This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft File: PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json) Hash identifier: Q7QQbpvQdUnDInvtStnpjDowRyT84OvGKBNIHBsTZoM= Subject key identifier: 93:45:74:0A:45:49:E4:BF:22:03:DA:28:18:95:8A:C3:A6:40:6A:EC Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Certificate serial: 019BFB0A38C6DBBF66445ACFC29A2DD54F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 16:01:49 +0000 Manifest this update: Mon 26 Jan 2026 16:01:49 +0000 Manifest next update: Tue 27 Jan 2026 16:01:49 +0000 Files and hashes: 1: HgjQlaKjOcxyBGYejwW2nEs1AV4.roa (hash: A/JVdLkAtd7xSgRJY34UCglbvZrgY4rTBx9M0XvHris=) 2: KbPCfCpgY4busEPKG3wKIKYL4ts.roa (hash: /r3wKFeByv8IWPnZi01I5rTvuzXRQVBcL8LQjvMalwY=) 3: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: y90SuiHkGpBe1hfSXG2aBVMaIhkQbp8FJI11M1yHwzk=) 4: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (hash: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M=) 5: VVHWjLC5gXhkxNQ7IVFDXzmzeZI.roa (hash: xCZynqZw2sX0L0GEOZPMQ2Okzgf6Cs5V0s8Gbvable4=) 6: na7v2RTX0iJO5QICr8PmbCw-LUM.roa (hash: jwROABglDlbIBf0fqlrQ82IKxKEdLiyV166j/7Y15oM=) 7: ycbxLoTJEDsv40EPKCzklrp5vCU.roa (hash: ik9FtWC2uSrCFeO2vECTjX7gm9PiFa3XhpXGDwO8G94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:38:c6:db:bf:66:44:5a:cf:c2:9a:2d:d5:4f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Validity Not Before: Jan 26 16:01:49 2026 GMT Not After : Jan 27 16:01:49 2026 GMT Subject: CN=9345740a4549e4bf2203da2818958ac3a6406aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:20:a7:fd:02:d4:22:98:46:13:f6:9e:9f: b8:7b:8d:39:83:c9:89:fd:2f:9a:e9:7f:73:eb:21: 50:dd:42:b7:4b:33:ee:5a:7c:79:09:78:b6:b8:93: a3:1c:0b:20:ce:bc:f1:a1:a0:a6:a7:9a:5d:23:a5: 6f:25:fc:a6:b7:e8:98:58:25:26:fc:0b:c4:ad:2b: 7b:10:46:65:7a:ab:ed:2a:10:58:dc:7f:27:c5:78: 9b:6c:23:df:20:c7:a2:48:ac:48:b9:56:d9:5b:d1: 44:30:df:21:30:8d:24:e8:f1:ba:91:b2:de:e2:b4: a6:5b:b8:70:a5:8f:58:e4:56:08:0b:04:e4:af:3b: 34:dc:22:bc:f4:63:f7:e7:e2:fa:6c:36:a9:79:c5: bd:05:66:62:2f:aa:fc:66:0c:ce:b2:d5:96:c7:fd: 9a:ad:52:72:28:51:61:c1:e7:4d:45:07:c6:ff:8f: 04:e0:c2:e0:d2:89:fc:8b:7f:96:52:4b:7b:b5:83: 41:32:5f:b6:16:c2:61:9e:06:9a:0b:0f:8a:72:9f: 9e:ab:a6:f4:6a:a3:bb:f6:6a:d6:50:cb:c5:cb:df: 80:61:2f:64:97:f8:ce:7c:28:b4:7a:42:24:6e:43: 03:3e:f5:89:a4:a3:bc:8e:81:18:c8:1f:6a:de:1b: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:45:74:0A:45:49:E4:BF:22:03:DA:28:18:95:8A:C3:A6:40:6A:EC X509v3 Authority Key Identifier: keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ff:d6:a8:2f:7e:cd:37:7a:7f:b8:20:37:79:b5:07:5c:dd: fb:61:aa:f3:24:0c:fd:b3:23:05:61:ef:0c:02:9f:ed:5f:51: f5:b2:13:4f:07:d5:1c:f2:94:26:25:1d:f6:e2:0a:3a:99:f8: a2:c1:2c:51:1b:9a:d6:f0:70:37:89:38:4f:4d:c4:2c:54:94: 75:c0:14:13:26:61:b6:04:ec:bc:ef:69:8c:2d:18:6f:f4:22: 17:0f:4c:30:e3:90:fb:d0:95:9e:13:dd:30:0a:64:f1:32:5f: 93:6b:95:a1:2a:4d:91:b1:8d:35:b2:09:6e:85:52:27:c2:a7: 25:c6:e3:60:80:cc:54:72:0e:f3:d9:30:66:d5:ec:ab:68:f1: 85:0f:d8:ea:86:b8:54:f9:c0:ac:26:8d:a8:6b:3e:2c:db:d7: 13:74:49:a3:18:49:b8:fb:a2:17:13:c9:a2:2e:f4:6d:00:00: 9a:b8:a8:b7:09:41:cb:0e:0e:d7:b2:ca:90:8f:0e:e6:41:7d: 00:e1:cd:a1:42:17:72:9c:11:70:42:01:cc:53:79:e4:09:2c: 99:e8:9f:20:a4:f5:ce:1c:60:8d:f4:36:f0:58:63:48:85:d8: 0f:97:0a:00:05:0b:87:54:c6:07:cb:f1:d0:30:e7:bf:21:31: 45:50:d1:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CjjG279mRFrPwpot1U+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx NGRiYjMwHhcNMjYwMTI2MTYwMTQ5WhcNMjYwMTI3MTYwMTQ5WjAzMTEwLwYDVQQD Eyg5MzQ1NzQwYTQ1NDllNGJmMjIwM2RhMjgxODk1OGFjM2E2NDA2YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Ugp/0C1CKYRhP2np+4e405g8mJ /S+a6X9z6yFQ3UK3SzPuWnx5CXi2uJOjHAsgzrzxoaCmp5pdI6VvJfymt+iYWCUm /AvErSt7EEZleqvtKhBY3H8nxXibbCPfIMeiSKxIuVbZW9FEMN8hMI0k6PG6kbLe 4rSmW7hwpY9Y5FYICwTkrzs03CK89GP35+L6bDapecW9BWZiL6r8ZgzOstWWx/2a rVJyKFFhwedNRQfG/48E4MLg0on8i3+WUkt7tYNBMl+2FsJhngaaCw+Kcp+eq6b0 aqO79mrWUMvFy9+AYS9kl/jOfCi0ekIkbkMDPvWJpKO8joEYyB9q3hu5BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNFdApFSeS/IgPaKBiVisOmQGrsMB8GA1UdIwQY MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt NzMyNDkxMzk3NWQ1LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1 LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf/WqC9+ zTd6f7ggN3m1B1zd+2Gq8yQM/bMjBWHvDAKf7V9R9bITTwfVHPKUJiUd9uIKOpn4 osEsURua1vBwN4k4T03ELFSUdcAUEyZhtgTsvO9pjC0Yb/QiFw9MMOOQ+9CVnhPd MApk8TJfk2uVoSpNkbGNNbIJboVSJ8KnJcbjYIDMVHIO89kwZtXsq2jxhQ/Y6oa4 VPnArCaNqGs+LNvXE3RJoxhJuPuiFxPJoi70bQAAmriotwlByw4O17LKkI8O5kF9 AOHNoUIXcpwRcEIBzFN55AksmeifIKT1zhxgjfQ28FhjSIXYD5cKAAULh1TGB8vx 0DDnvyExRVDRrA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:28 2026 by rpki-client