This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json) Hash identifier: uQFI9s/Y7yBsWz7XG895pjHe53egVwpTjVmufhMyVFI= Subject key identifier: 4A:48:65:A8:30:DC:6B:AA:16:F3:E5:7F:3E:E5:C7:68:6F:54:2F:4E Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Certificate serial: 019BF9F6F50EA529D3CB1F1045DE2CDE430D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft Manifest number: 0821 Signing time: Mon 26 Jan 2026 11:01:09 +0000 Manifest this update: Mon 26 Jan 2026 11:01:09 +0000 Manifest next update: Tue 27 Jan 2026 11:01:09 +0000 Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=) 2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: seZQ1a4mX6qWj0ZPaWYY2qUvJ3UOmts2VX//iY3bxso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:f5:0e:a5:29:d3:cb:1f:10:45:de:2c:de:43:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Validity Not Before: Jan 26 11:01:09 2026 GMT Not After : Jan 27 11:01:09 2026 GMT Subject: CN=4a4865a830dc6baa16f3e57f3ee5c7686f542f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:f0:6b:65:67:c0:64:1e:26:c0:1e:ac:52: fc:ef:7d:5b:56:54:24:4e:10:77:38:a4:c0:38:d5: f3:10:29:91:f7:a5:5c:0e:58:ef:e6:58:60:40:a0: 4c:56:b9:98:b9:89:94:2e:c9:61:67:2d:5f:0c:4f: f8:fe:ee:56:8d:15:77:ff:a8:99:3f:2c:bc:bb:f1: b5:66:79:29:f5:fd:bf:07:8d:4e:bf:c7:75:02:fb: b8:5f:f7:ba:0c:6b:c3:88:3b:28:cb:b6:f2:07:02: 4e:8f:5a:d3:d8:0a:00:a0:dc:ba:3d:05:34:2c:1f: bb:7e:77:61:67:44:ff:54:a2:e2:98:43:37:66:37: cd:6d:93:4d:0e:26:38:a9:db:a0:88:87:b3:72:7a: 2e:d6:45:6f:f2:dd:12:5c:78:a6:70:90:63:d6:18: 85:6c:00:db:a7:2b:45:d9:9c:6a:bd:7f:42:33:1d: 8c:1a:d1:79:b8:ca:41:8a:ce:fc:e9:92:de:f9:59: 73:20:7b:c0:99:51:e3:06:93:f6:59:3c:ea:47:6f: f8:72:94:a6:e3:52:0c:07:dc:88:eb:67:50:22:ad: f6:8b:91:43:cc:80:1d:09:c8:de:19:26:dd:a9:30: 44:63:b4:ed:21:e7:90:0c:c0:bf:b5:e2:70:60:c7: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:48:65:A8:30:DC:6B:AA:16:F3:E5:7F:3E:E5:C7:68:6F:54:2F:4E X509v3 Authority Key Identifier: keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:90:fb:cc:5c:54:2a:7e:27:4e:3a:35:f7:69:28:9b:3d:95: 4f:e2:7c:a7:f7:ff:63:3b:05:71:15:d6:3f:82:6f:04:be:65: c3:40:b6:4d:d2:8d:fc:16:bb:95:f4:b2:32:60:ac:b3:c0:c2: 1c:d0:a3:01:c8:d9:11:fb:da:3d:ea:78:64:79:0b:2e:d6:42: 95:a0:5d:f9:fa:36:5f:f7:39:02:02:a1:8b:f6:49:ee:6b:89: 5b:bf:fd:7c:2d:58:e1:9a:cc:f3:15:00:92:85:6a:ea:c3:a1: dd:cf:ec:a6:77:ae:b0:1e:0d:41:e6:d4:13:12:49:b7:f2:1e: 6f:30:e6:44:03:e0:05:16:6a:bf:07:96:11:39:40:71:e3:15: a2:c0:67:79:1d:e7:18:2c:0d:aa:f0:10:30:b6:44:8d:de:6f: 3a:6d:c4:67:9c:f2:a4:80:78:40:06:a1:f0:39:a9:1b:03:d8: 9a:4c:ba:6f:dd:8f:b4:89:c9:f1:82:7f:a6:2d:91:63:a9:2d: ab:9d:5d:47:ca:b7:f2:2d:94:10:ca:ed:46:15:2f:ac:03:0c: 7a:f8:a3:1d:92:39:63:28:ef:ab:53:1a:71:1a:0d:19:84:86: 8c:9e:0c:20:8e:fe:a8:3a:fe:51:24:8c:f6:4d:62:d5:a9:a1: 6a:97:1d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59vUOpSnTyx8QRd4s3kMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl OGMyZDMwHhcNMjYwMTI2MTEwMTA5WhcNMjYwMTI3MTEwMTA5WjAzMTEwLwYDVQQD Eyg0YTQ4NjVhODMwZGM2YmFhMTZmM2U1N2YzZWU1Yzc2ODZmNTQyZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHbwa2VnwGQeJsAerFL8731bVlQk ThB3OKTAONXzECmR96VcDljv5lhgQKBMVrmYuYmULslhZy1fDE/4/u5WjRV3/6iZ Pyy8u/G1Znkp9f2/B41Ov8d1Avu4X/e6DGvDiDsoy7byBwJOj1rT2AoAoNy6PQU0 LB+7fndhZ0T/VKLimEM3ZjfNbZNNDiY4qdugiIezcnou1kVv8t0SXHimcJBj1hiF bADbpytF2ZxqvX9CMx2MGtF5uMpBis786ZLe+VlzIHvAmVHjBpP2WTzqR2/4cpSm 41IMB9yI62dQIq32i5FDzIAdCcjeGSbdqTBEY7TtIeeQDMC/teJwYMde0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpIZagw3GuqFvPlfz7lx2hvVC9OMB8GA1UdIwQY MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5 LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZD7zFxU Kn4nTjo192komz2VT+J8p/f/YzsFcRXWP4JvBL5lw0C2TdKN/Ba7lfSyMmCss8DC HNCjAcjZEfvaPep4ZHkLLtZClaBd+fo2X/c5AgKhi/ZJ7muJW7/9fC1Y4ZrM8xUA koVq6sOh3c/spneusB4NQebUExJJt/IebzDmRAPgBRZqvweWETlAceMVosBneR3n GCwNqvAQMLZEjd5vOm3EZ5zypIB4QAah8DmpGwPYmky6b92PtInJ8YJ/pi2RY6kt q51dR8q38i2UEMrtRhUvrAMMevijHZI5Yyjvq1MacRoNGYSGjJ4MII7+qDr+USSM 9k1i1amhapcddQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:58 2026 by rpki-client