This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json) Hash identifier: oc4ypFGwfRPp0Adsij2LBrefI+vW8tuh4EnbQxNle3E= Subject key identifier: 2F:AF:89:D5:E7:CC:92:A5:EF:AE:72:99:42:52:62:37:0E:57:62:8A Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d Certificate serial: 019BFE7859DC4FFBF9CA654C915F832123F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft Manifest number: 17FD Signing time: Tue 27 Jan 2026 08:00:58 +0000 Manifest this update: Tue 27 Jan 2026 08:00:58 +0000 Manifest next update: Wed 28 Jan 2026 08:00:58 +0000 Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=) 2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=) 3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: i+v2y6zW8RnaT8yoxy0JgPutlt61Pe+79bfR/72V+s8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:59:dc:4f:fb:f9:ca:65:4c:91:5f:83:21:23:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d Validity Not Before: Jan 27 08:00:58 2026 GMT Not After : Jan 28 08:00:58 2026 GMT Subject: CN=2faf89d5e7cc92a5efae7299425262370e57628a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:1d:99:23:d0:b0:1c:36:01:b6:4c:2b:d0: f0:df:a1:d2:96:37:7f:c7:39:55:37:24:ab:cc:75: 55:69:df:84:ac:8c:d6:bf:fe:28:29:22:84:ce:92: 89:8c:76:6e:a4:1d:ec:88:f3:8c:7b:ff:9f:3f:1a: 9f:0c:05:e9:2a:53:33:99:db:40:ee:0c:e4:e6:03: 93:06:d7:ac:a0:c7:8a:f9:35:16:86:61:08:b2:b3: cc:3b:ff:5e:b4:fc:77:37:7f:f2:bb:31:2d:fb:b0: a8:b4:c9:e3:fc:37:0e:90:5e:e2:58:bc:3f:6b:bb: 4a:ea:4d:a2:b4:17:8d:ed:9d:e0:4a:af:07:e3:e5: 67:a7:55:c7:7a:90:fc:a7:2a:ee:d4:8e:9c:79:67: 9c:2e:36:e4:7b:81:c4:21:29:ee:ae:56:9b:7b:3f: c6:4b:8f:f1:c4:87:38:1b:07:62:0b:86:3b:33:d7: 8d:c0:bd:a8:a2:81:44:97:91:16:82:6f:4b:27:9a: 75:ad:0a:2f:88:e4:0c:51:bb:c4:2e:d5:d6:2b:3c: c1:92:fe:34:b1:34:9e:40:49:b3:32:33:5b:db:73: a5:5e:d3:64:f7:9d:97:33:91:b5:6f:3f:ff:a0:13: d6:7f:f5:52:34:ff:aa:b0:6a:c2:01:30:50:98:4b: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AF:89:D5:E7:CC:92:A5:EF:AE:72:99:42:52:62:37:0E:57:62:8A X509v3 Authority Key Identifier: keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c0:8d:f5:30:3d:c6:fb:49:55:3a:8d:fb:d3:1e:fc:ef:e0: b6:39:7b:96:fe:8a:5f:74:a2:eb:8d:68:15:51:1a:11:53:9c: 8c:55:6e:cf:39:0a:c3:74:64:e4:e4:33:d4:19:17:57:72:59: 26:45:e6:7c:5c:db:95:d0:38:85:44:da:d9:6f:77:f2:fd:06: 70:09:df:31:6e:ff:e1:b8:11:62:32:0b:c9:d9:aa:00:67:7b: d1:9a:4c:33:19:48:a2:65:f0:a4:8d:2a:99:6e:76:37:3e:29: 7b:2e:df:41:26:9a:68:89:cd:51:f7:64:e3:fd:ea:10:43:22: b7:2d:35:c7:e8:60:9b:1a:80:9f:22:c1:f0:fa:bf:f3:49:0a: 22:c8:93:ad:bf:f3:a4:bc:9f:b7:d5:da:3b:7a:f0:e7:bb:86: 8a:85:41:d9:62:90:b9:80:0c:f6:23:88:39:17:61:bd:5d:0c: 85:da:cf:5c:73:c7:44:6f:c2:9a:b9:cb:5f:1c:7b:99:c5:b2: 4f:dd:c1:e1:a9:95:0a:f1:3d:f6:ce:f7:75:6d:a2:40:fb:1e: 3a:23:81:8e:77:4f:ed:e9:04:e6:4a:1d:3d:22:ba:77:af:ac: 47:4c:ad:0b:5b:27:77:c7:e6:fa:07:29:d0:d6:a0:66:dd:f6: 7d:75:c0:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eFncT/v5ymVMkV+DISP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0 ZGQ0N2QwHhcNMjYwMTI3MDgwMDU4WhcNMjYwMTI4MDgwMDU4WjAzMTEwLwYDVQQD EygyZmFmODlkNWU3Y2M5MmE1ZWZhZTcyOTk0MjUyNjIzNzBlNTc2MjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqgdmSPQsBw2AbZMK9Dw36HSljd/ xzlVNySrzHVVad+ErIzWv/4oKSKEzpKJjHZupB3siPOMe/+fPxqfDAXpKlMzmdtA 7gzk5gOTBtesoMeK+TUWhmEIsrPMO/9etPx3N3/yuzEt+7CotMnj/DcOkF7iWLw/ a7tK6k2itBeN7Z3gSq8H4+Vnp1XHepD8pyru1I6ceWecLjbke4HEISnurlabez/G S4/xxIc4GwdiC4Y7M9eNwL2oooFEl5EWgm9LJ5p1rQoviOQMUbvELtXWKzzBkv40 sTSeQEmzMjNb23OlXtNk952XM5G1bz//oBPWf/VSNP+qsGrCATBQmEuzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+vidXnzJKl765ymUJSYjcOV2KKMB8GA1UdIwQY MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt NjkzYmY2N2U2MWYzLzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8CN9TA9 xvtJVTqN+9Me/O/gtjl7lv6KX3Si641oFVEaEVOcjFVuzzkKw3Rk5OQz1BkXV3JZ JkXmfFzbldA4hUTa2W938v0GcAnfMW7/4bgRYjILydmqAGd70ZpMMxlIomXwpI0q mW52Nz4pey7fQSaaaInNUfdk4/3qEEMity01x+hgmxqAnyLB8Pq/80kKIsiTrb/z pLyft9XaO3rw57uGioVB2WKQuYAM9iOIORdhvV0MhdrPXHPHRG/CmrnLXxx7mcWy T93B4amVCvE99s73dW2iQPseOiOBjndP7ekE5kodPSK6d6+sR0ytC1snd8fm+gcp 0NagZt32fXXAnA== -----END CERTIFICATE-----Generated at Tue Jan 27 11:23:59 2026 by rpki-client