This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json) Hash identifier: OwwLuZhEbfvRBOS+9zFQ2ZNL0lAa1N+BTJTmmMLMzdg= Subject key identifier: 30:A8:2A:6F:32:D9:22:46:DF:2D:AA:B7:08:C1:77:65:AF:7D:F5:44 Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70 Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570 Certificate serial: 019BF274C9B5D140EFA01F50411B8298C289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft Manifest number: 0539 Signing time: Sun 25 Jan 2026 00:01:38 +0000 Manifest this update: Sun 25 Jan 2026 00:01:38 +0000 Manifest next update: Mon 26 Jan 2026 00:01:38 +0000 Files and hashes: 1: e7AS-h8UVzO25ySDY88gNZMJcDc.roa (hash: nbzFORwCh+VhrVrfEhpvS2wccja5BBY0hNY1kpvLUoM=) 2: jQQwHQnxt60DZocx5cyYSn7BPpc.roa (hash: uzGsYYKtRtXMEU0FMjrboZQzPWlbaFPHYavLo2IswP8=) 3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: I3NZJznlXslgSC/GZDMBA2i8LOfpUDwSVbDQL1LHu6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:c9:b5:d1:40:ef:a0:1f:50:41:1b:82:98:c2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570 Validity Not Before: Jan 25 00:01:38 2026 GMT Not After : Jan 26 00:01:38 2026 GMT Subject: CN=30a82a6f32d92246df2daab708c17765af7df544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:ac:05:07:e2:d4:5e:4f:ef:35:88:5e:0d: 50:28:0e:c5:b9:9f:21:24:a1:dd:47:c4:62:2a:c9: 56:e3:88:d7:f1:c7:57:1a:2b:87:07:37:eb:38:74: 92:84:3a:c2:03:da:bc:1e:1e:fe:f3:49:53:bd:8a: d0:7c:ef:90:50:43:0f:3a:49:95:0c:74:72:27:b3: e1:f4:4d:47:07:37:05:85:02:f4:3f:12:f9:7d:d4: e9:7e:e1:93:2c:9a:bb:07:d9:0c:0e:8d:6b:29:74: 8e:7f:09:9a:2a:55:80:4b:f5:ed:59:ec:d5:28:14: 40:12:a6:84:f9:0c:b7:cf:12:77:42:29:7f:c2:d8: b2:40:10:33:4d:ae:e5:8f:e0:dd:12:7b:8b:db:58: e1:3b:a4:46:e3:ce:72:f4:a4:92:64:cd:09:1c:ef: f6:78:3f:74:6a:e7:a0:c2:10:52:83:d7:11:95:72: 00:3e:07:2b:9c:49:e0:a2:5c:56:c3:a4:74:9e:d3: 21:77:30:95:8c:07:e6:60:90:71:b8:7f:f1:c8:99: ed:d5:7b:92:0e:de:cf:11:7f:54:41:37:10:4a:bc: f4:e9:d0:f7:f0:07:ca:0c:62:06:c0:0e:2d:c7:30: f1:fc:7f:d6:31:43:34:2f:07:32:9e:a9:e1:84:d5: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A8:2A:6F:32:D9:22:46:DF:2D:AA:B7:08:C1:77:65:AF:7D:F5:44 X509v3 Authority Key Identifier: keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e9:61:be:05:3b:0e:8d:9d:a2:96:bb:48:c8:f1:d7:46:ad: 7d:1b:59:98:dc:ba:7b:1f:e5:fd:e8:65:09:82:1d:02:10:ee: 2e:0f:35:81:a2:2f:7c:d7:70:58:38:24:f5:5f:41:14:6f:85: 46:30:b8:74:ac:65:13:95:34:41:e7:6d:a9:db:5f:6b:c6:c7: 0b:24:15:44:c2:d6:21:ad:87:9b:1e:d4:bc:b5:4e:f6:a2:c8: 3d:9c:94:ea:3f:54:16:b1:49:8f:fd:f0:d1:7b:26:82:89:fe: a6:c6:55:2f:f6:c8:2e:c8:a1:d9:d1:29:a3:28:61:4e:62:47: 8b:66:b8:8b:6e:1b:35:47:c5:e2:fc:06:5c:35:f4:79:23:60: 36:5b:37:1e:b2:1b:a8:48:a3:ce:5d:05:60:20:82:6e:ee:dd: c7:8d:38:5f:9b:8e:c9:3b:67:13:e0:f7:cb:29:3f:9a:4a:fe: 92:08:7a:c7:e7:7a:08:b5:1b:82:c2:79:40:8f:43:31:63:c9: a0:87:a7:cb:b4:d5:05:04:22:e3:93:34:71:2d:ca:44:c4:00: 7b:0f:c9:8f:56:0e:e2:84:3c:26:b5:4a:eb:34:3b:6b:db:53: 2f:9c:57:50:a1:41:4e:91:1c:bd:21:60:0f:9c:76:59:a3:1f: c9:1c:d8:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydMm10UDvoB9QQRuCmMKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj ZjM1NzAwHhcNMjYwMTI1MDAwMTM4WhcNMjYwMTI2MDAwMTM4WjAzMTEwLwYDVQQD EygzMGE4MmE2ZjMyZDkyMjQ2ZGYyZGFhYjcwOGMxNzc2NWFmN2RmNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRCsBQfi1F5P7zWIXg1QKA7FuZ8h JKHdR8RiKslW44jX8cdXGiuHBzfrOHSShDrCA9q8Hh7+80lTvYrQfO+QUEMPOkmV DHRyJ7Ph9E1HBzcFhQL0PxL5fdTpfuGTLJq7B9kMDo1rKXSOfwmaKlWAS/XtWezV KBRAEqaE+Qy3zxJ3Qil/wtiyQBAzTa7lj+DdEnuL21jhO6RG485y9KSSZM0JHO/2 eD90auegwhBSg9cRlXIAPgcrnEngolxWw6R0ntMhdzCVjAfmYJBxuH/xyJnt1XuS Dt7PEX9UQTcQSrz06dD38AfKDGIGwA4txzDx/H/WMUM0LwcynqnhhNU33wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCoKm8y2SJG3y2qtwjBd2WvffVEMB8GA1UdIwQY MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALulhvgU7 Do2dopa7SMjx10atfRtZmNy6ex/l/ehlCYIdAhDuLg81gaIvfNdwWDgk9V9BFG+F RjC4dKxlE5U0Qedtqdtfa8bHCyQVRMLWIa2Hmx7UvLVO9qLIPZyU6j9UFrFJj/3w 0Xsmgon+psZVL/bILsih2dEpoyhhTmJHi2a4i24bNUfF4vwGXDX0eSNgNls3HrIb qEijzl0FYCCCbu7dx404X5uOyTtnE+D3yyk/mkr+kgh6x+d6CLUbgsJ5QI9DMWPJ oIeny7TVBQQi45M0cS3KRMQAew/Jj1YO4oQ8JrVK6zQ7a9tTL5xXUKFBTpEcvSFg D5x2WaMfyRzYrg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:45 2026 by rpki-client