This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json) Hash identifier: i4axsRA1R4lo8S94BHHkPJ6ScO1R2pCQap8xH2+jX7g= Subject key identifier: A8:E0:F2:55:00:9D:5D:07:9E:C1:24:7F:17:E3:67:6C:75:CA:73:39 Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Certificate serial: 019B82036F62F447300D69D9A0467348055F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft Manifest number: 0CA6 Signing time: Sat 03 Jan 2026 04:00:21 +0000 Manifest this update: Sat 03 Jan 2026 04:00:21 +0000 Manifest next update: Sun 04 Jan 2026 04:00:21 +0000 Files and hashes: 1: E7N3AbX4XRe6TtepW4IKz_xhbuk.roa (hash: T0P6XuI3QLOIzu4AgydenL9szcYBu2vZyoMNm8nvA0Y=) 2: HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa (hash: aHBtaErkZmaBHVd9P0AYZA/rEH87fSJk4r+cxPYL8Fk=) 3: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: 3zo0W1kdO9ZVMjtbEjgVzv6HhqzLzimMwb1bsdW5P+k=) 4: iTmeATvkhdaQSx1hi5nnHidew6A.roa (hash: IYi+E84wN5bo5fjg0rwOe7narncl8RETFzc0nw+a92c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:03:6f:62:f4:47:30:0d:69:d9:a0:46:73:48:05:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Validity Not Before: Jan 3 04:00:21 2026 GMT Not After : Jan 4 04:00:21 2026 GMT Subject: CN=a8e0f255009d5d079ec1247f17e3676c75ca7339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:9a:98:7d:92:f0:d0:7c:4e:42:09:a1:a5: 39:08:2b:9e:d7:e0:f8:1d:b1:e7:b3:6c:a5:47:fb: 29:ba:74:e5:72:a4:56:1d:15:f8:94:21:a2:2d:5c: 7f:74:c0:e1:8b:e7:10:fb:fc:53:23:ee:a9:07:c4: 77:e7:1b:cb:04:f9:11:43:af:a7:41:e6:e5:b6:62: 8a:08:7b:94:e7:bc:f2:e0:b3:b6:e1:f3:2c:fc:92: 07:e3:5f:b5:9c:13:fb:c8:d7:8e:aa:5b:0e:1f:24: 8a:f9:e7:c0:b0:58:0c:21:80:44:ad:8a:a5:f8:8c: 41:77:4a:6f:12:7e:89:c8:95:83:91:6a:e8:73:ca: ac:bd:94:d0:4e:16:c5:bf:f2:00:1f:20:42:42:db: 89:84:6f:e3:ff:bf:af:3c:87:91:39:94:f5:3a:67: a9:96:07:a5:39:05:1f:21:e0:30:b2:aa:5b:f7:29: 6a:ce:9a:15:85:62:90:00:bd:1e:6a:ff:51:85:c8: 23:32:d4:c1:1d:cc:51:c6:a3:0b:8b:c3:8e:83:2d: 6a:20:46:a8:fc:e4:60:64:2b:23:fe:11:31:38:03: 72:12:cc:81:a6:81:24:55:d2:00:7a:6e:92:18:5a: 19:60:ca:3b:dc:2f:eb:3a:0f:5f:ae:24:da:4f:78: 5d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E0:F2:55:00:9D:5D:07:9E:C1:24:7F:17:E3:67:6C:75:CA:73:39 X509v3 Authority Key Identifier: keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:88:83:99:a3:59:cc:24:15:12:72:2b:d0:1a:e8:a8:1c:8f: aa:76:65:66:07:b3:a1:90:4d:f2:b2:5a:2d:19:45:d7:a8:1e: b9:18:79:22:75:bd:7a:9e:e7:29:68:11:2d:00:77:f6:85:30: 2e:38:0a:86:9f:e0:fa:c5:64:ec:29:35:60:fd:c4:93:e5:e8: 63:50:44:f5:8b:1a:4e:65:82:6f:b9:63:34:6b:05:4b:58:d2: ad:77:4a:e6:2d:5f:8a:b5:8f:19:59:e4:9c:51:2b:67:e1:13: 73:07:6f:1a:37:fe:79:cf:7d:30:eb:6c:e9:5c:08:5c:a1:30: 48:94:8f:94:21:17:a6:83:8e:78:71:f8:12:7d:9f:de:a5:2c: 64:c1:8b:f0:65:3b:4a:00:c1:af:a9:cf:17:94:0b:95:ed:ba: 51:7b:d1:4a:b0:fe:b8:a3:5a:18:be:57:1b:2c:d7:bf:cc:4e: 32:99:05:5d:4a:71:ed:66:65:8a:79:a8:ac:6c:04:57:e8:f8: 05:d9:63:c4:2d:b5:9a:40:6d:bf:be:d3:4d:f1:80:1d:e3:af: 7a:60:2c:28:9d:57:e2:16:42:b1:b9:33:f3:bb:68:bb:82:c4: 9a:af:38:3b:e7:17:e8:34:bc:ae:34:53:11:52:5d:f0:87:56: fd:cd:16:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuCA29i9EcwDWnZoEZzSAVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk YWY2NDQwHhcNMjYwMTAzMDQwMDIxWhcNMjYwMTA0MDQwMDIxWjAzMTEwLwYDVQQD EyhhOGUwZjI1NTAwOWQ1ZDA3OWVjMTI0N2YxN2UzNjc2Yzc1Y2E3MzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kSamH2S8NB8TkIJoaU5CCue1+D4 HbHns2ylR/spunTlcqRWHRX4lCGiLVx/dMDhi+cQ+/xTI+6pB8R35xvLBPkRQ6+n QebltmKKCHuU57zy4LO24fMs/JIH41+1nBP7yNeOqlsOHySK+efAsFgMIYBErYql +IxBd0pvEn6JyJWDkWroc8qsvZTQThbFv/IAHyBCQtuJhG/j/7+vPIeROZT1Omep lgelOQUfIeAwsqpb9ylqzpoVhWKQAL0eav9RhcgjMtTBHcxRxqMLi8OOgy1qIEao /ORgZCsj/hExOANyEsyBpoEkVdIAem6SGFoZYMo73C/rOg9friTaT3hdzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjg8lUAnV0HnsEkfxfjZ2x1ynM5MB8GA1UdIwQY MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt MzA3MzNkMzcwZGYzLzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIiDmaNZ zCQVEnIr0BroqByPqnZlZgezoZBN8rJaLRlF16geuRh5InW9ep7nKWgRLQB39oUw LjgKhp/g+sVk7Ck1YP3Ek+XoY1BE9YsaTmWCb7ljNGsFS1jSrXdK5i1firWPGVnk nFErZ+ETcwdvGjf+ec99MOts6VwIXKEwSJSPlCEXpoOOeHH4En2f3qUsZMGL8GU7 SgDBr6nPF5QLle26UXvRSrD+uKNaGL5XGyzXv8xOMpkFXUpx7WZlinmorGwEV+j4 BdljxC21mkBtv77TTfGAHeOvemAsKJ1X4hZCsbkz87tou4LEmq84O+cX6DS8rjRT EVJd8IdW/c0WvA== -----END CERTIFICATE-----Generated at Sat Jan 3 08:09:38 2026 by rpki-client