e:b9:21:dc:1f:73:44:71:a2:b7:22:9f: c5:ba:81:eb:97:03:f1:24:8e:91:c2:e0:60:d7:f5:63:dd:be: de:65:15:2a:d7:54:db:b5:c7:2e:fd:45:94:ad:55:24:6b:06: 77:7c:1d:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G4LPijultcAKLI+/2VkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk YmNiYmMwHhcNMjYwMTI2MDcwMTI4WhcNMjYwMTI3MDcwMTI4WjAzMTEwLwYDVQQD EyhmOWY1NmZhNTU0YzI0ZWRiZGNmYmJmMGZkMTgzNTcwYTNkYmRlMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxnAn0IhkEcLM16q8YYJMTMVwX2J LgAXLc1wkAUwtUdSqoeqktlOlHG/vVtBMFnwFYr1hC2+zyXVtB9+Or4dCz8YHTOI RzeexpRnOPtQ7P4qLC/MbGLCzevt1B/xZ16+gG8v+uzsly12uvoi0T2Wy26sALro JMXlMz9ENho+OSsy9VwlgWdbDQnNQB3/tkRUy+N50m+1xu4ZyBRr5JNYxhnA9WOG /EUEqEp8ygOBgMvnmb7pmYfXAZcferDNnT8MPfjv7reZ2NxBr7zhnkVQVx5iMYRe GAMv/XeQAp7UtjbgyC1uAMOlpeD0kEGrtOe4vW3GhhdYqbqjhtZI2qYISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn1b6VUwk7b3Pu/D9GDVwo9veEVMB8GA1UdIwQY MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOjjYCgm 93f379PZGThoz92piJ2oQRt8BKfUD8RZnsIR6EiQzcWRApOXlgc7IyzpdDt+V/g7 1iEKmbTbCRuJ5TGnkRUQRqHwQfMK3dlbmbAEHCLKrT1nOYq48JvI2KyZqq7bma7y Tz6jticp2qvrA+IDqcSVoSuLGvy5BnC+jJL0NZssdu4adRtvaa1UEExgZ1erwC00 OBWtQPUMeKk4uloSsNtTrNiqPPCxfHET/ewQRZ4Jyq7SPamKowAAZ46ggzQGKDkj L6hc/zG4nrkh3B9zRHGityKfxbqB65cD8SSOkcLgYNf1Y92+3mUVKtdU27XHLv1F lK1VJGsGd3wdAA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:12:04 2026 by rpki-client