This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json) Hash identifier: K7bn5vSZED5j5oEeoxYetfuYsGxSJXiLxsTBbbecQA4= Subject key identifier: DE:DD:C5:51:ED:41:FC:9E:84:E9:F3:C3:79:16:64:48:C5:61:19:21 Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Certificate serial: 019BF5E2E18B14D141175DD6C5B5A2E95E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:00:45 +0000 Manifest this update: Sun 25 Jan 2026 16:00:45 +0000 Manifest next update: Mon 26 Jan 2026 16:00:45 +0000 Files and hashes: 1: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (hash: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4=) 2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: EPowk5oSNdUx23mUPKbjUj57yRXUXD6dUR0xXFeCiv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:e1:8b:14:d1:41:17:5d:d6:c5:b5:a2:e9:5e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Validity Not Before: Jan 25 16:00:45 2026 GMT Not After : Jan 26 16:00:45 2026 GMT Subject: CN=deddc551ed41fc9e84e9f3c379166448c5611921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:24:20:f1:9f:d5:b9:f5:d1:3f:de:b6:98: df:0f:1b:2b:5a:53:1d:b5:91:42:62:c7:8a:43:fc: 22:ec:15:e7:85:b5:cb:41:64:9d:e4:80:42:c5:94: 50:28:89:ec:72:9e:c6:d7:fb:ab:0b:cc:02:d5:62: 0c:0d:71:63:81:3a:67:55:2f:38:15:84:9f:3a:2f: c4:44:cd:57:4f:04:dc:f2:f1:c4:d6:52:8c:c4:4f: 66:f3:6b:8c:63:d5:ad:04:2a:fb:ed:4b:34:fc:b7: aa:0e:4d:54:fb:ed:a9:80:05:ab:19:31:36:40:ee: 7d:91:3a:98:43:c7:85:a3:4a:71:51:a7:35:b9:c9: 8c:b1:66:f3:48:33:20:e1:af:0a:26:1a:6d:7f:b6: 52:fc:79:d5:33:07:da:4c:f3:aa:ab:77:4d:fc:93: 6b:eb:81:48:a4:26:38:15:cb:8a:f0:2b:2a:ea:9c: 67:6b:cb:d9:7d:49:df:bb:ec:f6:6e:16:df:5e:af: cf:ff:a9:0f:64:e0:6f:92:07:07:21:0c:a9:ab:e0: 29:a0:57:5f:68:04:45:5f:5a:da:37:b8:a9:9a:4c: 44:c5:2f:17:5e:39:71:a4:5c:e8:ab:fb:60:95:eb: ed:96:a4:75:14:43:ba:12:7e:19:6c:80:05:60:7e: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:C5:51:ED:41:FC:9E:84:E9:F3:C3:79:16:64:48:C5:61:19:21 X509v3 Authority Key Identifier: keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:2b:fa:fc:86:68:78:c2:eb:7c:ee:c8:08:9c:06:35:11:66: e1:00:4e:e6:ca:6d:26:13:54:4b:52:41:e7:e0:26:68:08:19: af:f3:37:f4:30:3e:a8:ab:a7:41:97:2c:12:2f:c2:12:7e:92: 3c:bd:81:45:d0:70:e9:d8:a8:d6:9e:2b:ff:3e:3d:28:01:23: c1:8a:be:5f:4f:34:d0:e5:e6:ea:c6:20:ee:51:de:e3:52:78: 71:53:3a:92:f7:23:bb:77:85:94:44:5c:c7:b6:24:81:51:9d: 61:6b:04:37:27:09:c0:1b:83:00:73:a3:32:66:6c:7e:df:30: 90:65:e5:3b:df:e6:57:d4:53:1e:32:eb:13:f3:c4:e3:ca:2c: 23:09:2d:26:65:e2:8c:d9:aa:76:a3:fa:7b:37:df:e6:cf:9e: 2e:1e:33:5d:41:dd:97:e9:86:93:b3:5c:b6:4e:11:28:81:84: 05:c8:7f:8c:b3:5b:e5:ee:45:09:0b:29:6c:59:26:41:99:f8: a2:f2:f7:33:00:0c:3a:c3:6a:03:9a:60:b7:4d:bc:a0:37:5f: a1:ef:c9:1e:31:3c:65:d8:bb:28:8a:12:8d:94:35:ee:4f:4c: 56:98:b8:e4:a6:cd:fb:2c:53:80:7e:6c:8c:1c:6a:9e:4d:40: e7:15:8d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14uGLFNFBF13WxbWi6V42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjA4NmFkYzcxY2JlYzVhZWEyYTFmODk1NGRmYTY0MmI1 MzBjM2IwHhcNMjYwMTI1MTYwMDQ1WhcNMjYwMTI2MTYwMDQ1WjAzMTEwLwYDVQQD EyhkZWRkYzU1MWVkNDFmYzllODRlOWYzYzM3OTE2NjQ0OGM1NjExOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGgkIPGf1bn10T/etpjfDxsrWlMd tZFCYseKQ/wi7BXnhbXLQWSd5IBCxZRQKInscp7G1/urC8wC1WIMDXFjgTpnVS84 FYSfOi/ERM1XTwTc8vHE1lKMxE9m82uMY9WtBCr77Us0/LeqDk1U++2pgAWrGTE2 QO59kTqYQ8eFo0pxUac1ucmMsWbzSDMg4a8KJhptf7ZS/HnVMwfaTPOqq3dN/JNr 64FIpCY4FcuK8Csq6pxna8vZfUnfu+z2bhbfXq/P/6kPZOBvkgcHIQypq+ApoFdf aARFX1raN7ipmkxExS8XXjlxpFzoq/tglevtlqR1FEO6En4ZbIAFYH5/8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7dxVHtQfyehOnzw3kWZEjFYRkhMB8GA1UdIwQY MBaAFKEghq3HHL7FrqKh+JVN+mQrUww7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMt NDg1YTkyYmI5YmEzLzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMtNDg1YTkyYmI5YmEz LzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiv6/IZo eMLrfO7ICJwGNRFm4QBO5sptJhNUS1JB5+AmaAgZr/M39DA+qKunQZcsEi/CEn6S PL2BRdBw6dio1p4r/z49KAEjwYq+X0800OXm6sYg7lHe41J4cVM6kvcju3eFlERc x7YkgVGdYWsENycJwBuDAHOjMmZsft8wkGXlO9/mV9RTHjLrE/PE48osIwktJmXi jNmqdqP6ezff5s+eLh4zXUHdl+mGk7Nctk4RKIGEBch/jLNb5e5FCQspbFkmQZn4 ovL3MwAMOsNqA5pgt028oDdfoe/JHjE8Zdi7KIoSjZQ17k9MVpi45KbN+yxTgH5s jBxqnk1A5xWN3w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:45 2026 by rpki-client