This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json) Hash identifier: eps1nosVfHpAdYAf5sa1Gb3dYekaP67Y9zk/+npvtGY= Subject key identifier: F1:21:C4:B2:7E:88:01:35:B4:CB:99:4D:DC:29:58:14:A3:C0:C5:B5 Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Certificate serial: 019BF83F2436EE44E8656C06E2B7C5B0B7E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft Manifest number: 137A Signing time: Mon 26 Jan 2026 03:00:46 +0000 Manifest this update: Mon 26 Jan 2026 03:00:46 +0000 Manifest next update: Tue 27 Jan 2026 03:00:46 +0000 Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: vSwgXpDyA+ZTpXUkfCAQl52bvPiU4cZNXR+0qlBFL5k=) 2: dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa (hash: M2cQBApH+3mET+28roXB36HJcR7W2SatQpMI3H4gi/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:24:36:ee:44:e8:65:6c:06:e2:b7:c5:b0:b7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df Validity Not Before: Jan 26 03:00:46 2026 GMT Not After : Jan 27 03:00:46 2026 GMT Subject: CN=f121c4b27e880135b4cb994ddc295814a3c0c5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:f3:d4:9b:11:42:ec:57:cc:d6:7b:c7:ef: 4f:00:b0:f9:d9:fe:f5:b1:53:b7:d6:15:22:ef:56: 14:4c:d2:4c:d7:b1:2a:98:4a:6d:9d:16:da:64:5c: 6c:e3:01:29:3c:e7:08:55:05:83:d7:84:50:1e:bf: 04:be:96:f6:5a:c7:cb:81:99:ac:2f:9d:2c:de:a8: 9b:1c:68:7d:a1:fb:d7:27:c4:00:89:6a:d1:af:d9: c4:e0:b4:20:bb:cc:63:e8:24:c1:76:14:23:ef:57: 24:bd:20:f2:95:b3:40:e7:8e:c7:5d:a8:ce:3c:48: cd:24:be:69:f9:c6:fb:5c:e8:a2:09:68:93:82:11: 60:04:37:d6:ad:b0:bb:28:01:ff:c3:26:1d:c7:6d: 35:61:83:f9:d5:d5:7a:cc:fd:f5:ca:4d:05:00:ea: 41:19:b1:df:d6:0e:dd:6b:7f:a5:b7:aa:19:4b:0d: fc:38:ef:9b:08:a7:e5:d4:f0:69:b6:d1:57:05:a6: d7:e9:b3:9b:69:d8:35:43:e4:07:f8:74:a0:9c:cb: 6f:4c:50:23:14:89:4d:2a:66:ae:6a:cd:ff:0a:0c: 0b:57:c8:50:2e:bb:80:f7:e5:a5:a2:69:05:ec:82: 56:c3:eb:84:fd:8c:46:03:c7:3f:4b:2b:45:f3:2b: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:C4:B2:7E:88:01:35:B4:CB:99:4D:DC:29:58:14:A3:C0:C5:B5 X509v3 Authority Key Identifier: keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:35:0b:c8:f9:f5:55:6b:12:4b:89:75:c7:ad:bd:6b:5b:90: ed:58:f8:f4:31:62:e8:84:38:44:c1:26:8c:05:55:16:e4:da: a7:6c:c8:12:2c:d5:b9:0b:cb:92:2c:ab:d8:12:eb:20:f9:0b: b2:f3:c8:b6:32:4f:fe:2a:c0:94:e2:32:b0:3d:1f:7b:67:67: e0:19:1e:3a:e3:c1:64:a8:f9:b9:bf:da:f1:85:98:f7:8b:32: 28:bf:bc:89:c2:26:1e:3c:b7:cb:f4:7c:67:f9:7d:a4:d1:0b: 52:b6:4c:af:c3:14:08:eb:f8:60:e1:a1:63:19:ef:d7:1a:d2: 41:b0:03:d9:d6:6b:62:6e:96:31:33:06:ca:87:69:25:bf:d1: ea:5b:dd:70:3d:00:e2:f0:8b:ea:bc:d1:e0:4d:7a:27:1d:c7: 02:20:6f:68:84:57:3c:78:94:76:95:97:2a:c9:c3:45:dc:76: 8f:e2:29:9e:f3:5c:99:3f:ca:35:6a:10:5b:89:02:a0:52:5b: 96:39:41:4e:a7:af:3c:86:9e:66:4e:12:a9:f0:55:6e:b7:0a: 93:0d:e1:6d:32:55:dd:25:5e:9b:8b:19:e2:64:ee:49:f4:ce: f6:b3:7c:d0:18:fc:ff:0b:43:df:a1:bb:d0:7a:77:4e:6d:45: 56:23:ec:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PyQ27kToZWwG4rfFsLfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMjYxNmI2Y2Y3YmIzMWVmYmZjMTUzNzY4NjI1YTRkNTA0 YjI0ZGYwHhcNMjYwMTI2MDMwMDQ2WhcNMjYwMTI3MDMwMDQ2WjAzMTEwLwYDVQQD EyhmMTIxYzRiMjdlODgwMTM1YjRjYjk5NGRkYzI5NTgxNGEzYzBjNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxfz1JsRQuxXzNZ7x+9PALD52f71 sVO31hUi71YUTNJM17EqmEptnRbaZFxs4wEpPOcIVQWD14RQHr8Evpb2WsfLgZms L50s3qibHGh9ofvXJ8QAiWrRr9nE4LQgu8xj6CTBdhQj71ckvSDylbNA547HXajO PEjNJL5p+cb7XOiiCWiTghFgBDfWrbC7KAH/wyYdx201YYP51dV6zP31yk0FAOpB GbHf1g7da3+lt6oZSw38OO+bCKfl1PBpttFXBabX6bObadg1Q+QH+HSgnMtvTFAj FIlNKmauas3/CgwLV8hQLruA9+WlomkF7IJWw+uE/YxGA8c/SytF8ysqTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEhxLJ+iAE1tMuZTdwpWBSjwMW1MB8GA1UdIwQY MBaAFDsmFrbPe7Me+/wVN2hiWk1QSyTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct NWE1Mzc2MjlhNDM5LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5 LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTULyPn1 VWsSS4l1x629a1uQ7Vj49DFi6IQ4RMEmjAVVFuTap2zIEizVuQvLkiyr2BLrIPkL svPItjJP/irAlOIysD0fe2dn4BkeOuPBZKj5ub/a8YWY94syKL+8icImHjy3y/R8 Z/l9pNELUrZMr8MUCOv4YOGhYxnv1xrSQbAD2dZrYm6WMTMGyodpJb/R6lvdcD0A 4vCL6rzR4E16Jx3HAiBvaIRXPHiUdpWXKsnDRdx2j+IpnvNcmT/KNWoQW4kCoFJb ljlBTqevPIaeZk4SqfBVbrcKkw3hbTJV3SVem4sZ4mTuSfTO9rN80Bj8/wtD36G7 0Hp3Tm1FViPsng== -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:32 2026 by rpki-client