This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json) Hash identifier: YC4D5d9a8QK0aJ2VcajvBeXlUUcMo3gPtJo8mRnsn+E= Subject key identifier: AD:CD:99:39:EF:4A:29:67:47:11:4E:5F:68:8F:19:FC:5A:9E:D3:15 Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a Certificate serial: 019BFC535BA19E9154253B5E6F3A890E82D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft Manifest number: 156F Signing time: Mon 26 Jan 2026 22:01:19 +0000 Manifest this update: Mon 26 Jan 2026 22:01:19 +0000 Manifest next update: Tue 27 Jan 2026 22:01:19 +0000 Files and hashes: 1: NwT9W71qDLuM68yfor7jaPtZ31g.roa (hash: Oy3RbTWtLZU6r3g8zZub3EsVqMVs7mpKUAZ+3t3L7eo=) 2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: BcruduYEpoGQj8Yj/eEtCezqsw6qO1cbwhCPJavUt+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:5b:a1:9e:91:54:25:3b:5e:6f:3a:89:0e:82:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a Validity Not Before: Jan 26 22:01:19 2026 GMT Not After : Jan 27 22:01:19 2026 GMT Subject: CN=adcd9939ef4a296747114e5f688f19fc5a9ed315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:ab:f0:4c:66:13:b7:b3:98:de:53:8a:c0: 59:09:f3:a1:92:50:ec:6e:50:03:e2:ca:99:35:a4: 99:bf:8d:11:36:f2:0f:23:f2:d1:7e:73:d6:3b:75: cd:b4:46:50:c1:3b:6a:55:be:d1:ea:2d:f7:2a:90: a7:eb:c2:25:e2:41:36:50:5e:47:23:16:32:06:05: 44:88:50:38:4e:b4:e9:c3:f8:a4:44:30:b1:7a:cc: da:e0:a3:2f:1d:09:db:1d:08:f3:d0:55:1d:5b:a9: 89:63:f1:a5:fb:f0:8c:6f:fc:53:66:b2:3a:25:fc: 59:e2:95:98:de:35:cd:5a:bc:82:40:85:fd:e9:40: db:f4:c4:fc:1b:4b:48:09:77:6c:3a:a1:41:55:98: 9a:9b:13:21:96:b6:ef:16:c6:d3:4e:d2:8e:ae:b8: c9:2c:3e:44:cf:e0:9c:43:32:8c:3f:a0:d5:ba:2b: 21:a5:61:87:9f:cf:78:9b:5c:88:34:f4:0e:9b:56: 50:78:a5:cc:40:1f:46:ee:ec:33:e6:5d:fa:1f:04: 0c:50:65:09:a2:4f:1a:98:6d:f2:64:f6:2e:a4:12: 0f:12:3a:34:bd:53:4b:90:94:61:71:2e:76:50:15: 76:2a:f0:d5:db:64:34:fb:d8:45:a4:91:4a:fb:46: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CD:99:39:EF:4A:29:67:47:11:4E:5F:68:8F:19:FC:5A:9E:D3:15 X509v3 Authority Key Identifier: keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8c:6d:43:bf:e6:d6:58:11:8e:13:41:45:4f:34:55:05:ac: 35:c5:63:12:1b:c6:7e:4f:33:4d:46:4b:1f:a3:07:a3:e6:70: 27:9c:e3:95:fb:a5:32:e4:7f:0d:eb:d8:0b:d3:80:3e:83:c4: 8e:d6:b7:b6:1e:7f:ae:61:b3:7a:aa:ab:85:82:e1:77:a4:71: 13:0e:83:ea:3e:53:2c:1d:b0:af:11:fc:64:a3:cc:02:22:63: bb:cb:aa:f8:82:26:63:21:28:0f:53:e9:10:e1:49:73:21:1d: da:de:04:04:85:e9:38:70:6c:ee:79:73:31:68:48:24:83:3e: fe:2f:ab:fb:bc:fc:71:6e:55:19:ab:b0:80:1a:b3:77:41:4e: a7:c8:6b:98:37:8a:86:bc:fc:9e:fb:02:15:17:0b:fb:d5:4d: 8b:6c:ee:81:6a:f4:09:0a:8d:65:79:c5:86:52:96:18:05:d2: 0c:67:a7:e3:de:fd:be:59:d6:36:d8:94:2e:81:4c:77:50:e9: 26:b8:23:45:ad:92:7d:a9:b3:dc:d5:9c:17:6c:00:2b:9b:60: b8:12:6a:46:fc:0f:b7:b2:40:09:12:81:e8:c0:ca:a7:93:d4: 19:28:91:b7:f6:45:a9:d2:19:bb:f1:f6:ac:57:46:a0:34:1f: cb:bb:9a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U1uhnpFUJTtebzqJDoLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3 MDQxOWEwHhcNMjYwMTI2MjIwMTE5WhcNMjYwMTI3MjIwMTE5WjAzMTEwLwYDVQQD EyhhZGNkOTkzOWVmNGEyOTY3NDcxMTRlNWY2ODhmMTlmYzVhOWVkMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5er8ExmE7ezmN5TisBZCfOhklDs blAD4sqZNaSZv40RNvIPI/LRfnPWO3XNtEZQwTtqVb7R6i33KpCn68Il4kE2UF5H IxYyBgVEiFA4TrTpw/ikRDCxesza4KMvHQnbHQjz0FUdW6mJY/Gl+/CMb/xTZrI6 JfxZ4pWY3jXNWryCQIX96UDb9MT8G0tICXdsOqFBVZiamxMhlrbvFsbTTtKOrrjJ LD5Ez+CcQzKMP6DVuishpWGHn894m1yINPQOm1ZQeKXMQB9G7uwz5l36HwQMUGUJ ok8amG3yZPYupBIPEjo0vVNLkJRhcS52UBV2KvDV22Q0+9hFpJFK+0YzMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3NmTnvSilnRxFOX2iPGfxantMVMB8GA1UdIwQY MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1 LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoxtQ7/m 1lgRjhNBRU80VQWsNcVjEhvGfk8zTUZLH6MHo+ZwJ5zjlfulMuR/DevYC9OAPoPE jta3th5/rmGzeqqrhYLhd6RxEw6D6j5TLB2wrxH8ZKPMAiJju8uq+IImYyEoD1Pp EOFJcyEd2t4EBIXpOHBs7nlzMWhIJIM+/i+r+7z8cW5VGauwgBqzd0FOp8hrmDeK hrz8nvsCFRcL+9VNi2zugWr0CQqNZXnFhlKWGAXSDGen4979vlnWNtiULoFMd1Dp JrgjRa2Sfamz3NWcF2wAK5tguBJqRvwPt7JACRKB6MDKp5PUGSiRt/ZFqdIZu/H2 rFdGoDQfy7uadw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:56:47 2026 by rpki-client