This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json) Hash identifier: HoCHIbi33WAEYNsAVPiylZJe5E0kpgl99fxMaf+6Ev8= Subject key identifier: 6C:D7:95:6A:D2:52:19:81:64:BF:A6:CF:4F:B1:79:4E:61:3A:44:A0 Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Certificate serial: 019BE0A4B12D7D476E4B097ED0EA3474AAB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft Manifest number: 0E7F Signing time: Wed 21 Jan 2026 13:00:48 +0000 Manifest this update: Wed 21 Jan 2026 13:00:48 +0000 Manifest next update: Thu 22 Jan 2026 13:00:48 +0000 Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: a87PO4c0yDMwvN5Zer+1g26kslBuZ/LUKE8f+M3rIMo=) 2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a4:b1:2d:7d:47:6e:4b:09:7e:d0:ea:34:74:aa:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Validity Not Before: Jan 21 13:00:48 2026 GMT Not After : Jan 22 13:00:48 2026 GMT Subject: CN=6cd7956ad252198164bfa6cf4fb1794e613a44a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:fa:f2:cf:9a:92:32:25:5a:71:ae:3e:c8: b3:d2:9a:d7:30:6b:d2:8f:a2:2e:af:ed:80:f5:cb: 24:da:bf:69:63:c7:45:3e:51:ff:41:38:03:dd:33: ea:08:ab:51:f9:d3:b4:76:ed:d3:99:eb:95:a1:50: 43:d9:fb:92:ac:5a:a4:06:65:df:d4:90:42:48:a8: 7e:82:b8:56:68:7f:dd:14:c6:07:05:f4:69:dc:2c: e5:bf:79:68:42:eb:83:c6:7d:ea:3b:84:23:00:a6: ea:ee:aa:17:50:2a:ad:94:be:ae:61:68:ea:25:f5: e6:73:78:ca:de:66:ab:b5:a6:d9:be:02:90:0a:eb: 0b:fb:39:1c:7b:2d:d5:e5:d9:b2:e5:f4:39:b7:6e: 4a:a6:ea:ae:7d:14:91:e9:ad:ac:4b:20:d2:fa:f7: 6f:68:5f:e3:51:7e:12:ff:2d:5c:50:44:25:12:05: fa:98:8a:1a:35:e8:92:a4:41:72:90:6f:78:d2:0e: 20:5e:09:06:d4:9d:6b:85:dc:ed:99:44:14:ff:74: 06:43:d5:c1:cb:0a:fe:5a:a5:aa:1d:f9:62:a1:d9: e4:1b:c0:99:ae:09:68:9f:03:78:70:f8:ab:85:57: e8:6a:1e:5a:d6:17:98:66:e5:26:c8:8f:ba:69:73: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D7:95:6A:D2:52:19:81:64:BF:A6:CF:4F:B1:79:4E:61:3A:44:A0 X509v3 Authority Key Identifier: keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9c:a5:e5:c4:57:5c:d2:6b:52:ae:9d:9b:a4:16:f3:80:84: 9f:fb:72:0c:53:44:ce:ae:b4:75:f3:e5:51:ca:5f:23:5d:4f: b3:c2:a8:4a:21:05:0e:4a:50:40:b8:d8:22:f8:b5:47:90:a8: 39:85:44:35:cd:ee:78:60:61:05:fd:58:71:f2:9d:40:28:0e: 49:ad:4d:95:da:11:0a:da:d1:c1:df:38:fc:42:d4:e6:e7:10: 4e:5a:bf:dc:db:30:74:b9:02:f7:65:9e:78:3a:3c:68:db:83: 0f:d4:a8:d7:27:56:19:14:e8:64:0d:25:90:4a:87:cb:27:61: df:bb:91:aa:72:5d:9b:75:d0:90:d6:ff:b1:7c:3f:9b:e4:05: b6:92:ee:65:02:85:85:02:31:9f:ec:23:e7:1e:58:88:47:82: 43:a6:7a:52:53:ff:78:a5:7d:f2:7f:86:0b:86:83:d9:94:69: 9f:47:f8:35:79:c6:fe:e9:e9:59:71:69:ba:11:16:9f:0d:9b: f7:85:a9:6c:a1:d9:a9:c9:d7:1c:03:b2:c9:7b:8c:fe:a4:66: 56:1f:d7:87:57:74:36:4c:09:36:f0:ab:d1:96:e5:b9:90:9f: a6:52:93:aa:34:d8:34:98:8f:21:65:b1:70:85:a3:68:81:96: 5b:61:48:fd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvgpLEtfUduSwl+0Oo0dKq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj N2U3NjkwHhcNMjYwMTIxMTMwMDQ4WhcNMjYwMTIyMTMwMDQ4WjAzMTEwLwYDVQQD Eyg2Y2Q3OTU2YWQyNTIxOTgxNjRiZmE2Y2Y0ZmIxNzk0ZTYxM2E0NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRD68s+akjIlWnGuPsiz0prXMGvS j6Iur+2A9csk2r9pY8dFPlH/QTgD3TPqCKtR+dO0du3TmeuVoVBD2fuSrFqkBmXf 1JBCSKh+grhWaH/dFMYHBfRp3Czlv3loQuuDxn3qO4QjAKbq7qoXUCqtlL6uYWjq JfXmc3jK3martabZvgKQCusL+zkcey3V5dmy5fQ5t25KpuqufRSR6a2sSyDS+vdv aF/jUX4S/y1cUEQlEgX6mIoaNeiSpEFykG940g4gXgkG1J1rhdztmUQU/3QGQ9XB ywr+WqWqHfliodnkG8CZrglonwN4cPirhVfoah5a1heYZuUmyI+6aXNReQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGzXlWrSUhmBZL+mz0+xeU5hOkSgMB8GA1UdIwQY MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2 LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJyl 5cRXXNJrUq6dm6QW84CEn/tyDFNEzq60dfPlUcpfI11Ps8KoSiEFDkpQQLjYIvi1 R5CoOYVENc3ueGBhBf1YcfKdQCgOSa1NldoRCtrRwd84/ELU5ucQTlq/3NswdLkC 92WeeDo8aNuDD9So1ydWGRToZA0lkEqHyydh37uRqnJdm3XQkNb/sXw/m+QFtpLu ZQKFhQIxn+wj5x5YiEeCQ6Z6UlP/eKV98n+GC4aD2ZRpn0f4NXnG/unpWXFpuhEW nw2b94WpbKHZqcnXHAOyyXuM/qRmVh/Xh1d0NkwJNvCr0ZbluZCfplKTqjTYNJiP IWWxcIWjaIGWW2FI/Q== -----END CERTIFICATE-----Generated at Wed Jan 21 19:06:40 2026 by rpki-client