This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft File: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft (raw, json) Hash identifier: AosjZzr8/Wgqvl7IdF3ptThr+HtVHApjS0kRw4UlaaU= Subject key identifier: 29:D2:F0:50:CC:CC:F6:40:87:E0:BC:4E:DE:50:75:71:40:DD:02:2F Authority key identifier: 3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 Certificate issuer: /CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Certificate serial: 019BFD659B35F5F790EB0E805BC6C057CFE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft Manifest number: 0388 Signing time: Tue 27 Jan 2026 03:00:53 +0000 Manifest this update: Tue 27 Jan 2026 03:00:53 +0000 Manifest next update: Wed 28 Jan 2026 03:00:53 +0000 Files and hashes: 1: EPXKmqElYBSkf6c75SMxNqoPXOM.roa (hash: 88ED4Nzg4K7nQUP80hvnZrkZ3+U3+WnyKYH02jE3Mk0=) 2: Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl (hash: YX5U4vdEcj3y9QMcAVTic5B5H2yaDrgZ22cxCcXq0Pg=) 3: X4nLSwxemzqRH1kyXDwHvH3EiTU.roa (hash: +Qy7lKARLAZMeGLelLZC+SCNzPCoqizejVBLza4FRHk=) 4: wy5ljkBOMrsbd0Elh017lYGGZuc.roa (hash: NT6vW+p8o6SSPvqBK4RdOyq3x/fjviFT0ptnG8DPzMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:9b:35:f5:f7:90:eb:0e:80:5b:c6:c0:57:cf:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adea4b7af8cce5cfd3775cb01fb97c4f951a9a2 Validity Not Before: Jan 27 03:00:53 2026 GMT Not After : Jan 28 03:00:53 2026 GMT Subject: CN=29d2f050ccccf64087e0bc4ede50757140dd022f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:56:16:13:84:96:49:27:2c:f8:4c:67:50: ff:1a:e6:ad:e0:bb:c9:19:9f:5f:3e:cf:7e:83:3d: 4e:16:ba:47:26:00:e3:74:45:09:40:25:84:e5:0f: c8:63:47:70:76:17:3d:e0:d0:9d:ad:f2:75:36:49: 6a:d1:3f:a4:a7:67:43:71:79:8b:ab:59:6e:19:81: 12:e6:fe:09:ab:6c:aa:da:63:a4:f3:7d:1e:5a:fe: 58:26:eb:37:4f:b9:fb:61:3f:b3:1a:45:d0:2f:00: 96:72:84:10:59:d7:b8:58:38:6d:9e:17:7a:d7:d5: 89:34:13:82:65:fd:fa:60:1f:bd:56:ae:ab:e5:a4: ba:10:a5:bb:a2:ca:5f:74:76:07:73:83:95:b2:c8: ae:47:9e:92:00:96:57:9e:25:22:5a:a1:5a:ea:1d: f5:2d:bc:60:1b:21:fa:3d:20:e1:c3:ed:c6:27:55: 61:e5:4c:4e:19:af:53:30:0b:57:dd:ef:f5:ed:ca: 83:3c:71:fd:e8:5f:88:ee:59:bc:07:fc:d6:2d:6c: bf:84:93:c7:98:d1:71:8e:60:74:5d:c9:2f:f7:3a: 31:d0:1d:5f:db:38:65:b5:ce:6f:94:a2:f3:68:22: 82:24:df:35:e6:08:fa:8d:fa:52:f0:02:13:e1:e7: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D2:F0:50:CC:CC:F6:40:87:E0:BC:4E:DE:50:75:71:40:DD:02:2F X509v3 Authority Key Identifier: keyid:3A:DE:A4:B7:AF:8C:CE:5C:FD:37:75:CB:01:FB:97:C4:F9:51:A9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/123124-ef66-48d1-91d0-f0d119c527ff/1/Ot6kt6-Mzlz9N3XLAfuXxPlRqaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:27:a5:aa:8a:da:4e:a7:71:c5:14:8c:89:3b:06:ae:01:0c: ff:dc:5d:21:35:fd:e7:3e:20:98:e6:8a:f0:45:8e:71:d0:9a: ad:f2:92:f0:f5:91:15:83:16:72:0a:ab:46:f9:e4:64:3e:fb: 96:46:b9:22:74:79:b2:fc:c9:bd:c3:22:c4:ea:9a:6b:75:e7: 3d:e8:69:3c:3e:d1:b8:ba:26:77:4e:0b:60:d6:de:ba:50:79: 5b:5f:10:3a:8a:b8:12:53:dc:64:e5:7d:a2:07:f4:de:e3:0d: 1d:6c:0e:fa:95:62:7c:d9:1a:4c:37:fe:2d:9c:2a:1a:bb:46: 4b:6b:f9:4c:c6:21:d1:9c:a6:2a:ab:52:00:49:8c:1f:c7:1e: 9d:93:3b:b1:1a:7a:0a:f1:2b:55:84:02:a6:76:71:84:f8:56: 0e:f4:bd:1b:1b:fb:5a:8c:f9:34:ad:2f:8e:b1:6c:95:58:78: e7:e3:6c:ad:74:ca:38:87:74:12:91:9b:49:04:b4:13:2d:4d: 55:26:74:96:fe:8f:b3:70:ff:9a:f3:32:34:95:f7:87:52:df: c9:5a:ef:9c:00:5b:15:6d:5a:87:76:a7:5d:1d:09:3c:23:39: 57:27:e2:20:d7:df:5e:fa:2f:b1:4e:d7:6b:45:d8:35:4a:f4: 7a:4e:49:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZZs19feQ6w6AW8bAV8/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGVhNGI3YWY4Y2NlNWNmZDM3NzVjYjAxZmI5N2M0Zjk1 MWE5YTIwHhcNMjYwMTI3MDMwMDUzWhcNMjYwMTI4MDMwMDUzWjAzMTEwLwYDVQQD EygyOWQyZjA1MGNjY2NmNjQwODdlMGJjNGVkZTUwNzU3MTQwZGQwMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRxWFhOElkknLPhMZ1D/Guat4LvJ GZ9fPs9+gz1OFrpHJgDjdEUJQCWE5Q/IY0dwdhc94NCdrfJ1Nklq0T+kp2dDcXmL q1luGYES5v4Jq2yq2mOk830eWv5YJus3T7n7YT+zGkXQLwCWcoQQWde4WDhtnhd6 19WJNBOCZf36YB+9Vq6r5aS6EKW7ospfdHYHc4OVssiuR56SAJZXniUiWqFa6h31 LbxgGyH6PSDhw+3GJ1Vh5UxOGa9TMAtX3e/17cqDPHH96F+I7lm8B/zWLWy/hJPH mNFxjmB0Xckv9zox0B1f2zhltc5vlKLzaCKCJN815gj6jfpS8AIT4eciJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnS8FDMzPZAh+C8Tt5QdXFA3QIvMB8GA1UdIwQY MBaAFDrepLevjM5c/Td1ywH7l8T5UamiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAt ZjBkMTE5YzUyN2ZmLzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xMjMxMjQtZWY2Ni00OGQxLTkxZDAtZjBkMTE5YzUyN2Zm LzEvT3Q2a3Q2LU16bHo5TjNYTEFmdVh4UGxScWFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyelqora TqdxxRSMiTsGrgEM/9xdITX95z4gmOaK8EWOcdCarfKS8PWRFYMWcgqrRvnkZD77 lka5InR5svzJvcMixOqaa3XnPehpPD7RuLomd04LYNbeulB5W18QOoq4ElPcZOV9 ogf03uMNHWwO+pVifNkaTDf+LZwqGrtGS2v5TMYh0ZymKqtSAEmMH8cenZM7sRp6 CvErVYQCpnZxhPhWDvS9Gxv7Woz5NK0vjrFslVh45+NsrXTKOId0EpGbSQS0Ey1N VSZ0lv6Ps3D/mvMyNJX3h1LfyVrvnABbFW1ah3anXR0JPCM5VyfiINffXvovsU7X a0XYNUr0ek5JVw== -----END CERTIFICATE-----Generated at Tue Jan 27 12:45:24 2026 by rpki-client