This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json) Hash identifier: l3Whp7pFau92ejbRdYqwcQIInqa6cYRNwrZ7dVPlFKY= Subject key identifier: 6B:BA:47:1D:E0:61:09:1B:AA:16:7C:8F:A9:27:0A:EE:37:72:68:47 Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Certificate serial: 019B9E8DDE11A959920E25A2FF07D03407BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft Manifest number: 0100 Signing time: Thu 08 Jan 2026 17:00:56 +0000 Manifest this update: Thu 08 Jan 2026 17:00:56 +0000 Manifest next update: Fri 09 Jan 2026 17:00:56 +0000 Files and hashes: 1: 55KKjKcQLAiKHyLfRXd8THHBm7E.roa (hash: Zdgu4/3X2vJw//wqqWZ/GedlI5kEMUP7EA+P2fQ6mqg=) 2: RrTe8QV_gMsJ1Tl-RiSkuV05pTQ.roa (hash: 4Oj4O0lJnbS0vIhCNkku9oof6OJDYClFor4irkWJmcw=) 3: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: DZM/D1MAR3vIPBF9+d8yWQzdZ3S3cyvxKlHSroN7Gwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:8d:de:11:a9:59:92:0e:25:a2:ff:07:d0:34:07:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Validity Not Before: Jan 8 17:00:56 2026 GMT Not After : Jan 9 17:00:56 2026 GMT Subject: CN=6bba471de061091baa167c8fa9270aee37726847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:b0:5c:6f:b4:0c:bf:d2:13:bb:8e:8d:58: 4f:17:2e:42:e1:fc:89:ad:88:8e:e6:5e:38:ca:b1: d5:91:1b:d0:3a:5d:56:32:0a:1b:c0:94:78:78:df: 68:aa:07:c5:0d:b9:f6:6f:97:8d:a6:2a:41:d8:66: 46:8d:7c:3e:48:d1:5f:a1:0c:d0:2b:f0:91:f1:c9: e9:5a:70:72:77:d3:5b:19:e1:06:b4:c1:c4:6d:45: 90:92:98:1b:75:78:24:57:f9:e5:6e:23:2e:fd:ef: bd:a1:e7:a2:4c:b8:e7:49:b0:5d:ba:31:57:ea:c1: 2d:e1:f6:5d:78:24:1b:07:47:45:6e:ee:46:6a:07: 16:ae:b3:d0:6a:ca:66:52:07:52:e5:61:7d:eb:95: 43:a7:ed:a9:8f:8b:98:8b:c9:e9:d5:15:15:b9:76: 57:2c:9c:34:50:08:47:bf:dc:b7:0b:76:c4:b1:4e: a4:90:67:2b:04:14:b9:49:aa:ec:28:af:ff:4d:ac: 99:5e:10:92:2f:69:34:b7:84:b8:01:52:45:b9:60: 0a:da:3f:7e:6f:e6:99:60:30:cc:45:59:fa:62:73: 29:5c:d8:3a:95:4c:0e:86:ba:1b:04:a5:6f:0c:59: d8:75:24:75:e9:19:3f:d1:43:f0:bc:76:3c:5f:6b: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:47:1D:E0:61:09:1B:AA:16:7C:8F:A9:27:0A:EE:37:72:68:47 X509v3 Authority Key Identifier: keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:63:bb:bf:b3:de:63:0c:4c:33:97:a7:e1:80:f3:86:87:f7: d2:50:86:15:80:68:7f:6b:32:93:66:90:ae:09:52:24:47:33: fc:f4:b1:7c:4e:41:17:2d:aa:4a:9d:4d:91:37:50:d1:3b:57: b3:98:2f:88:bc:89:f2:91:2d:6a:f2:9e:0c:18:e1:5d:27:5c: 66:5f:c7:85:9c:60:ba:66:8c:97:4c:52:20:a2:b8:1e:4c:5a: 3d:ce:6b:d4:38:07:54:52:73:3b:e6:be:33:51:f8:d4:ef:da: 6a:8d:85:91:ab:50:52:28:dd:85:90:29:e5:aa:89:84:ff:ce: 1b:4e:20:69:f6:e0:ed:7f:be:59:57:48:35:aa:f1:d0:1f:f0: 82:10:24:dc:1b:0e:74:45:be:d7:aa:d0:1b:db:b5:7c:84:50: 2d:cb:f0:18:07:5b:09:70:d4:50:b4:11:e5:42:b2:c0:01:74: 01:c8:ba:60:16:d6:d3:7a:b7:82:19:39:64:54:c4:fa:12:55: 96:9a:3e:a7:77:7f:07:f1:82:15:0d:32:a2:67:0f:c1:1e:26: da:f4:a1:59:4a:18:4d:cd:92:4d:56:bb:8f:78:9c:25:15:88: 23:e7:b9:21:60:fa:db:22:74:1e:f1:d6:89:58:25:09:71:99: 5f:d0:55:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuejd4RqVmSDiWi/wfQNAe8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYWNjYTljNGZlOWJmOWVkZjNiYzZlNWNhYmM1MjgzOGQ5 M2NiMTMwHhcNMjYwMTA4MTcwMDU2WhcNMjYwMTA5MTcwMDU2WjAzMTEwLwYDVQQD Eyg2YmJhNDcxZGUwNjEwOTFiYWExNjdjOGZhOTI3MGFlZTM3NzI2ODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/CwXG+0DL/SE7uOjVhPFy5C4fyJ rYiO5l44yrHVkRvQOl1WMgobwJR4eN9oqgfFDbn2b5eNpipB2GZGjXw+SNFfoQzQ K/CR8cnpWnByd9NbGeEGtMHEbUWQkpgbdXgkV/nlbiMu/e+9oeeiTLjnSbBdujFX 6sEt4fZdeCQbB0dFbu5GagcWrrPQaspmUgdS5WF965VDp+2pj4uYi8np1RUVuXZX LJw0UAhHv9y3C3bEsU6kkGcrBBS5SarsKK//TayZXhCSL2k0t4S4AVJFuWAK2j9+ b+aZYDDMRVn6YnMpXNg6lUwOhrobBKVvDFnYdSR16Rk/0UPwvHY8X2sswQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu6Rx3gYQkbqhZ8j6knCu43cmhHMB8GA1UdIwQY MBaAFKCsypxP6b+e3zvG5cq8UoONk8sTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2Et MmVkZmUyNWJiNThhLzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2EtMmVkZmUyNWJiNThh LzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGO7v7Pe YwxMM5en4YDzhof30lCGFYBof2syk2aQrglSJEcz/PSxfE5BFy2qSp1NkTdQ0TtX s5gviLyJ8pEtavKeDBjhXSdcZl/HhZxgumaMl0xSIKK4HkxaPc5r1DgHVFJzO+a+ M1H41O/aao2FkatQUijdhZAp5aqJhP/OG04gafbg7X++WVdINarx0B/wghAk3BsO dEW+16rQG9u1fIRQLcvwGAdbCXDUULQR5UKywAF0Aci6YBbW03q3ghk5ZFTE+hJV lpo+p3d/B/GCFQ0yomcPwR4m2vShWUoYTc2STVa7j3icJRWII+e5IWD62yJ0HvHW iVglCXGZX9BVtg== -----END CERTIFICATE-----Generated at Fri Jan 9 01:11:41 2026 by rpki-client