This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json) Hash identifier: W/0HtChCiR8zK+tMePFmBsF4G8KNEHc3zc9CXJj7JI0= Subject key identifier: E0:2C:40:C3:35:9A:BE:BD:79:AC:4E:1D:6C:0B:44:58:83:6A:48:AD Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f Certificate serial: 019BFAD294B4237D4A5AF486722D74326F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft Manifest number: 01BC Signing time: Mon 26 Jan 2026 15:01:03 +0000 Manifest this update: Mon 26 Jan 2026 15:01:03 +0000 Manifest next update: Tue 27 Jan 2026 15:01:03 +0000 Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: DYCtBEGBgSvaqW5aNM+1JExzzUmF2N9uyFBLhikcnaQ=) 2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=) 3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:94:b4:23:7d:4a:5a:f4:86:72:2d:74:32:6f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f Validity Not Before: Jan 26 15:01:03 2026 GMT Not After : Jan 27 15:01:03 2026 GMT Subject: CN=e02c40c3359abebd79ac4e1d6c0b4458836a48ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2a:29:09:db:b8:e8:ef:a4:01:e6:50:18:1f: 8e:a8:c2:c8:f9:66:1b:2f:4b:94:1d:65:9c:b6:fe: 0d:88:7b:04:5e:8c:77:04:a1:ba:b6:62:2e:75:97: 39:5f:9d:75:5c:9a:61:5b:6e:63:6e:3f:34:d8:f7: fb:9c:a0:6c:f2:2f:6e:bb:19:90:29:0d:ca:b0:5d: 5e:8c:b0:86:6f:4a:47:14:a8:5f:ed:ce:d8:d5:79: b6:6f:c4:a3:c2:43:2a:94:e2:7c:38:ee:fc:90:96: d9:bd:55:87:e5:d0:ab:bf:f7:4d:6d:e5:e1:1e:58: 16:da:7e:b7:b3:23:6d:e7:be:6f:6b:81:3e:cc:4e: b7:97:df:75:32:15:83:e5:e4:71:77:30:8f:23:f1: 87:8c:cc:b1:0a:5b:ca:f8:9c:aa:ca:7e:c8:f2:00: 13:1f:6a:ee:b1:30:ed:30:6a:49:7f:05:5e:46:61: 55:e4:e0:5a:68:96:ae:1b:75:3b:de:4f:67:a7:09: ab:9a:5f:1b:f4:31:97:f0:15:fe:2e:07:b8:24:22: 39:d1:d3:6b:f0:3f:08:88:f4:99:39:59:f4:20:4d: 7e:18:f8:51:ad:e2:78:15:dd:28:41:db:b6:0f:f1: 42:1f:6c:a8:9c:f4:8f:ee:6a:f7:c1:01:8e:cb:c0: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2C:40:C3:35:9A:BE:BD:79:AC:4E:1D:6C:0B:44:58:83:6A:48:AD X509v3 Authority Key Identifier: keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2e:1a:35:87:b7:71:18:94:58:3d:ef:e8:51:63:48:23:9f: 68:53:40:e9:ba:11:c7:df:c8:c8:74:40:0c:86:f8:20:c4:46: db:f2:22:a9:4f:64:49:f5:9d:31:d4:92:79:d7:0e:a4:98:32: d6:93:ed:e4:36:bb:c1:53:18:3c:53:bb:b3:6b:63:90:5e:28: db:4e:e0:04:5d:eb:5a:24:be:88:8d:45:32:42:24:ff:8c:c2: ad:95:8e:85:6e:9a:43:e6:f4:f2:1d:f1:fa:d7:4a:29:9d:50: 1c:2f:68:db:5a:92:29:b3:ba:8f:6d:fc:37:1b:5a:49:a9:28: b3:57:45:a4:01:f0:20:16:b1:59:ac:b0:de:2d:1d:b2:98:5e: 6f:93:a5:e2:a8:d6:15:ea:0a:2d:9b:f0:77:b9:06:c7:28:81: 8f:dc:c2:ae:cd:9c:be:71:6b:bb:3a:6d:5e:fb:0f:28:b6:57: a8:39:43:ca:10:88:be:c1:72:6c:69:ee:38:f9:a7:b1:7b:21: 6f:51:ea:b5:cd:3c:ed:db:b7:85:5d:9b:76:2d:8d:b8:16:99: ab:74:80:73:e9:af:a8:12:c4:ed:80:54:57:4a:45:7a:80:ea: d0:cd:c9:22:99:74:e0:a5:21:e1:6b:75:3f:ae:ed:cd:08:84: c7:e2:21:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60pS0I31KWvSGci10Mm8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDczMThhMTMxNDIzM2Y1NjIzYzBmODM1ZmFlMThmOTEy NjQxMmYwHhcNMjYwMTI2MTUwMTAzWhcNMjYwMTI3MTUwMTAzWjAzMTEwLwYDVQQD EyhlMDJjNDBjMzM1OWFiZWJkNzlhYzRlMWQ2YzBiNDQ1ODgzNmE0OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCopCdu46O+kAeZQGB+OqMLI+WYb L0uUHWWctv4NiHsEXox3BKG6tmIudZc5X511XJphW25jbj802Pf7nKBs8i9uuxmQ KQ3KsF1ejLCGb0pHFKhf7c7Y1Xm2b8SjwkMqlOJ8OO78kJbZvVWH5dCrv/dNbeXh HlgW2n63syNt575va4E+zE63l991MhWD5eRxdzCPI/GHjMyxClvK+Jyqyn7I8gAT H2rusTDtMGpJfwVeRmFV5OBaaJauG3U73k9npwmrml8b9DGX8BX+Lge4JCI50dNr 8D8IiPSZOVn0IE1+GPhRreJ4Fd0oQdu2D/FCH2yonPSP7mr3wQGOy8CyYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAsQMM1mr69eaxOHWwLRFiDakitMB8GA1UdIwQY MBaAFDoHMYoTFCM/ViPA+DX64Y+RJkEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMt MDI2YTdiNjU0Zjg4LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMtMDI2YTdiNjU0Zjg4 LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi4aNYe3 cRiUWD3v6FFjSCOfaFNA6boRx9/IyHRADIb4IMRG2/IiqU9kSfWdMdSSedcOpJgy 1pPt5Da7wVMYPFO7s2tjkF4o207gBF3rWiS+iI1FMkIk/4zCrZWOhW6aQ+b08h3x +tdKKZ1QHC9o21qSKbO6j238NxtaSakos1dFpAHwIBaxWayw3i0dspheb5Ol4qjW FeoKLZvwd7kGxyiBj9zCrs2cvnFruzptXvsPKLZXqDlDyhCIvsFybGnuOPmnsXsh b1Hqtc087du3hV2bdi2NuBaZq3SAc+mvqBLE7YBUV0pFeoDq0M3JIpl04KUh4Wt1 P67tzQiEx+IhJg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:37 2026 by rpki-client