This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json) Hash identifier: iDVJFNsmR6cHMDPnKIrQVOo3uS8SI3/b7BJzZMcaank= Subject key identifier: F4:79:49:6B:35:34:DC:C1:BE:F0:98:E5:ED:34:86:19:94:9C:A5:4B Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Certificate serial: 019BF42B8C7AA73043AE6DBDF6443456AAF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft Manifest number: 0DC0 Signing time: Sun 25 Jan 2026 08:00:53 +0000 Manifest this update: Sun 25 Jan 2026 08:00:53 +0000 Manifest next update: Mon 26 Jan 2026 08:00:53 +0000 Files and hashes: 1: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=) 2: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=) 3: BvusQ7m5Gd85FbE0UgtInYnVcn4.roa (hash: Yn9PHGdu9Tcdgh7Fe+cf2+vspMOJboE+b5bi5KZdy/k=) 4: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=) 5: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=) 6: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: oy/1Q2OfB/JUWs4Z7MC4vG9Fy101ecvUssuEuyE7K68=) 7: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:8c:7a:a7:30:43:ae:6d:bd:f6:44:34:56:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Validity Not Before: Jan 25 08:00:53 2026 GMT Not After : Jan 26 08:00:53 2026 GMT Subject: CN=f479496b3534dcc1bef098e5ed348619949ca54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:01:84:68:91:6c:30:a4:30:7e:0f:b6:39: dd:df:3b:db:2b:77:15:86:4c:29:65:f3:42:c4:dc: 22:8e:53:f7:e0:51:c2:07:69:f1:06:b7:ba:33:a8: 47:5f:0a:2c:3b:bc:bd:22:d8:ba:0f:0b:5c:7a:a8: 4d:4d:be:3e:f9:3f:5d:f4:c3:e0:3c:05:2b:4b:a8: 0a:a3:0a:14:ac:42:16:78:67:0d:16:b1:86:9c:c7: f7:5a:d6:11:46:25:23:0a:d2:3c:41:72:68:c7:ab: e1:af:1d:6d:9a:ac:39:99:85:22:92:83:bc:aa:ba: 1f:4a:99:7c:43:c3:c4:9c:9a:7f:97:ba:b8:40:56: 49:02:68:8c:00:a9:7c:e8:7d:46:8e:2c:b1:ed:c5: 19:f0:a6:a7:ee:8b:c3:ff:80:92:f3:d1:52:d2:7b: 09:af:d6:34:88:95:c4:af:90:64:0a:50:b4:ad:e0: 3b:a3:13:7b:77:01:c3:af:c2:88:9b:06:ce:c0:82: c0:92:2e:fd:f1:17:0c:3a:eb:fa:5d:ff:ee:48:76: 47:95:66:9b:c4:44:3d:91:74:2a:36:a3:b1:99:e7: 13:a9:6f:0d:b9:68:e9:27:e7:50:d2:55:46:d1:63: 5e:d6:03:31:d5:b4:0b:b4:8d:5d:69:24:4f:aa:71: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:79:49:6B:35:34:DC:C1:BE:F0:98:E5:ED:34:86:19:94:9C:A5:4B X509v3 Authority Key Identifier: keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c5:ee:8b:a6:11:6d:e8:ba:81:72:0c:16:28:5a:13:2f:47: df:d5:40:93:65:27:22:3e:55:66:7c:c5:26:31:50:5d:43:6b: 5c:35:f5:e5:59:a2:35:4d:34:69:d1:12:a4:90:88:e4:e9:5e: ed:01:a7:ae:fa:cc:11:f0:5a:45:89:49:a8:e8:b1:9b:60:5e: 36:b9:be:7a:d4:3f:58:b0:d4:d0:76:ab:c4:02:df:06:ed:51: 11:8e:ab:49:1b:0a:9c:13:da:df:ac:09:c2:2a:3c:5e:99:14: 3d:8a:f8:73:66:40:80:f6:d7:e8:3c:b4:e8:3d:73:b9:1b:f6: eb:95:68:85:c7:74:4f:95:6a:4e:4c:79:96:be:aa:42:8e:ae: b2:5c:c0:31:9d:69:f4:2c:81:9f:7a:80:5e:9f:26:d3:a2:a6: 80:45:df:fe:9f:56:50:1f:d3:77:be:1a:8c:b4:81:31:61:f4: b5:d7:90:4d:a2:a8:c2:f0:a7:ee:d0:53:37:46:5c:74:49:46: 3f:a5:d5:e5:27:9f:dc:4b:9c:3b:fa:8e:a3:d1:b8:43:a5:27: e6:69:95:99:e0:e3:6e:7a:48:da:d3:11:2a:07:7e:64:4c:cb: a8:eb:52:39:b7:4a:d0:2e:0c:4f:e0:5b:8e:0a:69:da:7d:38: 6b:ff:b3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K4x6pzBDrm299kQ0VqrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3 YzczYTQwHhcNMjYwMTI1MDgwMDUzWhcNMjYwMTI2MDgwMDUzWjAzMTEwLwYDVQQD EyhmNDc5NDk2YjM1MzRkY2MxYmVmMDk4ZTVlZDM0ODYxOTk0OWNhNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QwBhGiRbDCkMH4Ptjnd3zvbK3cV hkwpZfNCxNwijlP34FHCB2nxBre6M6hHXwosO7y9Iti6DwtceqhNTb4++T9d9MPg PAUrS6gKowoUrEIWeGcNFrGGnMf3WtYRRiUjCtI8QXJox6vhrx1tmqw5mYUikoO8 qrofSpl8Q8PEnJp/l7q4QFZJAmiMAKl86H1Gjiyx7cUZ8Kan7ovD/4CS89FS0nsJ r9Y0iJXEr5BkClC0reA7oxN7dwHDr8KImwbOwILAki798RcMOuv6Xf/uSHZHlWab xEQ9kXQqNqOxmecTqW8NuWjpJ+dQ0lVG0WNe1gMx1bQLtI1daSRPqnGAdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR5SWs1NNzBvvCY5e00hhmUnKVLMB8GA1UdIwQY MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt ODQwY2NiMzRiM2Y1LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1 LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScXui6YR bei6gXIMFihaEy9H39VAk2UnIj5VZnzFJjFQXUNrXDX15VmiNU00adESpJCI5Ole 7QGnrvrMEfBaRYlJqOixm2BeNrm+etQ/WLDU0HarxALfBu1REY6rSRsKnBPa36wJ wio8XpkUPYr4c2ZAgPbX6Dy06D1zuRv265Vohcd0T5VqTkx5lr6qQo6uslzAMZ1p 9CyBn3qAXp8m06KmgEXf/p9WUB/Td74ajLSBMWH0tdeQTaKowvCn7tBTN0ZcdElG P6XV5Sef3EucO/qOo9G4Q6Un5mmVmeDjbnpI2tMRKgd+ZEzLqOtSObdK0C4MT+Bb jgpp2n04a/+zzA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:26 2026 by rpki-client