This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json) Hash identifier: rPi3vGwAZ4rfbw0ElQs3tiybVPTER7lVQXwX6gXI5XE= Subject key identifier: 6C:C5:70:B2:2E:D4:3A:33:11:16:D5:9E:D3:0C:86:46:B4:DC:4A:27 Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Certificate serial: 019BF79AC9F21D481944BFBD414C1F026A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 00:01:14 +0000 Manifest this update: Mon 26 Jan 2026 00:01:14 +0000 Manifest next update: Tue 27 Jan 2026 00:01:14 +0000 Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=) 2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=) 3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=) 4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: nKnyt8seAWaZcDMJcctjhkB6mKsFXr1SDESU3YLgVQQ=) 5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=) 6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=) 7: fw0YP162WW2RmauK0r76hCJq7FI.asa (hash: gBQWVbDzHTXqbw6Lz9qGJDwJuoShYEIdho/K7qMK5b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:c9:f2:1d:48:19:44:bf:bd:41:4c:1f:02:6a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5 Validity Not Before: Jan 26 00:01:14 2026 GMT Not After : Jan 27 00:01:14 2026 GMT Subject: CN=6cc570b22ed43a331116d59ed30c8646b4dc4a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:58:c6:03:c8:c0:bb:08:48:5f:18:77:8b: 8e:8a:b9:a4:2a:6b:79:f3:a6:48:f9:31:c2:34:c0: b2:32:ad:46:65:30:8d:16:c3:54:8c:13:1b:f2:64: 55:56:ad:9b:1a:42:5f:11:68:71:40:6c:23:fc:b3: bd:2f:af:20:0c:08:35:73:30:d6:34:d7:2b:10:8b: f6:b2:2c:42:89:61:01:eb:c8:6b:bb:64:db:dd:a7: fc:78:a0:6a:01:b4:ec:cf:4b:17:d5:5a:22:a5:c6: 11:9b:51:d1:27:a5:89:43:16:ca:39:b2:fd:b1:f8: d2:81:53:4e:b7:7d:2f:92:22:db:35:0e:05:3c:5e: bd:e8:72:82:17:82:13:35:62:2a:53:b4:70:c5:15: c6:fa:a8:cd:f3:8a:1e:be:9d:fe:c2:1c:06:88:fc: b3:3f:10:cb:80:52:b6:d8:5c:a6:63:2f:8c:ad:7b: 59:e0:d8:18:59:cc:a5:e2:0f:33:2a:4f:b8:1a:1c: ce:c2:36:0f:4c:35:79:22:2e:7a:17:5b:46:45:eb: 1e:fe:ba:80:18:f3:df:6a:ef:27:3d:b4:5d:c7:d4: 2e:ed:78:ff:42:4d:70:b7:13:0f:b0:2c:95:3d:84: aa:a7:d9:e6:83:5b:bc:16:88:f2:95:5a:3e:a2:cb: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C5:70:B2:2E:D4:3A:33:11:16:D5:9E:D3:0C:86:46:B4:DC:4A:27 X509v3 Authority Key Identifier: keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:20:8a:6b:a8:f5:88:33:1a:fd:b6:91:2a:ce:4c:47:bc:90: 94:26:d0:63:66:1b:b8:a1:72:75:8c:7c:38:82:5a:a0:04:52: 6f:6e:a0:41:d1:d3:f1:57:3f:c9:0c:1e:59:3d:d5:d3:6e:20: 91:8e:fe:e1:fd:3b:0c:92:b5:be:4f:34:0c:82:da:89:b6:bb: 19:f9:e7:91:9b:a7:59:fd:61:47:dd:51:20:e2:06:d9:fd:47: 6d:e3:b0:39:39:00:bb:4e:93:60:07:b9:02:7f:38:3a:4a:1b: 74:25:69:1f:38:90:56:74:3d:ce:48:5a:2d:04:7e:87:50:0d: 81:dd:0a:d1:47:2d:a8:a9:79:d0:dd:30:f8:9c:66:5d:1f:91: 45:2b:e9:df:9e:be:90:0a:1a:4d:41:d4:ac:78:f1:24:92:1e: 23:fc:54:34:4d:32:26:90:8b:ce:f2:7d:39:fc:3b:19:b5:9f: 98:53:0c:d2:08:80:a3:ea:8e:24:46:5f:02:78:5f:d0:c9:18: 07:dd:53:2f:00:c0:ed:42:0f:c3:13:22:0b:a5:02:9e:1e:8c: c5:db:cb:6e:10:39:ca:23:a0:55:5f:dc:41:17:c6:65:cc:54: ac:26:9e:6e:6e:60:43:a4:b9:40:58:c8:f7:f6:5b:a9:74:93: ff:52:22:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3msnyHUgZRL+9QUwfAmolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4 YmZiYjUwHhcNMjYwMTI2MDAwMTE0WhcNMjYwMTI3MDAwMTE0WjAzMTEwLwYDVQQD Eyg2Y2M1NzBiMjJlZDQzYTMzMTExNmQ1OWVkMzBjODY0NmI0ZGM0YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7RYxgPIwLsISF8Yd4uOirmkKmt5 86ZI+THCNMCyMq1GZTCNFsNUjBMb8mRVVq2bGkJfEWhxQGwj/LO9L68gDAg1czDW NNcrEIv2sixCiWEB68hru2Tb3af8eKBqAbTsz0sX1VoipcYRm1HRJ6WJQxbKObL9 sfjSgVNOt30vkiLbNQ4FPF696HKCF4ITNWIqU7RwxRXG+qjN84oevp3+whwGiPyz PxDLgFK22FymYy+MrXtZ4NgYWcyl4g8zKk+4GhzOwjYPTDV5Ii56F1tGRese/rqA GPPfau8nPbRdx9Qu7Xj/Qk1wtxMPsCyVPYSqp9nmg1u8FojylVo+osuxkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzFcLIu1DozERbVntMMhka03EonMB8GA1UdIwQY MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5 LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSCKa6j1 iDMa/baRKs5MR7yQlCbQY2YbuKFydYx8OIJaoARSb26gQdHT8Vc/yQweWT3V024g kY7+4f07DJK1vk80DILaiba7GfnnkZunWf1hR91RIOIG2f1HbeOwOTkAu06TYAe5 An84OkobdCVpHziQVnQ9zkhaLQR+h1ANgd0K0UctqKl50N0w+JxmXR+RRSvp356+ kAoaTUHUrHjxJJIeI/xUNE0yJpCLzvJ9Ofw7GbWfmFMM0giAo+qOJEZfAnhf0MkY B91TLwDA7UIPwxMiC6UCnh6MxdvLbhA5yiOgVV/cQRfGZcxUrCaebm5gQ6S5QFjI 9/ZbqXST/1Iigg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:04 2026 by rpki-client