This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json) Hash identifier: AcXpxsGrWNthKgy2dRZ5ImxtMVu0dds7mKNbGnAQq7Q= Subject key identifier: 83:39:FD:BE:AD:86:C2:B3:6A:C9:A3:6B:97:0F:C5:07:0D:9A:32:84 Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928 Certificate serial: 019BF619A849177FF02F973908BB4628C642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft Manifest number: 125C Signing time: Sun 25 Jan 2026 17:00:35 +0000 Manifest this update: Sun 25 Jan 2026 17:00:35 +0000 Manifest next update: Mon 26 Jan 2026 17:00:35 +0000 Files and hashes: 1: IBksnf3WkTvoF5rkP1mUy15812I.roa (hash: HD4RkTmAf3uLEci/QM2BCfZRy1s1DoklxIvLjDBwxb4=) 2: NdOYrmb6RnvhyXZ1Skocw4HNEj4.roa (hash: i19fewp2gqVX7ORfnbVNxiNhHz8sRGSZyn7wRBbQZfc=) 3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: fUItbDJmjrqjLcypH1qdtzfekkQTvPlOeBj+mRJjt6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:a8:49:17:7f:f0:2f:97:39:08:bb:46:28:c6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20cc67154b403145d139469886127ab629eb928 Validity Not Before: Jan 25 17:00:35 2026 GMT Not After : Jan 26 17:00:35 2026 GMT Subject: CN=8339fdbead86c2b36ac9a36b970fc5070d9a3284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e0:10:28:95:fb:4b:85:d8:b7:a6:ac:82:8d: 6c:ec:41:bf:b4:35:2e:b7:b8:af:58:30:87:61:69: 89:14:10:b6:62:4f:b1:37:ae:47:7a:5f:91:2c:e8: d9:a2:4f:e7:61:bd:0a:44:ed:5b:cd:93:31:7d:be: 09:ec:75:1c:31:07:2c:15:9a:c8:fe:2a:14:f5:bd: 4f:37:15:68:38:ca:c6:6d:d1:be:e5:cf:df:4b:2b: 20:bc:ac:fb:4b:57:f8:88:0f:b1:73:72:2c:14:a1: fc:98:73:bf:f2:68:42:33:3d:92:94:f4:3b:13:9c: a2:15:5c:0b:b7:b0:51:ea:b7:c9:c2:19:45:5e:6c: 6e:5b:e3:41:f8:64:1c:a6:a4:80:eb:89:5f:a7:ca: 33:a7:15:d8:ac:9d:79:d6:73:bb:52:ae:09:a5:11: 7f:6b:3c:c7:0e:4e:36:03:8e:87:39:81:9e:48:36: ee:3d:e1:73:ee:0b:e2:1b:fd:59:b2:e3:62:80:b7: 5f:3c:8d:04:33:7b:f7:1d:e6:a2:d2:44:00:92:56: ce:0e:7b:28:e3:85:43:44:6a:98:36:a0:e6:28:f0: 73:84:f7:c5:2d:0b:72:ed:4f:01:46:d5:fc:dc:b5: 3e:1a:a5:27:43:43:91:37:7b:da:4f:43:a9:3b:57: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:39:FD:BE:AD:86:C2:B3:6A:C9:A3:6B:97:0F:C5:07:0D:9A:32:84 X509v3 Authority Key Identifier: keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0e:e4:ec:df:5f:35:76:6c:54:5d:18:50:2f:21:4c:7b:d1: d6:bb:f3:f2:e0:4d:c0:92:78:5c:d9:78:27:e3:ab:4e:91:a9: 53:bc:30:17:b4:32:ef:1c:7c:64:a3:a4:0a:9f:22:4c:9c:2f: 2d:76:3c:a8:ad:b6:ca:69:f1:24:e4:ae:3a:c3:be:bc:97:a7: b0:8d:8b:11:88:28:b9:ba:82:6c:83:2b:62:4d:a4:b5:cd:7f: f0:df:64:0b:ad:62:82:a7:78:e1:99:76:17:96:30:df:ba:90: b0:0b:ba:fc:cf:2e:1b:2b:1d:56:c6:5a:99:4a:de:b0:db:9a: b5:7e:5a:27:f2:3d:2c:39:fb:b7:b4:55:46:da:3a:72:06:55: 62:26:94:ad:ea:66:15:2b:5f:34:c3:89:28:41:a0:77:5a:59: 6a:82:0e:77:b1:aa:3d:0b:3f:04:9e:7c:21:b6:76:d9:fc:9b: b5:ba:0e:23:1e:1e:fd:e3:bf:d1:20:c9:d4:c9:36:3f:aa:ce: 45:88:9a:08:a6:b5:1e:02:9e:2e:05:d2:15:76:19:f3:9d:92: 06:45:ff:0c:5c:99:e4:b8:67:32:12:d1:6d:cd:a1:be:a4:c7: 05:80:7f:38:5d:18:e0:cd:2b:d6:dc:e9:60:8e:cd:d0:49:83: 0c:ab:c2:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GahJF3/wL5c5CLtGKMZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5 ZWI5MjgwHhcNMjYwMTI1MTcwMDM1WhcNMjYwMTI2MTcwMDM1WjAzMTEwLwYDVQQD Eyg4MzM5ZmRiZWFkODZjMmIzNmFjOWEzNmI5NzBmYzUwNzBkOWEzMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+AQKJX7S4XYt6asgo1s7EG/tDUu t7ivWDCHYWmJFBC2Yk+xN65Hel+RLOjZok/nYb0KRO1bzZMxfb4J7HUcMQcsFZrI /ioU9b1PNxVoOMrGbdG+5c/fSysgvKz7S1f4iA+xc3IsFKH8mHO/8mhCMz2SlPQ7 E5yiFVwLt7BR6rfJwhlFXmxuW+NB+GQcpqSA64lfp8ozpxXYrJ151nO7Uq4JpRF/ azzHDk42A46HOYGeSDbuPeFz7gviG/1ZsuNigLdfPI0EM3v3Heai0kQAklbODnso 44VDRGqYNqDmKPBzhPfFLQty7U8BRtX83LU+GqUnQ0ORN3vaT0OpO1ftHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIM5/b6thsKzasmja5cPxQcNmjKEMB8GA1UdIwQY MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt OGZjMzM3MzdjZWFiLzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQ7k7N9f NXZsVF0YUC8hTHvR1rvz8uBNwJJ4XNl4J+OrTpGpU7wwF7Qy7xx8ZKOkCp8iTJwv LXY8qK22ymnxJOSuOsO+vJensI2LEYgoubqCbIMrYk2ktc1/8N9kC61igqd44Zl2 F5Yw37qQsAu6/M8uGysdVsZamUresNuatX5aJ/I9LDn7t7RVRto6cgZVYiaUrepm FStfNMOJKEGgd1pZaoIOd7GqPQs/BJ58IbZ22fybtboOIx4e/eO/0SDJ1Mk2P6rO RYiaCKa1HgKeLgXSFXYZ852SBkX/DFyZ5LhnMhLRbc2hvqTHBYB/OF0Y4M0r1tzp YI7N0EmDDKvCMA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:25 2026 by rpki-client