This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json) Hash identifier: m8dLaXJ0Vnf+bNRz/Ix6Ub5QuPovTuRJCjCSYVuRmSE= Subject key identifier: 12:7B:D6:76:C1:2B:5B:58:CE:FB:18:82:D2:20:F9:A1:9F:DF:B3:16 Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c Certificate serial: 019BF79AF27259984148342D6B0685C1DDE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft Manifest number: 01D7 Signing time: Mon 26 Jan 2026 00:01:25 +0000 Manifest this update: Mon 26 Jan 2026 00:01:25 +0000 Manifest next update: Tue 27 Jan 2026 00:01:25 +0000 Files and hashes: 1: IZRU9aitBtasi5s8LfvUyXF6gJI.roa (hash: A+EvTFUEfhqDufK4w5HaH/h/6GcXexGhKX2pAinc5hA=) 2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: 52bv4YfVtIF3qC7OLvysXzJJ4l7iDGO4Jp1xeOlGWto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:f2:72:59:98:41:48:34:2d:6b:06:85:c1:dd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c Validity Not Before: Jan 26 00:01:25 2026 GMT Not After : Jan 27 00:01:25 2026 GMT Subject: CN=127bd676c12b5b58cefb1882d220f9a19fdfb316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:b3:be:e5:20:ed:64:55:dd:b4:d6:f4:ec: d0:f9:70:86:fd:d7:ae:e4:06:75:58:8a:44:a4:12: d7:e2:c9:5a:16:ea:a1:02:6f:e7:c0:fe:5a:10:a3: d8:8d:21:48:aa:b1:68:83:6a:ad:25:ab:1a:83:cb: e2:a3:6e:96:a5:de:3f:94:3b:66:52:a0:e0:e0:58: 8f:aa:45:ad:45:53:b8:85:da:78:30:dc:99:99:45: b1:1f:eb:0c:9f:0e:b9:70:bb:ed:07:76:b4:64:b7: 8e:50:47:fb:d7:1b:6e:18:e2:9e:70:e0:f3:0d:3d: d4:db:18:ce:99:2c:29:4a:87:6b:24:94:bd:c1:b4: a2:d2:ba:90:35:7a:3b:95:8e:d6:99:da:b5:8c:d7: 78:e6:1f:fd:45:f7:78:c9:79:58:3d:5a:60:a1:7f: 0f:dc:b8:8e:1f:6e:ed:ea:59:93:e4:60:05:75:ea: 3d:22:ce:e1:6a:9e:21:f6:f9:0c:1d:66:4f:fc:72: 0e:56:57:e2:7c:a5:17:92:b6:7f:02:38:5c:fa:9f: 06:58:e9:9b:ea:36:a2:fb:33:01:05:3e:94:25:61: 36:13:95:cf:d2:d7:4f:07:13:c3:f3:3b:ac:b0:fb: d5:93:1c:c3:cd:37:72:d3:be:be:08:c6:57:48:6a: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:D6:76:C1:2B:5B:58:CE:FB:18:82:D2:20:F9:A1:9F:DF:B3:16 X509v3 Authority Key Identifier: keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6a:2e:05:e4:df:40:86:b9:6a:bd:c7:b0:27:93:a4:a6:d3: c5:aa:0f:fa:7c:0a:9f:08:a5:95:02:33:0a:e3:dc:50:f4:31: 59:f6:2c:6c:49:ad:ff:c0:05:01:8f:4e:9c:55:12:51:78:52: a0:95:b1:5f:8d:61:b2:35:8c:c7:39:ee:b9:e0:7a:9d:d6:34: cc:7c:05:76:98:ba:0f:4e:e6:db:07:da:7d:4e:2c:11:67:c7: 77:2e:45:8d:f0:81:c7:f7:cc:08:66:bd:cb:b2:04:15:ce:13: 2c:b5:0e:5d:12:7d:72:a3:8e:bf:cc:b3:19:a8:87:24:c6:c0: d1:5a:7f:56:e4:e6:02:50:7f:47:be:21:ec:f4:05:b4:aa:80: 45:32:e5:e9:8d:80:fa:6d:4b:0f:7b:3c:63:89:6c:5d:67:94: c9:a8:41:d0:26:f6:af:7e:52:10:b9:a3:a4:2d:1f:78:2f:f9: de:31:87:85:13:06:c1:fc:17:21:86:33:03:3f:e7:6b:a2:fb: b0:51:2f:d8:8d:30:ca:eb:b0:5c:cf:aa:16:99:6d:2a:2a:e8: ca:c9:80:dc:4e:b1:7a:40:b8:9a:05:6a:ec:ff:a2:c6:28:8b: 96:ac:08:e9:51:00:ca:fe:63:ad:65:37:95:e1:1d:b6:13:07: 6e:94:5d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mvJyWZhBSDQtawaFwd3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWI2NzBlODE0NmVmNTI3NGFlNDVlYjMwZDI5ZTk3MDA2 NWJhMmMwHhcNMjYwMTI2MDAwMTI1WhcNMjYwMTI3MDAwMTI1WjAzMTEwLwYDVQQD EygxMjdiZDY3NmMxMmI1YjU4Y2VmYjE4ODJkMjIwZjlhMTlmZGZiMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP+zvuUg7WRV3bTW9OzQ+XCG/deu 5AZ1WIpEpBLX4slaFuqhAm/nwP5aEKPYjSFIqrFog2qtJasag8vio26Wpd4/lDtm UqDg4FiPqkWtRVO4hdp4MNyZmUWxH+sMnw65cLvtB3a0ZLeOUEf71xtuGOKecODz DT3U2xjOmSwpSodrJJS9wbSi0rqQNXo7lY7Wmdq1jNd45h/9Rfd4yXlYPVpgoX8P 3LiOH27t6lmT5GAFdeo9Is7hap4h9vkMHWZP/HIOVlfifKUXkrZ/Ajhc+p8GWOmb 6jai+zMBBT6UJWE2E5XP0tdPBxPD8zussPvVkxzDzTdy076+CMZXSGou/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ71nbBK1tYzvsYgtIg+aGf37MWMB8GA1UdIwQY MBaAFKOrZw6BRu9SdK5F6zDSnpcAZbosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzIt NjBkNWJlMWI3ZGE5LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzItNjBkNWJlMWI3ZGE5 LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImouBeTf QIa5ar3HsCeTpKbTxaoP+nwKnwillQIzCuPcUPQxWfYsbEmt/8AFAY9OnFUSUXhS oJWxX41hsjWMxznuueB6ndY0zHwFdpi6D07m2wfafU4sEWfHdy5FjfCBx/fMCGa9 y7IEFc4TLLUOXRJ9cqOOv8yzGaiHJMbA0Vp/VuTmAlB/R74h7PQFtKqARTLl6Y2A +m1LD3s8Y4lsXWeUyahB0Cb2r35SELmjpC0feC/53jGHhRMGwfwXIYYzAz/na6L7 sFEv2I0wyuuwXM+qFpltKiroysmA3E6xekC4mgVq7P+ixiiLlqwI6VEAyv5jrWU3 leEdthMHbpRdAw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:22 2026 by rpki-client