This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json) Hash identifier: 617ucj5uQN4f9nla+Cd9PbulRbjqfXWTf9BKcW89S6o= Subject key identifier: B7:11:40:E3:C4:36:4D:75:38:F5:0A:F4:7F:AC:A9:81:E2:A0:AB:AE Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Certificate serial: 019BF5079F00426585F646D260F4CDF7D8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft Manifest number: 9E Signing time: Sun 25 Jan 2026 12:01:15 +0000 Manifest this update: Sun 25 Jan 2026 12:01:15 +0000 Manifest next update: Mon 26 Jan 2026 12:01:15 +0000 Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: fs8gnTBdsVEvRSfDcaor+C+stieHlTJEppvLsSOA7VY=) 2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:9f:00:42:65:85:f6:46:d2:60:f4:cd:f7:d8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Validity Not Before: Jan 25 12:01:15 2026 GMT Not After : Jan 26 12:01:15 2026 GMT Subject: CN=b71140e3c4364d7538f50af47faca981e2a0abae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:97:c3:6b:0a:86:4b:14:1e:bc:85:96:ee: 43:19:79:73:99:e8:5e:bf:06:07:3a:44:90:40:e2: e8:e5:3e:81:37:03:38:bd:63:82:23:b9:ea:c5:5a: c2:c6:41:41:d2:9b:be:88:f5:ad:b9:77:5c:31:39: 14:c6:2f:dc:2d:fe:dd:77:04:7d:1c:28:55:33:99: f5:6d:6b:8b:7c:aa:ff:13:36:77:87:f7:9d:34:b5: f2:02:f0:e8:80:49:f1:34:74:76:2e:d6:c3:7a:db: 51:dd:cb:2f:97:1a:a5:77:fc:b9:02:94:b7:a2:4b: 64:f7:cc:58:24:f4:95:d7:c1:73:3d:b8:17:1c:a8: 76:59:7b:50:15:db:84:eb:f1:53:e5:41:74:88:99: 08:91:bd:57:ac:55:b9:93:f8:0d:8f:d8:9a:15:9f: e4:a8:05:27:ca:d4:2b:fe:86:a0:2a:6f:89:ba:7a: 73:96:ce:a7:2c:99:3c:a2:8a:65:21:5f:93:e6:4e: 14:c3:a9:71:ed:42:ac:fe:1d:41:a1:fa:51:1b:f8: 32:fb:f8:ee:24:53:66:8f:86:17:fd:c7:53:50:f5: 4e:1e:ef:74:77:eb:22:82:aa:b9:eb:7b:1f:e0:c0: 0a:f7:4c:0c:80:3b:71:82:b8:d9:da:5d:fb:4e:c1: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:40:E3:C4:36:4D:75:38:F5:0A:F4:7F:AC:A9:81:E2:A0:AB:AE X509v3 Authority Key Identifier: keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a6:95:bf:71:4c:d0:e0:21:b2:e1:d4:4e:76:d7:67:ae:27: 8c:a1:ab:2b:51:5a:ce:e3:c0:40:03:65:53:59:11:ad:a1:8a: 81:b9:81:b3:0f:8d:0e:70:bd:3c:8a:05:1b:cd:7a:49:37:86: 80:f7:24:44:aa:32:9e:31:57:3a:e5:1c:25:59:6d:d1:da:87: e0:34:46:90:43:97:3f:a4:3a:f1:fb:69:75:c0:7d:23:cc:4f: 4c:07:3b:f1:94:ba:5b:50:b0:84:84:86:ce:a7:25:1e:ab:76: 63:26:46:d2:76:b6:b2:fc:ed:fe:04:be:4f:cf:a9:df:9a:18: 8f:c3:54:c9:fd:f8:10:3f:7c:9a:bf:01:b8:5c:50:34:17:dc: 47:df:a6:bf:5f:6d:d6:9b:98:01:1c:c5:f0:c7:27:2c:47:4b: a7:af:ab:28:e0:57:ff:00:5f:ca:0a:88:d5:9f:c4:63:22:54: 3a:bf:8b:0b:84:37:25:be:f8:6e:26:2e:e0:cc:eb:be:62:d3: 01:85:fa:f6:bc:71:92:b9:33:30:91:b4:46:48:c2:74:21:25: 27:94:9d:90:ad:36:bf:bf:62:1c:e8:89:05:62:e7:96:db:cb: 19:c0:73:2b:ae:44:f7:e8:ad:bb:6f:5f:90:48:c7:5a:a6:68: 1c:bb:d0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B58AQmWF9kbSYPTN99i6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDNlODg4YzIyM2IzYmZhZTgxOWIyMjBmZmIyNWYyNmYx YzJmNDgwHhcNMjYwMTI1MTIwMTE1WhcNMjYwMTI2MTIwMTE1WjAzMTEwLwYDVQQD EyhiNzExNDBlM2M0MzY0ZDc1MzhmNTBhZjQ3ZmFjYTk4MWUyYTBhYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCXw2sKhksUHryFlu5DGXlzmehe vwYHOkSQQOLo5T6BNwM4vWOCI7nqxVrCxkFB0pu+iPWtuXdcMTkUxi/cLf7ddwR9 HChVM5n1bWuLfKr/EzZ3h/edNLXyAvDogEnxNHR2LtbDettR3csvlxqld/y5ApS3 oktk98xYJPSV18FzPbgXHKh2WXtQFduE6/FT5UF0iJkIkb1XrFW5k/gNj9iaFZ/k qAUnytQr/oagKm+Junpzls6nLJk8ooplIV+T5k4Uw6lx7UKs/h1BofpRG/gy+/ju JFNmj4YX/cdTUPVOHu90d+sigqq563sf4MAK90wMgDtxgrjZ2l37TsFgFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcRQOPENk11OPUK9H+sqYHioKuuMB8GA1UdIwQY MBaAFDoD6IjCI7O/roGbIg/7JfJvHC9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDIt ODQ4MTA0MmU5YTM1LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDItODQ4MTA0MmU5YTM1 LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKaVv3FM 0OAhsuHUTnbXZ64njKGrK1FazuPAQANlU1kRraGKgbmBsw+NDnC9PIoFG816STeG gPckRKoynjFXOuUcJVlt0dqH4DRGkEOXP6Q68ftpdcB9I8xPTAc78ZS6W1CwhISG zqclHqt2YyZG0na2svzt/gS+T8+p35oYj8NUyf34ED98mr8BuFxQNBfcR9+mv19t 1puYARzF8McnLEdLp6+rKOBX/wBfygqI1Z/EYyJUOr+LC4Q3Jb74biYu4MzrvmLT AYX69rxxkrkzMJG0RkjCdCElJ5SdkK02v79iHOiJBWLnltvLGcBzK65E9+itu29f kEjHWqZoHLvQyA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:01 2026 by rpki-client