This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json) Hash identifier: +svwjjh0fonwglIY8Oujx5ll27vNaxX103lV9hxcjZk= Subject key identifier: 4F:7A:C2:41:0A:13:23:0F:11:19:59:E7:19:A9:A2:51:A9:7E:D0:8A Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31 Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31 Certificate serial: 019BF5E43240950E97C37DF31C35B85C0B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft Manifest number: 12 Signing time: Sun 25 Jan 2026 16:02:11 +0000 Manifest this update: Sun 25 Jan 2026 16:02:11 +0000 Manifest next update: Mon 26 Jan 2026 16:02:11 +0000 Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=) 2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: srkyBMHjNcH/rqFUXl3WyAtCn5Tqo2PQKoaQzdefBCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:32:40:95:0e:97:c3:7d:f3:1c:35:b8:5c:0b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31 Validity Not Before: Jan 25 16:02:11 2026 GMT Not After : Jan 26 16:02:11 2026 GMT Subject: CN=4f7ac2410a13230f111959e719a9a251a97ed08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:96:93:98:dc:e0:dc:1a:30:2b:60:23:d3: 3b:6d:66:2c:46:98:72:d8:af:fa:ca:b8:38:a9:54: cf:19:27:2a:42:f0:58:b8:3f:8f:ef:36:d8:4d:ad: ac:72:61:49:9f:17:96:a4:b1:b5:87:4c:45:7a:3a: d0:51:f8:84:e7:22:cd:04:48:a5:0c:01:d5:eb:33: 51:6e:1c:7e:cd:09:ee:d1:d8:87:49:6f:80:3e:31: 7e:f1:bc:23:c2:6d:df:f5:4c:51:c7:91:a8:95:99: d8:c8:4d:fc:fc:2e:9e:7f:11:88:bd:38:e6:1e:0f: f6:7c:fb:6c:6d:38:6e:51:03:2d:f7:c7:2f:57:29: 62:a7:80:80:32:9f:2c:82:d0:3a:6c:32:6e:1d:23: 09:ae:80:3c:a9:f3:f4:ca:cf:63:ac:38:e0:5a:e0: e0:f9:4e:2f:93:f8:71:16:48:12:4c:38:da:0d:c3: 60:e5:79:b4:8a:ee:e4:92:89:d6:d3:6b:98:2f:96: 66:8d:3f:c1:77:53:8b:27:9a:ed:51:39:ae:9d:06: 16:6a:a1:1b:a8:e1:93:0c:88:de:71:74:ea:c1:a4: 2d:3a:54:b8:26:00:e9:18:51:46:f1:33:29:c1:40: d6:d0:39:97:c8:a5:2f:3f:ea:8f:c7:cc:02:01:a7: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:C2:41:0A:13:23:0F:11:19:59:E7:19:A9:A2:51:A9:7E:D0:8A X509v3 Authority Key Identifier: keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:0a:82:dc:11:6f:5b:e0:56:54:80:35:9b:a9:04:20:92:7d: c0:3f:aa:da:13:8c:35:6d:e4:0c:fd:9c:86:a7:6b:cf:62:26: 8a:c6:26:e3:8e:50:82:e9:96:1e:09:df:96:2e:50:ea:ca:a4: c2:ba:16:a7:59:5f:7c:8d:90:f2:04:d4:01:db:43:a4:9c:9d: c1:bc:56:c5:5c:93:fc:a1:1a:ce:cb:b1:f6:64:3b:16:9d:b9: f0:91:a7:8d:c9:3c:4d:3e:ca:6b:3e:6c:9e:d4:0b:f6:6c:e0: 09:7f:62:92:78:b0:0d:92:ba:8d:5d:c9:e3:a7:3f:aa:b0:32: 49:01:96:6f:97:6f:1f:e0:12:a0:ef:d5:62:10:48:f0:97:36: 1a:63:85:c9:a4:5e:06:6d:f9:a0:1d:79:1e:7d:03:8c:bc:60: 05:5b:58:09:d9:76:e9:28:2e:9e:22:ee:c8:54:66:bc:6c:8c: 1c:c1:f4:b8:6a:97:25:e4:24:76:5b:57:6a:df:fc:1a:c7:aa: 4b:0b:2b:97:ee:fb:24:e2:2e:f8:88:2d:4d:26:15:ab:b5:ff: d0:09:52:cf:1d:49:fe:d1:e7:18:85:29:5e:6c:d4:76:0d:7b: 39:89:4a:e4:1a:9d:8c:c4:c7:6f:50:f8:1c:1b:48:d9:1b:00: 80:c3:60:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15DJAlQ6Xw33zHDW4XAstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGMyOTZhOWZlNWE2MDUxNTgyZTVhZGU0NzU0OTg1ZjZm MTFiMzEwHhcNMjYwMTI1MTYwMjExWhcNMjYwMTI2MTYwMjExWjAzMTEwLwYDVQQD Eyg0ZjdhYzI0MTBhMTMyMzBmMTExOTU5ZTcxOWE5YTI1MWE5N2VkMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP+Wk5jc4NwaMCtgI9M7bWYsRphy 2K/6yrg4qVTPGScqQvBYuD+P7zbYTa2scmFJnxeWpLG1h0xFejrQUfiE5yLNBEil DAHV6zNRbhx+zQnu0diHSW+APjF+8bwjwm3f9UxRx5GolZnYyE38/C6efxGIvTjm Hg/2fPtsbThuUQMt98cvVylip4CAMp8sgtA6bDJuHSMJroA8qfP0ys9jrDjgWuDg +U4vk/hxFkgSTDjaDcNg5Xm0iu7kkonW02uYL5ZmjT/Bd1OLJ5rtUTmunQYWaqEb qOGTDIjecXTqwaQtOlS4JgDpGFFG8TMpwUDW0DmXyKUvP+qPx8wCAaf+QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE96wkEKEyMPERlZ5xmpolGpftCKMB8GA1UdIwQY MBaAFKCMKWqf5aYFFYLlreR1SYX28RsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTkt YWZiN2U4ZTczMGNjLzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTktYWZiN2U4ZTczMGNj LzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQqC3BFv W+BWVIA1m6kEIJJ9wD+q2hOMNW3kDP2chqdrz2ImisYm445QgumWHgnfli5Q6sqk wroWp1lffI2Q8gTUAdtDpJydwbxWxVyT/KEazsux9mQ7Fp258JGnjck8TT7Kaz5s ntQL9mzgCX9ikniwDZK6jV3J46c/qrAySQGWb5dvH+ASoO/VYhBI8Jc2GmOFyaRe Bm35oB15Hn0DjLxgBVtYCdl26SguniLuyFRmvGyMHMH0uGqXJeQkdltXat/8Gseq Swsrl+77JOIu+IgtTSYVq7X/0AlSzx1J/tHnGIUpXmzUdg17OYlK5BqdjMTHb1D4 HBtI2RsAgMNgnA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:08 2026 by rpki-client