This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json) Hash identifier: Lo7vAPnAfBkq2NjycB1BT8boGxFiNrEpCtc40wAwiMU= Subject key identifier: 8C:F7:2A:9D:F4:4E:9F:3C:76:BE:05:34:31:4E:45:D5:21:87:11:A9 Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a Certificate serial: 019BD2E960AD4E8CF183FD17215969FEC87B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft Manifest number: 071D Signing time: Sun 18 Jan 2026 21:01:08 +0000 Manifest this update: Sun 18 Jan 2026 21:01:08 +0000 Manifest next update: Mon 19 Jan 2026 21:01:08 +0000 Files and hashes: 1: 6aW5lIi7oMnv0JtmoIYru-ajW2U.roa (hash: hiLXgzBLgftqnSKxGdk0TFz/543p7sGbEcxREIu87FA=) 2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=) 3: i_fheKNVQZhWFTdE7yImbk9ro-w.roa (hash: eeoqLJuO/FD+LMpZeegvKuJwG9knkScCqqvz3uiCruM=) 4: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: SzYhN9zx90l2c4Jfkn+AHPtFPY1PSo5YRKHQLY2kDEU=) 5: rSwX2196FbpLG8u1F6t0YHqRbLQ.roa (hash: CP3uHv55fI/3QUOaoOcIQK1lwrzri0LzFHDnorRyRxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:e9:60:ad:4e:8c:f1:83:fd:17:21:59:69:fe:c8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a Validity Not Before: Jan 18 21:01:08 2026 GMT Not After : Jan 19 21:01:08 2026 GMT Subject: CN=8cf72a9df44e9f3c76be0534314e45d5218711a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:4f:de:a4:d5:46:14:c5:10:63:1f:90:2d: c6:50:f0:2c:ec:8f:cf:fb:f1:95:f4:d9:29:1e:d9: f9:f9:9e:68:5c:e3:a6:9e:85:9d:7d:ea:80:e7:cf: 1f:08:d9:88:9a:36:72:fc:eb:f4:d0:6f:b8:cb:1c: 05:d2:e7:94:e2:a8:ab:64:b4:ed:3e:1b:3d:f7:7b: fa:b6:65:28:48:20:1e:c7:6f:3e:12:cc:48:84:11: 9c:b8:f1:76:28:36:6e:04:7c:2d:87:5f:2a:67:a8: b7:7d:d4:85:b5:55:b1:fc:ce:7a:2a:f5:a5:76:bc: c4:a3:3c:f4:1b:bb:70:e9:6e:7b:57:d7:a9:8b:85: 8a:8d:28:43:81:1b:2a:5c:58:fb:09:b8:7d:d2:a3: a1:0b:f5:e7:3f:6e:73:ec:84:80:b8:bd:20:86:d8: 6b:1a:f9:34:4d:bb:83:be:ef:47:90:48:e3:cf:02: 4a:9f:f4:0a:6f:3b:c8:de:90:67:0c:81:d9:47:10: 62:63:cd:61:47:12:ef:f5:c6:21:c3:71:22:09:7a: ea:0e:c8:40:2e:8b:24:a9:2a:47:6e:f2:d2:59:41: 95:8d:0d:41:46:5b:81:10:60:4f:d8:53:73:ca:26: b0:51:5a:86:fd:6c:e1:e8:1e:85:7b:a9:54:ab:60: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:2A:9D:F4:4E:9F:3C:76:BE:05:34:31:4E:45:D5:21:87:11:A9 X509v3 Authority Key Identifier: keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:29:46:b1:68:08:24:4d:3a:28:94:f4:1c:f8:80:a7:08:88: 23:58:45:33:20:bd:1b:db:ae:98:f0:75:c9:5e:e6:75:f5:e4: 87:6e:14:61:5f:03:1f:22:c5:25:38:aa:fe:48:ad:b8:c3:81: 4b:7a:da:14:28:32:a8:f1:23:9b:5c:c2:91:43:8c:44:ef:22: e3:db:8f:d0:2a:03:f3:0b:d9:5b:22:d1:6c:20:fc:f4:18:cd: 48:3b:96:e9:13:b0:62:26:0d:a4:df:5c:db:c5:c8:92:23:62: b1:22:1a:1f:c8:69:48:0b:1a:dc:dd:06:78:51:2c:83:3e:fb: ae:38:77:b8:06:c8:5a:8e:40:a0:46:d5:f4:c5:c1:22:28:1d: 55:96:d3:dd:33:5f:a7:f0:8c:85:4f:74:7c:22:de:7b:1f:1a: 88:0d:b6:f9:56:ef:c3:62:9c:b8:c9:90:87:c4:f5:a1:2d:37: 36:d3:c1:1b:08:33:69:88:e4:3d:6c:69:47:1f:4e:49:53:60: 99:62:11:e0:9c:e6:bd:9e:07:4f:bb:7c:fb:9b:05:d3:f0:14: 27:bd:21:3b:0f:4d:ed:6b:c1:7b:8e:60:b3:0f:ea:92:24:82: c4:c1:fc:ac:fd:50:7f:00:dc:27:1b:19:b3:41:79:33:87:e3: ed:73:f7:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvS6WCtTozxg/0XIVlp/sh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx NTZjMGEwHhcNMjYwMTE4MjEwMTA4WhcNMjYwMTE5MjEwMTA4WjAzMTEwLwYDVQQD Eyg4Y2Y3MmE5ZGY0NGU5ZjNjNzZiZTA1MzQzMTRlNDVkNTIxODcxMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0hP3qTVRhTFEGMfkC3GUPAs7I/P +/GV9NkpHtn5+Z5oXOOmnoWdfeqA588fCNmImjZy/Ov00G+4yxwF0ueU4qirZLTt Phs993v6tmUoSCAex28+EsxIhBGcuPF2KDZuBHwth18qZ6i3fdSFtVWx/M56KvWl drzEozz0G7tw6W57V9epi4WKjShDgRsqXFj7Cbh90qOhC/XnP25z7ISAuL0ghthr Gvk0TbuDvu9HkEjjzwJKn/QKbzvI3pBnDIHZRxBiY81hRxLv9cYhw3EiCXrqDshA LoskqSpHbvLSWUGVjQ1BRluBEGBP2FNzyiawUVqG/Wzh6B6Fe6lUq2DTywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIz3Kp30Tp88dr4FNDFORdUhhxGpMB8GA1UdIwQY MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4 LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiylGsWgI JE06KJT0HPiApwiII1hFMyC9G9uumPB1yV7mdfXkh24UYV8DHyLFJTiq/kituMOB S3raFCgyqPEjm1zCkUOMRO8i49uP0CoD8wvZWyLRbCD89BjNSDuW6ROwYiYNpN9c 28XIkiNisSIaH8hpSAsa3N0GeFEsgz77rjh3uAbIWo5AoEbV9MXBIigdVZbT3TNf p/CMhU90fCLeex8aiA22+Vbvw2KcuMmQh8T1oS03NtPBGwgzaYjkPWxpRx9OSVNg mWIR4JzmvZ4HT7t8+5sF0/AUJ70hOw9N7WvBe45gsw/qkiSCxMH8rP1QfwDcJxsZ s0F5M4fj7XP3wA== -----END CERTIFICATE-----Generated at Mon Jan 19 06:37:47 2026 by rpki-client