This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json) Hash identifier: MIBdeC2sK95UFZ8j1gZRvAHN6HxU9WrcRFRJ1qzQv5c= Subject key identifier: 21:BB:9F:05:06:17:A3:86:E5:FD:B1:EB:66:25:AC:D8:5F:FE:E2:E7 Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f Certificate serial: 019BF6882875EC26AF9B22AAB9F6E172A95C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft Manifest number: 0615 Signing time: Sun 25 Jan 2026 19:01:16 +0000 Manifest this update: Sun 25 Jan 2026 19:01:16 +0000 Manifest next update: Mon 26 Jan 2026 19:01:16 +0000 Files and hashes: 1: NyOZwRR31L4QERSunRsVBOO4EnI.roa (hash: JNaIlhx9XEnG7hI6SJPh01zqvkEjWomvOZdybUhEE4U=) 2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: rnqJ0ZOaRZHL4mDyPgtABxUMfBwrg1V/MiyuBFZOIGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:28:75:ec:26:af:9b:22:aa:b9:f6:e1:72:a9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f Validity Not Before: Jan 25 19:01:16 2026 GMT Not After : Jan 26 19:01:16 2026 GMT Subject: CN=21bb9f050617a386e5fdb1eb6625acd85ffee2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:7a:03:51:a8:d9:39:f8:aa:26:ad:18:55: 0e:25:cb:4b:d0:d2:dd:94:8c:59:69:3e:a3:21:87: 86:97:6e:73:17:92:03:51:7e:75:83:56:fc:3a:0f: b7:fd:5b:ad:22:35:2a:1e:a7:56:12:9e:e2:12:af: 9f:6e:4d:d6:a5:bc:84:47:b5:23:98:c2:21:76:89: 74:40:52:2f:df:ef:5e:1d:a2:8b:cc:87:f6:c7:c4: 63:86:68:49:ba:e0:5c:82:ea:d8:81:53:7b:7d:c9: fb:5a:4d:3d:74:ac:79:12:6a:a6:c7:2c:f6:54:d0: 93:ab:65:9c:b5:3a:a0:cd:7a:e7:60:3c:8f:42:b7: e7:ff:b0:69:3f:2a:e0:f7:ce:37:2f:1f:0a:5c:65: dc:f5:bf:18:78:1f:5a:c3:41:fa:a9:c8:ae:ab:21: 03:af:b7:6b:9a:92:c4:2e:b4:e5:3c:24:bc:2b:94: 8f:5e:3d:92:1c:69:ea:f6:9f:9a:54:28:b3:b1:60: fa:0b:c3:cb:d3:13:61:f0:a9:09:12:e9:9b:89:3b: 9e:6f:04:79:f9:ed:fe:44:cf:1c:3a:a2:68:db:83: e2:00:8f:e6:c9:07:bc:21:6c:77:26:16:cc:d2:38: e6:9e:57:d8:b3:68:bf:c8:b8:b4:3f:21:6d:8f:15: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BB:9F:05:06:17:A3:86:E5:FD:B1:EB:66:25:AC:D8:5F:FE:E2:E7 X509v3 Authority Key Identifier: keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:66:b9:34:bb:81:b5:f3:2b:ce:6f:14:02:b1:78:93:96:01: 4d:8f:d7:8a:8a:bf:e2:f3:99:f4:50:63:38:61:ef:e9:55:21: e5:87:22:9d:9d:30:15:40:7e:67:71:b5:b8:4d:cf:06:8b:e3: 75:96:47:ce:d9:11:4d:57:eb:0c:cb:a4:43:28:6f:eb:d3:b3: cb:d6:37:f6:bd:f2:0f:58:1c:4a:9c:d6:03:41:8b:66:fa:28: 39:eb:b0:7e:ad:1e:41:be:71:d6:9d:d8:d8:e6:57:cf:5d:ce: eb:9f:d3:8d:d5:97:1f:7f:cb:06:13:86:f9:f1:c0:8d:10:50: 7d:c5:9b:9f:57:7e:62:c2:bf:e0:eb:71:9b:da:86:c0:ea:b3: 7a:96:6a:95:a4:8d:7e:49:3c:32:6d:75:3d:db:94:6e:ef:85: f7:ba:23:34:4b:fc:d4:aa:5a:a9:5a:b2:f0:26:db:c6:70:f2: 61:4c:9c:a4:02:c2:ab:84:77:18:09:bf:33:18:c7:ec:29:97: b9:92:e8:1c:5c:30:97:0b:50:9e:18:9b:29:da:d1:4d:3b:e5: 55:23:cd:7c:69:a7:12:32:1e:41:8a:37:4c:8d:e3:9d:0f:1b: 7c:8e:1a:fb:5d:23:6a:37:e5:1d:8b:fc:b6:50:ab:f5:bd:ca: d8:64:74:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iCh17CavmyKqufbhcqlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm YWVjN2YwHhcNMjYwMTI1MTkwMTE2WhcNMjYwMTI2MTkwMTE2WjAzMTEwLwYDVQQD EygyMWJiOWYwNTA2MTdhMzg2ZTVmZGIxZWI2NjI1YWNkODVmZmVlMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMN6A1Go2Tn4qiatGFUOJctL0NLd lIxZaT6jIYeGl25zF5IDUX51g1b8Og+3/VutIjUqHqdWEp7iEq+fbk3WpbyER7Uj mMIhdol0QFIv3+9eHaKLzIf2x8RjhmhJuuBcgurYgVN7fcn7Wk09dKx5Emqmxyz2 VNCTq2WctTqgzXrnYDyPQrfn/7BpPyrg9843Lx8KXGXc9b8YeB9aw0H6qciuqyED r7drmpLELrTlPCS8K5SPXj2SHGnq9p+aVCizsWD6C8PL0xNh8KkJEumbiTuebwR5 +e3+RM8cOqJo24PiAI/myQe8IWx3JhbM0jjmnlfYs2i/yLi0PyFtjxVoRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG7nwUGF6OG5f2x62YlrNhf/uLnMB8GA1UdIwQY MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2a5NLuB tfMrzm8UArF4k5YBTY/Xioq/4vOZ9FBjOGHv6VUh5YcinZ0wFUB+Z3G1uE3PBovj dZZHztkRTVfrDMukQyhv69Ozy9Y39r3yD1gcSpzWA0GLZvooOeuwfq0eQb5x1p3Y 2OZXz13O65/TjdWXH3/LBhOG+fHAjRBQfcWbn1d+YsK/4Otxm9qGwOqzepZqlaSN fkk8Mm11PduUbu+F97ojNEv81KpaqVqy8CbbxnDyYUycpALCq4R3GAm/MxjH7CmX uZLoHFwwlwtQnhibKdrRTTvlVSPNfGmnEjIeQYo3TI3jnQ8bfI4a+10jajflHYv8 tlCr9b3K2GR0nQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:05 2026 by rpki-client