This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json) Hash identifier: cUWBbgd+/nDjocXohlhflO1RHEzF1iTnvbQ3Bc6GhZA= Subject key identifier: 50:34:BD:90:7E:B3:5E:51:3D:6A:21:71:61:CD:4E:82:9A:92:8E:3F Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Certificate serial: 019BF6BE9D05003F3B497BA6C89F7513B4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft Manifest number: 0BE8 Signing time: Sun 25 Jan 2026 20:00:45 +0000 Manifest this update: Sun 25 Jan 2026 20:00:45 +0000 Manifest next update: Mon 26 Jan 2026 20:00:45 +0000 Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=) 2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: qClVZIc7SzbClR3hFmBsO+MOBkRhhmnwCWyb9tcN+1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:9d:05:00:3f:3b:49:7b:a6:c8:9f:75:13:b4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Validity Not Before: Jan 25 20:00:45 2026 GMT Not After : Jan 26 20:00:45 2026 GMT Subject: CN=5034bd907eb35e513d6a217161cd4e829a928e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:2a:51:5a:83:44:86:da:fa:ce:1b:78:93: 07:d8:29:ed:52:65:b5:8d:1d:bc:11:38:56:4e:c9: e3:98:e7:7a:a2:df:d7:91:36:27:0e:bc:fd:fb:d9: 78:9d:26:a0:09:cb:e8:38:36:7a:76:ab:8e:50:91: 7e:6f:d3:e5:25:61:3b:93:c9:74:01:41:58:58:07: 45:61:33:80:44:5b:40:72:70:66:ef:b6:08:a7:29: 7b:68:4c:44:2e:79:6f:d5:f8:d7:5b:10:f7:34:97: 71:97:26:4b:81:bf:22:1c:33:6f:2a:f0:7f:a3:89: 4e:36:72:ee:d2:b6:06:e2:6c:ec:7c:be:01:5f:27: 4c:32:0f:82:10:4c:41:3d:0a:d6:56:be:50:9a:d4: 93:24:3b:65:4d:9a:7b:d3:8f:c8:04:b8:9f:91:76: 04:c1:38:31:73:16:98:95:39:51:78:c6:28:59:4e: 08:dd:61:10:ae:3f:28:40:4a:57:32:93:4c:88:33: ea:b9:d8:ec:ec:a0:be:7a:e7:65:0d:48:72:06:77: 9b:d1:6f:fe:cf:bc:13:49:0f:70:dc:2c:b5:33:fe: e9:8d:f4:a0:36:d9:69:81:1f:66:c0:3e:69:32:96: 62:48:dc:75:43:c8:15:47:a9:a1:3f:7b:f5:2b:de: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:BD:90:7E:B3:5E:51:3D:6A:21:71:61:CD:4E:82:9A:92:8E:3F X509v3 Authority Key Identifier: keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:94:cd:c1:c2:c9:cd:aa:e5:bd:76:0e:d2:d7:c2:ef:5b:8e: b0:59:7e:e1:8b:02:5b:89:bd:74:37:29:3f:2a:f4:d0:b4:06: 3c:55:23:f2:0b:9f:27:0d:39:4c:bd:58:26:9a:13:f3:44:6d: fa:72:64:80:2b:d1:16:84:2d:6d:28:66:0d:0f:a9:88:a8:f1: 62:2c:03:1c:fa:3b:1d:4c:83:1d:2f:84:10:c2:2a:63:82:9b: f9:fa:e6:f4:71:3d:46:48:fa:f0:cd:3d:3a:12:72:2f:88:47: 9c:1d:40:ab:c3:4b:0f:c9:06:5e:db:71:39:2e:92:34:24:bb: c1:b2:5c:54:25:8f:b9:6d:ad:82:44:1c:7b:d1:d5:ed:00:90: 46:34:77:63:90:2c:9c:01:be:32:f8:84:12:0a:bd:4f:20:de: 78:fb:c6:8d:55:9a:06:4b:12:bf:d9:24:26:e2:25:3e:fa:57: c8:d7:00:c9:bf:47:af:ce:4b:5b:0b:56:44:1f:38:58:7a:9a: 5d:83:ff:55:5e:b4:ab:45:1c:af:53:1a:db:7e:23:61:2a:24: 51:83:57:ed:b9:cf:68:fb:9e:98:bc:53:1c:36:83:c2:ce:d9: 73:a6:34:13:04:cb:bc:3d:c1:24:2b:ec:93:6b:d2:55:75:92: f7:70:72:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vp0FAD87SXumyJ91E7TsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmZiNjA1ZGNlMzA2MGRmYjY2ZGNjY2E4OGViN2RhMGFj NzRhZjEwHhcNMjYwMTI1MjAwMDQ1WhcNMjYwMTI2MjAwMDQ1WjAzMTEwLwYDVQQD Eyg1MDM0YmQ5MDdlYjM1ZTUxM2Q2YTIxNzE2MWNkNGU4MjlhOTI4ZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAMqUVqDRIba+s4beJMH2CntUmW1 jR28EThWTsnjmOd6ot/XkTYnDrz9+9l4nSagCcvoODZ6dquOUJF+b9PlJWE7k8l0 AUFYWAdFYTOARFtAcnBm77YIpyl7aExELnlv1fjXWxD3NJdxlyZLgb8iHDNvKvB/ o4lONnLu0rYG4mzsfL4BXydMMg+CEExBPQrWVr5QmtSTJDtlTZp704/IBLifkXYE wTgxcxaYlTlReMYoWU4I3WEQrj8oQEpXMpNMiDPqudjs7KC+eudlDUhyBneb0W/+ z7wTSQ9w3Cy1M/7pjfSgNtlpgR9mwD5pMpZiSNx1Q8gVR6mhP3v1K95G3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA0vZB+s15RPWohcWHNToKako4/MB8GA1UdIwQY MBaAFDv/tgXc4wYN+2bczKiOt9oKx0rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2Ut NmIxZDA3MTQ1NTRhLzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2UtNmIxZDA3MTQ1NTRh LzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5TNwcLJ zarlvXYO0tfC71uOsFl+4YsCW4m9dDcpPyr00LQGPFUj8gufJw05TL1YJpoT80Rt +nJkgCvRFoQtbShmDQ+piKjxYiwDHPo7HUyDHS+EEMIqY4Kb+frm9HE9Rkj68M09 OhJyL4hHnB1Aq8NLD8kGXttxOS6SNCS7wbJcVCWPuW2tgkQce9HV7QCQRjR3Y5As nAG+MviEEgq9TyDeePvGjVWaBksSv9kkJuIlPvpXyNcAyb9Hr85LWwtWRB84WHqa XYP/VV60q0Ucr1Ma234jYSokUYNX7bnPaPuemLxTHDaDws7Zc6Y0EwTLvD3BJCvs k2vSVXWS93By1Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:10 2026 by rpki-client