This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json) Hash identifier: uHvthevJgo6cTZIJUiZkg1/lQNvhlgwqrVmy+vV+08g= Subject key identifier: 43:9E:2D:EB:BE:EF:4D:28:0A:00:11:90:31:F7:1B:A4:9B:59:1A:84 Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019BFC1CBC717F3462ED44A3D0157BB0075D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft Manifest number: 17F8 Signing time: Mon 26 Jan 2026 21:01:39 +0000 Manifest this update: Mon 26 Jan 2026 21:01:39 +0000 Manifest next update: Tue 27 Jan 2026 21:01:39 +0000 Files and hashes: 1: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=) 2: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=) 3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: Ng5KDvkb+EIXxnIBMTpZ9SCbOGXWowdBdRZLKs/rD6E=) 4: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=) 5: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=) 6: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (hash: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8=) 7: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (hash: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0=) 8: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:bc:71:7f:34:62:ed:44:a3:d0:15:7b:b0:07:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Jan 26 21:01:39 2026 GMT Not After : Jan 27 21:01:39 2026 GMT Subject: CN=439e2debbeef4d280a00119031f71ba49b591a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2a:7b:55:f1:86:01:34:4c:a0:c6:95:f1:1e: 3b:10:6d:5c:be:16:0c:7b:c5:a8:e5:04:7e:95:cf: a9:ab:1e:7a:d3:5e:ca:3b:5d:24:21:19:54:10:e3: 73:be:82:2a:88:60:07:64:3c:ea:78:7a:fc:76:f7: 5c:8c:be:46:3d:c0:ec:a5:64:6c:df:c7:2a:58:0b: 46:ef:8f:dd:d3:99:cc:cf:7e:d3:87:db:11:24:a7: 16:a3:ac:c7:22:42:ad:fb:95:5d:3c:37:4c:10:6c: c8:be:bd:9a:d5:53:7a:0d:c3:29:5c:98:44:4b:53: ba:76:de:14:37:6d:7c:bf:8d:94:5b:a8:3d:3c:47: c9:6b:14:61:66:fb:de:b6:15:61:77:b1:b3:96:9c: d2:23:75:90:fb:ac:bc:86:c4:9a:01:ee:dd:b7:4f: 1f:22:32:34:e4:5a:17:89:a3:e4:5c:8c:7d:2f:1b: 13:90:af:cb:32:21:5a:63:d2:6d:07:de:c5:92:66: 9f:db:d8:6d:04:6b:0c:0f:be:4f:8d:03:47:c1:99: ba:f2:38:69:83:ed:7c:e2:f4:e4:e1:65:27:f7:ba: f2:bf:76:b9:4e:a3:e4:e8:cc:41:0a:2a:1e:86:a1: 38:57:90:a6:2e:77:0a:a7:be:72:36:ae:6e:63:f5: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:2D:EB:BE:EF:4D:28:0A:00:11:90:31:F7:1B:A4:9B:59:1A:84 X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:78:82:56:a7:5a:6c:2d:91:17:32:32:24:02:22:d6:d5:12: 86:61:b5:e9:8c:cd:1e:71:1c:52:d7:15:77:4c:14:8f:49:23: 89:b7:56:92:61:86:7d:de:7f:18:b5:f8:cd:9f:a5:ca:ca:81: 57:55:64:13:8c:be:f7:3e:31:fe:58:f2:19:c6:32:8d:5e:cb: 89:74:5e:84:38:0a:28:8e:77:f4:60:a2:39:94:1d:06:99:e6: 3f:be:38:3a:2f:cc:2f:2c:db:b2:cf:78:ec:df:59:ab:6f:cd: 58:1e:15:f7:5f:dc:d5:c5:b2:0b:c4:75:40:43:10:3a:21:d2: 60:dc:b3:8f:fa:01:e0:d5:8d:9c:f9:2c:5f:59:9b:5a:9c:b4: af:0e:65:7d:0c:dc:73:15:2b:36:14:f6:4c:6e:49:21:1d:05: b1:7a:f1:b2:69:f5:d0:19:47:f6:f8:c2:85:aa:d7:c9:d4:1f: b6:7f:07:7d:f5:21:9b:bc:ba:21:d3:4d:35:7e:ae:01:f5:12: 05:38:28:7c:3a:78:99:a6:26:c9:93:c1:70:02:2a:71:0b:2f: 3c:83:6c:97:0d:c1:eb:a1:6c:8f:e1:7e:88:1d:a1:18:53:c4: bd:26:82:42:f4:96:92:41:25:15:86:4b:37:c0:fc:56:57:42: 20:ee:31:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HLxxfzRi7USj0BV7sAddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjYwMTI2MjEwMTM5WhcNMjYwMTI3MjEwMTM5WjAzMTEwLwYDVQQD Eyg0MzllMmRlYmJlZWY0ZDI4MGEwMDExOTAzMWY3MWJhNDliNTkxYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Cp7VfGGATRMoMaV8R47EG1cvhYM e8Wo5QR+lc+pqx56017KO10kIRlUEONzvoIqiGAHZDzqeHr8dvdcjL5GPcDspWRs 38cqWAtG74/d05nMz37Th9sRJKcWo6zHIkKt+5VdPDdMEGzIvr2a1VN6DcMpXJhE S1O6dt4UN218v42UW6g9PEfJaxRhZvvethVhd7GzlpzSI3WQ+6y8hsSaAe7dt08f IjI05FoXiaPkXIx9LxsTkK/LMiFaY9JtB97Fkmaf29htBGsMD75PjQNHwZm68jhp g+184vTk4WUn97ryv3a5TqPk6MxBCioehqE4V5CmLncKp75yNq5uY/VbPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOeLeu+700oCgARkDH3G6SbWRqEMB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgniCVqda bC2RFzIyJAIi1tUShmG16YzNHnEcUtcVd0wUj0kjibdWkmGGfd5/GLX4zZ+lysqB V1VkE4y+9z4x/ljyGcYyjV7LiXRehDgKKI539GCiOZQdBpnmP744Oi/MLyzbss94 7N9Zq2/NWB4V91/c1cWyC8R1QEMQOiHSYNyzj/oB4NWNnPksX1mbWpy0rw5lfQzc cxUrNhT2TG5JIR0FsXrxsmn10BlH9vjCharXydQftn8HffUhm7y6IdNNNX6uAfUS BTgofDp4maYmyZPBcAIqcQsvPINslw3B66Fsj+F+iB2hGFPEvSaCQvSWkkElFYZL N8D8VldCIO4xog== -----END CERTIFICATE-----Generated at Tue Jan 27 05:02:39 2026 by rpki-client