This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json) Hash identifier: OmDRWkuqk+Kdgv0seXkJCIyIKyttWMqGlmWeExOQ0Bo= Subject key identifier: 90:FB:D6:51:81:E4:ED:39:4B:B2:26:05:38:34:3C:AC:E4:58:78:50 Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc Certificate serial: 019BFD2E5C5F3CC4C6D8198DC0A545A880B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft Manifest number: 17F1 Signing time: Tue 27 Jan 2026 02:00:32 +0000 Manifest this update: Tue 27 Jan 2026 02:00:32 +0000 Manifest next update: Wed 28 Jan 2026 02:00:32 +0000 Files and hashes: 1: TY6_RErHZwMLwaGjVhsCzV2QsIA.roa (hash: Pen7p5QY0R4eFgeU4z2Sze4YFXIqdZffU0dnu0AuPAk=) 2: b_1Qwkm_dwtq6WHZLgklv_RTWY8.roa (hash: +hT3xYsa619lAWaMx5WmCqSJiQ9WY/MqRSeQbajC3rQ=) 3: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: yfsPu1vjEwS7gvKFVAUpuoQ59ToHq+I8CZqhuxTdOzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:5c:5f:3c:c4:c6:d8:19:8d:c0:a5:45:a8:80:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc Validity Not Before: Jan 27 02:00:32 2026 GMT Not After : Jan 28 02:00:32 2026 GMT Subject: CN=90fbd65181e4ed394bb2260538343cace4587850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:9b:a1:63:95:6a:e4:aa:4e:db:02:85:d0: f4:11:d3:b4:35:86:98:da:01:a7:91:d4:2f:0a:ff: 5e:51:3d:67:2d:be:55:22:a3:04:75:38:03:8d:8c: 4b:e9:46:48:64:fe:ee:dc:fa:e9:f7:0b:6b:27:03: 3d:d4:23:b1:1f:5b:87:38:ec:66:1f:3e:f0:fc:cc: ef:bd:63:b1:fb:73:7a:dd:65:1f:b6:b6:32:08:5d: 69:88:5c:a2:48:75:d1:9f:e1:79:1c:7c:05:08:85: 11:a4:fc:08:6a:19:21:00:c1:8f:32:be:81:b5:48: ee:9d:5b:06:56:4a:fc:11:a6:88:81:24:01:08:96: 0f:8f:06:3f:a5:44:9f:74:13:88:97:67:df:31:5c: af:90:57:f4:41:aa:b7:16:80:48:f7:a1:5b:d3:ee: 6b:f4:f7:81:97:80:e8:ff:3f:ab:29:d0:52:d2:9d: fe:ed:f2:7a:fd:f4:e7:ab:40:76:e0:7b:41:bf:ea: 3a:2b:83:e2:d6:e9:af:f8:9d:1c:8e:ba:17:9d:6b: 1f:58:79:17:20:2f:20:13:81:82:de:4a:26:4c:44: 80:85:ae:79:4d:9d:55:55:c0:c8:35:18:b7:27:09: 07:70:4e:1e:e3:f0:3f:b4:16:2c:bc:e7:09:b5:15: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:D6:51:81:E4:ED:39:4B:B2:26:05:38:34:3C:AC:E4:58:78:50 X509v3 Authority Key Identifier: keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7e:41:aa:79:2b:aa:ad:a8:5c:be:60:3a:38:30:db:6a:c5: 4a:c5:c8:cb:82:a0:14:9a:99:59:46:0a:d2:3b:0e:c3:b9:cb: 3f:56:6c:ba:88:dc:13:c7:cb:77:80:56:4d:6a:e7:ed:98:b7: 70:7e:d2:96:a3:5d:52:13:35:74:4e:c0:e6:2e:50:49:ea:75: 95:13:5c:50:ab:4d:07:5f:da:89:3e:4e:1c:34:fa:61:1c:72: 80:e6:f9:7f:95:4d:20:fc:41:52:d7:b0:59:05:72:65:1a:2d: 18:38:46:97:7e:b8:90:19:dc:01:ca:52:8c:ee:84:51:ab:b6: d9:5f:2e:22:5f:3a:eb:64:5d:60:b6:88:c5:91:d1:e9:a3:37: 26:82:c1:68:11:b1:b7:88:78:76:98:e0:40:34:0f:9d:d0:ab: 34:2c:25:37:23:b1:bf:74:b7:73:e4:f7:f5:9d:0f:46:28:2a: e6:88:ef:a2:48:f3:4a:6d:49:b6:15:5d:34:ce:9a:f0:f5:de: c1:20:74:53:8e:66:50:99:b3:62:1f:7e:05:2e:da:22:80:5f: cb:13:fe:da:ad:ef:e2:1f:98:70:ec:e7:5b:2a:34:2d:9d:d2: 98:2f:e5:57:c1:04:d5:d0:d1:ec:1a:e5:dd:2f:26:08:ed:51: a3:95:74:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LlxfPMTG2BmNwKVFqIC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2 NTBkZGMwHhcNMjYwMTI3MDIwMDMyWhcNMjYwMTI4MDIwMDMyWjAzMTEwLwYDVQQD Eyg5MGZiZDY1MTgxZTRlZDM5NGJiMjI2MDUzODM0M2NhY2U0NTg3ODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteeboWOVauSqTtsChdD0EdO0NYaY 2gGnkdQvCv9eUT1nLb5VIqMEdTgDjYxL6UZIZP7u3Prp9wtrJwM91COxH1uHOOxm Hz7w/MzvvWOx+3N63WUftrYyCF1piFyiSHXRn+F5HHwFCIURpPwIahkhAMGPMr6B tUjunVsGVkr8EaaIgSQBCJYPjwY/pUSfdBOIl2ffMVyvkFf0Qaq3FoBI96Fb0+5r 9PeBl4Do/z+rKdBS0p3+7fJ6/fTnq0B24HtBv+o6K4Pi1umv+J0cjroXnWsfWHkX IC8gE4GC3komTESAha55TZ1VVcDINRi3JwkHcE4e4/A/tBYsvOcJtRWmRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD71lGB5O05S7ImBTg0PKzkWHhQMB8GA1UdIwQY MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut NzkxYzVhODUzOTBkLzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX5Bqnkr qq2oXL5gOjgw22rFSsXIy4KgFJqZWUYK0jsOw7nLP1ZsuojcE8fLd4BWTWrn7Zi3 cH7SlqNdUhM1dE7A5i5QSep1lRNcUKtNB1/aiT5OHDT6YRxygOb5f5VNIPxBUtew WQVyZRotGDhGl364kBncAcpSjO6EUau22V8uIl8662RdYLaIxZHR6aM3JoLBaBGx t4h4dpjgQDQPndCrNCwlNyOxv3S3c+T39Z0PRigq5ojvokjzSm1JthVdNM6a8PXe wSB0U45mUJmzYh9+BS7aIoBfyxP+2q3v4h+YcOznWyo0LZ3SmC/lV8EE1dDR7Brl 3S8mCO1Ro5V0EQ== -----END CERTIFICATE-----Generated at Tue Jan 27 04:17:04 2026 by rpki-client