This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json) Hash identifier: vHFBal754JT9b8XWEQrzWchOk6InoiGiw2yxrv52W7Y= Subject key identifier: BF:2F:CF:AB:F0:EB:96:8A:E1:AC:C0:1E:0C:91:07:0D:22:40:4C:D1 Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b Certificate serial: 019BFBAEAB36F74D834EF20FDF24B72690F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft Manifest number: 0486 Signing time: Mon 26 Jan 2026 19:01:26 +0000 Manifest this update: Mon 26 Jan 2026 19:01:26 +0000 Manifest next update: Tue 27 Jan 2026 19:01:26 +0000 Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: 6pjlQz8EKY5If/2IB/ny//DAX8iRaxqygTEfK1lq+QE=) 2: VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa (hash: sfB+nZS7Puz64duDQmVXVvH/Ydql31OyVDJAMGHxmwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:ab:36:f7:4d:83:4e:f2:0f:df:24:b7:26:90:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b Validity Not Before: Jan 26 19:01:26 2026 GMT Not After : Jan 27 19:01:26 2026 GMT Subject: CN=bf2fcfabf0eb968ae1acc01e0c91070d22404cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:ad:65:00:c4:4f:58:08:6c:80:2a:b3:cc: 72:8b:6a:a3:b2:c3:fd:f2:43:1f:9a:64:22:e0:72: 3b:c3:19:bd:55:80:07:38:d1:17:40:e2:6d:ef:fb: 0d:1c:f9:3d:dd:f1:3e:59:3d:f3:b0:9f:f8:f2:11: 57:2d:8d:bb:7b:89:0a:ee:b7:21:15:3e:8c:59:a4: 3c:f8:b7:15:63:dd:69:9f:a0:71:2b:87:55:37:1d: 97:57:29:ca:6b:94:5b:62:b8:48:39:b9:8e:8d:f9: 52:e3:13:8e:c1:d5:26:20:7d:85:8c:db:cb:45:a6: f9:eb:1a:ba:0f:a4:b6:9c:97:30:5a:78:6b:d9:2e: 88:65:63:f5:8c:c0:90:8a:0d:c0:d7:78:f4:9b:d1: 8c:22:6e:f5:85:f4:6e:4b:f6:3c:ab:3a:d4:98:a2: 13:c6:3a:96:11:93:34:5e:90:fe:cc:e9:c5:95:84: 06:de:c9:3e:63:79:0b:0a:4b:7e:5b:03:0b:68:07: 36:98:d8:30:8d:50:d8:0d:65:a7:ce:1c:3b:52:6f: 0c:4c:7e:c6:47:11:48:dc:31:41:1c:c9:c1:2e:2c: a2:28:b8:a1:b0:c5:d1:73:81:14:fd:1d:c2:45:78: a3:36:a3:8f:8f:ba:ad:ca:eb:da:7a:96:b9:c5:14: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2F:CF:AB:F0:EB:96:8A:E1:AC:C0:1E:0C:91:07:0D:22:40:4C:D1 X509v3 Authority Key Identifier: keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ae:45:e7:2f:0f:1c:2a:c3:a4:a2:03:0c:44:9c:08:e5:38: e6:59:95:11:42:f1:81:13:d3:55:1d:a1:f8:e0:5f:64:b2:19: 42:7c:f0:75:37:b1:ba:ab:aa:73:27:85:bd:43:74:f6:34:4f: 19:98:ea:c0:60:45:cf:20:b7:3d:aa:80:c6:9d:ca:ac:b2:1f: 31:9d:cb:c5:27:89:b7:29:dc:c4:35:db:b5:18:aa:a5:09:cb: 91:62:9f:3c:76:56:1f:a6:59:fa:41:80:be:f5:c3:98:8e:42: 76:71:d3:e4:75:77:0f:2d:91:2c:22:ab:a4:f1:bd:06:40:c7: 3e:56:97:83:62:b6:cf:a9:13:95:0f:d4:d6:9d:0f:e9:1d:34: 80:b9:c7:80:be:6c:b7:66:c8:5b:15:0c:e6:38:e4:dd:5c:b1: 1b:52:7f:30:6e:f0:80:39:1e:df:6f:f4:31:2b:9b:a0:4d:54: 59:ed:6c:50:b8:f5:05:d6:7a:0e:fd:4d:81:62:ec:a3:01:32: 6d:89:ae:06:e7:fa:df:63:9a:37:1e:d9:f7:b6:4c:36:36:69: 28:2f:c7:f6:86:e6:ac:29:81:e1:a7:53:96:70:29:b6:fc:74: d4:de:09:c7:0d:60:ff:79:fc:10:d4:15:fc:48:57:42:3e:c7: 28:56:7c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rqs2902DTvIP3yS3JpD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2UzZDQ3NGE3NzVjZTQ3NzYzNzE2MzJiYzE5NmNhMWY0 ZWMyM2IwHhcNMjYwMTI2MTkwMTI2WhcNMjYwMTI3MTkwMTI2WjAzMTEwLwYDVQQD EyhiZjJmY2ZhYmYwZWI5NjhhZTFhY2MwMWUwYzkxMDcwZDIyNDA0Y2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywOtZQDET1gIbIAqs8xyi2qjssP9 8kMfmmQi4HI7wxm9VYAHONEXQOJt7/sNHPk93fE+WT3zsJ/48hFXLY27e4kK7rch FT6MWaQ8+LcVY91pn6BxK4dVNx2XVynKa5RbYrhIObmOjflS4xOOwdUmIH2FjNvL Rab56xq6D6S2nJcwWnhr2S6IZWP1jMCQig3A13j0m9GMIm71hfRuS/Y8qzrUmKIT xjqWEZM0XpD+zOnFlYQG3sk+Y3kLCkt+WwMLaAc2mNgwjVDYDWWnzhw7Um8MTH7G RxFI3DFBHMnBLiyiKLihsMXRc4EU/R3CRXijNqOPj7qtyuvaepa5xRRDrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8vz6vw65aK4azAHgyRBw0iQEzRMB8GA1UdIwQY MBaAFDvOPUdKd1zkd2NxYyvBlsofTsI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEt NjNjYzZjNjdjOTk1LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEtNjNjYzZjNjdjOTk1 LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWa5F5y8P HCrDpKIDDEScCOU45lmVEULxgRPTVR2h+OBfZLIZQnzwdTexuquqcyeFvUN09jRP GZjqwGBFzyC3PaqAxp3KrLIfMZ3LxSeJtyncxDXbtRiqpQnLkWKfPHZWH6ZZ+kGA vvXDmI5CdnHT5HV3Dy2RLCKrpPG9BkDHPlaXg2K2z6kTlQ/U1p0P6R00gLnHgL5s t2bIWxUM5jjk3VyxG1J/MG7wgDke32/0MSuboE1UWe1sULj1BdZ6Dv1NgWLsowEy bYmuBuf632OaNx7Z97ZMNjZpKC/H9obmrCmB4adTlnAptvx01N4Jxw1g/3n8ENQV /EhXQj7HKFZ8eg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:21:15 2026 by rpki-client