This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json) Hash identifier: UQu0HS3Yj88kURnnmjBHy0idHpIXBA+5ekVp/IEf3AY= Subject key identifier: 75:AB:CF:79:0A:1F:C6:72:BE:99:08:48:36:71:77:9E:A0:74:0D:32 Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1 Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1 Certificate serial: 019BF807FD0485E6C1BAB0D796523CB2BA87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft Manifest number: 31 Signing time: Mon 26 Jan 2026 02:00:31 +0000 Manifest this update: Mon 26 Jan 2026 02:00:31 +0000 Manifest next update: Tue 27 Jan 2026 02:00:31 +0000 Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: fpUodmgQ7uq1GaDWUdIyew2WEXNhYtYjxO4b0BSywf0=) 2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:07:fd:04:85:e6:c1:ba:b0:d7:96:52:3c:b2:ba:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1 Validity Not Before: Jan 26 02:00:31 2026 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=75abcf790a1fc672be9908483671779ea0740d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:de:82:89:a9:dc:1a:25:6e:e1:f2:72:a6: 0a:c5:ed:c4:13:63:93:da:0e:ec:54:b2:97:e3:a6: 99:93:86:e8:c4:f0:81:cc:65:3e:7c:c5:30:cc:52: 92:f3:c4:d4:20:6a:73:04:93:0c:1e:88:06:8d:49: 86:8d:1f:06:66:89:df:74:f3:fd:24:7f:20:86:bb: a9:1a:c3:dc:cf:4b:98:2f:f8:c5:96:28:a4:df:14: 7d:f6:ca:77:d4:63:8c:18:87:48:f2:60:7f:09:e8: 1e:09:51:59:ca:b9:52:da:e2:3a:5f:33:f4:33:e6: 51:e5:75:f1:26:f5:80:f7:9b:38:38:e3:7d:c5:4c: b9:f3:1a:31:39:e6:44:54:ba:8f:e9:f5:f9:87:b5: 7e:16:8c:a9:df:ba:fc:08:b3:c7:ec:09:b7:35:7a: c9:29:f6:63:0a:da:d6:ef:28:1f:66:0b:02:f8:bb: 0e:40:af:27:f8:e5:9a:86:8f:1c:20:8d:43:64:b7: a2:d3:cd:c6:19:2c:51:ca:3a:8a:fd:a7:e2:84:82: b0:89:e5:2d:44:2f:06:cc:9a:27:e9:5b:fa:05:fd: 14:fc:3e:05:dd:c1:da:6a:1e:46:31:96:19:8a:bc: a9:f4:c0:07:b1:10:30:d7:b6:e3:02:18:e4:d7:13: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AB:CF:79:0A:1F:C6:72:BE:99:08:48:36:71:77:9E:A0:74:0D:32 X509v3 Authority Key Identifier: keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ce:9c:da:d1:ec:ce:56:44:00:c6:68:ac:d5:97:24:eb:97: a9:ac:b4:2f:93:f2:fe:81:fa:2c:83:2d:ad:a2:52:b0:90:e8: 72:38:f1:91:c9:2d:9c:af:13:87:f7:06:bd:5c:39:35:07:b9: d6:81:25:41:20:60:ff:61:f2:ad:c2:c8:18:bb:87:a2:11:9b: 66:5d:b2:32:67:c6:5e:de:1b:d6:54:1f:25:7b:7e:1b:7a:d6: 0c:85:c3:b1:81:24:18:c1:f2:44:4c:2c:dc:3e:42:5a:7c:f6: 1f:94:3e:27:65:ce:91:97:4c:e5:06:e1:0c:df:78:28:1d:93: d6:cd:d2:d8:92:94:2c:d5:a6:5b:dd:5d:7c:58:b6:88:13:bc: a7:2a:5e:fe:8e:58:ff:99:4b:54:50:8d:c9:a9:cb:31:c2:b3: 29:9a:2e:b5:b3:aa:d1:cb:b2:3d:64:50:62:46:5f:1f:f8:31: 0d:f9:26:01:d4:c4:90:cb:eb:f3:83:75:aa:53:84:28:a9:16: 77:77:7f:24:ef:73:97:e2:17:b0:82:ee:a3:48:1a:b6:86:bf: 52:78:bb:cc:f4:03:4d:5e:66:bb:9f:2a:f4:80:61:46:15:c1: 4e:0b:b4:71:a0:3b:00:56:84:c0:7c:89:24:04:43:4b:7f:7d: b8:83:0b:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4B/0EhebBurDXllI8srqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2M1MDFlMmZmM2IwYWI1MzRiNDg0YzNhOTI4ZDFmMDkz NWQxYjEwHhcNMjYwMTI2MDIwMDMxWhcNMjYwMTI3MDIwMDMxWjAzMTEwLwYDVQQD Eyg3NWFiY2Y3OTBhMWZjNjcyYmU5OTA4NDgzNjcxNzc5ZWEwNzQwZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwTegomp3BolbuHycqYKxe3EE2OT 2g7sVLKX46aZk4boxPCBzGU+fMUwzFKS88TUIGpzBJMMHogGjUmGjR8GZonfdPP9 JH8ghrupGsPcz0uYL/jFliik3xR99sp31GOMGIdI8mB/CegeCVFZyrlS2uI6XzP0 M+ZR5XXxJvWA95s4OON9xUy58xoxOeZEVLqP6fX5h7V+Foyp37r8CLPH7Am3NXrJ KfZjCtrW7ygfZgsC+LsOQK8n+OWaho8cII1DZLei083GGSxRyjqK/afihIKwieUt RC8GzJon6Vv6Bf0U/D4F3cHaah5GMZYZiryp9MAHsRAw17bjAhjk1xONOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWrz3kKH8ZyvpkISDZxd56gdA0yMB8GA1UdIwQY MBaAFDl8UB4v87CrU0tITDqSjR8JNdGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQt ZjdhZmNhNWNiMDM0LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQtZjdhZmNhNWNiMDM0 LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEM6c2tHs zlZEAMZorNWXJOuXqay0L5Py/oH6LIMtraJSsJDocjjxkcktnK8Th/cGvVw5NQe5 1oElQSBg/2HyrcLIGLuHohGbZl2yMmfGXt4b1lQfJXt+G3rWDIXDsYEkGMHyREws 3D5CWnz2H5Q+J2XOkZdM5QbhDN94KB2T1s3S2JKULNWmW91dfFi2iBO8pype/o5Y /5lLVFCNyanLMcKzKZoutbOq0cuyPWRQYkZfH/gxDfkmAdTEkMvr84N1qlOEKKkW d3d/JO9zl+IXsILuo0gatoa/Uni7zPQDTV5mu58q9IBhRhXBTgu0caA7AFaEwHyJ JARDS399uIML1A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:58 2026 by rpki-client