This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json) Hash identifier: c7nYECAEtEf0MWlhUHOxGpQSqEy5C3GTgRciVq62YEc= Subject key identifier: 6A:F8:F8:5F:B1:12:71:4D:45:86:B7:5A:3A:D2:20:56:B3:E3:73:9D Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Certificate serial: 019B9E57272D7CBEE05D64F358786041DFE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft Manifest number: 17C3 Signing time: Thu 08 Jan 2026 16:01:10 +0000 Manifest this update: Thu 08 Jan 2026 16:01:10 +0000 Manifest next update: Fri 09 Jan 2026 16:01:10 +0000 Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: YDlcQwyXTtL5hsPkmNee27rpQ79c+zeivc9EBh+Xbhc=) 2: QqdbypBpxrcLYznZBUaAaDr_z-o.roa (hash: SckJVSoL8gUL5QOdfT/4r5cTNoKe863XSPeR8+BnWmM=) 3: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (hash: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:57:27:2d:7c:be:e0:5d:64:f3:58:78:60:41:df:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Validity Not Before: Jan 8 16:01:10 2026 GMT Not After : Jan 9 16:01:10 2026 GMT Subject: CN=6af8f85fb112714d4586b75a3ad22056b3e3739d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:d1:02:ae:83:8d:0d:bd:88:6c:40:0f:6c: 90:4d:d2:e7:93:ca:bf:b7:1d:46:fc:ec:45:9e:60: a7:dd:1f:f5:14:f2:f1:a9:34:9f:fd:b3:2b:31:02: 23:10:9d:fa:67:d4:00:5d:c3:04:c3:d7:cd:2d:3b: 36:49:d9:0e:11:21:36:fc:94:e2:4c:22:18:32:a9: a5:8c:84:66:97:40:88:41:22:d5:0a:a1:e0:4e:10: d8:68:99:f9:d9:a1:91:09:58:3b:b9:72:fb:6f:bd: c0:81:82:df:da:58:e1:2e:ff:1d:dc:01:ae:e4:53: b9:a6:53:b0:51:21:bb:05:be:da:e1:89:78:32:4a: 1b:a7:c9:a7:d9:b7:ac:87:e2:25:f1:95:dd:72:f2: bf:a5:85:88:ac:5b:7c:4d:64:39:68:05:ed:65:03: f5:b1:61:a6:a6:57:11:ab:92:ac:0a:a3:28:c2:0a: 18:6b:cc:bf:61:f7:56:7b:ea:74:3a:a5:b4:1d:c2: f4:73:ed:9d:a7:f8:b5:71:d2:1b:7a:33:35:db:4d: 9b:0c:f5:2c:89:8b:9b:f5:0d:c4:c7:ac:73:10:6d: 44:cb:cb:cc:44:84:a4:c1:1c:b0:67:62:90:6b:6a: 08:93:cd:35:39:35:53:64:45:ed:b5:ae:fb:d1:9f: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F8:F8:5F:B1:12:71:4D:45:86:B7:5A:3A:D2:20:56:B3:E3:73:9D X509v3 Authority Key Identifier: keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c1:da:76:0d:90:38:73:66:c7:b4:e9:ea:65:bb:ab:3e:32: ae:d5:d5:78:cc:c6:c9:fd:54:94:16:e9:af:d1:1b:18:8e:cb: e0:29:c0:7c:58:6a:b9:e4:e3:f3:48:89:f0:78:25:19:fa:bb: 5d:9f:b0:67:6b:9d:bc:90:0e:9b:06:e4:da:4c:74:ae:d4:91: e6:40:7d:d4:20:cd:40:bd:07:51:3c:4d:c8:a7:55:76:ae:e4: f7:ac:cb:1a:66:a6:e3:7b:59:8b:19:47:89:eb:fa:6f:47:3f: 9e:7a:61:94:c7:06:e0:8f:31:68:98:65:03:22:c1:08:95:22: 40:58:48:55:a6:a3:c9:e2:ac:fa:a5:0e:a4:d1:7e:5a:b8:e9: 41:b1:9d:f2:7f:4a:81:fa:5b:a7:da:b3:1f:ff:6e:17:17:42: 8f:29:30:21:7f:7a:57:19:dd:76:4f:8d:59:7a:b1:d4:94:05: b7:30:97:e9:8d:77:b3:dd:6d:b6:4d:22:2c:ec:82:47:7f:3d: 0f:09:69:2b:d7:aa:36:c3:ce:d9:49:5c:2b:a1:6a:7f:eb:46: 8c:14:26:0d:6c:76:17:1e:5d:72:92:c2:b3:92:8b:f3:69:bb: 0a:05:e6:c1:ed:f3:51:e9:d5:0c:fd:27:75:7f:1a:cb:68:50: 3b:e1:54:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZueVyctfL7gXWTzWHhgQd/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5 NGFmNzQwHhcNMjYwMTA4MTYwMTEwWhcNMjYwMTA5MTYwMTEwWjAzMTEwLwYDVQQD Eyg2YWY4Zjg1ZmIxMTI3MTRkNDU4NmI3NWEzYWQyMjA1NmIzZTM3MzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4bRAq6DjQ29iGxAD2yQTdLnk8q/ tx1G/OxFnmCn3R/1FPLxqTSf/bMrMQIjEJ36Z9QAXcMEw9fNLTs2SdkOESE2/JTi TCIYMqmljIRml0CIQSLVCqHgThDYaJn52aGRCVg7uXL7b73AgYLf2ljhLv8d3AGu 5FO5plOwUSG7Bb7a4Yl4Mkobp8mn2besh+Il8ZXdcvK/pYWIrFt8TWQ5aAXtZQP1 sWGmplcRq5KsCqMowgoYa8y/YfdWe+p0OqW0HcL0c+2dp/i1cdIbejM1202bDPUs iYub9Q3Ex6xzEG1Ey8vMRISkwRywZ2KQa2oIk801OTVTZEXtta770Z+LXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGr4+F+xEnFNRYa3WjrSIFaz43OdMB8GA1UdIwQY MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3 LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcHadg2Q OHNmx7Tp6mW7qz4yrtXVeMzGyf1UlBbpr9EbGI7L4CnAfFhqueTj80iJ8HglGfq7 XZ+wZ2udvJAOmwbk2kx0rtSR5kB91CDNQL0HUTxNyKdVdq7k96zLGmam43tZixlH iev6b0c/nnphlMcG4I8xaJhlAyLBCJUiQFhIVaajyeKs+qUOpNF+WrjpQbGd8n9K gfpbp9qzH/9uFxdCjykwIX96Vxnddk+NWXqx1JQFtzCX6Y13s91ttk0iLOyCR389 DwlpK9eqNsPO2UlcK6Fqf+tGjBQmDWx2Fx5dcpLCs5KL82m7CgXmwe3zUenVDP0n dX8ay2hQO+FUQA== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:42 2026 by rpki-client