This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json) Hash identifier: NFE5hrlk4BYO5N0niUHfBEWqoq+IRklBKc59apWf2Hw= Subject key identifier: DC:8C:4F:DB:E9:4D:A2:B6:75:D0:85:28:F3:75:81:46:02:CD:DE:2C Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Certificate serial: 019B7EA82CB82FC35DC26C94D69D3FECAF16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft Manifest number: 09CC Signing time: Fri 02 Jan 2026 12:21:49 +0000 Manifest this update: Fri 02 Jan 2026 12:21:49 +0000 Manifest next update: Sat 03 Jan 2026 12:21:49 +0000 Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: 69ft8604/8Tw1eT3o0embTwinJMXe/1rqyq96Bif1rk=) 2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a8:2c:b8:2f:c3:5d:c2:6c:94:d6:9d:3f:ec:af:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Validity Not Before: Jan 2 12:21:49 2026 GMT Not After : Jan 3 12:21:49 2026 GMT Subject: CN=dc8c4fdbe94da2b675d08528f375814602cdde2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:5a:2e:39:70:83:dd:59:74:14:e4:e9:12: cf:12:64:53:87:cc:14:c2:c0:a8:9d:d2:b8:c0:16: c9:10:38:df:9c:fb:26:a0:d0:ec:5e:95:8f:2b:f8: 6c:08:a8:0d:7c:9d:92:12:34:62:41:4d:45:f3:74: b7:63:a6:67:aa:a3:2e:d9:38:3b:91:fa:3d:54:9e: c1:87:29:88:bc:ff:68:4a:8c:ac:45:8f:95:24:63: 08:7b:00:e1:fd:cc:20:de:3f:83:25:95:04:f4:3f: 40:b0:00:87:59:09:db:43:e1:d8:7a:27:9a:53:9a: 98:a4:bc:66:05:36:a6:5a:33:13:90:ce:e9:28:e9: 92:e2:c3:ca:c1:63:45:8b:92:05:80:1f:38:7a:2c: 8e:a9:31:46:fa:9c:aa:58:f5:d1:6c:90:92:8e:e3: 21:4e:95:1c:7a:94:31:64:8b:f1:ac:0e:68:f9:bc: 07:09:5f:35:b9:04:1d:c9:c7:97:06:dd:1e:c6:d3: aa:45:42:ee:58:4f:bb:e9:e6:7b:b6:48:39:6e:07: 56:86:70:5a:e0:ff:17:50:ab:a1:9a:c3:d4:8b:1c: 53:0a:52:69:a9:10:75:42:c1:83:a7:d1:e7:ea:a0: b7:04:1d:66:b5:f4:a8:94:79:c5:00:bf:0f:cb:19: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8C:4F:DB:E9:4D:A2:B6:75:D0:85:28:F3:75:81:46:02:CD:DE:2C X509v3 Authority Key Identifier: keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9d:7b:03:fe:2b:03:99:a6:84:7e:52:0f:2f:5d:9f:cf:32: e8:23:22:44:78:0d:d0:6c:f0:8d:4e:d7:2e:dc:7d:4f:7d:cd: c0:fb:05:db:9c:75:a5:ad:d5:b8:f4:45:fa:e3:2b:29:80:e5: 46:d5:15:5f:60:eb:6d:6a:27:07:8d:b6:ce:f8:48:46:a4:be: 60:ab:c6:c9:55:5a:4e:1d:6a:66:a2:c0:ad:48:d7:6c:e4:61: 16:19:91:5b:a2:3e:56:3d:42:fc:af:5d:f1:d9:14:90:ea:d7: ac:e9:41:3b:4f:81:83:2f:fc:c1:83:7f:22:cf:f0:56:ef:e2: 68:cf:07:af:5f:c1:16:7d:5f:3f:8f:f1:6a:68:99:d3:20:4b: 96:6d:e8:c4:d4:f4:73:33:b4:06:b6:1c:23:cc:57:d2:50:35: 94:c0:6d:70:b1:fd:e9:d8:2a:eb:fd:90:d1:5d:7c:63:ad:44: ba:3d:3c:71:6c:9a:ce:5b:9a:dc:b8:6a:80:66:5c:84:24:d2: 5c:a8:78:b3:ad:82:fd:00:80:b5:57:4a:6c:0d:21:0c:e4:b5: 89:6e:0d:41:19:ce:29:ae:db:b6:a9:e7:6a:76:71:48:ee:b3: 89:48:74:eb:53:25:f2:51:6c:18:9f:2a:b0:f8:97:c0:74:4d: 04:f7:63:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+qCy4L8NdwmyU1p0/7K8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2 NWIyODMwHhcNMjYwMTAyMTIyMTQ5WhcNMjYwMTAzMTIyMTQ5WjAzMTEwLwYDVQQD EyhkYzhjNGZkYmU5NGRhMmI2NzVkMDg1MjhmMzc1ODE0NjAyY2RkZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRNaLjlwg91ZdBTk6RLPEmRTh8wU wsCondK4wBbJEDjfnPsmoNDsXpWPK/hsCKgNfJ2SEjRiQU1F83S3Y6ZnqqMu2Tg7 kfo9VJ7BhymIvP9oSoysRY+VJGMIewDh/cwg3j+DJZUE9D9AsACHWQnbQ+HYeiea U5qYpLxmBTamWjMTkM7pKOmS4sPKwWNFi5IFgB84eiyOqTFG+pyqWPXRbJCSjuMh TpUcepQxZIvxrA5o+bwHCV81uQQdyceXBt0extOqRULuWE+76eZ7tkg5bgdWhnBa 4P8XUKuhmsPUixxTClJpqRB1QsGDp9Hn6qC3BB1mtfSolHnFAL8PyxmJuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyMT9vpTaK2ddCFKPN1gUYCzd4sMB8GA1UdIwQY MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt ZTgwYTA1ZTM5ZjRiLzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp17A/4r A5mmhH5SDy9dn88y6CMiRHgN0GzwjU7XLtx9T33NwPsF25x1pa3VuPRF+uMrKYDl RtUVX2DrbWonB422zvhIRqS+YKvGyVVaTh1qZqLArUjXbORhFhmRW6I+Vj1C/K9d 8dkUkOrXrOlBO0+Bgy/8wYN/Is/wVu/iaM8Hr1/BFn1fP4/xamiZ0yBLlm3oxNT0 czO0BrYcI8xX0lA1lMBtcLH96dgq6/2Q0V18Y61Euj08cWyazlua3LhqgGZchCTS XKh4s62C/QCAtVdKbA0hDOS1iW4NQRnOKa7btqnnanZxSO6ziUh061Ml8lFsGJ8q sPiXwHRNBPdjIw== -----END CERTIFICATE-----Generated at Fri Jan 2 18:09:04 2026 by rpki-client