This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json) Hash identifier: /2mVf6PQrysriiWjykQ5ObJCbpeEF+e4UnOpzZ6L1is= Subject key identifier: 0A:63:84:C4:CE:82:38:0E:FD:B6:D9:6F:2B:2D:55:5A:CC:5C:97:B4 Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Certificate serial: 019BF6510A527A66942FC2BE4E0A34E52B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 18:01:04 +0000 Manifest this update: Sun 25 Jan 2026 18:01:04 +0000 Manifest next update: Mon 26 Jan 2026 18:01:04 +0000 Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=) 2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: ZAmotyoItaH1jYkmX4whuLB68uWiZ8lqO0s7uFlh8hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:0a:52:7a:66:94:2f:c2:be:4e:0a:34:e5:2b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Validity Not Before: Jan 25 18:01:04 2026 GMT Not After : Jan 26 18:01:04 2026 GMT Subject: CN=0a6384c4ce82380efdb6d96f2b2d555acc5c97b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:c8:9b:ac:ee:f8:b3:fe:14:93:65:13:2d: 70:d1:0d:6a:e0:d8:98:62:a7:5e:b6:01:32:19:bf: 69:ef:61:50:49:7c:f9:45:fe:f5:aa:6c:7d:08:3d: b2:ee:ab:c6:69:3d:8c:e7:24:f2:3b:5d:6e:7b:ec: c5:62:11:91:22:77:26:6f:ae:4d:cb:21:39:a8:65: fb:4d:11:ab:6a:2c:61:d7:04:0b:1d:db:66:9c:c3: 56:92:42:97:61:7d:ac:87:a7:c2:a2:66:4f:f3:26: 86:66:e1:6f:11:94:5b:52:6c:c9:c5:b2:e8:1c:3f: 12:64:8c:b1:2a:e3:32:0d:28:dd:12:5b:f3:01:55: 44:9b:f4:1b:4c:c5:9d:a4:24:8b:45:73:34:33:af: a7:e4:51:c9:e5:81:74:32:3d:4a:a2:a1:31:56:86: f0:9d:5e:5a:90:1f:11:66:85:6c:cf:b1:8a:6e:d2: f9:4d:62:17:48:b9:a2:22:05:ec:8d:78:3b:ce:84: 9a:90:04:cd:67:1b:21:f4:79:f4:47:bc:ca:b1:42: 66:46:ac:02:e1:b5:2c:8e:7f:65:79:bb:c3:25:74: 0d:00:96:1f:5c:b7:48:18:3f:be:37:3a:3f:15:5a: f2:13:69:f4:b9:05:df:2f:c3:6e:d4:a7:55:5a:87: c8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:63:84:C4:CE:82:38:0E:FD:B6:D9:6F:2B:2D:55:5A:CC:5C:97:B4 X509v3 Authority Key Identifier: keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cb:3a:3d:ac:e6:5e:f4:52:c3:43:b8:48:97:03:85:fb:0c: 06:b8:ee:cb:52:d6:a3:6a:d9:14:ec:c0:4d:09:4b:58:02:9f: 75:fa:7c:7c:5c:bf:50:57:e1:99:6d:44:6f:52:d1:ab:3d:f3: aa:fa:e5:e6:3f:0f:2e:49:eb:61:35:bc:72:4e:b9:36:bf:c3: 3d:96:57:1b:bc:ba:c0:c4:39:29:28:85:66:0d:94:33:fb:19: 9c:21:6c:36:26:52:59:f2:f0:ec:93:9b:99:6d:e6:84:11:8c: 4a:fa:19:46:0a:ba:ef:d0:4a:51:01:3c:29:2d:e2:44:ea:4a: 51:5b:11:3b:73:4c:b8:20:d0:4c:4d:41:fd:54:62:48:99:be: 01:14:89:9d:af:3b:4e:08:ab:c6:29:37:0e:21:11:d1:9b:b8: 8f:0a:b2:68:de:d3:be:8d:16:41:31:e0:3d:55:1b:8d:b7:75: 68:34:0a:d2:26:0b:5a:62:83:ae:89:8e:83:29:48:ac:69:c0: 0e:2f:47:93:ed:2f:4e:17:16:20:df:35:2a:05:25:ab:5e:7e: 91:28:3f:39:22:0b:29:d7:73:56:86:87:cf:c5:00:55:d2:c5: aa:47:cd:73:db:57:76:a3:a7:f5:8f:4f:7c:3b:26:72:75:d7: b3:f4:ea:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQpSemaUL8K+Tgo05StMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx NzlhYzIwHhcNMjYwMTI1MTgwMTA0WhcNMjYwMTI2MTgwMTA0WjAzMTEwLwYDVQQD EygwYTYzODRjNGNlODIzODBlZmRiNmQ5NmYyYjJkNTU1YWNjNWM5N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXfIm6zu+LP+FJNlEy1w0Q1q4NiY YqdetgEyGb9p72FQSXz5Rf71qmx9CD2y7qvGaT2M5yTyO11ue+zFYhGRIncmb65N yyE5qGX7TRGraixh1wQLHdtmnMNWkkKXYX2sh6fComZP8yaGZuFvEZRbUmzJxbLo HD8SZIyxKuMyDSjdElvzAVVEm/QbTMWdpCSLRXM0M6+n5FHJ5YF0Mj1KoqExVobw nV5akB8RZoVsz7GKbtL5TWIXSLmiIgXsjXg7zoSakATNZxsh9Hn0R7zKsUJmRqwC 4bUsjn9lebvDJXQNAJYfXLdIGD++Nzo/FVryE2n0uQXfL8Nu1KdVWofIYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApjhMTOgjgO/bbZbystVVrMXJe0MB8GA1UdIwQY MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt OTQ5ZGJlOWI1N2ZlLzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMs6Pazm XvRSw0O4SJcDhfsMBrjuy1LWo2rZFOzATQlLWAKfdfp8fFy/UFfhmW1Eb1LRqz3z qvrl5j8PLknrYTW8ck65Nr/DPZZXG7y6wMQ5KSiFZg2UM/sZnCFsNiZSWfLw7JOb mW3mhBGMSvoZRgq679BKUQE8KS3iROpKUVsRO3NMuCDQTE1B/VRiSJm+ARSJna87 Tgirxik3DiER0Zu4jwqyaN7Tvo0WQTHgPVUbjbd1aDQK0iYLWmKDromOgylIrGnA Di9Hk+0vThcWIN81KgUlq15+kSg/OSILKddzVoaHz8UAVdLFqkfNc9tXdqOn9Y9P fDsmcnXXs/TqBg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:02 2026 by rpki-client