This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json) Hash identifier: 4BSmmLYMbzdFfRoW/cTfEJlI/SRN9p8F24ckXHDOvuM= Subject key identifier: 31:EA:51:82:38:B2:D7:C3:D9:EC:16:02:E1:EB:07:F2:96:0F:1B:47 Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Certificate serial: 019BF8ADB12796D9F8F763ECC8827595E9FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft Manifest number: 0E99 Signing time: Mon 26 Jan 2026 05:01:31 +0000 Manifest this update: Mon 26 Jan 2026 05:01:31 +0000 Manifest next update: Tue 27 Jan 2026 05:01:31 +0000 Files and hashes: 1: W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa (hash: uj8H5eTLBr1gPNFQuaCxy8xIYKyHOwh/HEUJd6NH5bA=) 2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: x2Vntl4akzHM7VxFZGu2j/9/t3G/qq9daAhO1mWQ4Wo=) 3: qRvOBOttCCifdXKg-Zoy28a2Djg.roa (hash: 5kgQNG99oZ4RgWldWg89plnXeCTFfBF0bfhCfheFwpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:b1:27:96:d9:f8:f7:63:ec:c8:82:75:95:e9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Validity Not Before: Jan 26 05:01:31 2026 GMT Not After : Jan 27 05:01:31 2026 GMT Subject: CN=31ea518238b2d7c3d9ec1602e1eb07f2960f1b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:a8:b9:f2:67:a8:e6:09:c9:8d:bf:05:5e: b7:50:95:55:53:09:80:2a:94:96:a3:b2:80:ff:28: 43:b5:69:ca:b2:06:e3:34:9d:d3:61:6a:42:e9:15: 53:c7:61:e1:3e:0e:8f:9c:7e:b5:99:9b:94:41:6b: 3b:a1:5c:e4:64:21:91:3a:9b:6c:db:e3:95:3a:4e: 50:0f:1b:86:5d:e7:77:ff:3f:ed:b5:fe:39:bc:00: 44:f5:42:a8:f1:5a:6f:92:44:0d:26:64:6f:65:65: 04:10:a1:03:da:f5:82:75:81:78:63:7c:70:e4:a5: f5:03:a8:e3:15:54:21:5b:58:a1:e3:0f:d4:ca:f6: ff:f8:e7:84:aa:e4:37:8a:d3:ea:94:a5:e0:c8:9e: 2c:d9:c8:89:cd:80:be:55:ec:1c:b2:bb:2a:98:68: 1b:98:a5:b2:c7:2a:70:9a:ea:14:90:63:04:b4:1b: 22:54:57:ba:6f:39:ea:b9:36:0e:36:29:8c:0b:09: 31:38:a0:92:84:a4:a0:2b:29:8e:fe:26:3b:3b:12: b2:d2:bb:92:fc:bb:4c:ae:df:bf:27:2f:5c:c7:eb: ef:e0:99:95:90:80:b3:82:3d:d4:06:93:b0:34:51: c3:9c:76:2c:9e:d5:22:2f:d9:9d:86:0c:4d:0a:e5: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EA:51:82:38:B2:D7:C3:D9:EC:16:02:E1:EB:07:F2:96:0F:1B:47 X509v3 Authority Key Identifier: keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:e1:22:f9:cf:97:09:42:e9:4f:f3:c0:e2:ce:ac:54:f9:5b: 3a:b3:9a:d0:40:ee:9f:c6:60:10:a5:01:b5:6e:81:ba:fc:73: a1:17:50:0a:0a:ff:0d:24:81:09:4f:f8:38:4b:f4:7e:dc:7d: 1b:86:35:b5:e7:5b:58:7e:4a:bd:2c:27:e8:73:fd:83:a0:7e: 56:71:d2:1c:ad:f8:87:67:df:b6:32:6a:73:ea:a0:42:14:a4: 9d:4b:92:ed:10:9a:34:c9:46:de:ba:34:f5:4d:90:8b:b0:f0: ca:38:51:a0:54:3e:77:d5:2a:51:39:8f:e7:8b:a6:5c:47:02: cb:70:c3:89:c0:8a:fb:b8:11:1d:15:9c:6a:c2:9c:54:49:9b: bc:ea:e3:20:8e:fb:18:a4:39:cb:3b:b0:0b:91:cc:79:58:9a: e5:04:ee:30:73:eb:8d:ca:2b:dd:df:82:1b:2a:bd:72:78:56: 19:2b:4d:fd:93:3b:ea:6f:1a:b4:bf:b0:63:2c:17:81:7e:9c: 7d:7f:59:68:27:77:72:b7:76:66:49:7d:ed:09:69:62:f8:14: 64:56:d5:72:10:11:80:d2:89:8f:98:36:4b:68:f8:93:07:fc: ab:e9:05:3a:9f:30:cc:68:a3:f1:b6:74:1c:2b:4a:93:d7:8f: 53:ff:fe:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rbEnltn492PsyIJ1len+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTEzM2VhMWU0MGZjMTNlMDc0ZTMyNzcxMGE1MzQ0YTk2 MGI1YzAwHhcNMjYwMTI2MDUwMTMxWhcNMjYwMTI3MDUwMTMxWjAzMTEwLwYDVQQD EygzMWVhNTE4MjM4YjJkN2MzZDllYzE2MDJlMWViMDdmMjk2MGYxYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOuoufJnqOYJyY2/BV63UJVVUwmA KpSWo7KA/yhDtWnKsgbjNJ3TYWpC6RVTx2HhPg6PnH61mZuUQWs7oVzkZCGROpts 2+OVOk5QDxuGXed3/z/ttf45vABE9UKo8VpvkkQNJmRvZWUEEKED2vWCdYF4Y3xw 5KX1A6jjFVQhW1ih4w/Uyvb/+OeEquQ3itPqlKXgyJ4s2ciJzYC+VewcsrsqmGgb mKWyxypwmuoUkGMEtBsiVFe6bznquTYONimMCwkxOKCShKSgKymO/iY7OxKy0ruS /LtMrt+/Jy9cx+vv4JmVkICzgj3UBpOwNFHDnHYsntUiL9mdhgxNCuWq8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHqUYI4stfD2ewWAuHrB/KWDxtHMB8GA1UdIwQY MBaAFHThM+oeQPwT4HTjJ3EKU0SpYLXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMt MmNiOWUyMTcyZjk3LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMtMmNiOWUyMTcyZjk3 LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1+Ei+c+X CULpT/PA4s6sVPlbOrOa0EDun8ZgEKUBtW6BuvxzoRdQCgr/DSSBCU/4OEv0ftx9 G4Y1tedbWH5KvSwn6HP9g6B+VnHSHK34h2fftjJqc+qgQhSknUuS7RCaNMlG3ro0 9U2Qi7DwyjhRoFQ+d9UqUTmP54umXEcCy3DDicCK+7gRHRWcasKcVEmbvOrjII77 GKQ5yzuwC5HMeVia5QTuMHPrjcor3d+CGyq9cnhWGStN/ZM76m8atL+wYywXgX6c fX9ZaCd3crd2Zkl97QlpYvgUZFbVchARgNKJj5g2S2j4kwf8q+kFOp8wzGij8bZ0 HCtKk9ePU//+FQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:55 2026 by rpki-client