This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json) Hash identifier: UWb6CJOPD01YvPpaGpQK4V1E5zdpGfJG3i4ugcHYGfM= Subject key identifier: 6B:E4:5B:71:E9:E3:62:BF:61:6B:D3:8E:3C:FC:6C:EA:12:23:BC:98 Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Certificate serial: 019BF951CFA678D1839A89707A6A9D5BA11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft Manifest number: 14F0 Signing time: Mon 26 Jan 2026 08:00:46 +0000 Manifest this update: Mon 26 Jan 2026 08:00:46 +0000 Manifest next update: Tue 27 Jan 2026 08:00:46 +0000 Files and hashes: 1: 7rCr7Pm66FhbI0Vv0pM9TtyRODk.roa (hash: eF8IEGbndxilP7ZrGLA+WxaactMHRBgKAzjQED4H6TA=) 2: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: 7uXhvk+ASyoUK68T0G05NLAW+pSGNQRWtZCijY4gLtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:cf:a6:78:d1:83:9a:89:70:7a:6a:9d:5b:a1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460 Validity Not Before: Jan 26 08:00:46 2026 GMT Not After : Jan 27 08:00:46 2026 GMT Subject: CN=6be45b71e9e362bf616bd38e3cfc6cea1223bc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:c0:f5:9f:87:b1:c6:eb:dc:63:5b:9a:77: 76:50:d3:52:88:66:28:cf:36:7b:69:46:00:d2:7c: 87:5e:45:aa:16:86:2a:cd:e5:7c:31:7b:5f:f5:20: 90:21:e1:91:7c:e4:a6:1d:63:51:5e:3f:e9:c0:81: 5d:44:50:0b:11:9b:be:90:86:20:13:c6:56:66:35: df:50:21:cb:2c:66:c9:18:6f:30:d9:fb:dd:f2:2b: f1:7f:38:84:f7:9a:cc:65:c5:ba:d8:22:0d:09:72: 6e:ef:5e:97:3c:4d:74:1f:ab:f1:30:0d:00:dc:b9: 34:78:78:c7:05:29:83:a8:60:17:45:8b:72:08:eb: 8f:66:17:8e:8f:76:50:f4:0d:2e:8f:41:46:31:40: de:24:93:d0:78:d9:b6:77:9e:5d:a4:99:20:c8:0f: f1:df:65:0d:94:20:58:4d:b2:b8:74:d8:26:f6:8a: e4:80:57:07:7a:04:f5:a7:9b:da:55:84:c3:c8:ea: 14:07:95:20:78:2f:4b:2d:ae:04:aa:ef:0f:02:a9: 8d:d6:07:a5:6a:a8:5c:f8:1e:16:9f:c0:fb:a9:31: 54:03:f2:df:33:48:ee:0e:0a:f3:fc:62:06:94:59: e4:38:46:1b:3d:79:f4:17:d8:3e:62:5d:ea:96:08: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:5B:71:E9:E3:62:BF:61:6B:D3:8E:3C:FC:6C:EA:12:23:BC:98 X509v3 Authority Key Identifier: keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:12:cb:90:c5:eb:3e:5c:33:e3:f5:f3:e3:9d:d4:9c:d0:56: e4:0e:5b:32:57:8b:0d:df:ab:42:21:38:3b:91:f2:c1:1d:9b: 19:e0:79:5e:82:55:f7:b1:fe:af:5c:56:9a:1b:65:3c:6c:cd: 96:2a:fb:8b:c7:ed:3a:fb:2b:cd:e8:de:11:ac:14:53:91:2f: b8:a1:61:ad:28:1b:76:20:d7:eb:c3:a1:5f:fd:4e:66:22:f5: 58:ac:d7:07:71:5f:de:3d:17:f7:42:2a:07:8a:e6:51:5e:0f: 83:34:2d:f2:c0:81:df:f1:6f:77:cb:7b:56:71:59:71:b2:16: 99:ba:7d:8d:6d:ea:9b:47:78:3d:3b:5c:7c:3e:8d:9c:44:36: bb:b3:84:41:e4:0d:31:34:77:c1:93:73:43:03:a9:fd:1b:3b: 8f:ae:ea:3f:d3:d2:d2:81:11:75:bd:ac:91:7c:04:75:b3:aa: 54:44:32:63:6d:84:27:9d:ac:12:fe:57:6a:75:2b:e8:af:78: 06:7a:25:d2:66:f5:e6:5f:68:4e:60:9e:9f:24:6a:6e:b1:30: 77:7c:d2:2e:51:5d:f1:31:59:a4:53:9a:c7:d8:5c:36:89:3d: 9e:1f:cb:19:24:f8:ce:53:48:d9:b9:ba:8a:be:76:5f:e1:cd: 84:74:5a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Uc+meNGDmolwemqdW6EfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhN2IwMzkxM2UzYTI4NWVmZTUxY2RhYzY1ZjU1MDRjODdh MzQ0NjAwHhcNMjYwMTI2MDgwMDQ2WhcNMjYwMTI3MDgwMDQ2WjAzMTEwLwYDVQQD Eyg2YmU0NWI3MWU5ZTM2MmJmNjE2YmQzOGUzY2ZjNmNlYTEyMjNiYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0DA9Z+Hscbr3GNbmnd2UNNSiGYo zzZ7aUYA0nyHXkWqFoYqzeV8MXtf9SCQIeGRfOSmHWNRXj/pwIFdRFALEZu+kIYg E8ZWZjXfUCHLLGbJGG8w2fvd8ivxfziE95rMZcW62CINCXJu716XPE10H6vxMA0A 3Lk0eHjHBSmDqGAXRYtyCOuPZheOj3ZQ9A0uj0FGMUDeJJPQeNm2d55dpJkgyA/x 32UNlCBYTbK4dNgm9orkgFcHegT1p5vaVYTDyOoUB5UgeC9LLa4Equ8PAqmN1gel aqhc+B4Wn8D7qTFUA/LfM0juDgrz/GIGlFnkOEYbPXn0F9g+Yl3qlgiqHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvkW3Hp42K/YWvTjjz8bOoSI7yYMB8GA1UdIwQY MBaAFDp7A5E+Oihe/lHNrGX1UEyHo0RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAt ZjM3Y2JhZjdjZTVhLzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MWRiNmItMWQ3My00ZWMyLThiZTAtZjM3Y2JhZjdjZTVh LzEvT25zRGtUNDZLRjctVWMyc1pmVlFUSWVqUkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRLLkMXr Plwz4/Xz453UnNBW5A5bMleLDd+rQiE4O5HywR2bGeB5XoJV97H+r1xWmhtlPGzN lir7i8ftOvsrzejeEawUU5EvuKFhrSgbdiDX68OhX/1OZiL1WKzXB3Ff3j0X90Iq B4rmUV4PgzQt8sCB3/Fvd8t7VnFZcbIWmbp9jW3qm0d4PTtcfD6NnEQ2u7OEQeQN MTR3wZNzQwOp/Rs7j67qP9PS0oERdb2skXwEdbOqVEQyY22EJ52sEv5XanUr6K94 Bnol0mb15l9oTmCenyRqbrEwd3zSLlFd8TFZpFOax9hcNok9nh/LGST4zlNI2bm6 ir52X+HNhHRavA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:41 2026 by rpki-client