This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json) Hash identifier: n+uc2Bz12BTOZsmzYyBM6OUyW4Q9taF3VtTio73qaYc= Subject key identifier: E7:8C:85:44:BB:61:AE:D0:AB:D0:AF:8D:07:03:33:7E:5B:E6:61:65 Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Certificate serial: 019BF5755286EAC4230E4E46F41B247D1E25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft Manifest number: 0AD7 Signing time: Sun 25 Jan 2026 14:01:05 +0000 Manifest this update: Sun 25 Jan 2026 14:01:05 +0000 Manifest next update: Mon 26 Jan 2026 14:01:05 +0000 Files and hashes: 1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=) 2: 6kaURhGxoUlWaOePC0NyfU_mnTo.roa (hash: MvVnYViOi0T2AU1MS+YLAjvbdEso3zsR9mLbjNrHn1U=) 3: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=) 4: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: kw6Va5aNi5UHB1z/OQRLIlxDgZndaWakjxf1UqamUWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:52:86:ea:c4:23:0e:4e:46:f4:1b:24:7d:1e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Validity Not Before: Jan 25 14:01:05 2026 GMT Not After : Jan 26 14:01:05 2026 GMT Subject: CN=e78c8544bb61aed0abd0af8d0703337e5be66165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:5c:fb:d5:25:a0:31:c5:d4:ca:c3:b7:fd: 3e:72:14:58:4c:58:b9:73:41:fa:c2:06:62:b2:00: b3:20:32:78:b6:ef:7c:7c:6f:cf:10:d5:b6:97:75: 41:bc:4b:72:2d:7b:fd:7b:0d:bf:8d:06:cd:ce:ce: 01:5c:aa:41:92:c1:da:a3:0a:5f:60:37:27:b1:c6: bf:45:f8:12:07:96:c4:b5:59:71:71:94:c1:92:f4: 18:29:a6:0f:66:bf:f8:05:d5:3f:f4:52:1c:99:b5: c0:00:c0:01:f4:96:49:73:36:05:23:b9:e7:63:66: ce:d2:2c:7a:ab:dc:23:1e:68:a5:7a:76:88:5c:4e: 47:41:fc:cb:d7:d2:c9:c3:55:49:5a:97:b5:71:2e: 5a:04:ca:c5:f4:3d:df:04:9a:87:3d:2f:3e:2e:63: e7:73:7b:94:4d:19:ba:7d:7a:fe:90:99:b9:0c:45: 9f:ee:b4:0e:4e:bc:c0:ab:de:e8:e2:fb:03:32:56: e7:7c:b7:de:39:38:9e:5f:f9:2d:4b:49:88:9a:33: 0b:75:4b:fa:43:12:e8:c0:ce:84:ae:2b:a1:9e:c6: 7d:39:a8:5e:3f:62:a7:ce:48:f9:5a:39:b6:c0:30: c3:3c:6a:68:e8:5c:7b:43:17:ae:9e:bf:95:5b:59: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8C:85:44:BB:61:AE:D0:AB:D0:AF:8D:07:03:33:7E:5B:E6:61:65 X509v3 Authority Key Identifier: keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:28:ba:2e:b6:f2:79:87:40:eb:23:3b:f9:85:ce:cb:e5:b9: 57:0c:6d:33:e5:af:b9:6f:64:85:14:62:d1:35:61:92:64:53: 5a:b9:50:7d:ba:fa:50:78:89:ef:6c:53:a5:12:03:63:be:85: 98:90:7e:a8:9e:6c:0e:1a:88:54:ec:de:70:77:f0:b1:64:f4: a3:25:2a:b3:f9:a6:b2:d0:79:08:e6:b2:72:3d:01:26:9a:a8: bf:de:ca:2b:04:c1:4c:50:e9:42:f1:e9:0e:2a:81:15:5d:84: 93:bb:b9:41:0d:a5:22:31:a3:78:6a:24:ec:0a:4e:7a:ac:1b: 8d:ee:c5:35:ed:5f:a3:47:33:1a:a9:24:78:75:06:a5:e7:c3: ff:cc:e9:cf:ab:1c:cb:cd:20:69:32:91:2e:c4:ad:02:d4:0a: 40:c3:33:b0:b3:33:fe:05:ff:ec:20:30:3c:bd:8b:b0:62:c2: 63:60:c9:09:b0:b9:f6:0d:37:4f:b9:bd:ed:18:45:eb:39:48: d4:26:ba:6d:5d:71:ae:b3:aa:a6:1e:34:6f:ae:8b:b3:70:05: 43:f5:1b:3c:58:1f:cc:86:fa:db:eb:a5:b1:c9:d2:37:a3:24: c7:4b:f5:50:20:6c:70:f2:eb:4c:b6:1f:57:8c:fe:01:8c:08: ea:a5:ce:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dVKG6sQjDk5G9BskfR4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2NiYzcwZTE4YjZjNjllNTNlZjUyYTVlOTI1ZTVmNGYw Y2RjYzEwHhcNMjYwMTI1MTQwMTA1WhcNMjYwMTI2MTQwMTA1WjAzMTEwLwYDVQQD EyhlNzhjODU0NGJiNjFhZWQwYWJkMGFmOGQwNzAzMzM3ZTViZTY2MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH5c+9UloDHF1MrDt/0+chRYTFi5 c0H6wgZisgCzIDJ4tu98fG/PENW2l3VBvEtyLXv9ew2/jQbNzs4BXKpBksHaowpf YDcnsca/RfgSB5bEtVlxcZTBkvQYKaYPZr/4BdU/9FIcmbXAAMAB9JZJczYFI7nn Y2bO0ix6q9wjHmilenaIXE5HQfzL19LJw1VJWpe1cS5aBMrF9D3fBJqHPS8+LmPn c3uUTRm6fXr+kJm5DEWf7rQOTrzAq97o4vsDMlbnfLfeOTieX/ktS0mImjMLdUv6 QxLowM6EriuhnsZ9OaheP2Knzkj5Wjm2wDDDPGpo6Fx7Qxeunr+VW1l+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeMhUS7Ya7Qq9CvjQcDM35b5mFlMB8GA1UdIwQY MBaAFDvMvHDhi2xp5T71Kl6SXl9PDNzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgt YmJlNjBlYTIyMmM1LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgtYmJlNjBlYTIyMmM1 LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCi6Lrby eYdA6yM7+YXOy+W5VwxtM+WvuW9khRRi0TVhkmRTWrlQfbr6UHiJ72xTpRIDY76F mJB+qJ5sDhqIVOzecHfwsWT0oyUqs/mmstB5COaycj0BJpqov97KKwTBTFDpQvHp DiqBFV2Ek7u5QQ2lIjGjeGok7ApOeqwbje7FNe1fo0czGqkkeHUGpefD/8zpz6sc y80gaTKRLsStAtQKQMMzsLMz/gX/7CAwPL2LsGLCY2DJCbC59g03T7m97RhF6zlI 1Ca6bV1xrrOqph40b66Ls3AFQ/UbPFgfzIb62+ulscnSN6Mkx0v1UCBscPLrTLYf V4z+AYwI6qXOaQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:20 2026 by rpki-client