This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json) Hash identifier: 5YcJEU3O7QMAoQ9T86ncwRjnKNtn0wC5OSDR1h6WfeU= Subject key identifier: 04:3D:9D:89:5E:15:CE:A4:E2:55:59:23:91:92:85:57:2C:3D:F5:B7 Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Certificate serial: 019BF8081510DBBA0E154307CB81FA8F2AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft Manifest number: 17F9 Signing time: Mon 26 Jan 2026 02:00:37 +0000 Manifest this update: Mon 26 Jan 2026 02:00:37 +0000 Manifest next update: Tue 27 Jan 2026 02:00:37 +0000 Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=) 2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=) 3: 6gcDsJpxsKX0PxtnBH4T97xLx9M.roa (hash: hIekIZFh7o66l7NKTjbYJTeEDYrlWcQFjp4xOD1i0cs=) 4: GY64ez_3TBoznc2OZ4hfs_27g8w.roa (hash: OnIF1nSE9v8USNjNkyH2G0yJPwu6eDGsA41slMuGwcQ=) 5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: dp6gZi19P2Zgre62/esNiCl3+BpJS+1tmoT/AD3UE4I=) 6: YyvKpuBg6ODuv0IGKi0aBayrqys.roa (hash: s2/s2mh8k6JI7zlQNcMbr3tmc2KdmmWlgFrRw1C4ynI=) 7: vXfLmPKQvq8Xsk8o-7vsGcFAvdA.roa (hash: JskXRzeILl7MbBJ3/C+4HYyn6osGgL+SJwbO/w3txgs=) 8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:15:10:db:ba:0e:15:43:07:cb:81:fa:8f:2a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Validity Not Before: Jan 26 02:00:37 2026 GMT Not After : Jan 27 02:00:37 2026 GMT Subject: CN=043d9d895e15cea4e2555923919285572c3df5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:fd:a6:fa:cb:79:af:15:3b:f7:26:64:d4: 96:70:88:9a:29:cd:ca:a2:43:92:ea:66:3e:84:2e: 77:4e:16:89:16:be:f6:33:c3:dd:70:1f:3c:8a:c8: 89:23:e0:34:d4:2f:2a:e7:d0:94:39:bd:b0:da:71: 4a:9b:15:81:88:61:20:8a:42:b8:61:1b:da:53:e4: 84:fe:5e:c6:35:5e:bd:43:33:ef:f2:19:58:6d:ac: 6e:38:f6:de:2a:74:f0:4f:3d:38:5a:2e:f0:ce:86: e5:3a:cf:f8:93:63:fd:69:81:ed:3b:3e:26:92:31: 71:26:e6:13:84:3f:fb:90:91:6c:33:40:03:cb:22: 53:62:7c:b7:a8:2c:75:4d:51:7d:e3:f5:68:e0:dd: 26:64:57:28:d3:69:0a:01:d2:f7:e7:61:fe:ad:fe: 8e:c4:f0:42:29:f3:d6:ad:57:75:a8:04:c5:75:c8: 7f:fb:23:97:bf:0c:b7:5d:ce:a5:83:1e:91:ea:e6: 81:01:33:f7:c5:fb:ce:dc:2a:e2:ba:69:01:21:ad: d2:b7:1b:ed:3b:c6:03:d4:2f:a5:a8:cf:f4:b5:04: b0:bd:34:ba:e9:63:48:27:23:25:5e:b0:1f:25:c4: c1:0c:ca:46:ac:24:be:af:38:37:8e:58:0d:a7:a5: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3D:9D:89:5E:15:CE:A4:E2:55:59:23:91:92:85:57:2C:3D:F5:B7 X509v3 Authority Key Identifier: keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9a:87:48:04:c7:96:47:40:55:2e:23:50:d9:f9:ea:5a:9d: b7:72:4f:fe:e7:16:fc:93:72:aa:5d:1a:a7:e7:e8:f3:39:fb: f4:04:37:a5:ff:87:83:16:8f:d3:44:dc:c3:16:bc:34:59:44: 9f:fe:7b:bf:29:d8:48:ed:f5:80:8c:5d:d1:5a:8c:33:30:b0: 7b:1d:4a:4d:a0:cd:ea:8d:cf:67:40:7f:8e:69:55:95:fb:1c: 9c:2d:e3:d5:d2:37:e7:6d:24:50:44:d3:f2:2d:c6:b2:9a:3f: 68:22:c6:1b:9d:4a:9d:aa:ad:1f:e8:da:3d:fe:c4:09:1f:9b: b8:b3:80:0b:d5:3b:be:4f:68:5a:a4:f7:84:ad:e3:6b:a0:8a: 27:b3:8c:9a:c1:04:2a:f1:82:36:e1:4b:9a:59:58:66:a0:3f: 76:5a:40:fb:d8:36:15:0a:02:ba:ec:d3:5e:cd:9a:1a:d2:7d: 6f:90:39:60:5f:9b:8f:93:89:5e:d2:79:0e:22:ac:e5:a1:bf: 50:83:7e:6d:40:fc:2e:8b:3d:1a:53:3b:40:14:89:aa:0b:c8: f3:48:45:1a:8d:f7:03:0f:fc:00:8c:15:af:31:40:cb:1a:fc: 7c:2f:a3:79:5e:d1:4e:93:7a:3e:96:2b:8e:a0:3a:7c:e0:c2: b9:58:21:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CBUQ27oOFUMHy4H6jyqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5 NjZkNDIwHhcNMjYwMTI2MDIwMDM3WhcNMjYwMTI3MDIwMDM3WjAzMTEwLwYDVQQD EygwNDNkOWQ4OTVlMTVjZWE0ZTI1NTU5MjM5MTkyODU1NzJjM2RmNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwef9pvrLea8VO/cmZNSWcIiaKc3K okOS6mY+hC53ThaJFr72M8PdcB88isiJI+A01C8q59CUOb2w2nFKmxWBiGEgikK4 YRvaU+SE/l7GNV69QzPv8hlYbaxuOPbeKnTwTz04Wi7wzoblOs/4k2P9aYHtOz4m kjFxJuYThD/7kJFsM0ADyyJTYny3qCx1TVF94/Vo4N0mZFco02kKAdL352H+rf6O xPBCKfPWrVd1qATFdch/+yOXvwy3Xc6lgx6R6uaBATP3xfvO3CriumkBIa3Stxvt O8YD1C+lqM/0tQSwvTS66WNIJyMlXrAfJcTBDMpGrCS+rzg3jlgNp6VUKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ9nYleFc6k4lVZI5GShVcsPfW3MB8GA1UdIwQY MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0 LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZqHSATH lkdAVS4jUNn56lqdt3JP/ucW/JNyql0ap+fo8zn79AQ3pf+HgxaP00Tcwxa8NFlE n/57vynYSO31gIxd0VqMMzCwex1KTaDN6o3PZ0B/jmlVlfscnC3j1dI3520kUETT 8i3Gspo/aCLGG51KnaqtH+jaPf7ECR+buLOAC9U7vk9oWqT3hK3ja6CKJ7OMmsEE KvGCNuFLmllYZqA/dlpA+9g2FQoCuuzTXs2aGtJ9b5A5YF+bj5OJXtJ5DiKs5aG/ UIN+bUD8Los9GlM7QBSJqgvI80hFGo33Aw/8AIwVrzFAyxr8fC+jeV7RTpN6PpYr jqA6fODCuVghCg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:53 2026 by rpki-client