This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json) Hash identifier: 0tdimO4wMtlIypHyXxIExUbcMZ3dvFySx6MLYt8Q0wA= Subject key identifier: F2:10:E3:BF:0E:84:1D:4E:BA:CE:97:8C:36:0D:12:05:58:49:6E:36 Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814 Certificate serial: 019BFA64C8358714272401B9B319EE89D6B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft Manifest number: 095D Signing time: Mon 26 Jan 2026 13:01:07 +0000 Manifest this update: Mon 26 Jan 2026 13:01:07 +0000 Manifest next update: Tue 27 Jan 2026 13:01:07 +0000 Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=) 2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: 1P4XQ9GA55qE7wNtlO37miHOTBavWCRWwG5qa4E+FpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:c8:35:87:14:27:24:01:b9:b3:19:ee:89:d6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814 Validity Not Before: Jan 26 13:01:07 2026 GMT Not After : Jan 27 13:01:07 2026 GMT Subject: CN=f210e3bf0e841d4ebace978c360d120558496e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:c0:68:b3:ca:87:f7:be:e1:0b:c0:b3:13: 1d:f7:ba:d4:8e:b8:6a:b0:96:20:fa:f3:6c:57:62: dd:99:68:91:1a:41:7a:17:77:29:c9:03:7f:03:a0: b8:75:1f:5a:4a:38:20:2d:dd:27:ca:31:37:08:f3: 6f:42:f3:d4:c2:44:1b:13:48:27:9f:90:b7:2a:b2: be:3b:dc:f0:27:08:62:32:ab:5d:45:65:88:90:19: fb:c3:ca:cc:22:c3:a0:cd:0a:cc:dd:0c:c9:03:11: 03:5a:8f:d0:c4:5c:f7:df:ec:47:e6:0c:01:f4:41: 70:bd:11:b1:b5:09:28:5c:b3:8d:0c:33:65:f9:c3: 09:28:3d:73:d4:24:0f:a3:fa:1d:54:19:bf:2d:3d: f1:80:68:ab:91:a2:68:b7:2b:7d:ec:2c:f5:53:99: 54:8d:10:86:5d:02:f5:93:af:4f:1c:d3:b3:96:96: f9:03:00:58:97:60:ec:27:40:91:63:a7:8a:05:48: c4:d0:b9:17:f3:60:43:01:52:d0:dc:de:37:36:8c: dc:99:52:c9:f1:42:e7:c4:f8:ec:7a:27:d8:41:e2: c3:7c:ca:97:33:88:db:db:34:44:cb:0b:30:bc:70: 55:71:c4:02:86:89:fc:8a:92:87:46:fa:fc:ef:33: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:10:E3:BF:0E:84:1D:4E:BA:CE:97:8C:36:0D:12:05:58:49:6E:36 X509v3 Authority Key Identifier: keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:23:bc:e7:0d:82:53:96:b6:bb:86:d8:f9:7c:72:66:35:d4: fb:40:ea:3b:12:54:ac:80:df:5a:d4:34:a7:6b:64:0e:73:4e: fc:60:d1:51:d4:9f:13:96:ed:a9:2c:2f:a0:17:4c:90:5d:7e: 8d:2e:68:03:47:ff:18:19:4e:19:a8:69:73:13:b0:6e:61:cf: 81:f0:14:f6:f2:07:5e:cf:68:ab:25:67:22:f3:f7:82:ea:44: 1e:d8:73:54:ee:50:07:2e:aa:2b:ca:e1:e2:9b:5a:58:0d:1a: 55:cf:29:52:5e:ba:98:e1:6a:b1:17:59:c3:74:a6:84:fc:bd: 44:98:d4:a5:3d:89:a6:3e:8f:a5:69:4e:80:74:cc:4d:92:b8: 0c:94:59:0f:c0:d5:fe:30:83:01:7c:18:5c:7c:ed:b2:84:2e: 6a:52:80:49:f7:6b:ca:73:18:74:09:fe:61:fd:fe:35:9b:0f: 45:56:a0:f3:d9:1e:52:3c:47:c9:3e:af:b0:ef:e9:2e:71:c2: 78:79:a8:6a:dc:b2:c4:28:ad:72:09:36:c7:98:db:ed:b9:c4: 21:11:14:d1:3c:e7:05:46:54:e0:d9:57:0c:8b:f7:14:77:92: cb:6b:7f:4e:55:f4:c4:8d:f7:60:c0:4f:12:2c:bb:3f:b7:04: 2b:3f:22:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZMg1hxQnJAG5sxnuidawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTMxMjhmZDA5ZGMxOGU2NmVlNDIxMmE3ZTY0ZjNlNGU3 NGE4MTQwHhcNMjYwMTI2MTMwMTA3WhcNMjYwMTI3MTMwMTA3WjAzMTEwLwYDVQQD EyhmMjEwZTNiZjBlODQxZDRlYmFjZTk3OGMzNjBkMTIwNTU4NDk2ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4HAaLPKh/e+4QvAsxMd97rUjrhq sJYg+vNsV2LdmWiRGkF6F3cpyQN/A6C4dR9aSjggLd0nyjE3CPNvQvPUwkQbE0gn n5C3KrK+O9zwJwhiMqtdRWWIkBn7w8rMIsOgzQrM3QzJAxEDWo/QxFz33+xH5gwB 9EFwvRGxtQkoXLONDDNl+cMJKD1z1CQPo/odVBm/LT3xgGirkaJotyt97Cz1U5lU jRCGXQL1k69PHNOzlpb5AwBYl2DsJ0CRY6eKBUjE0LkX82BDAVLQ3N43NozcmVLJ 8ULnxPjseifYQeLDfMqXM4jb2zREywswvHBVccQChon8ipKHRvr87zOiXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIQ478OhB1Ous6XjDYNEgVYSW42MB8GA1UdIwQY MBaAFKDjEo/QncGOZu5CEqfmTz5OdKgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjIt OGZkNWNhYmE1NGU5LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjItOGZkNWNhYmE1NGU5 LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayO85w2C U5a2u4bY+XxyZjXU+0DqOxJUrIDfWtQ0p2tkDnNO/GDRUdSfE5btqSwvoBdMkF1+ jS5oA0f/GBlOGahpcxOwbmHPgfAU9vIHXs9oqyVnIvP3gupEHthzVO5QBy6qK8rh 4ptaWA0aVc8pUl66mOFqsRdZw3SmhPy9RJjUpT2Jpj6PpWlOgHTMTZK4DJRZD8DV /jCDAXwYXHztsoQualKASfdrynMYdAn+Yf3+NZsPRVag89keUjxHyT6vsO/pLnHC eHmoatyyxCitcgk2x5jb7bnEIREU0TznBUZU4NlXDIv3FHeSy2t/TlX0xI33YMBP Eiy7P7cEKz8iCw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:28 2026 by rpki-client