This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json) Hash identifier: cyTm/+5WxP4ZIW0s15KcR9jLOGd6vu8tFNz/3flPmW8= Subject key identifier: 17:08:04:C1:72:45:C0:B1:5E:DD:A5:0D:5F:9E:83:03:6B:5B:CD:2C Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da Certificate serial: 019BAE38D03A134F8D04B12070657DED4412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft Manifest number: 17BE Signing time: Sun 11 Jan 2026 18:01:57 +0000 Manifest this update: Sun 11 Jan 2026 18:01:57 +0000 Manifest next update: Mon 12 Jan 2026 18:01:57 +0000 Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: cX/XcxTjp6A5TS27CMwK9kZaSgM535FWLtVuH83vr8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:d0:3a:13:4f:8d:04:b1:20:70:65:7d:ed:44:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da Validity Not Before: Jan 11 18:01:57 2026 GMT Not After : Jan 12 18:01:57 2026 GMT Subject: CN=170804c17245c0b15edda50d5f9e83036b5bcd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:50:51:ac:c1:68:21:7e:fa:27:da:06:6b: 73:a8:99:a0:19:90:02:5a:a9:5c:60:6a:fd:c7:83: 57:fe:ab:c9:82:42:2f:79:64:4a:47:75:ff:43:2a: 78:e6:0a:a0:68:89:64:8b:6d:2f:b7:81:a4:14:32: 8a:62:59:b2:08:aa:d8:a5:7d:c3:a0:7f:19:cd:5c: f5:03:90:71:29:0a:5e:3d:f0:c3:ae:ee:09:49:86: c6:a0:31:fb:01:fd:f6:3f:8f:b2:13:12:52:58:d4: 17:9f:26:0b:43:99:47:e4:34:fe:b3:63:35:b4:c1: 49:a0:48:13:50:f9:f1:68:cd:bf:ea:eb:b2:06:10: dc:10:d0:7e:61:6b:7b:66:37:2e:54:73:bd:99:4c: d3:e9:3f:45:1e:57:96:bf:56:24:45:27:08:2a:66: 44:de:0b:a7:85:31:11:4e:57:c0:80:a1:cb:ce:7d: 84:20:27:cf:f1:5b:45:44:02:1a:ac:31:cf:8b:16: ec:75:a3:10:fc:70:51:fd:01:8b:65:13:88:7c:0a: b6:61:95:7a:28:9c:3e:49:63:89:ca:5a:be:49:b6: 26:ae:45:b9:70:7a:4f:55:14:f1:4f:c6:48:d9:2d: 3c:a9:61:73:3f:4f:06:3b:c2:c9:f7:6c:65:a5:22: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:08:04:C1:72:45:C0:B1:5E:DD:A5:0D:5F:9E:83:03:6B:5B:CD:2C X509v3 Authority Key Identifier: keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:60:b0:55:01:fc:60:06:4e:1b:08:b3:53:0f:b9:4f:40:26: ad:62:08:c4:04:6e:6e:dc:1b:87:ce:59:15:44:b0:3a:cb:82: 26:34:3a:fa:43:a9:b4:d0:3c:57:0f:af:77:5f:39:b3:c7:6d: c8:8d:ad:83:76:88:9e:f7:c8:a5:b5:87:3f:79:e7:df:1c:57: 90:2c:ae:3d:65:a0:3e:c6:cb:b0:81:96:54:ea:a4:9d:e8:1b: ba:14:6b:ea:f2:c4:93:93:49:0c:2d:cf:3a:78:f3:c2:1e:8b: ad:f7:aa:20:e8:4d:b3:98:1e:cc:b5:32:de:89:6b:eb:a6:1a: 60:a4:53:99:b9:aa:36:8f:c0:15:e4:35:28:e5:d8:3c:75:8e: 86:a5:b6:92:fa:5a:0f:57:b9:da:f4:b9:9e:38:47:25:3f:72: 84:8b:33:3a:10:53:95:ff:0e:b4:90:49:2d:47:53:6b:71:10: 41:f3:88:6c:8a:96:ee:20:46:dd:32:b4:8e:9b:cd:48:6d:9f: 54:be:4a:4e:1f:a4:bd:df:75:dd:ff:4c:2f:14:60:68:7f:b1: 2a:7a:5f:5d:95:09:e9:45:9f:5e:4e:b0:38:0b:bd:da:34:f8: 07:b8:58:39:c1:fc:76:5c:3a:c8:c6:93:e3:ab:b3:60:7f:e9: 3d:13:9c:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuONA6E0+NBLEgcGV97UQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTFjMGE1YjA0Y2Q0MTlhYzFlZjkyM2JjOGQ2NTcwMzIz MDYxZGEwHhcNMjYwMTExMTgwMTU3WhcNMjYwMTEyMTgwMTU3WjAzMTEwLwYDVQQD EygxNzA4MDRjMTcyNDVjMGIxNWVkZGE1MGQ1ZjllODMwMzZiNWJjZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPdQUazBaCF++ifaBmtzqJmgGZAC WqlcYGr9x4NX/qvJgkIveWRKR3X/Qyp45gqgaIlki20vt4GkFDKKYlmyCKrYpX3D oH8ZzVz1A5BxKQpePfDDru4JSYbGoDH7Af32P4+yExJSWNQXnyYLQ5lH5DT+s2M1 tMFJoEgTUPnxaM2/6uuyBhDcENB+YWt7ZjcuVHO9mUzT6T9FHleWv1YkRScIKmZE 3gunhTERTlfAgKHLzn2EICfP8VtFRAIarDHPixbsdaMQ/HBR/QGLZROIfAq2YZV6 KJw+SWOJylq+SbYmrkW5cHpPVRTxT8ZI2S08qWFzP08GO8LJ92xlpSKptwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcIBMFyRcCxXt2lDV+egwNrW80sMB8GA1UdIwQY MBaAFDnhwKWwTNQZrB75I7yNZXAyMGHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VIQXBiQk0xQm1zSHZranZJMWxjREl3WWRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZmE0MTEtYWY5OC00YWY4LWI1Yjgt NTBlMjJhYjcxZjg0LzEvT2VIQXBiQk0xQm1zSHZranZJMWxjREl3WWRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZmE0MTEtYWY5OC00YWY4LWI1YjgtNTBlMjJhYjcxZjg0 LzEvT2VIQXBiQk0xQm1zSHZranZJMWxjREl3WWRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGCwVQH8 YAZOGwizUw+5T0AmrWIIxARubtwbh85ZFUSwOsuCJjQ6+kOptNA8Vw+vd185s8dt yI2tg3aInvfIpbWHP3nn3xxXkCyuPWWgPsbLsIGWVOqknegbuhRr6vLEk5NJDC3P Onjzwh6LrfeqIOhNs5gezLUy3olr66YaYKRTmbmqNo/AFeQ1KOXYPHWOhqW2kvpa D1e52vS5njhHJT9yhIszOhBTlf8OtJBJLUdTa3EQQfOIbIqW7iBG3TK0jpvNSG2f VL5KTh+kvd913f9MLxRgaH+xKnpfXZUJ6UWfXk6wOAu92jT4B7hYOcH8dlw6yMaT 46uzYH/pPROc6Q== -----END CERTIFICATE-----Generated at Mon Jan 12 00:36:48 2026 by rpki-client