This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: uRwQZwFFnWxfgUPCw1JB48CJqOZQxsXhoyu3p2mKQ0k= Subject key identifier: 44:0F:97:CA:D3:8E:8D:D6:36:E2:85:DB:08:DC:60:5B:ED:0A:DB:54 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019BFCF8900133A06411F9F24E4DCB6FCD7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 180A Signing time: Tue 27 Jan 2026 01:01:46 +0000 Manifest this update: Tue 27 Jan 2026 01:01:46 +0000 Manifest next update: Wed 28 Jan 2026 01:01:46 +0000 Files and hashes: 1: 1-Qbrqy3eaDyYZjmaWJLP3YQsQ0U.roa (hash: 1GmvfspmxhXRZfjHjp+Nn84fIdG09U8DoT1IgAU3Frc=) 2: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 3: 7DTaYq58DszxL3typMJ_Z8sgHiw.roa (hash: QOb3N70dWy19+rmSZK4iBpA9tvZZyMZV5R3SBFHpjuA=) 4: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=) 5: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: i9+YwSvmZDE5sMdA71YZiALh0JYYUMpVrRoi1CI0e2Q=) 6: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=) 7: SfOe7Fk4wovyDTf65PPkUvpmOj8.roa (hash: IqHL6wYMj66T9G8mGNVSsyQbaYrfdIedvTge6Q1Bbhs=) 8: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 9: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 10: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=) 11: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 12: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 13: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:90:01:33:a0:64:11:f9:f2:4e:4d:cb:6f:cd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 27 01:01:46 2026 GMT Not After : Jan 28 01:01:46 2026 GMT Subject: CN=440f97cad38e8dd636e285db08dc605bed0adb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:84:16:31:26:3e:8c:b3:26:3f:f1:1b:16: 2f:ba:fc:3e:74:b0:5a:9f:64:76:3a:71:68:f0:a2: 3b:8a:d6:4c:b8:df:03:c9:9d:e6:22:94:04:3d:43: 3c:4b:39:54:23:27:ef:f9:44:74:a8:5f:53:76:0d: b4:91:68:83:e5:ab:8e:42:15:46:20:d5:36:19:37: 44:3f:4a:14:9e:f0:ae:dd:0b:96:05:0b:c2:ad:49: 21:e8:50:d0:25:68:74:f8:72:b2:77:ed:1a:de:b3: de:ed:8f:cb:5e:4d:9c:fb:51:7a:2b:dd:51:62:24: 07:78:97:48:b3:ec:00:f9:e4:38:cc:86:24:3f:e7: fc:e8:25:92:27:73:b2:86:7a:c3:95:f5:46:47:ea: 9f:61:d1:50:4d:24:d2:83:4d:a4:23:ee:a4:24:e5: e2:5b:a4:b5:15:51:49:df:de:7c:62:e2:66:37:7f: dd:5b:60:3d:42:31:08:89:64:2b:8e:43:09:c8:2e: ac:72:29:a9:9f:b3:0c:e0:16:54:94:bb:0b:42:f2: 75:c7:77:db:9b:51:8c:cb:9e:36:af:61:0f:d8:23: b7:98:85:88:32:f2:ec:68:22:da:fe:a2:c8:7c:88: 44:20:cc:71:db:25:7f:d3:bd:d4:d1:64:cb:46:be: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0F:97:CA:D3:8E:8D:D6:36:E2:85:DB:08:DC:60:5B:ED:0A:DB:54 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:54:a4:b7:ea:13:db:d3:48:ed:24:cd:31:9a:b8:1e:12:1d: 9c:20:bb:a1:c8:78:24:5f:44:d5:79:9c:1d:85:75:ef:b9:1a: 23:15:83:fd:35:a3:06:e6:ba:c9:fa:8d:57:98:e3:6c:2a:55: d5:60:f4:34:f3:e2:8b:42:97:3e:0b:b4:9c:54:61:53:b2:5e: a6:26:8d:57:a8:ea:3d:6c:45:e5:07:ae:66:c1:f7:ba:74:c8: 98:26:64:60:e8:41:38:2c:d6:e5:06:21:7d:a4:e7:01:27:df: af:7a:2a:e5:19:58:9f:30:49:80:c2:10:9d:03:15:6d:1e:3f: 33:53:b1:55:6c:01:58:e4:03:7e:29:3a:91:1f:08:eb:01:11: 4b:40:c6:22:8f:5f:f5:61:5e:36:28:c3:11:c6:c0:65:82:db: bb:b4:79:22:1b:fc:eb:2f:e5:34:aa:b9:95:2f:97:78:98:e4: 4d:d0:4a:99:cf:dd:03:ae:0b:da:d6:25:8d:ba:ed:c1:5b:17: 18:55:33:f2:fe:be:b2:2f:19:7e:38:d9:4b:72:bd:30:70:60: 67:5b:1d:9f:9c:b1:84:8a:fe:00:73:cf:33:96:0a:35:74:92: f1:83:d5:65:e5:d2:15:3c:4f:7b:25:6d:92:1a:9b:79:ae:77: 87:36:c1:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+JABM6BkEfnyTk3Lb81/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTI3MDEwMTQ2WhcNMjYwMTI4MDEwMTQ2WjAzMTEwLwYDVQQD Eyg0NDBmOTdjYWQzOGU4ZGQ2MzZlMjg1ZGIwOGRjNjA1YmVkMGFkYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zuEFjEmPoyzJj/xGxYvuvw+dLBa n2R2OnFo8KI7itZMuN8DyZ3mIpQEPUM8SzlUIyfv+UR0qF9Tdg20kWiD5auOQhVG INU2GTdEP0oUnvCu3QuWBQvCrUkh6FDQJWh0+HKyd+0a3rPe7Y/LXk2c+1F6K91R YiQHeJdIs+wA+eQ4zIYkP+f86CWSJ3OyhnrDlfVGR+qfYdFQTSTSg02kI+6kJOXi W6S1FVFJ3958YuJmN3/dW2A9QjEIiWQrjkMJyC6scimpn7MM4BZUlLsLQvJ1x3fb m1GMy542r2EP2CO3mIWIMvLsaCLa/qLIfIhEIMxx2yV/073U0WTLRr5tQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQPl8rTjo3WNuKF2wjcYFvtCttUMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFSkt+oT 29NI7STNMZq4HhIdnCC7och4JF9E1XmcHYV177kaIxWD/TWjBua6yfqNV5jjbCpV 1WD0NPPii0KXPgu0nFRhU7JepiaNV6jqPWxF5QeuZsH3unTImCZkYOhBOCzW5QYh faTnASffr3oq5RlYnzBJgMIQnQMVbR4/M1OxVWwBWOQDfik6kR8I6wERS0DGIo9f 9WFeNijDEcbAZYLbu7R5Ihv86y/lNKq5lS+XeJjkTdBKmc/dA64L2tYljbrtwVsX GFUz8v6+si8ZfjjZS3K9MHBgZ1sdn5yxhIr+AHPPM5YKNXSS8YPVZeXSFTxPeyVt khqbea53hzbBnw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:19 2026 by rpki-client