This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json) Hash identifier: g3WHX5OgUpnVHQx8YLdgS37tvC4ZPV2S9vfkcBuP5oQ= Subject key identifier: 14:F2:A2:E9:A2:E5:D7:8D:CA:9A:FB:09:A4:F2:B8:26:CA:06:33:59 Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Certificate serial: 019BF876A0DC3FCBECC8D0D4358EF03F2728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 04:01:22 +0000 Manifest this update: Mon 26 Jan 2026 04:01:22 +0000 Manifest next update: Tue 27 Jan 2026 04:01:22 +0000 Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=) 2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: PW3CIDkBbWEt7Nfmu5BV7J6acb0E61MabcjcOokrGwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:a0:dc:3f:cb:ec:c8:d0:d4:35:8e:f0:3f:27:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f Validity Not Before: Jan 26 04:01:22 2026 GMT Not After : Jan 27 04:01:22 2026 GMT Subject: CN=14f2a2e9a2e5d78dca9afb09a4f2b826ca063359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:aa:7e:55:f5:15:6b:0f:17:11:9c:be:eb: aa:6d:82:f0:b8:b0:1e:a5:7c:86:5f:c5:e6:3d:0e: 48:ef:8d:83:2c:f8:95:d3:fe:15:61:57:05:5f:71: c2:01:d0:1c:42:4e:b7:74:48:bb:37:e0:fc:b8:19: 97:3d:43:bc:c5:47:94:ca:ef:96:ff:34:36:74:6f: 46:8b:46:0a:67:fb:7d:43:ec:f8:75:a3:74:9c:16: 35:0d:a3:92:00:28:72:5c:1c:23:bc:e8:99:8e:e5: ae:7f:62:fd:bc:44:8a:ea:36:fc:73:6b:b2:9f:e6: a8:59:ad:71:43:d5:42:38:f4:ff:c2:da:b8:fe:76: 8c:7d:88:ea:6e:b1:d9:50:35:75:5d:f7:62:aa:da: 89:af:d4:ae:a4:fb:8e:a1:2c:7d:57:b8:3f:85:2b: 56:82:a6:95:87:a9:fd:83:6d:3f:f1:46:ff:e2:cd: d7:9a:1c:d0:f9:eb:46:68:2a:16:30:5c:dc:9b:d7: 82:51:7d:a0:d0:2e:31:23:ef:6b:3d:df:78:15:d8: f7:00:5e:41:53:da:0a:9f:04:82:4f:63:db:a9:93: 34:aa:56:55:b2:96:57:1a:e9:8c:e9:c8:7d:40:d6: 17:2b:0b:b3:88:26:6c:94:1c:9c:bc:e8:2e:8b:5d: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F2:A2:E9:A2:E5:D7:8D:CA:9A:FB:09:A4:F2:B8:26:CA:06:33:59 X509v3 Authority Key Identifier: keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:f8:f5:fd:93:1a:94:09:b8:a0:71:c1:7e:c8:13:d0:80: 27:57:1a:f0:3b:7c:71:d6:ff:0c:27:63:a0:54:04:76:37:48: 5d:d1:eb:92:ab:92:04:99:67:80:94:fb:c0:62:f0:aa:89:dc: 81:35:f7:c3:32:4a:13:92:17:46:89:9d:d8:07:82:03:6b:3a: 46:b2:ce:6b:12:b9:46:ac:a8:39:3a:f8:39:e9:07:a5:0f:cb: d0:e5:39:eb:2d:be:d0:92:31:79:57:c6:f1:e4:fb:94:67:c7: 20:9a:c5:84:15:1a:c6:cb:ff:dc:5b:9a:95:ec:3c:a0:9c:e0: 90:c6:1d:24:13:ef:03:9e:99:89:c7:1c:03:e1:0e:34:12:89: c2:dc:20:89:52:a9:55:df:86:e6:71:0e:93:bf:7c:8f:9f:3e: bc:84:2d:80:3b:94:61:83:79:2b:b3:a4:7a:b6:b2:f3:ff:27: 40:aa:15:60:91:38:79:71:29:3e:73:ac:fa:c6:58:61:40:30: 77:22:92:34:37:1d:66:6a:c7:4c:fe:7d:78:c6:c2:04:34:b0: 81:20:11:2c:fb:9a:50:ab:52:09:b0:88:a3:e7:8d:af:6b:3b: 03:75:b6:87:90:70:90:82:3a:95:40:cc:5f:c4:89:fb:23:9b: 81:b9:de:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dqDcP8vsyNDUNY7wPycoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5 YjIzOGYwHhcNMjYwMTI2MDQwMTIyWhcNMjYwMTI3MDQwMTIyWjAzMTEwLwYDVQQD EygxNGYyYTJlOWEyZTVkNzhkY2E5YWZiMDlhNGYyYjgyNmNhMDYzMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlGqflX1FWsPFxGcvuuqbYLwuLAe pXyGX8XmPQ5I742DLPiV0/4VYVcFX3HCAdAcQk63dEi7N+D8uBmXPUO8xUeUyu+W /zQ2dG9Gi0YKZ/t9Q+z4daN0nBY1DaOSAChyXBwjvOiZjuWuf2L9vESK6jb8c2uy n+aoWa1xQ9VCOPT/wtq4/naMfYjqbrHZUDV1XfdiqtqJr9SupPuOoSx9V7g/hStW gqaVh6n9g20/8Ub/4s3XmhzQ+etGaCoWMFzcm9eCUX2g0C4xI+9rPd94Fdj3AF5B U9oKnwSCT2PbqZM0qlZVspZXGumM6ch9QNYXKwuziCZslBycvOgui10t3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTyoumi5deNypr7CaTyuCbKBjNZMB8GA1UdIwQY MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2T49f2T GpQJuKBxwX7IE9CAJ1ca8Dt8cdb/DCdjoFQEdjdIXdHrkquSBJlngJT7wGLwqonc gTX3wzJKE5IXRomd2AeCA2s6RrLOaxK5RqyoOTr4OekHpQ/L0OU56y2+0JIxeVfG 8eT7lGfHIJrFhBUaxsv/3Fualew8oJzgkMYdJBPvA56ZicccA+EONBKJwtwgiVKp Vd+G5nEOk798j58+vIQtgDuUYYN5K7Okeray8/8nQKoVYJE4eXEpPnOs+sZYYUAw dyKSNDcdZmrHTP59eMbCBDSwgSARLPuaUKtSCbCIo+eNr2s7A3W2h5BwkII6lUDM X8SJ+yObgbneAA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:54 2026 by rpki-client