This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft File: oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json) Hash identifier: lO6282/k+Rbmo1ueJ0ypb7t5vI+Efa6XFXF6oMgN6CI= Subject key identifier: 63:96:35:9B:FD:11:F4:A4:74:6C:CC:34:1C:A0:84:94:E8:D6:03:C2 Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Certificate serial: 019C010BA7C4A7DB9A346DAE39140EFFDAA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft Manifest number: BF Signing time: Tue 27 Jan 2026 20:01:06 +0000 Manifest this update: Tue 27 Jan 2026 20:01:06 +0000 Manifest next update: Wed 28 Jan 2026 20:01:06 +0000 Files and hashes: 1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=) 2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: 87RReFkfngUcP3id9iHwY/qK9FjzrNVCKSyIj+m+x+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:0b:a7:c4:a7:db:9a:34:6d:ae:39:14:0e:ff:da:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Validity Not Before: Jan 27 20:01:06 2026 GMT Not After : Jan 28 20:01:06 2026 GMT Subject: CN=6396359bfd11f4a4746ccc341ca08494e8d603c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:62:5f:28:f5:52:ce:f9:c9:05:e9:69:39:b6: eb:32:e4:76:8f:05:5f:cc:5b:37:91:83:ca:db:93: 45:e0:f9:d4:76:5b:79:7b:6e:01:2e:b1:ea:20:f1: 20:95:dc:54:e6:a9:c3:f0:c7:a9:19:b2:59:21:15: ad:48:9c:0a:07:ba:26:22:0d:f9:47:a7:b4:01:d1: 28:0a:43:de:08:40:91:e0:90:86:37:ce:42:d2:d4: 4c:4d:51:47:09:04:dc:fe:96:7b:18:61:0e:34:66: 26:dc:1b:07:65:c2:14:26:ad:52:b2:bf:40:98:e9: 96:0e:b2:e8:97:48:69:f8:b5:c7:cd:05:a4:51:2d: 74:43:36:1a:46:c1:2b:6d:37:0e:1b:75:cb:14:8a: 5f:05:3c:ce:6b:1e:13:eb:f4:50:a7:2b:01:62:c3: 40:9d:88:e3:19:f9:a3:d0:63:33:ab:88:e4:39:e2: a6:2e:42:14:1a:18:5d:28:6d:da:74:a0:da:25:7a: 5b:f2:20:4a:c3:16:24:98:cc:50:4e:6c:9e:39:ce: f0:29:b0:ac:59:63:fb:e3:9e:67:8b:69:b5:12:5a: 99:bf:bf:cb:81:d0:ee:34:c5:3a:a0:97:a9:7c:09: 07:7b:9d:0e:ec:89:60:f7:c2:dc:07:d0:a5:9d:e9: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:96:35:9B:FD:11:F4:A4:74:6C:CC:34:1C:A0:84:94:E8:D6:03:C2 X509v3 Authority Key Identifier: keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:67:6b:7b:ad:97:a2:1e:81:42:2d:e6:48:47:d4:6c:7e:00: e0:e4:ce:38:ae:a0:83:11:f7:87:a1:b9:4b:08:2b:04:c3:7b: 0a:08:fc:72:5b:72:25:c0:ba:62:c1:0a:e2:2c:d3:00:81:c1: 0f:85:cb:36:b1:43:7f:03:bc:0e:09:3e:6d:0b:c6:61:12:59: 27:44:f1:0a:4f:62:4c:63:8c:15:64:d8:5e:a1:82:3b:89:19: 1e:8f:13:99:24:b1:c1:53:25:e9:6a:82:c0:af:01:80:1e:8a: 5f:2b:02:e2:d8:ca:e7:ec:91:8e:33:ed:2f:ad:37:9e:41:18: 2c:b9:ba:70:a4:df:c8:42:c5:c8:1d:69:2c:df:60:3c:e5:80: 79:d8:98:6d:81:65:a3:1f:8e:52:14:0d:a2:bc:e1:a7:a2:8e: 41:21:92:b2:ca:4c:8a:05:c3:3a:91:ca:f5:93:5c:61:e7:af: 34:09:fb:5f:9a:7e:a4:af:4f:af:a1:10:14:b5:e4:0f:9a:f9: 37:01:bc:1d:b3:ec:c5:c4:bf:88:73:f0:8d:1c:16:1b:26:0c: 68:27:4f:d9:70:09:6f:d8:ed:21:85:83:7e:fb:5a:62:b5:ef: af:7e:c0:98:e6:de:82:e6:45:73:ea:0b:cc:df:61:ce:99:c2: 75:7d:3b:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwBC6fEp9uaNG2uORQO/9qhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI3YjcxOTU0ZWRmZmNhMzU4NGM4NWZhMDhmYjEyMjQy ZmVjZDUwHhcNMjYwMTI3MjAwMTA2WhcNMjYwMTI4MjAwMTA2WjAzMTEwLwYDVQQD Eyg2Mzk2MzU5YmZkMTFmNGE0NzQ2Y2NjMzQxY2EwODQ5NGU4ZDYwM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWJfKPVSzvnJBelpObbrMuR2jwVf zFs3kYPK25NF4PnUdlt5e24BLrHqIPEgldxU5qnD8MepGbJZIRWtSJwKB7omIg35 R6e0AdEoCkPeCECR4JCGN85C0tRMTVFHCQTc/pZ7GGEONGYm3BsHZcIUJq1Ssr9A mOmWDrLol0hp+LXHzQWkUS10QzYaRsErbTcOG3XLFIpfBTzOax4T6/RQpysBYsNA nYjjGfmj0GMzq4jkOeKmLkIUGhhdKG3adKDaJXpb8iBKwxYkmMxQTmyeOc7wKbCs WWP7455ni2m1ElqZv7/LgdDuNMU6oJepfAkHe50O7Ilg98LcB9ClnemwpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOWNZv9EfSkdGzMNByghJTo1gPCMB8GA1UdIwQY MBaAFKHre3GVTt/8o1hMhfoI+xIkL+zVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMt MGVkMTdhNjk4MDBmLzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMtMGVkMTdhNjk4MDBm LzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmdre62X oh6BQi3mSEfUbH4A4OTOOK6ggxH3h6G5SwgrBMN7Cgj8cltyJcC6YsEK4izTAIHB D4XLNrFDfwO8Dgk+bQvGYRJZJ0TxCk9iTGOMFWTYXqGCO4kZHo8TmSSxwVMl6WqC wK8BgB6KXysC4tjK5+yRjjPtL603nkEYLLm6cKTfyELFyB1pLN9gPOWAediYbYFl ox+OUhQNorzhp6KOQSGSsspMigXDOpHK9ZNcYeevNAn7X5p+pK9Pr6EQFLXkD5r5 NwG8HbPsxcS/iHPwjRwWGyYMaCdP2XAJb9jtIYWDfvtaYrXvr37AmObeguZFc+oL zN9hzpnCdX076w== -----END CERTIFICATE-----Generated at Wed Jan 28 02:32:35 2026 by rpki-client