This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: y/K4/WyEXS43JSL+aqLpnYh4V8rw+1RhBA6Hb4/99EY= Subject key identifier: D0:FF:75:BF:75:45:E3:45:27:ED:14:6B:5D:32:28:E9:BE:1F:64:98 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019BDDA3C12FB76841EA42D623D373A76686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 19FF Signing time: Tue 20 Jan 2026 23:00:55 +0000 Manifest this update: Tue 20 Jan 2026 23:00:55 +0000 Manifest next update: Wed 21 Jan 2026 23:00:55 +0000 Files and hashes: 1: 1-w50uf7dyWqaJkX9rSj1j1QAdmU.roa (hash: 0u4M/3+LwWC6jREF5PvgbwEVkEiATzx8ptRinGLU0tM=) 2: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 3: 3QNvsW8uqI5SRJ2arDoqnLh1Snk.roa (hash: 6UcWlt5kutrk7QnYcIIi10ehqxpEztrBDXBmmSnWosA=) 4: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 5: B-4Y5enlVk_Sd-7mbbGmudhFVWs.roa (hash: VrFv29MZjRI9WiKBoXLP+DEm/34C4C5KG6TpaM7VLEg=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 8: DerH0dJWAmvoDiwGMEZlimFM_U4.roa (hash: KnWLwVLoMaWntfuMP+lElDsCBomb3AO+k0zvdHWXSrI=) 9: FpwdnH1vSeaA9IvOMd_9OlvXF-Q.roa (hash: dR81pd4Z3d3hQtP7AcMh1To0rqIYfbx/ZlCHk7Sp1DE=) 10: KyVEKpHR2pEtmXPUgs4zC61gxuI.roa (hash: Q7viCoyzEt3Uww0tv97oy1K7pyQCSZn83eGufGRHE/A=) 11: N1YrFwz6MvPNL8pUon6iWLIL4KM.roa (hash: ZFgtvNP8aWZk/IJlZoc7a3QhXLBKA7t9LfcmdbeQpkw=) 12: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 13: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: O8EttKzDKdWqD7mz2ccvCztKtQvFJpaPYrxw6fZkYYo=) 14: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 15: Wm9W969s1zDEYvgyNxsbOsCfZp0.roa (hash: 61/WUb1UHZ1kTPcgP7deUj+87twLfiFFSlO7jtM4U7o=) 16: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 17: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 18: _Kp7PDTcmGkJiJKewtOccSGpSgs.roa (hash: WM5hEQgIwiPSrdXKA7JsjCjXu6TD5zpoJlxCQduZru4=) 19: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 20: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 21: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 22: imz4zogpz3gRWTsTrtdPdQHFIJI.roa (hash: Omm2qGrQmn0g7Ax1AVDShwbJWCjhszNL2cv6OMuwfQg=) 23: iytQpP8cOKt_SZr-dWu1mE4wm4s.roa (hash: yu00tFptzGFBvQTaVZf5FqouszpkfBRiVtW4WyFln90=) 24: k3CHmqm8bf5CFWrmI8gISAff4Ls.roa (hash: 0TtRSWp3DHVRAcU5oUWrjNT0y48VCPBzWE6NO1CodU4=) 25: lm75HHEcKEQYMEgpFwyjgGRLyjc.roa (hash: XMQzZRr9ncs35MQaTZF1itYg/Ala9EzzNWhAg3mK6QM=) 26: oQjGS8W_5tPPwVVXM-fDZ4QfqFs.roa (hash: qhQNTicoIxuhBTufRlzaBk+rgI949V+sKKIRwlKBeDI=) 27: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 28: v1tSGd3C-K9-06m4B94Gav_UhK0.roa (hash: KWqnrWgZy/fH64jimxEEgQFW0ax9yNje1IAv772G7mg=) 29: vObQf-9yIZlLVVZBDoK-sQ5xsoM.roa (hash: YZx/dQuYWJM5ToVcfaVtj/imOld/qG4uL61E0uaObng=) 30: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:a3:c1:2f:b7:68:41:ea:42:d6:23:d3:73:a7:66:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 20 23:00:55 2026 GMT Not After : Jan 21 23:00:55 2026 GMT Subject: CN=d0ff75bf7545e34527ed146b5d3228e9be1f6498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:a0:1a:0a:64:7e:42:7b:7f:38:d8:27:7f: 34:19:ff:d7:a5:94:99:c8:f4:d2:85:41:37:37:2a: ce:90:ee:fd:99:23:f8:42:8a:15:4f:37:8c:73:ab: 2f:e6:3f:c4:92:22:bc:61:a5:d8:f5:28:d6:c4:28: 8a:45:71:49:a2:1c:42:ab:63:91:d2:ea:48:15:1f: 9c:b2:03:af:e0:9e:28:33:c0:36:49:08:c0:a7:62: a8:82:eb:60:49:77:a2:db:33:08:67:d4:f8:03:0b: cd:a4:9e:01:a1:d8:05:7e:ee:1e:97:b8:09:66:f1: 2c:61:61:6b:dd:f0:3b:d3:25:cb:a7:56:2c:ad:43: a0:a8:6d:94:94:d3:19:65:06:8d:30:01:94:a8:50: 10:27:2f:7b:c2:43:6d:e7:1d:8f:cc:62:1d:a9:49: 46:5a:f5:0e:a1:50:1b:00:59:a6:03:a1:74:40:0c: 95:b5:60:7f:06:e5:71:54:5d:99:7d:63:77:c1:09: 20:64:48:31:0e:d8:d6:24:e2:a9:ed:43:5f:4b:14: b7:63:09:a0:7c:fe:67:88:f2:76:bf:79:e2:2c:9e: 90:69:d5:23:7a:15:94:03:df:25:86:e8:63:4e:ef: 10:b4:42:92:22:5a:e7:e9:a8:8b:9b:08:9c:e4:7d: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FF:75:BF:75:45:E3:45:27:ED:14:6B:5D:32:28:E9:BE:1F:64:98 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7a:61:ee:af:21:06:d7:1e:51:16:16:37:e7:1f:b7:31:68: 32:de:a8:59:66:95:b0:b9:7f:7b:d0:0d:fe:af:5f:28:59:a9: 69:d9:2e:94:84:3b:01:1e:d8:5a:d2:8f:cc:72:31:2d:dd:31: c7:a4:72:a7:43:de:e8:c2:ce:83:bf:14:ac:01:b9:61:66:81: ef:d2:4c:9a:5c:46:d6:e1:f8:5d:56:25:1f:1a:f5:e2:2c:c5: 88:38:0f:cf:8f:8c:e1:70:b3:d9:f9:e3:26:30:f6:20:01:dd: 5b:02:a0:00:b2:18:d4:ee:76:96:f9:14:39:d8:75:da:83:56: c0:50:29:36:ab:8b:74:db:1d:d2:dd:0f:f5:d5:3c:b2:30:28: 04:b5:6d:d7:81:ea:84:1a:c6:f8:41:63:a4:31:54:48:a3:e6: 66:dd:d4:8a:44:4f:7d:7e:2e:36:fa:9e:97:30:f5:e7:59:b3: 69:18:e4:25:be:04:e1:b8:16:c4:69:75:e8:c8:e1:d9:4e:db: cb:a3:19:80:53:0a:cd:e7:64:20:94:63:6f:7a:79:b5:39:60: bc:82:a3:ab:fa:7e:b5:7a:34:48:a3:a6:1a:57:ad:52:51:d8: bc:ab:ee:c2:be:89:6a:5b:ed:9a:6b:05:0a:f3:d3:b3:83:6b: ca:03:29:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvdo8Evt2hB6kLWI9Nzp2aGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTIwMjMwMDU1WhcNMjYwMTIxMjMwMDU1WjAzMTEwLwYDVQQD EyhkMGZmNzViZjc1NDVlMzQ1MjdlZDE0NmI1ZDMyMjhlOWJlMWY2NDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiagGgpkfkJ7fzjYJ380Gf/XpZSZ yPTShUE3NyrOkO79mSP4QooVTzeMc6sv5j/EkiK8YaXY9SjWxCiKRXFJohxCq2OR 0upIFR+csgOv4J4oM8A2SQjAp2KogutgSXei2zMIZ9T4AwvNpJ4BodgFfu4el7gJ ZvEsYWFr3fA70yXLp1YsrUOgqG2UlNMZZQaNMAGUqFAQJy97wkNt5x2PzGIdqUlG WvUOoVAbAFmmA6F0QAyVtWB/BuVxVF2ZfWN3wQkgZEgxDtjWJOKp7UNfSxS3Ywmg fP5niPJ2v3niLJ6QadUjehWUA98lhuhjTu8QtEKSIlrn6aiLmwic5H2+bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFND/db91ReNFJ+0Ua10yKOm+H2SYMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3ph7q8h BtceURYWN+cftzFoMt6oWWaVsLl/e9AN/q9fKFmpadkulIQ7AR7YWtKPzHIxLd0x x6Ryp0Pe6MLOg78UrAG5YWaB79JMmlxG1uH4XVYlHxr14izFiDgPz4+M4XCz2fnj JjD2IAHdWwKgALIY1O52lvkUOdh12oNWwFApNquLdNsd0t0P9dU8sjAoBLVt14Hq hBrG+EFjpDFUSKPmZt3UikRPfX4uNvqelzD151mzaRjkJb4E4bgWxGl16Mjh2U7b y6MZgFMKzedkIJRjb3p5tTlgvIKjq/p+tXo0SKOmGletUlHYvKvuwr6JalvtmmsF CvPTs4NrygMp7w== -----END CERTIFICATE-----Generated at Wed Jan 21 05:58:39 2026 by rpki-client