This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json) Hash identifier: +moUQUw77DGMwLcu35q4gnQcKZxswCSRCv3rl6/XC74= Subject key identifier: 11:0F:99:AF:12:D4:10:46:75:6F:0C:DB:E2:2A:DA:1E:44:BB:8C:A8 Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Certificate serial: 019BFC1C92CCE2ECA7E7E04CDD2204D07156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft Manifest number: 037A Signing time: Mon 26 Jan 2026 21:01:29 +0000 Manifest this update: Mon 26 Jan 2026 21:01:29 +0000 Manifest next update: Tue 27 Jan 2026 21:01:29 +0000 Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=) 2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: JYdxH3c/TQ+X2DeqKneky98VB78UJhsmZvu+NFU/7cM=) 3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:92:cc:e2:ec:a7:e7:e0:4c:dd:22:04:d0:71:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Validity Not Before: Jan 26 21:01:29 2026 GMT Not After : Jan 27 21:01:29 2026 GMT Subject: CN=110f99af12d41046756f0cdbe22ada1e44bb8ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:53:5b:f9:6d:aa:b4:b6:ed:bc:13:27:0e: fa:1b:f1:92:64:2e:a3:9b:81:c9:10:15:0c:fa:9e: e7:0b:9e:71:55:21:7f:2c:37:a9:7b:05:bc:67:62: 7b:f6:47:34:98:b0:93:7c:d0:0d:c0:ea:c1:33:73: 85:c7:1c:1f:ef:c1:a7:aa:92:72:ed:1d:39:4f:86: 95:e2:67:99:89:92:18:ac:56:c6:ee:53:1a:d0:54: ee:84:ab:ae:07:50:ad:90:1c:08:7f:9b:46:50:15: ee:1e:95:50:91:8d:0d:a9:26:c7:98:a9:a3:f1:d1: 19:f7:7f:1e:52:3c:37:01:72:42:4c:0e:ef:9c:d8: b4:b8:c4:4f:f2:3c:d3:b2:bc:21:0c:c2:b7:7d:a8: d0:31:49:82:fa:f3:04:de:cd:df:dc:bb:3e:84:1b: be:0f:d7:27:a3:05:08:ed:73:b4:5e:be:cc:64:25: 1f:d1:c6:c6:d3:01:1e:da:05:e3:1a:b6:dc:74:68: b9:37:5f:65:64:60:f5:26:a3:d1:54:b6:99:a7:e1: f9:27:f7:c7:20:9d:6a:16:ae:a5:76:c1:ea:c8:d2: 93:15:58:a7:4a:c6:5c:3a:4a:b8:27:ee:0d:cb:1c: de:65:6d:80:97:41:2c:3f:94:17:c9:83:14:f1:48: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0F:99:AF:12:D4:10:46:75:6F:0C:DB:E2:2A:DA:1E:44:BB:8C:A8 X509v3 Authority Key Identifier: keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3d:d3:5a:1d:cc:0b:43:32:99:8e:7a:b6:da:1b:df:7d:16: e2:05:67:75:ca:9f:16:95:8f:c6:b2:1a:7c:d4:c5:a5:15:ff: 95:ef:e5:ff:07:78:42:97:48:f1:29:ba:dd:09:b3:4d:3a:85: ca:1c:7f:9d:e1:b3:78:ff:b4:49:c2:5f:8b:c4:e6:16:b8:58: 99:83:b5:9a:1a:95:68:a7:46:50:21:c3:cc:58:5b:6c:51:73: 01:fc:f5:fa:36:c2:10:05:25:49:56:ff:71:f8:1c:58:33:59: ed:2b:89:0d:93:d5:8b:88:d6:b2:74:21:5c:50:42:1f:5e:97: 78:f8:a9:20:94:bc:d5:57:5f:2a:34:06:67:b9:d4:fa:40:2a: 68:82:63:43:66:86:c5:ed:46:d6:41:09:0f:12:9b:31:45:3a: cb:5f:a9:45:e2:8a:12:79:86:38:f2:4a:7d:5a:ef:32:e1:80: 67:4d:f7:55:1b:5e:a1:95:69:17:95:e7:5f:52:6a:02:1e:02: 4c:08:3c:86:d2:16:7b:a3:2a:be:cb:c0:b3:ae:46:74:05:e1: 08:a4:09:83:9b:a4:85:44:9d:e4:e8:9a:01:17:01:97:bc:cc: 5f:bc:65:19:14:cb:61:bf:a1:9d:4d:67:74:3a:41:81:5f:c8: 5a:4a:08:34 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv8HJLM4uyn5+BM3SIE0HFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw NDRmNTcwHhcNMjYwMTI2MjEwMTI5WhcNMjYwMTI3MjEwMTI5WjAzMTEwLwYDVQQD EygxMTBmOTlhZjEyZDQxMDQ2NzU2ZjBjZGJlMjJhZGExZTQ0YmI4Y2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7NTW/ltqrS27bwTJw76G/GSZC6j m4HJEBUM+p7nC55xVSF/LDepewW8Z2J79kc0mLCTfNANwOrBM3OFxxwf78GnqpJy 7R05T4aV4meZiZIYrFbG7lMa0FTuhKuuB1CtkBwIf5tGUBXuHpVQkY0NqSbHmKmj 8dEZ938eUjw3AXJCTA7vnNi0uMRP8jzTsrwhDMK3fajQMUmC+vME3s3f3Ls+hBu+ D9cnowUI7XO0Xr7MZCUf0cbG0wEe2gXjGrbcdGi5N19lZGD1JqPRVLaZp+H5J/fH IJ1qFq6ldsHqyNKTFVinSsZcOkq4J+4NyxzeZW2Al0EsP5QXyYMU8UiE/QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBEPma8S1BBGdW8M2+Iq2h5Eu4yoMB8GA1UdIwQY MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKD3T Wh3MC0MymY56ttob330W4gVndcqfFpWPxrIafNTFpRX/le/l/wd4QpdI8Sm63Qmz TTqFyhx/neGzeP+0ScJfi8TmFrhYmYO1mhqVaKdGUCHDzFhbbFFzAfz1+jbCEAUl SVb/cfgcWDNZ7SuJDZPVi4jWsnQhXFBCH16XePipIJS81VdfKjQGZ7nU+kAqaIJj Q2aGxe1G1kEJDxKbMUU6y1+pReKKEnmGOPJKfVrvMuGAZ033VRteoZVpF5XnX1Jq Ah4CTAg8htIWe6MqvsvAs65GdAXhCKQJg5ukhUSd5OiaARcBl7zMX7xlGRTLYb+h nU1ndDpBgV/IWkoINA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:53 2026 by rpki-client