This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json) Hash identifier: 4LxrB7msw5i0lviin2Ij50PL2ViSbp+UfTN/YHTk7Qo= Subject key identifier: BD:4B:B4:67:86:E8:7A:8B:84:2F:E2:25:69:DF:EE:4B:E9:B4:E3:CD Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Certificate serial: 019B9EFC46BEDFDFD31C23B74E5D01ADEDA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft Manifest number: 046C Signing time: Thu 08 Jan 2026 19:01:31 +0000 Manifest this update: Thu 08 Jan 2026 19:01:31 +0000 Manifest next update: Fri 09 Jan 2026 19:01:31 +0000 Files and hashes: 1: 3xF5zXncC4lUUlVcqraWFOzrS7Q.roa (hash: vnW96IIO7KZsSM+69xxxO0ynFQjIBJXcCGymfdrv09M=) 2: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: HDPDG7a5yhK1RJsO7pbWMexhXgDvs16ylXUPGpum9b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:fc:46:be:df:df:d3:1c:23:b7:4e:5d:01:ad:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Validity Not Before: Jan 8 19:01:31 2026 GMT Not After : Jan 9 19:01:31 2026 GMT Subject: CN=bd4bb46786e87a8b842fe22569dfee4be9b4e3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:1b:c5:81:75:ef:4e:95:40:e6:18:96:5f: 2a:24:a8:36:65:25:79:ff:e7:37:3b:bc:a5:2c:ed: ee:19:3b:83:6f:c8:32:db:f4:70:e8:b9:ec:3c:71: c3:fa:e7:0d:3a:cb:67:11:3a:38:d3:5d:7f:70:3d: 6f:93:04:c6:1b:d4:fc:2c:b7:e1:76:87:4d:6e:b4: df:05:aa:8c:98:a6:25:4f:8b:c4:6d:48:e5:dc:c9: 44:5d:3a:44:0d:78:e5:dd:1a:2f:cf:0b:74:f0:59: 8f:e2:7c:94:1b:72:e3:52:a5:3f:9c:ce:ea:ed:73: 02:af:01:2c:ec:43:04:2e:fe:03:56:42:e4:42:cd: 02:8f:9f:fa:95:c7:e2:49:2f:a0:77:de:76:13:af: f6:a1:1e:b9:c8:e8:22:41:32:48:b1:1e:4f:59:4c: cb:75:70:cc:22:a3:4c:a0:41:00:9b:42:7f:50:60: 64:bd:40:7b:10:e0:f1:93:65:4d:8e:de:41:e4:d0: 5f:59:b2:29:bf:fd:b8:d5:77:4b:d9:af:db:d9:c4: 44:87:07:49:52:8c:75:1e:d2:4d:7d:9d:29:47:b9: 7c:93:a7:51:b3:a0:f7:0f:df:10:98:e5:d4:50:9d: 4f:16:9d:72:12:a0:39:d0:91:0f:38:f9:d3:54:c9: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4B:B4:67:86:E8:7A:8B:84:2F:E2:25:69:DF:EE:4B:E9:B4:E3:CD X509v3 Authority Key Identifier: keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ae:2b:2e:89:b0:38:5c:68:e2:a9:18:85:70:84:3e:14:47: cd:66:6a:39:ec:20:0e:32:41:d3:5d:af:c5:d7:a7:ed:d6:72: 9c:5d:d9:5a:ee:b2:08:ee:f9:be:73:fc:43:3e:d7:e1:65:e3: bb:64:50:bb:31:26:b1:92:16:3a:0b:b0:49:87:34:8b:eb:59: 4a:d5:88:fd:d5:48:13:7f:e4:49:c2:bb:19:57:e3:48:97:fc: 9d:b0:c7:fe:a7:8f:f9:3e:f3:87:40:ba:f4:b3:69:2c:4c:41: bf:28:3d:6c:81:d1:45:bc:4e:1a:e2:e4:d4:2a:57:70:6b:e2: 26:63:25:e6:a7:d5:6b:bd:70:9e:21:0f:07:36:83:73:b5:29: 92:d5:37:56:bc:dd:5d:64:a0:81:7a:0e:36:7c:aa:56:d5:8d: f1:37:16:b7:5b:d0:ad:05:22:c7:9b:78:10:dd:fe:24:6d:f8: e9:3a:95:09:16:1d:6f:2f:14:73:9f:52:2d:9f:4f:94:5e:a6: c2:49:b1:33:b0:35:b0:78:00:74:ea:a5:91:89:60:84:86:e4: 3b:18:25:93:ac:25:8d:02:f1:e6:9c:f7:05:10:c1:9f:d6:95: 1e:26:1c:34:eb:dd:d6:d5:e7:e4:63:c9:04:19:cf:64:ec:41: 26:93:66:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZue/Ea+39/THCO3Tl0Bre2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzgyZTJlNTRiNjBmMWY2OGY4NWM5ODRkYTFhNjk2MzFj NTJjYTgwHhcNMjYwMTA4MTkwMTMxWhcNMjYwMTA5MTkwMTMxWjAzMTEwLwYDVQQD EyhiZDRiYjQ2Nzg2ZTg3YThiODQyZmUyMjU2OWRmZWU0YmU5YjRlM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngYbxYF1706VQOYYll8qJKg2ZSV5 /+c3O7ylLO3uGTuDb8gy2/Rw6LnsPHHD+ucNOstnETo4011/cD1vkwTGG9T8LLfh dodNbrTfBaqMmKYlT4vEbUjl3MlEXTpEDXjl3Rovzwt08FmP4nyUG3LjUqU/nM7q 7XMCrwEs7EMELv4DVkLkQs0Cj5/6lcfiSS+gd952E6/2oR65yOgiQTJIsR5PWUzL dXDMIqNMoEEAm0J/UGBkvUB7EODxk2VNjt5B5NBfWbIpv/241XdL2a/b2cREhwdJ Uox1HtJNfZ0pR7l8k6dRs6D3D98QmOXUUJ1PFp1yEqA50JEPOPnTVMm4swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1LtGeG6HqLhC/iJWnf7kvptOPNMB8GA1UdIwQY MBaAFKI4Li5Utg8faPhcmE2hppYxxSyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgt ODFkMTMwNGZhZjc2LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgtODFkMTMwNGZhZjc2 LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg64rLomw OFxo4qkYhXCEPhRHzWZqOewgDjJB012vxden7dZynF3ZWu6yCO75vnP8Qz7X4WXj u2RQuzEmsZIWOguwSYc0i+tZStWI/dVIE3/kScK7GVfjSJf8nbDH/qeP+T7zh0C6 9LNpLExBvyg9bIHRRbxOGuLk1CpXcGviJmMl5qfVa71wniEPBzaDc7UpktU3Vrzd XWSggXoONnyqVtWN8TcWt1vQrQUix5t4EN3+JG346TqVCRYdby8Uc59SLZ9PlF6m wkmxM7A1sHgAdOqlkYlghIbkOxglk6wljQLx5pz3BRDBn9aVHiYcNOvd1tXn5GPJ BBnPZOxBJpNm0w== -----END CERTIFICATE-----Generated at Fri Jan 9 01:11:52 2026 by rpki-client