This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json) Hash identifier: uL8J/usYE21zvLlKRhXQ+Q9JLkhy1lO229S2JMNZm/Y= Subject key identifier: 79:FA:48:32:82:00:E9:4C:BF:4F:36:BD:ED:84:A5:52:3A:D4:96:A2 Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Certificate serial: 019BFC8A316F6B8AFBA2C889975DE084762B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft Manifest number: 1744 Signing time: Mon 26 Jan 2026 23:01:13 +0000 Manifest this update: Mon 26 Jan 2026 23:01:13 +0000 Manifest next update: Tue 27 Jan 2026 23:01:13 +0000 Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=) 2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: nkKFnsmT9fDSEizMXyoweTh5FjCEh1Hz3/G4V23ubHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:31:6f:6b:8a:fb:a2:c8:89:97:5d:e0:84:76:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Validity Not Before: Jan 26 23:01:13 2026 GMT Not After : Jan 27 23:01:13 2026 GMT Subject: CN=79fa48328200e94cbf4f36bded84a5523ad496a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:58:54:bf:a1:3e:b8:c1:76:fc:83:51:78:55: 7e:af:5d:b8:d0:d6:e8:4e:c6:0e:6b:3c:31:ae:4a: 9d:d3:c2:96:f0:84:6f:12:c2:a3:a0:cb:4f:2d:8d: 6e:79:64:24:fb:69:e2:7c:8c:68:e2:2d:6e:a2:87: 81:6a:a8:ad:2b:51:14:7a:a0:bb:5b:29:8a:7c:8c: 84:3c:96:6f:b2:1d:4e:fc:a7:cc:05:ed:64:ca:26: 4d:43:dc:90:ea:d0:25:37:61:65:0a:63:34:87:74: c8:84:ff:ed:17:9b:fc:e5:1e:4b:a4:42:47:31:54: 66:48:77:18:3d:84:0a:bd:b4:dc:d4:f9:c7:78:b9: 49:c1:34:7d:ae:5f:e4:3b:1c:b1:0c:33:e3:b7:9a: 1b:b7:63:57:1f:52:ac:ed:dd:c2:24:5a:f0:5a:59: 2c:30:52:e4:ff:a2:a9:14:70:55:9f:87:1c:f3:85: 96:d7:3e:18:ce:23:e8:7f:f8:3e:7c:0e:f7:ee:2e: 5d:e4:c7:72:c5:d4:75:81:87:8a:e6:ab:a4:2e:b9: 3c:0b:cb:c9:41:83:7a:19:0b:02:b3:b2:2f:23:d0: 3d:c0:ad:91:06:6e:a6:69:71:e2:94:19:1f:29:cb: a3:e5:f9:28:67:b1:91:f8:5e:3e:a2:48:8f:cc:99: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:48:32:82:00:E9:4C:BF:4F:36:BD:ED:84:A5:52:3A:D4:96:A2 X509v3 Authority Key Identifier: keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b9:ee:71:8e:a0:a0:af:8d:0d:32:c7:fa:1b:b1:b2:ea:8a: f7:77:fd:e4:c4:55:d5:bd:8f:5a:3d:f6:30:7d:32:5a:30:3d: b7:da:41:d0:61:83:54:36:16:2c:18:ed:ab:d8:2e:06:f0:ed: 49:86:c2:d2:09:fc:9f:be:38:8a:33:1a:5c:be:36:64:6f:f4: dd:87:71:fa:e5:11:57:1e:20:15:a6:e9:9c:43:b5:90:ae:53: 40:fc:a4:5b:d3:b6:0d:1b:5b:f2:1b:dd:85:14:3c:42:fd:f4: 21:23:7d:3a:47:97:e6:98:84:48:d0:df:05:ea:a0:98:a1:f6: fd:87:02:16:9c:4b:1b:e4:bf:2e:4c:a4:e2:df:c5:f3:36:aa: 43:9b:30:0e:2a:d7:70:40:6c:f0:7f:96:1f:53:98:be:03:72: 80:ac:84:ba:b6:8c:d9:7b:22:f4:f6:75:99:78:d3:12:b6:ee: f6:b4:6b:fc:d1:f8:3b:c3:ca:11:6e:0b:ad:75:ca:99:cc:62: 01:94:10:b9:49:69:94:0d:27:44:57:28:d3:3d:1a:a3:a0:6c: 87:e3:25:2e:ff:7d:18:1b:16:16:c6:96:30:c5:57:0d:43:b5: 8b:b0:37:12:bf:be:f3:ed:ac:3d:3e:62:b6:ea:77:41:a3:27: 60:81:8f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ijFva4r7osiJl13ghHYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4 YTU1NGIwHhcNMjYwMTI2MjMwMTEzWhcNMjYwMTI3MjMwMTEzWjAzMTEwLwYDVQQD Eyg3OWZhNDgzMjgyMDBlOTRjYmY0ZjM2YmRlZDg0YTU1MjNhZDQ5NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FhUv6E+uMF2/INReFV+r1240Nbo TsYOazwxrkqd08KW8IRvEsKjoMtPLY1ueWQk+2nifIxo4i1uooeBaqitK1EUeqC7 WymKfIyEPJZvsh1O/KfMBe1kyiZNQ9yQ6tAlN2FlCmM0h3TIhP/tF5v85R5LpEJH MVRmSHcYPYQKvbTc1PnHeLlJwTR9rl/kOxyxDDPjt5obt2NXH1Ks7d3CJFrwWlks MFLk/6KpFHBVn4cc84WW1z4YziPof/g+fA737i5d5MdyxdR1gYeK5qukLrk8C8vJ QYN6GQsCs7IvI9A9wK2RBm6maXHilBkfKcuj5fkoZ7GR+F4+okiPzJnXsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn6SDKCAOlMv082ve2EpVI61JaiMB8GA1UdIwQY MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbnucY6g oK+NDTLH+huxsuqK93f95MRV1b2PWj32MH0yWjA9t9pB0GGDVDYWLBjtq9guBvDt SYbC0gn8n744ijMaXL42ZG/03Ydx+uURVx4gFabpnEO1kK5TQPykW9O2DRtb8hvd hRQ8Qv30ISN9OkeX5piESNDfBeqgmKH2/YcCFpxLG+S/Lkyk4t/F8zaqQ5swDirX cEBs8H+WH1OYvgNygKyEuraM2Xsi9PZ1mXjTErbu9rRr/NH4O8PKEW4LrXXKmcxi AZQQuUlplA0nRFco0z0ao6Bsh+MlLv99GBsWFsaWMMVXDUO1i7A3Er++8+2sPT5i tup3QaMnYIGPfg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:16:15 2026 by rpki-client