This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json) Hash identifier: u5jf3UVQYYteDfiVracePv09+d0UzzQ1/XsdVq9o5oo= Subject key identifier: 71:E2:E9:7F:F0:CF:28:D7:BE:55:4E:E2:3D:4E:F1:AE:77:8E:C1:C8 Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Certificate serial: 019BF83FC48E7444D40F5411B243C502D1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft Manifest number: 0164 Signing time: Mon 26 Jan 2026 03:01:26 +0000 Manifest this update: Mon 26 Jan 2026 03:01:26 +0000 Manifest next update: Tue 27 Jan 2026 03:01:26 +0000 Files and hashes: 1: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=) 2: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: 2qn4B5I/DPkZkymB0kW8tvS/r4sQ8IhoerXL1TcG+Qs=) 3: y9yOPOReUhOjAR9wH_1MAAdpsh8.roa (hash: Sh2Cfrg3yKSuc0oxH44NL73rniu+Z8OoDzgM+3sdMXg=) 4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:c4:8e:74:44:d4:0f:54:11:b2:43:c5:02:d1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9 Validity Not Before: Jan 26 03:01:26 2026 GMT Not After : Jan 27 03:01:26 2026 GMT Subject: CN=71e2e97ff0cf28d7be554ee23d4ef1ae778ec1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:71:4c:c0:a2:28:f1:02:a1:cb:be:cd:e8: ce:45:72:d8:65:4e:22:89:3e:c0:c9:cb:7f:02:0b: 34:9c:f6:19:30:01:08:42:c4:ed:5f:ee:ba:4a:9f: 77:49:02:0c:77:e0:67:d3:15:ba:d5:fa:d0:42:5d: d1:12:17:6e:28:66:4f:70:bf:ea:32:ce:50:b5:d2: 58:cf:27:13:18:c5:68:3e:ae:9c:42:65:39:6b:ae: b7:c3:c9:71:bf:84:e4:56:e2:38:62:43:3c:8b:a6: b4:1b:f4:2a:72:13:19:39:60:13:09:bb:b6:26:90: 1d:fd:3f:ad:a0:66:f0:69:82:60:23:01:0b:88:06: 7a:02:1f:ca:16:15:45:2f:ad:4d:c3:b3:71:d5:b2: 88:bf:fd:2f:b5:77:27:f9:a1:3b:20:93:7b:f5:4d: ea:3e:16:45:4b:3b:11:0f:78:33:bd:69:9d:a7:5b: 1c:36:88:e3:1b:b9:d7:72:62:50:3e:5d:a0:27:27: 36:55:44:2f:b9:31:11:e2:61:f2:d1:4f:b0:ce:37: 07:ae:95:fe:e8:dc:fa:c1:b9:eb:90:a2:1b:ad:9c: 68:c7:9b:24:90:aa:8e:60:ff:04:e4:a5:ee:0a:71: 0a:6a:2e:bb:4d:d8:61:96:da:36:56:5b:74:bc:2b: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E2:E9:7F:F0:CF:28:D7:BE:55:4E:E2:3D:4E:F1:AE:77:8E:C1:C8 X509v3 Authority Key Identifier: keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a0:19:53:54:20:8e:f8:c5:b8:31:36:91:1b:c3:4f:81:e5: 86:7b:46:cf:44:7e:07:2a:7d:f3:cb:e0:a9:7d:ac:fd:5e:99: e4:69:42:0e:26:01:29:ca:2c:1a:3e:b5:bb:f5:a0:dc:cf:bd: 3a:7e:40:38:3c:eb:2c:06:af:b4:ef:2b:26:8a:26:6e:f9:94: ea:85:f6:1c:d0:30:5b:29:c1:b6:b4:83:3c:55:fb:e7:4c:95: 5c:b9:ac:8d:6b:35:19:9c:5c:e9:41:32:7a:e9:ed:75:ad:2d: 68:4f:c9:26:d6:b8:ec:a4:69:75:83:3c:d2:d7:6d:53:c0:11: a8:13:57:7f:c1:02:3a:e7:fd:0a:3c:5a:5d:06:93:2b:7d:4a: ed:97:7f:d2:07:6c:d5:88:a3:0f:47:fa:6c:80:f6:1b:48:ed: 4d:b9:9b:2f:08:b4:d3:6f:59:4f:9e:4f:a2:49:b1:57:88:b5: b4:e4:a8:af:b6:e5:1f:38:93:b2:6b:20:c4:af:fc:6c:e6:0f: ec:da:da:5b:63:4e:f8:ff:66:ec:f9:95:c6:eb:b0:a1:4f:3c: 2c:29:40:19:71:e0:41:23:a1:11:53:2a:a6:43:b9:4d:3d:77: 75:6e:a3:f6:57:cf:b2:09:8e:3c:ac:cf:28:82:dc:f3:6f:9d: 93:2f:9b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P8SOdETUD1QRskPFAtG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj NGQwZjkwHhcNMjYwMTI2MDMwMTI2WhcNMjYwMTI3MDMwMTI2WjAzMTEwLwYDVQQD Eyg3MWUyZTk3ZmYwY2YyOGQ3YmU1NTRlZTIzZDRlZjFhZTc3OGVjMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAillxTMCiKPECocu+zejORXLYZU4i iT7Ayct/Ags0nPYZMAEIQsTtX+66Sp93SQIMd+Bn0xW61frQQl3REhduKGZPcL/q Ms5QtdJYzycTGMVoPq6cQmU5a663w8lxv4TkVuI4YkM8i6a0G/QqchMZOWATCbu2 JpAd/T+toGbwaYJgIwELiAZ6Ah/KFhVFL61Nw7Nx1bKIv/0vtXcn+aE7IJN79U3q PhZFSzsRD3gzvWmdp1scNojjG7nXcmJQPl2gJyc2VUQvuTER4mHy0U+wzjcHrpX+ 6Nz6wbnrkKIbrZxox5skkKqOYP8E5KXuCnEKai67Tdhhlto2Vlt0vCtrDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHi6X/wzyjXvlVO4j1O8a53jsHIMB8GA1UdIwQY MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt N2VlMGU2MGJiMDUzLzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKAZU1Qg jvjFuDE2kRvDT4HlhntGz0R+Byp988vgqX2s/V6Z5GlCDiYBKcosGj61u/Wg3M+9 On5AODzrLAavtO8rJoombvmU6oX2HNAwWynBtrSDPFX750yVXLmsjWs1GZxc6UEy euntda0taE/JJta47KRpdYM80tdtU8ARqBNXf8ECOuf9CjxaXQaTK31K7Zd/0gds 1YijD0f6bID2G0jtTbmbLwi0029ZT55PokmxV4i1tOSor7blHziTsmsgxK/8bOYP 7NraW2NO+P9m7PmVxuuwoU88LClAGXHgQSOhEVMqpkO5TT13dW6j9lfPsgmOPKzP KILc82+dky+bAg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:03:03 2026 by rpki-client