This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json) Hash identifier: ShKtb/T5OO676w2JnXaA+AMXTxg/NDlnlEMLwyXuNLY= Subject key identifier: F5:5E:34:49:8C:1A:21:3E:5C:24:1D:1A:E4:6C:47:15:15:E2:3E:04 Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c Certificate serial: 019BF9C0325CA60E0E692F655981F5C2B7EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft Manifest number: 0B45 Signing time: Mon 26 Jan 2026 10:01:21 +0000 Manifest this update: Mon 26 Jan 2026 10:01:21 +0000 Manifest next update: Tue 27 Jan 2026 10:01:21 +0000 Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=) 2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: A7WR3nESv0sRMzZpA01n6ZYTi0CQH5GDXRTwZTNpojg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:32:5c:a6:0e:0e:69:2f:65:59:81:f5:c2:b7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c Validity Not Before: Jan 26 10:01:21 2026 GMT Not After : Jan 27 10:01:21 2026 GMT Subject: CN=f55e34498c1a213e5c241d1ae46c471515e23e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:a2:b7:56:0c:27:d6:d0:ea:56:dd:51:62: 4f:ed:d7:b6:e4:3d:0a:d3:35:68:e2:df:49:3d:b3: 86:97:c3:15:b6:da:9f:9b:d3:7a:6f:14:a5:b1:92: 6e:20:f4:59:b7:f0:e1:cd:a4:36:82:56:91:c6:fa: 1e:ea:26:ef:22:a0:be:fa:b5:f3:71:d2:05:11:94: f7:c3:91:45:80:4f:7a:18:bd:47:9f:3f:77:f9:14: 7e:04:ec:f8:13:c2:db:ec:9b:36:b3:73:02:5b:7a: 8f:98:fd:3d:ba:0c:1e:88:9f:5a:bf:6e:17:4d:1f: 73:a7:df:2f:05:7c:18:dc:be:a1:e7:e4:7d:7b:7e: 39:60:ba:1f:1c:59:26:38:e8:32:bf:b9:85:09:9d: 64:78:53:84:bc:c2:8c:95:03:1c:20:cc:a5:f2:c4: 7e:5e:9a:da:84:a1:77:aa:92:33:89:e3:10:68:ee: c9:f9:3b:0e:61:89:bc:d9:1b:16:19:22:30:8b:61: 69:e9:96:e8:bd:0e:a3:50:f6:ed:72:18:4a:cc:c9: 53:46:fb:0d:75:5b:e9:83:50:c0:94:f4:a4:d3:24: ab:9d:ab:88:ff:c1:d1:8e:64:8a:d9:e4:20:22:f1: ee:02:6b:15:cf:31:39:80:3c:20:6a:f2:31:48:ba: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5E:34:49:8C:1A:21:3E:5C:24:1D:1A:E4:6C:47:15:15:E2:3E:04 X509v3 Authority Key Identifier: keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c4:a5:eb:d6:e3:ff:3a:56:20:10:cc:67:d6:40:9c:9d:a8: 00:08:4b:e5:c4:05:ec:57:ef:51:16:73:9b:e4:4d:3e:a7:c6: 0f:94:85:d7:03:4f:84:2d:4a:f1:85:f0:b6:d6:ea:9b:54:7f: ee:20:41:97:bd:ca:a9:d4:1d:a0:04:dd:90:78:12:45:ce:e8: 86:7b:d8:6d:d3:f5:84:2a:1a:1d:c2:cc:25:a9:4b:77:ed:64: 88:16:12:28:14:29:71:a0:1b:44:1f:81:df:eb:bb:eb:83:06: 40:db:b4:c7:6d:85:d3:f0:54:fe:b6:c6:1e:fa:bb:d3:e3:0c: ec:bd:9e:fb:4f:4d:15:3c:05:4e:58:eb:09:04:4f:46:24:cd: 43:20:e8:4d:5a:89:0b:ae:fd:70:1b:6a:c7:c2:b3:19:ab:a7: a1:25:99:82:98:c2:87:b0:e8:cf:31:55:eb:5a:ff:4d:2e:3b: 54:e1:a4:d5:ff:4b:5b:6f:b5:22:f7:67:78:e7:15:76:ac:9d: 7c:03:39:65:53:07:31:11:84:8c:24:5c:40:dc:5e:31:d2:03: 43:3c:a6:b5:11:b1:10:0e:5e:df:05:19:f5:0f:df:87:6e:28: aa:44:c3:7b:12:0c:0f:53:3d:85:be:c0:56:22:db:6e:35:76: 9e:c5:a8:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wDJcpg4OaS9lWYH1wrfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZWM3MWRjM2Q2OGNkZThmOTA3N2QzYWY2Njc1MWMyOWZj ZWVhNGMwHhcNMjYwMTI2MTAwMTIxWhcNMjYwMTI3MTAwMTIxWjAzMTEwLwYDVQQD EyhmNTVlMzQ0OThjMWEyMTNlNWMyNDFkMWFlNDZjNDcxNTE1ZTIzZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Cit1YMJ9bQ6lbdUWJP7de25D0K 0zVo4t9JPbOGl8MVttqfm9N6bxSlsZJuIPRZt/DhzaQ2glaRxvoe6ibvIqC++rXz cdIFEZT3w5FFgE96GL1Hnz93+RR+BOz4E8Lb7Js2s3MCW3qPmP09ugweiJ9av24X TR9zp98vBXwY3L6h5+R9e345YLofHFkmOOgyv7mFCZ1keFOEvMKMlQMcIMyl8sR+ XprahKF3qpIzieMQaO7J+TsOYYm82RsWGSIwi2Fp6ZbovQ6jUPbtchhKzMlTRvsN dVvpg1DAlPSk0ySrnauI/8HRjmSK2eQgIvHuAmsVzzE5gDwgavIxSLpkwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVeNEmMGiE+XCQdGuRsRxUV4j4EMB8GA1UdIwQY MBaAFDnscdw9aM3o+Qd9OvZnUcKfzupMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xYmZkZjctYTE5Zi00MThlLTg5Yzct ZGIzZjIyNzA1ZGQ2LzEvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xYmZkZjctYTE5Zi00MThlLTg5YzctZGIzZjIyNzA1ZGQ2 LzEvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8Sl69bj /zpWIBDMZ9ZAnJ2oAAhL5cQF7FfvURZzm+RNPqfGD5SF1wNPhC1K8YXwttbqm1R/ 7iBBl73KqdQdoATdkHgSRc7ohnvYbdP1hCoaHcLMJalLd+1kiBYSKBQpcaAbRB+B 3+u764MGQNu0x22F0/BU/rbGHvq70+MM7L2e+09NFTwFTljrCQRPRiTNQyDoTVqJ C679cBtqx8KzGaunoSWZgpjCh7DozzFV61r/TS47VOGk1f9LW2+1IvdneOcVdqyd fAM5ZVMHMRGEjCRcQNxeMdIDQzymtRGxEA5e3wUZ9Q/fh24oqkTDexIMD1M9hb7A ViLbbjV2nsWohQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:06 2026 by rpki-client