This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json) Hash identifier: V5mC4tm3xaxZRxHcLXm5y2GPuNL58Dtr7s7EHnrN+aU= Subject key identifier: B4:4D:20:04:F6:EF:3E:E2:AD:9F:8A:47:70:9D:C4:FA:DA:55:C3:45 Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Certificate serial: 019BFB7756D0EEEB1611D576FEDA9A7C1232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft Manifest number: 0649 Signing time: Mon 26 Jan 2026 18:01:00 +0000 Manifest this update: Mon 26 Jan 2026 18:01:00 +0000 Manifest next update: Tue 27 Jan 2026 18:01:00 +0000 Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=) 2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=) 3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=) 4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: iAz9R88Bbo9yIshBnSkzIXMm82Q0B+hzUJwC9DEunt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:56:d0:ee:eb:16:11:d5:76:fe:da:9a:7c:12:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Validity Not Before: Jan 26 18:01:00 2026 GMT Not After : Jan 27 18:01:00 2026 GMT Subject: CN=b44d2004f6ef3ee2ad9f8a47709dc4fada55c345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:b8:cf:96:f6:33:42:81:c8:f3:87:66:b4: 8d:0d:40:c4:c6:6f:6f:2e:e2:66:96:1e:6c:1f:cf: 82:fa:b4:13:f5:cf:36:c4:63:06:3d:d9:ca:d0:bc: 91:95:a5:99:00:c2:86:61:7c:6f:76:94:06:3f:14: ea:9b:59:5f:5f:fc:8a:34:b1:55:35:89:4d:42:78: d0:e5:cb:6e:71:39:af:32:13:b2:cb:a0:ea:2b:51: 42:95:74:d5:f6:e3:13:c0:83:59:8e:42:f4:56:40: a9:e9:4e:e7:b1:eb:7c:a3:5b:35:b9:7c:2d:b5:54: 76:27:04:06:00:57:6f:ba:1e:4c:06:9e:66:68:9e: 3b:ed:00:36:91:5a:25:45:30:05:ea:79:86:51:80: 87:2d:b8:13:7e:18:59:56:d1:9c:ad:b1:40:99:a4: 93:d9:a2:ef:b6:40:d6:94:86:7a:45:68:6e:e4:85: 26:87:4b:15:48:7d:ba:0f:fb:72:7d:9c:77:23:cb: d2:42:fb:09:08:86:73:81:72:31:c2:c7:28:ee:05: 10:48:40:67:60:8a:1f:56:9f:b8:74:da:0c:c3:d7: 93:64:e6:37:fb:9b:f9:bc:e0:a9:53:fb:e9:03:02: 4b:7d:b9:1c:c2:1b:f4:29:08:7d:9b:63:21:0a:eb: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4D:20:04:F6:EF:3E:E2:AD:9F:8A:47:70:9D:C4:FA:DA:55:C3:45 X509v3 Authority Key Identifier: keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f3:4b:58:32:b5:d0:bc:b4:47:04:ee:f3:c1:6d:80:04:68: cf:70:d6:31:0a:2e:14:be:32:06:63:66:b7:f9:3a:51:42:c1: c4:52:5d:16:c6:c4:f1:7f:2d:f6:21:84:c1:09:e9:ac:76:aa: 67:86:a6:c1:29:b6:2a:77:fc:f9:a2:19:42:d4:f2:33:21:b8: 4f:69:d6:58:11:6c:fc:f4:44:1f:f2:b0:a0:74:c6:17:3d:cf: 0a:5c:0b:30:53:50:93:50:47:09:c0:1e:04:dc:35:ae:c5:08: 62:f8:d3:84:66:e0:2b:40:83:76:da:b7:ca:72:f8:db:84:c9: e3:6b:94:a1:a9:0c:6e:c5:d2:2c:b4:0c:1c:f9:a6:c3:7c:f8: d6:40:3b:b8:a8:a2:32:4f:96:c7:76:cb:d7:38:b6:94:25:4e: df:b3:23:34:8d:bb:3b:64:c4:7e:b4:81:dd:81:18:89:1e:ea: 42:c4:61:0e:34:74:13:02:b3:33:77:77:c5:1a:03:96:d9:65: 47:6e:ca:ee:08:68:b6:5e:94:ca:93:3a:89:85:17:10:f4:8c: 2f:87:84:dc:ae:9c:cb:0f:31:be:6b:a6:37:2e:41:d4:9f:be: 47:9c:a5:41:02:4a:0a:8d:0c:12:38:81:e6:50:87:91:dc:fd: d5:7e:ed:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d1bQ7usWEdV2/tqafBIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5 NjRiNDAwHhcNMjYwMTI2MTgwMTAwWhcNMjYwMTI3MTgwMTAwWjAzMTEwLwYDVQQD EyhiNDRkMjAwNGY2ZWYzZWUyYWQ5ZjhhNDc3MDlkYzRmYWRhNTVjMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LG4z5b2M0KByPOHZrSNDUDExm9v LuJmlh5sH8+C+rQT9c82xGMGPdnK0LyRlaWZAMKGYXxvdpQGPxTqm1lfX/yKNLFV NYlNQnjQ5ctucTmvMhOyy6DqK1FClXTV9uMTwINZjkL0VkCp6U7nset8o1s1uXwt tVR2JwQGAFdvuh5MBp5maJ477QA2kVolRTAF6nmGUYCHLbgTfhhZVtGcrbFAmaST 2aLvtkDWlIZ6RWhu5IUmh0sVSH26D/tyfZx3I8vSQvsJCIZzgXIxwsco7gUQSEBn YIofVp+4dNoMw9eTZOY3+5v5vOCpU/vpAwJLfbkcwhv0KQh9m2MhCusl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRNIAT27z7irZ+KR3CdxPraVcNFMB8GA1UdIwQY MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPNLWDK1 0Ly0RwTu88FtgARoz3DWMQouFL4yBmNmt/k6UULBxFJdFsbE8X8t9iGEwQnprHaq Z4amwSm2Knf8+aIZQtTyMyG4T2nWWBFs/PREH/KwoHTGFz3PClwLMFNQk1BHCcAe BNw1rsUIYvjThGbgK0CDdtq3ynL424TJ42uUoakMbsXSLLQMHPmmw3z41kA7uKii Mk+Wx3bL1zi2lCVO37MjNI27O2TEfrSB3YEYiR7qQsRhDjR0EwKzM3d3xRoDltll R27K7ghotl6UypM6iYUXEPSML4eE3K6cyw8xvmumNy5B1J++R5ylQQJKCo0MEjiB 5lCHkdz91X7tyA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:16:17 2026 by rpki-client