This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: ahx2Sh6LOrqnGzNEuhBLX+BdPyesPbDnX/x0UYOwrHs= Subject key identifier: DE:3E:E9:2E:39:77:80:64:26:8D:8F:C8:81:59:EB:E0:2C:00:A0:B2 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019BF5E4417006002C4D4F0E3355B4DBDD6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 16EA Signing time: Sun 25 Jan 2026 16:02:15 +0000 Manifest this update: Sun 25 Jan 2026 16:02:15 +0000 Manifest next update: Mon 26 Jan 2026 16:02:15 +0000 Files and hashes: 1: FGiko7dGfaIB7oR3Xi7Mm0g0B5A.roa (hash: scq4CicoT05WIHFHPE3BCJO1Q1h5wfjqMz4jQNxHqFE=) 2: KQgcPbLRBBc_xsh51xPt4IehnO4.roa (hash: pCfM4q8twqlvRaHLGHOBBp4aKXHoEg09la6QGcZB7h0=) 3: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (hash: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY=) 4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 3NfRq4qaaAW1gxNpExetZnPNylR9EWXzaIzMXjJH4d4=) 5: P2rUWmGQtbBmqctNiSQO8OXzg4I.roa (hash: bkGnGwFiN2vuWeWrlQUo7BY3bYxabah/LiMHvh76HzA=) 6: RzegIjPR1QzKh4a_hxBHbhA-B7Q.roa (hash: X0vld209GqgyvupdPCzCZcV5LdmNngCSYRQVBP6Po68=) 7: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (hash: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo=) 8: iT_vYQVHuMA40jiF0Cyjlq3oV5Q.roa (hash: uoXIHy7+H0DFX9JCkb/wj88eqL9rtsamz/egtPFv+L4=) 9: qMp9a9fZ12e7dbvzcdMaCDW60vw.roa (hash: o7dkvXGE+57eQ04kql8R9kA6Rq92Dubxz9WCs56/6I0=) 10: rjNblK4bxhZyMeZC4OHShSQ8Jlc.roa (hash: yvBwo79kSdn4a3N6pjUOiYNe2QQKF2EmdQtpBeT8m8w=) 11: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (hash: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:41:70:06:00:2c:4d:4f:0e:33:55:b4:db:dd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jan 25 16:02:15 2026 GMT Not After : Jan 26 16:02:15 2026 GMT Subject: CN=de3ee92e39778064268d8fc88159ebe02c00a0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1d:92:59:8f:c1:91:e6:95:b8:f7:73:7a:81: a2:0d:31:1c:2b:32:04:98:3a:e6:ee:2a:84:f9:67: 23:23:f6:4f:df:59:b8:d2:06:30:28:8a:d7:a4:8f: f8:98:d4:e3:4f:07:51:5a:b0:64:a3:04:f0:de:16: d9:fe:0b:b7:64:d6:58:69:f4:7b:67:d2:5a:97:62: d0:bf:11:f3:53:09:b9:a6:48:11:b8:d2:a2:52:ed: 87:8c:ee:2b:aa:d3:f2:ad:06:a9:a5:3a:51:9e:17: 36:c3:6d:2e:3e:5c:86:b5:e7:bb:a7:a9:f4:0a:5b: 7a:64:23:5a:a5:51:0d:8a:a2:17:42:82:13:28:de: b7:bc:a2:dc:ad:a9:39:0b:11:ca:42:2f:15:89:41: 12:88:7c:3f:d1:81:0d:40:c5:3f:22:5e:29:b9:28: a0:21:a8:4b:54:8b:94:00:e2:1f:b3:12:29:77:cf: e9:e3:54:c1:55:70:8c:eb:cf:0f:3b:43:d1:ae:42: ab:b7:07:7d:d7:58:ab:09:01:ca:ff:d1:e0:9f:84: 53:7e:ac:fd:89:41:ec:70:23:f6:22:18:d7:1d:64: 45:92:19:13:73:06:2f:b4:67:84:f3:40:2e:d5:16: f3:6d:9c:d5:2a:83:f9:b2:61:68:3b:10:ce:54:91: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:E9:2E:39:77:80:64:26:8D:8F:C8:81:59:EB:E0:2C:00:A0:B2 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4e:b8:ec:e0:bc:6a:40:78:41:be:80:4e:cd:9a:d5:3b:1c: b7:79:d3:9d:e4:50:a2:07:d1:9b:81:59:46:e1:5b:23:61:87: 33:58:45:1d:57:89:33:b3:37:5b:d5:7c:44:8b:85:56:15:ad: 1f:9e:01:2f:0d:8a:a1:96:74:fe:52:c8:22:51:59:25:61:df: d3:aa:32:6e:97:03:88:3d:5f:0c:75:ad:bb:2a:bb:a0:87:3d: bf:5c:f1:bb:95:57:22:44:15:ae:ce:f0:ae:4b:68:3d:d2:28: cb:b8:f3:a6:32:3a:31:b3:3a:7f:f9:c3:b3:dc:b9:4f:8d:c1: 57:2a:56:8e:25:cf:fc:f0:02:1a:19:ba:69:5e:93:05:bc:f0: 71:cc:f6:4f:76:65:03:bd:cc:ab:d5:8e:63:18:34:d9:ee:57: db:3f:3a:0d:5c:a3:91:cf:e4:6b:a6:da:4d:a0:78:82:45:1e: c6:57:19:af:ca:1f:62:33:27:38:4e:2e:0e:05:77:12:af:5f: 33:b3:9f:fa:a1:cc:a6:e0:8f:00:bb:fe:5b:95:7d:15:b7:ad: 00:24:bf:3a:15:c0:47:24:8f:a4:26:27:e0:7c:05:ca:25:18: bb:f5:be:2e:d8:c5:0d:4f:34:be:ef:b8:39:a5:3b:2f:dc:04: 0f:5f:d2:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15EFwBgAsTU8OM1W0291uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMTI1MTYwMjE1WhcNMjYwMTI2MTYwMjE1WjAzMTEwLwYDVQQD EyhkZTNlZTkyZTM5Nzc4MDY0MjY4ZDhmYzg4MTU5ZWJlMDJjMDBhMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R2SWY/BkeaVuPdzeoGiDTEcKzIE mDrm7iqE+WcjI/ZP31m40gYwKIrXpI/4mNTjTwdRWrBkowTw3hbZ/gu3ZNZYafR7 Z9Jal2LQvxHzUwm5pkgRuNKiUu2HjO4rqtPyrQappTpRnhc2w20uPlyGtee7p6n0 Clt6ZCNapVENiqIXQoITKN63vKLcrak5CxHKQi8ViUESiHw/0YENQMU/Il4puSig IahLVIuUAOIfsxIpd8/p41TBVXCM688PO0PRrkKrtwd911irCQHK/9Hgn4RTfqz9 iUHscCP2IhjXHWRFkhkTcwYvtGeE80Au1RbzbZzVKoP5smFoOxDOVJEcTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4+6S45d4BkJo2PyIFZ6+AsAKCyMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU647OC8 akB4Qb6ATs2a1Tsct3nTneRQogfRm4FZRuFbI2GHM1hFHVeJM7M3W9V8RIuFVhWt H54BLw2KoZZ0/lLIIlFZJWHf06oybpcDiD1fDHWtuyq7oIc9v1zxu5VXIkQVrs7w rktoPdIoy7jzpjI6MbM6f/nDs9y5T43BVypWjiXP/PACGhm6aV6TBbzwccz2T3Zl A73Mq9WOYxg02e5X2z86DVyjkc/ka6baTaB4gkUexlcZr8ofYjMnOE4uDgV3Eq9f M7Of+qHMpuCPALv+W5V9FbetACS/OhXARySPpCYn4HwFyiUYu/W+LtjFDU80vu+4 OaU7L9wED1/SNA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:41:56 2026 by rpki-client