This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json) Hash identifier: d3Fu7MCqixNDPEUtZru0zO3t3JaFgOR/LIuDBWEqGtc= Subject key identifier: 1B:80:F6:1A:36:2C:C9:02:57:49:D8:54:F0:DB:01:72:E0:16:DA:32 Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Certificate serial: 019BFC1C499C89973E4287624C169F48CBAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft Manifest number: 078A Signing time: Mon 26 Jan 2026 21:01:10 +0000 Manifest this update: Mon 26 Jan 2026 21:01:10 +0000 Manifest next update: Tue 27 Jan 2026 21:01:10 +0000 Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=) 2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 2eKiTMiOD7Wk8KuBHcrWOVQ9fyQtKX6g3eQ7iiRxZ/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:49:9c:89:97:3e:42:87:62:4c:16:9f:48:cb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Validity Not Before: Jan 26 21:01:10 2026 GMT Not After : Jan 27 21:01:10 2026 GMT Subject: CN=1b80f61a362cc9025749d854f0db0172e016da32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c7:19:17:70:be:e9:37:57:13:41:fb:02:35: be:fa:dd:0d:86:ac:3f:f9:15:bc:d4:96:c3:b8:15: da:21:d0:90:c0:e4:7c:46:91:bc:d9:4c:98:7b:93: d5:11:81:3e:2f:56:1a:3b:e8:0d:56:f7:66:80:08: 9a:63:c1:69:3b:b5:be:ec:a1:43:e8:2e:9d:ff:eb: 62:70:a2:70:f4:4a:5d:34:eb:9a:84:d5:c0:65:53: a0:f0:22:15:cc:a9:8d:81:c8:f0:5a:26:80:da:b3: db:28:ea:38:52:42:c3:7f:cc:f4:bb:86:9f:d4:68: 1d:99:70:59:2d:ff:00:22:1a:5d:4e:1e:fd:9a:f1: d1:8a:af:a9:8e:5b:58:54:37:9f:4c:a3:75:87:7b: 5a:04:d4:24:b9:f8:96:bb:57:52:25:58:5e:44:10: 52:69:4a:0b:fa:b9:3b:2e:a7:2e:25:3d:27:ab:4a: 63:00:ee:69:ad:a8:7d:13:60:93:39:30:6f:dd:7c: 01:71:a0:66:68:0f:b5:fc:e7:f6:5b:08:ce:1d:d2: 40:f9:88:22:a7:47:b0:07:a1:5f:62:5c:f9:a8:18: 13:2b:69:a8:f4:34:30:cf:ed:68:0b:23:d6:7c:f2: 11:3d:a6:90:fb:fc:6c:f3:6c:21:0a:db:54:00:ea: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:80:F6:1A:36:2C:C9:02:57:49:D8:54:F0:DB:01:72:E0:16:DA:32 X509v3 Authority Key Identifier: keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:77:6e:cf:b3:df:99:03:8d:6d:9d:14:e8:e5:ad:86:84:9b: db:20:20:c7:48:c6:f1:b7:7b:50:a6:c0:bd:35:b3:05:f6:61: 9c:12:d8:ec:57:71:19:6c:01:d0:b0:87:73:2d:5c:15:44:47: d4:6e:b3:53:3a:cd:cd:f9:21:77:19:4d:70:b7:f8:73:d9:7a: 70:50:54:f0:ec:fe:a5:78:84:58:1f:b8:d8:c6:dd:5b:2a:a6: 4f:17:79:ca:40:a2:81:8a:3d:ff:24:5f:49:bf:bc:5f:3d:10: f2:75:bf:16:4c:29:c9:1a:10:0a:89:03:ac:0c:03:37:a4:9c: b1:4d:00:40:65:bc:2c:36:5b:62:a4:e1:fe:af:2d:53:61:97: e1:a1:6b:0e:7e:e1:68:16:84:8e:e7:e2:f7:b4:1e:e1:79:81: 03:5a:ac:50:df:a9:71:5d:53:9e:04:a9:18:cb:0c:5e:28:ce: d3:d1:63:aa:ca:de:47:76:9d:36:52:1c:03:0c:78:e1:fd:e4: b2:63:af:c6:e6:6d:ed:5f:ad:12:96:b8:b7:78:f2:1e:23:04: 41:5e:d2:5f:2a:c6:90:f2:15:94:c2:13:4e:14:6a:bb:05:56: e4:37:d8:44:16:b6:f4:a6:73:ac:05:2c:17:08:c2:fd:3c:c6: fc:f4:e6:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HEmciZc+QodiTBafSMuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3 NDkxOWUwHhcNMjYwMTI2MjEwMTEwWhcNMjYwMTI3MjEwMTEwWjAzMTEwLwYDVQQD EygxYjgwZjYxYTM2MmNjOTAyNTc0OWQ4NTRmMGRiMDE3MmUwMTZkYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ccZF3C+6TdXE0H7AjW++t0Nhqw/ +RW81JbDuBXaIdCQwOR8RpG82UyYe5PVEYE+L1YaO+gNVvdmgAiaY8FpO7W+7KFD 6C6d/+ticKJw9EpdNOuahNXAZVOg8CIVzKmNgcjwWiaA2rPbKOo4UkLDf8z0u4af 1GgdmXBZLf8AIhpdTh79mvHRiq+pjltYVDefTKN1h3taBNQkufiWu1dSJVheRBBS aUoL+rk7LqcuJT0nq0pjAO5prah9E2CTOTBv3XwBcaBmaA+1/Of2WwjOHdJA+Ygi p0ewB6FfYlz5qBgTK2mo9DQwz+1oCyPWfPIRPaaQ+/xs82whCttUAOpKHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuA9ho2LMkCV0nYVPDbAXLgFtoyMB8GA1UdIwQY MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXduz7Pf mQONbZ0U6OWthoSb2yAgx0jG8bd7UKbAvTWzBfZhnBLY7FdxGWwB0LCHcy1cFURH 1G6zUzrNzfkhdxlNcLf4c9l6cFBU8Oz+pXiEWB+42MbdWyqmTxd5ykCigYo9/yRf Sb+8Xz0Q8nW/FkwpyRoQCokDrAwDN6ScsU0AQGW8LDZbYqTh/q8tU2GX4aFrDn7h aBaEjufi97Qe4XmBA1qsUN+pcV1TngSpGMsMXijO09FjqsreR3adNlIcAwx44f3k smOvxuZt7V+tEpa4t3jyHiMEQV7SXyrGkPIVlMITThRquwVW5DfYRBa29KZzrAUs FwjC/TzG/PTmiQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:35 2026 by rpki-client