This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json) Hash identifier: u7/0u96YfhiCn+y6+w1zqua8oM8VKQuYZ8NcWeSsyaE= Subject key identifier: 39:34:00:3E:91:0C:D7:80:B0:63:5B:A4:3E:5F:97:FC:16:4A:1F:7A Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98 Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798 Certificate serial: 019BF574DA7EE4749C9EDB2894D3ABCAE208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft Manifest number: 0D Signing time: Sun 25 Jan 2026 14:00:34 +0000 Manifest this update: Sun 25 Jan 2026 14:00:34 +0000 Manifest next update: Mon 26 Jan 2026 14:00:34 +0000 Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: 4e2Rj5NxHuAnDKxBwe4E51F+ofzl0dFDfKlm4pfsV0Y=) 2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:da:7e:e4:74:9c:9e:db:28:94:d3:ab:ca:e2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798 Validity Not Before: Jan 25 14:00:34 2026 GMT Not After : Jan 26 14:00:34 2026 GMT Subject: CN=3934003e910cd780b0635ba43e5f97fc164a1f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:24:d6:c0:cf:02:79:c0:81:3a:2a:35:aa: 15:e7:e5:20:ff:29:5c:74:cc:0a:c6:48:f9:44:2a: 28:fd:a9:14:12:c0:d5:d8:04:cc:7f:57:ae:51:28: 55:d3:5b:be:23:16:71:57:c7:94:9c:21:0e:8f:5b: 5d:71:d6:e0:01:76:6d:47:12:35:1c:ec:5a:a1:ba: 54:ca:7e:36:78:0a:e8:a6:da:39:5b:4f:ee:17:f5: 41:0e:5c:bd:a8:63:86:7d:ee:89:d4:e6:d5:6f:e8: 67:dc:d2:69:f3:e6:37:84:21:a1:a4:07:b4:3d:a8: b0:98:b8:c4:6c:95:6e:0c:90:cf:5a:bf:b1:e6:ed: 63:9e:14:41:53:12:b8:8e:a2:a7:c2:20:83:77:f2: 22:c5:5b:60:74:1e:30:ff:74:5a:a6:da:21:cb:43: 5b:03:55:70:00:d3:1c:65:ab:f9:cf:17:4a:3d:22: be:12:93:92:10:51:96:2b:1e:46:1d:00:03:00:73: 2f:8f:70:f7:65:16:b3:74:1f:1a:b2:32:a8:cc:50: 87:c2:47:92:48:cf:d8:30:12:f4:a1:37:6a:01:c7: 78:0f:0c:8d:1e:7d:4c:de:99:12:2d:3f:22:4f:5b: 25:c1:42:cc:0d:78:00:8e:4b:a4:3a:df:c8:e8:04: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:34:00:3E:91:0C:D7:80:B0:63:5B:A4:3E:5F:97:FC:16:4A:1F:7A X509v3 Authority Key Identifier: keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:40:0f:7b:dc:81:f5:b8:4c:ab:b5:fa:c4:b1:7e:67:5f:39: 5c:c0:59:52:15:72:36:1e:c4:e9:99:ae:c7:3d:f8:c7:5e:74: 50:eb:12:56:42:8f:76:eb:7f:53:86:6a:98:56:46:3f:82:37: de:c7:53:0e:71:54:df:b4:0c:ad:5e:c7:13:fa:3d:da:67:50: 86:9c:fb:da:15:71:b8:35:62:93:b1:81:88:c7:f2:3c:79:70: 97:b4:c4:a7:bf:54:e0:39:91:64:a0:c0:d4:07:34:4e:0c:95: 3e:a8:34:65:27:4f:33:30:7a:56:33:a3:18:4f:7f:6c:e3:15: db:a6:52:db:8c:27:67:4a:49:21:33:b7:6e:7b:db:55:3d:bf: 51:d4:d9:7e:b1:49:46:8e:2f:da:eb:0e:09:53:a3:8a:23:09: d2:c3:9d:d4:6c:fb:6a:ea:c5:57:3b:32:e4:64:d7:00:89:fe: 8c:35:f0:8b:d5:a1:b0:d8:c5:28:50:43:8d:b7:4e:4e:f3:ce: 53:a9:a5:3f:8e:ea:50:b8:6a:70:3b:a9:d2:4a:35:1c:e6:83: 17:8d:a4:f6:52:71:f0:73:ce:43:8d:ae:7e:9d:9d:40:d3:92: 26:ef:68:52:e8:c0:c5:77:9d:b3:ff:f6:73:69:2a:98:1d:db: 63:5a:01:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNp+5HScntsolNOryuIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhOGUwNzk0MGRjZDYzNDRlMWE4MTYyMGJkNzhhMjY4YmU5 YzM3OTgwHhcNMjYwMTI1MTQwMDM0WhcNMjYwMTI2MTQwMDM0WjAzMTEwLwYDVQQD EygzOTM0MDAzZTkxMGNkNzgwYjA2MzViYTQzZTVmOTdmYzE2NGExZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa0k1sDPAnnAgToqNaoV5+Ug/ylc dMwKxkj5RCoo/akUEsDV2ATMf1euUShV01u+IxZxV8eUnCEOj1tdcdbgAXZtRxI1 HOxaobpUyn42eAropto5W0/uF/VBDly9qGOGfe6J1ObVb+hn3NJp8+Y3hCGhpAe0 PaiwmLjEbJVuDJDPWr+x5u1jnhRBUxK4jqKnwiCDd/IixVtgdB4w/3Raptohy0Nb A1VwANMcZav5zxdKPSK+EpOSEFGWKx5GHQADAHMvj3D3ZRazdB8asjKozFCHwkeS SM/YMBL0oTdqAcd4DwyNHn1M3pkSLT8iT1slwULMDXgAjkukOt/I6ARXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk0AD6RDNeAsGNbpD5fl/wWSh96MB8GA1UdIwQY MBaAFDqOB5QNzWNE4agWIL14omi+nDeYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEt NWE2OTQ2MDc0MzVlLzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEtNWE2OTQ2MDc0MzVl LzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEAPe9yB 9bhMq7X6xLF+Z185XMBZUhVyNh7E6Zmuxz34x150UOsSVkKPdut/U4ZqmFZGP4I3 3sdTDnFU37QMrV7HE/o92mdQhpz72hVxuDVik7GBiMfyPHlwl7TEp79U4DmRZKDA 1Ac0TgyVPqg0ZSdPMzB6VjOjGE9/bOMV26ZS24wnZ0pJITO3bnvbVT2/UdTZfrFJ Ro4v2usOCVOjiiMJ0sOd1Gz7aurFVzsy5GTXAIn+jDXwi9WhsNjFKFBDjbdOTvPO U6mlP47qULhqcDup0ko1HOaDF42k9lJx8HPOQ42ufp2dQNOSJu9oUujAxXeds//2 c2kqmB3bY1oBPA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:53 2026 by rpki-client