This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json) Hash identifier: kaW+R3QHRPYCp5BQCtkcSs/6e9F4Xp86Aq9TflxaKt4= Subject key identifier: D2:E9:7D:7B:7E:DE:E1:1F:FB:6A:D6:75:28:C5:B7:F9:EA:F3:C4:51 Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Certificate serial: 019BF3BDA10F98E30899C40C29EE2B07075F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 06:00:49 +0000 Manifest this update: Sun 25 Jan 2026 06:00:49 +0000 Manifest next update: Mon 26 Jan 2026 06:00:49 +0000 Files and hashes: 1: 1qCi6Sq-_dCneR6GoHYrYL634Nc.roa (hash: si5wfQgczxPexpvI3zOZcdBSWeRL01fGRYVbjNQoh5k=) 2: Ey6_U3MNqlk5sSbuI2Okie2De-M.roa (hash: EHs4rxI+XpWq2Dq6A1mosS3qkiasZu2Py2spZNfHGZc=) 3: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (hash: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y=) 4: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: 2/WzHOCtSt1bqIdVqhjiPDuMJjuKmIjxsW829G42m/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:a1:0f:98:e3:08:99:c4:0c:29:ee:2b:07:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Validity Not Before: Jan 25 06:00:49 2026 GMT Not After : Jan 26 06:00:49 2026 GMT Subject: CN=d2e97d7b7edee11ffb6ad67528c5b7f9eaf3c451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:c0:09:0f:ce:a4:a4:c1:1d:b4:4f:b8:9f: f0:89:51:da:49:78:4a:34:fa:6c:87:2c:cc:0e:55: e9:a4:3e:ed:43:5e:30:a1:51:27:74:9c:71:0e:69: 11:a9:d6:66:77:e6:ca:48:9e:30:0a:dc:7b:ac:ef: 35:a4:f9:b2:68:72:f6:90:91:ac:b2:2c:d9:db:04: ad:d0:18:35:3d:40:f8:2d:ed:e0:6e:ec:d5:87:11: d8:49:cf:95:8d:e8:49:ce:88:00:95:fe:17:b7:10: c0:54:45:f2:c2:db:cc:45:c0:90:a0:92:e8:b3:73: b8:70:75:e3:d3:b0:71:85:6c:18:31:be:bb:74:c7: 28:19:22:ad:7b:72:d1:5a:07:ea:d3:d2:b9:52:37: e9:4e:e8:55:b1:df:9a:20:a7:89:a3:4f:e0:e5:93: 04:d1:b8:6d:68:ba:56:19:11:2b:59:67:3e:59:dc: 31:fb:c4:75:26:10:9a:f8:8e:d3:9b:ab:07:4b:c8: df:a3:6e:d9:97:66:91:75:da:bd:3d:ab:33:3a:a0: 91:5e:1c:5d:a8:58:a7:63:dd:f3:c5:b5:57:81:3c: a7:99:d4:fa:e4:9e:e4:18:2c:cb:f7:0f:ca:95:c3: d5:81:bb:94:36:b9:7d:a6:b0:08:17:87:60:1e:c3: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E9:7D:7B:7E:DE:E1:1F:FB:6A:D6:75:28:C5:B7:F9:EA:F3:C4:51 X509v3 Authority Key Identifier: keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7a:15:b2:6e:90:a4:03:66:ae:93:4d:55:5c:c2:c8:3c:11: fc:b7:e7:cc:00:ca:bb:7c:68:30:de:8c:79:9a:4d:b5:8e:36: ac:d7:48:19:7b:28:17:27:36:65:fe:32:bd:4f:d8:34:2a:e6: d7:20:b0:d7:1b:a7:2e:c5:ac:88:69:9b:75:94:fb:92:e9:71: c7:6c:2e:64:12:ba:7c:2f:a4:28:3f:2f:61:25:7b:7a:1f:46: 0e:e0:61:62:0a:1f:11:a3:30:f5:9c:cc:e6:75:41:d0:55:56: 9c:13:cc:7c:a0:a5:9d:02:80:3f:9a:4d:52:77:0a:56:86:a0: 98:10:14:93:31:14:a5:81:cb:08:85:07:b8:2a:da:56:8c:6a: c7:9f:66:88:31:da:90:f3:00:e2:77:4a:44:28:a3:7d:84:c8: 15:84:a7:62:24:c6:39:8e:39:fc:a2:bb:9e:ad:7c:b4:96:06: 92:20:ac:68:c3:4c:66:5b:5b:36:04:1a:5e:27:1d:48:81:9a: 82:41:49:68:26:e0:50:df:ca:22:2f:64:ec:be:0c:12:c2:85: 57:3d:b9:30:e0:7b:e2:29:ff:8e:62:87:13:6f:df:b4:cf:ab: 77:fc:e0:8c:d2:70:38:a5:69:b4:d2:bb:d7:3e:35:56:ab:64: 61:ed:a1:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvaEPmOMImcQMKe4rBwdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk ZGQyNmEwHhcNMjYwMTI1MDYwMDQ5WhcNMjYwMTI2MDYwMDQ5WjAzMTEwLwYDVQQD EyhkMmU5N2Q3YjdlZGVlMTFmZmI2YWQ2NzUyOGM1YjdmOWVhZjNjNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/XACQ/OpKTBHbRPuJ/wiVHaSXhK NPpshyzMDlXppD7tQ14woVEndJxxDmkRqdZmd+bKSJ4wCtx7rO81pPmyaHL2kJGs sizZ2wSt0Bg1PUD4Le3gbuzVhxHYSc+VjehJzogAlf4XtxDAVEXywtvMRcCQoJLo s3O4cHXj07BxhWwYMb67dMcoGSKte3LRWgfq09K5UjfpTuhVsd+aIKeJo0/g5ZME 0bhtaLpWGRErWWc+Wdwx+8R1JhCa+I7Tm6sHS8jfo27Zl2aRddq9PaszOqCRXhxd qFinY93zxbVXgTynmdT65J7kGCzL9w/KlcPVgbuUNrl9prAIF4dgHsP2RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLpfXt+3uEf+2rWdSjFt/nq88RRMB8GA1UdIwQY MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt ZTIxOTc0YTI5NGJhLzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnoVsm6Q pANmrpNNVVzCyDwR/LfnzADKu3xoMN6MeZpNtY42rNdIGXsoFyc2Zf4yvU/YNCrm 1yCw1xunLsWsiGmbdZT7kulxx2wuZBK6fC+kKD8vYSV7eh9GDuBhYgofEaMw9ZzM 5nVB0FVWnBPMfKClnQKAP5pNUncKVoagmBAUkzEUpYHLCIUHuCraVoxqx59miDHa kPMA4ndKRCijfYTIFYSnYiTGOY45/KK7nq18tJYGkiCsaMNMZltbNgQaXicdSIGa gkFJaCbgUN/KIi9k7L4MEsKFVz25MOB74in/jmKHE2/ftM+rd/zgjNJwOKVptNK7 1z41VqtkYe2hAw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:14 2026 by rpki-client