This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json) Hash identifier: w65/J83a0/wTVDpFgrGYBY1/vuqNTQVmRH3wuTr2zXk= Subject key identifier: 02:70:F8:BF:F3:79:EC:0A:DD:04:EB:76:73:11:84:00:11:65:82:72 Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Certificate serial: 019BFD65CD462F317AF6A089EF148D4372C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft Manifest number: 068E Signing time: Tue 27 Jan 2026 03:01:05 +0000 Manifest this update: Tue 27 Jan 2026 03:01:05 +0000 Manifest next update: Wed 28 Jan 2026 03:01:05 +0000 Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=) 2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=) 3: 8SVcazJnmu-hFQWM3wOb0PrKho0.roa (hash: wcEIMGn9kXQiu8d1LEAtjcXokRGRSiotTvI/O0MGe9E=) 4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: LoToq45tyeK2QSOiKRiD8Nr22ZX30lTivfuPSAUxs8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:cd:46:2f:31:7a:f6:a0:89:ef:14:8d:43:72:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Validity Not Before: Jan 27 03:01:05 2026 GMT Not After : Jan 28 03:01:05 2026 GMT Subject: CN=0270f8bff379ec0add04eb767311840011658272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:2f:61:09:f4:17:5c:63:ae:c0:7a:56:72: e1:ec:bb:82:6f:94:b3:7b:d1:3e:d7:68:e8:3f:e1: 31:13:35:04:b4:ae:75:55:a1:85:af:ca:d5:df:c7: b0:76:c0:48:d5:3e:4f:da:af:45:2b:45:0e:5d:dc: 73:78:77:13:e0:ce:c3:b3:86:17:2f:2d:0f:32:dd: 80:66:a2:64:0d:98:2c:42:62:1d:98:11:c3:03:07: e8:e3:94:b9:2a:34:c1:62:e5:31:a8:f5:e0:aa:87: f2:0c:4d:32:2c:3a:c8:0c:ec:75:25:ff:e9:92:48: 9a:3b:d3:a7:f0:e4:cb:9b:5e:a4:f8:b4:56:6d:17: 28:03:c4:8e:dc:70:84:64:63:02:2e:9f:f5:2b:e1: f4:55:4d:91:e6:cc:5e:17:60:ee:a1:91:4b:1b:c1: a7:30:df:2a:a5:21:6a:dd:8b:7e:a9:0e:30:1e:06: ac:60:89:30:bc:d5:d8:56:21:15:f8:7f:7a:36:4b: 4a:86:69:be:2f:8d:99:2a:fe:ec:71:8a:d5:93:b9: 16:ce:e9:c3:68:3c:4a:f1:de:45:61:93:61:7f:21: d1:c7:3a:8e:9c:47:5b:db:43:59:51:f1:f2:bc:e7: 42:99:dd:32:20:ac:21:60:b4:be:e9:63:07:f4:43: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:70:F8:BF:F3:79:EC:0A:DD:04:EB:76:73:11:84:00:11:65:82:72 X509v3 Authority Key Identifier: keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:bf:39:ef:7d:42:2f:46:34:29:ba:35:de:75:1d:fd:e9: d9:9d:ae:a7:c0:57:28:b3:c7:30:59:19:88:01:7e:07:37:8e: a1:ff:14:ed:87:56:cf:a3:b6:f0:ea:41:63:e4:84:de:aa:fb: 6d:3a:f6:77:bb:7e:f1:e1:95:5c:90:79:d4:9a:f6:ef:0c:65: 80:ee:3e:b5:5e:c9:90:b9:80:7c:3c:40:bb:3c:e2:57:07:b0: ce:b8:e0:97:4a:2c:cf:48:08:11:ce:1f:fb:67:10:a6:37:0a: 4f:2a:5e:a2:ad:b4:cc:0a:62:4c:a3:49:b4:d5:b4:e1:b6:54: 67:f2:22:77:60:af:15:a1:c7:c1:94:b1:9a:13:29:50:72:83: 29:1e:77:94:92:3a:4c:d0:e2:6a:00:c2:0d:88:41:0e:c7:47: 50:02:2c:13:7a:ad:a6:bb:ad:64:58:0e:44:76:19:ee:ac:d6: e2:fe:80:fa:08:20:ce:74:84:6c:08:ae:c1:73:b6:5b:6e:cb: ab:3a:63:b9:24:be:29:8e:c7:e4:68:e5:c8:41:f5:04:ac:7d: 4b:2e:a3:05:71:be:43:ba:40:c8:92:1f:c7:ba:4e:de:4e:96: 5e:9b:63:c0:49:62:97:01:1b:0b:0e:b7:e9:70:4e:58:98:fd: 39:78:1b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Zc1GLzF69qCJ7xSNQ3LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi NmE1YWUwHhcNMjYwMTI3MDMwMTA1WhcNMjYwMTI4MDMwMTA1WjAzMTEwLwYDVQQD EygwMjcwZjhiZmYzNzllYzBhZGQwNGViNzY3MzExODQwMDExNjU4MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa0vYQn0F1xjrsB6VnLh7LuCb5Sz e9E+12joP+ExEzUEtK51VaGFr8rV38ewdsBI1T5P2q9FK0UOXdxzeHcT4M7Ds4YX Ly0PMt2AZqJkDZgsQmIdmBHDAwfo45S5KjTBYuUxqPXgqofyDE0yLDrIDOx1Jf/p kkiaO9On8OTLm16k+LRWbRcoA8SO3HCEZGMCLp/1K+H0VU2R5sxeF2DuoZFLG8Gn MN8qpSFq3Yt+qQ4wHgasYIkwvNXYViEV+H96NktKhmm+L42ZKv7scYrVk7kWzunD aDxK8d5FYZNhfyHRxzqOnEdb20NZUfHyvOdCmd0yIKwhYLS+6WMH9EPD0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJw+L/zeewK3QTrdnMRhAARZYJyMB8GA1UdIwQY MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1 LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnC/Oe99 Qi9GNCm6Nd51Hf3p2Z2up8BXKLPHMFkZiAF+BzeOof8U7YdWz6O28OpBY+SE3qr7 bTr2d7t+8eGVXJB51Jr27wxlgO4+tV7JkLmAfDxAuzziVwewzrjgl0osz0gIEc4f +2cQpjcKTypeoq20zApiTKNJtNW04bZUZ/Iid2CvFaHHwZSxmhMpUHKDKR53lJI6 TNDiagDCDYhBDsdHUAIsE3qtprutZFgORHYZ7qzW4v6A+gggznSEbAiuwXO2W27L qzpjuSS+KY7H5GjlyEH1BKx9Sy6jBXG+Q7pAyJIfx7pO3k6WXptjwElilwEbCw63 6XBOWJj9OXgbyw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:45 2026 by rpki-client