This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json) Hash identifier: BHOjA0jerXNFQg+KM+c3+0xXyZ+Yb/kEP0oiVHMTunk= Subject key identifier: 55:4E:18:EB:95:1C:B4:C0:EB:99:C4:FF:CB:D7:B2:CA:6F:6F:C4:B0 Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919 Certificate serial: 019BFCF88E64F42909FBF3471AD9E744FEE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 01:01:46 +0000 Manifest this update: Tue 27 Jan 2026 01:01:46 +0000 Manifest next update: Wed 28 Jan 2026 01:01:46 +0000 Files and hashes: 1: 4V6AO3iCByKz-8xLXlPGJ7JN6-U.roa (hash: 2uPt+ClUXX7tGFKQBXaXil7RPudWsmAnzyUlsk5i8AU=) 2: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: 2r6AeKN4RyaF7Get7qih/2t3vkSXIxirryskmw9TjCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:8e:64:f4:29:09:fb:f3:47:1a:d9:e7:44:fe:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919 Validity Not Before: Jan 27 01:01:46 2026 GMT Not After : Jan 28 01:01:46 2026 GMT Subject: CN=554e18eb951cb4c0eb99c4ffcbd7b2ca6f6fc4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:b0:8a:de:48:34:f1:bc:35:65:13:e0:65: 78:0e:15:fd:26:b6:2e:47:fa:ed:f2:11:81:47:f4: b1:c2:43:97:ea:c2:d2:f4:98:7e:82:90:0f:14:1e: 6a:ae:c8:0b:2f:e0:4e:f2:de:b5:d0:cc:38:3c:9d: 14:7f:48:96:4d:11:25:0c:95:3a:1d:ea:a0:a1:cd: 83:35:c5:2c:a6:fd:1f:3a:77:d1:bc:dd:11:9c:55: 24:a2:08:1a:8b:a8:c8:62:65:a4:da:86:87:19:c1: 1d:ef:17:d1:b3:17:c4:f3:da:33:00:a3:4f:32:4d: 25:93:65:e1:7d:f2:d0:ec:af:63:ca:8c:ae:0a:87: 97:10:fa:b8:71:fb:4a:29:ea:dd:0e:7e:ad:23:0b: 6d:af:9d:1c:b0:8c:39:6e:85:ea:89:48:a1:c2:60: 61:6a:d4:ab:9e:c9:e9:a8:27:26:8d:75:b2:7f:32: 2e:8b:53:07:78:c3:05:26:9c:f9:ac:29:9f:dd:21: 34:90:b3:3b:e2:9e:8a:10:e1:45:de:59:4e:49:7f: d8:e1:fe:e5:8e:41:39:a6:7d:12:50:4c:f7:49:5a: 09:b8:70:43:02:51:be:e2:75:dd:34:a1:b7:e9:db: 4d:00:c9:89:4a:27:2d:74:9e:41:bb:70:bc:c4:52: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4E:18:EB:95:1C:B4:C0:EB:99:C4:FF:CB:D7:B2:CA:6F:6F:C4:B0 X509v3 Authority Key Identifier: keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7c:41:55:fb:22:2c:c7:ae:75:75:a7:6e:4a:96:20:04:8f: 3a:35:bc:55:9f:5c:59:9c:f1:92:01:c4:96:03:c8:17:26:8b: 36:dd:2d:e5:7d:02:84:5c:53:94:27:d5:73:44:98:03:d4:10: 29:e7:ad:b0:de:93:32:04:c8:ba:b1:52:06:93:56:14:f0:99: f5:73:ff:4a:a4:96:6a:e4:c3:ab:a4:a4:a0:c3:f8:46:08:e6: 36:aa:81:db:d6:98:41:ea:7d:90:6c:98:71:3c:94:4d:80:a3: 66:60:05:e3:aa:d6:b2:ef:1e:38:19:84:67:8f:de:f4:02:72: 48:d5:62:6e:c9:93:ba:11:41:64:1b:33:4b:a9:a7:96:8f:05: 23:aa:87:f3:23:8a:9b:6f:0f:af:9c:73:80:6b:ba:d8:64:25: ae:3d:d5:95:e9:b1:82:98:35:77:61:92:c1:60:05:bb:67:19: 32:18:f6:60:77:2b:07:ed:06:7c:d8:09:e1:34:77:88:2a:45: 0c:de:bb:fc:c0:7c:52:94:8b:ab:55:47:80:97:d6:d5:61:44: 59:fc:f1:db:5c:db:f2:aa:5a:20:cf:80:84:a2:af:58:36:26: 14:b7:00:f2:69:bd:47:04:e4:a6:6a:e5:b5:1b:79:fa:80:3e: 05:15:04:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+I5k9CkJ+/NHGtnnRP7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDM3ZmMzMWVmZDM3MDNiZjJjNGMzZTg4YmMzYzFjZmI0 Nzk5MTkwHhcNMjYwMTI3MDEwMTQ2WhcNMjYwMTI4MDEwMTQ2WjAzMTEwLwYDVQQD Eyg1NTRlMThlYjk1MWNiNGMwZWI5OWM0ZmZjYmQ3YjJjYTZmNmZjNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPCwit5INPG8NWUT4GV4DhX9JrYu R/rt8hGBR/SxwkOX6sLS9Jh+gpAPFB5qrsgLL+BO8t610Mw4PJ0Uf0iWTRElDJU6 Heqgoc2DNcUspv0fOnfRvN0RnFUkoggai6jIYmWk2oaHGcEd7xfRsxfE89ozAKNP Mk0lk2XhffLQ7K9jyoyuCoeXEPq4cftKKerdDn6tIwttr50csIw5boXqiUihwmBh atSrnsnpqCcmjXWyfzIui1MHeMMFJpz5rCmf3SE0kLM74p6KEOFF3llOSX/Y4f7l jkE5pn0SUEz3SVoJuHBDAlG+4nXdNKG36dtNAMmJSictdJ5Bu3C8xFLfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVOGOuVHLTA65nE/8vXsspvb8SwMB8GA1UdIwQY MBaAFKLTf8Me/TcDvyxMPoi8PBz7R5kZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEt MzMzOTkwODAyNzBmLzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEtMzMzOTkwODAyNzBm LzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3xBVfsi LMeudXWnbkqWIASPOjW8VZ9cWZzxkgHElgPIFyaLNt0t5X0ChFxTlCfVc0SYA9QQ KeetsN6TMgTIurFSBpNWFPCZ9XP/SqSWauTDq6SkoMP4RgjmNqqB29aYQep9kGyY cTyUTYCjZmAF46rWsu8eOBmEZ4/e9AJySNVibsmTuhFBZBszS6mnlo8FI6qH8yOK m28Pr5xzgGu62GQlrj3Vlemxgpg1d2GSwWAFu2cZMhj2YHcrB+0GfNgJ4TR3iCpF DN67/MB8UpSLq1VHgJfW1WFEWfzx21zb8qpaIM+AhKKvWDYmFLcA8mm9RwTkpmrl tRt5+oA+BRUEWw== -----END CERTIFICATE-----Generated at Tue Jan 27 04:27:22 2026 by rpki-client