This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json) Hash identifier: KMx+PQPitK9mhoY6RjpxbQqBFI9g328SFQ1k1JpFlfQ= Subject key identifier: 59:A6:E5:34:AA:75:06:AC:88:2C:E5:FC:15:8D:BF:0E:0C:92:33:7E Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Certificate serial: 019BFA2E4C29C616EED7488DB48E7C5CB953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 12:01:36 +0000 Manifest this update: Mon 26 Jan 2026 12:01:36 +0000 Manifest next update: Tue 27 Jan 2026 12:01:36 +0000 Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: xjEwZ4fNQUEH++VYbBpUdG3+S91l9Sd0VU7dKfydScQ=) 2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:4c:29:c6:16:ee:d7:48:8d:b4:8e:7c:5c:b9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Validity Not Before: Jan 26 12:01:36 2026 GMT Not After : Jan 27 12:01:36 2026 GMT Subject: CN=59a6e534aa7506ac882ce5fc158dbf0e0c92337e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:e7:97:67:ef:4b:b9:bf:1a:66:55:a0:4a: ba:96:84:ee:ac:c1:cf:5b:a1:28:7d:db:92:7f:27: 84:bb:92:64:df:4e:73:f9:a5:1e:bb:73:f1:bc:12: d9:c4:50:10:8c:b5:da:cc:a6:6b:9d:0b:c7:80:43: 20:3e:d1:25:81:63:18:d9:2c:4d:33:91:4b:04:36: bb:a7:ca:76:8a:d0:d8:03:3b:37:b0:f0:d5:6d:a0: 33:53:39:8d:76:82:a2:ef:98:06:d9:48:ee:51:6b: 06:79:cf:aa:ac:74:db:79:16:99:fe:e8:7f:0b:85: ae:5a:be:8e:ef:03:96:e6:e1:bd:bc:49:d4:af:6f: 61:75:03:87:db:ce:f6:2e:36:e1:9e:d0:d5:ce:fa: 5e:0f:ef:47:9d:14:1d:a3:64:5e:5d:3a:b8:08:85: 18:36:ed:0f:ac:b2:10:8f:ab:05:69:40:bc:d2:e8: 5a:aa:9e:8b:83:e9:bc:6d:9d:ea:4d:a0:30:8e:84: 46:fe:44:0b:72:9b:a2:94:3b:59:fd:36:b0:53:bc: 85:12:f5:2b:b5:fa:40:d0:50:f7:69:2a:b4:92:6f: 57:c3:a7:69:b0:55:02:80:40:33:60:bb:f4:8b:64: 0b:8a:6e:df:60:f8:35:41:26:0b:86:c9:50:d9:59: 67:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A6:E5:34:AA:75:06:AC:88:2C:E5:FC:15:8D:BF:0E:0C:92:33:7E X509v3 Authority Key Identifier: keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:30:51:b2:ff:6d:b0:f2:8e:e8:0e:1d:29:aa:f7:54:92:6b: 2c:0d:6a:e2:b8:43:12:86:0d:65:2b:a1:2d:cb:2a:55:3e:d1: a4:5b:de:47:9a:6b:df:87:0f:f0:c1:6a:17:e7:3d:c8:7f:02: ce:b5:eb:22:f4:1d:cb:9a:8b:fa:d2:90:4a:e1:b2:b8:eb:49: 08:8b:79:fb:df:28:59:ad:36:11:92:0b:67:ff:28:df:74:b3: 8b:2e:84:0f:0a:49:4c:e6:c2:3d:d2:92:15:ac:5d:72:8f:7d: 51:9b:87:c7:b7:ae:d1:0c:1f:f1:fc:22:2f:64:39:2c:f5:e2: 30:2c:42:6e:d3:25:37:58:56:45:19:68:b0:74:4f:49:88:93: a7:b4:75:a0:42:f5:fa:1d:96:69:09:ba:95:b4:03:d5:52:3d: e3:12:a0:89:e2:0b:62:15:40:1f:a8:24:41:0a:2d:a9:07:8b: 95:6c:e3:ff:0d:e9:e2:db:4a:e0:e2:8d:ba:11:be:eb:e5:0c: b9:73:cd:c5:88:3e:ec:b1:84:72:2c:cf:97:93:be:68:a8:f5: 25:f5:11:7e:f9:80:43:f2:ca:9a:2a:5b:c9:18:26:6a:8d:b2: 39:b4:1a:eb:00:d5:0d:98:ea:46:d0:a1:c1:d1:71:63:7c:fd: c0:30:45:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lkwpxhbu10iNtI58XLlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTk3NWFkNTdjZWI3NjVhZDk0OGJlNWViNGMzODJkYzc0 ODQ0YzAwHhcNMjYwMTI2MTIwMTM2WhcNMjYwMTI3MTIwMTM2WjAzMTEwLwYDVQQD Eyg1OWE2ZTUzNGFhNzUwNmFjODgyY2U1ZmMxNThkYmYwZTBjOTIzMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVXnl2fvS7m/GmZVoEq6loTurMHP W6EofduSfyeEu5Jk305z+aUeu3PxvBLZxFAQjLXazKZrnQvHgEMgPtElgWMY2SxN M5FLBDa7p8p2itDYAzs3sPDVbaAzUzmNdoKi75gG2UjuUWsGec+qrHTbeRaZ/uh/ C4WuWr6O7wOW5uG9vEnUr29hdQOH2872LjbhntDVzvpeD+9HnRQdo2ReXTq4CIUY Nu0PrLIQj6sFaUC80uhaqp6Lg+m8bZ3qTaAwjoRG/kQLcpuilDtZ/TawU7yFEvUr tfpA0FD3aSq0km9Xw6dpsFUCgEAzYLv0i2QLim7fYPg1QSYLhslQ2VlnwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmm5TSqdQasiCzl/BWNvw4MkjN+MB8GA1UdIwQY MBaAFDkZda1XzrdlrZSL5etMOC3HSETAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQt MDUwMjA0NTMyMjg2LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQtMDUwMjA0NTMyMjg2 LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzBRsv9t sPKO6A4dKar3VJJrLA1q4rhDEoYNZSuhLcsqVT7RpFveR5pr34cP8MFqF+c9yH8C zrXrIvQdy5qL+tKQSuGyuOtJCIt5+98oWa02EZILZ/8o33Sziy6EDwpJTObCPdKS Faxdco99UZuHx7eu0Qwf8fwiL2Q5LPXiMCxCbtMlN1hWRRlosHRPSYiTp7R1oEL1 +h2WaQm6lbQD1VI94xKgieILYhVAH6gkQQotqQeLlWzj/w3p4ttK4OKNuhG+6+UM uXPNxYg+7LGEcizPl5O+aKj1JfURfvmAQ/LKmipbyRgmao2yObQa6wDVDZjqRtCh wdFxY3z9wDBFIw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:18:29 2026 by rpki-client