This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json) Hash identifier: tPt25bu447/Bjdxxn309gn+tB2DNsYngOjBSLgl+HWc= Subject key identifier: 10:67:95:F7:57:E1:83:60:7F:87:D4:81:89:99:5A:78:5A:B7:58:D0 Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561 Certificate serial: 019BA26AD517EDB124DD8454AE6DE057B111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft Manifest number: 09EA Signing time: Fri 09 Jan 2026 11:01:08 +0000 Manifest this update: Fri 09 Jan 2026 11:01:08 +0000 Manifest next update: Sat 10 Jan 2026 11:01:08 +0000 Files and hashes: 1: BA0F46EGJQuUOd55Cm90LRIzBhc.roa (hash: t9yTmpbFuYaGrvuLwRkAmJ665/pQoOz5cLGXg8ZoDjo=) 2: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: a0mXeekjztfBTk+uw2leaqw7KM7yhO7OfptMbzZeq4k=) 3: ivnqCnk5aHVxuyPPDjLhii_Bng0.roa (hash: c8FMuF9Vwbhd2PNk1D1JMLIcBkl1nRPrJ2WTUfx+bew=) 4: qNNTgwAeNO4eLzrn4RbzinkwPIg.roa (hash: MK5iDyEirJcoHnkvIe1pM0F+yAjpb7eMDkVzM93/+O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:6a:d5:17:ed:b1:24:dd:84:54:ae:6d:e0:57:b1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561 Validity Not Before: Jan 9 11:01:08 2026 GMT Not After : Jan 10 11:01:08 2026 GMT Subject: CN=106795f757e183607f87d48189995a785ab758d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:e1:69:d3:92:c0:26:40:4f:02:6b:68:0a: c6:d3:f6:a3:ac:53:b1:3c:8c:b9:9a:14:fc:4c:63: 85:61:38:26:6e:1e:a2:70:61:9d:56:48:33:2f:3b: 3e:0a:fe:85:15:ff:06:39:0b:9f:a2:96:20:80:8f: 16:20:4f:4a:7f:8a:f7:e1:ab:79:de:90:4f:c3:63: 2f:aa:8b:d6:ff:9c:93:32:33:7c:e3:fd:be:c0:74: 01:f7:5c:4d:b8:ca:74:db:88:98:60:92:a4:5a:43: aa:72:68:60:80:95:fc:29:0f:2d:89:cb:2f:37:5b: 05:1e:98:cb:0d:50:4a:d8:7e:af:f1:1e:33:28:d5: 5d:2f:77:00:d1:f3:83:b9:fc:0e:86:cb:28:0e:c8: 62:5e:ef:71:f3:5f:32:b4:41:6a:92:b4:e6:3f:3e: 61:4f:97:50:0d:37:35:2c:e7:e0:a1:41:15:59:8b: 46:45:ad:b1:8f:28:14:e3:5a:7f:92:1b:e5:fe:fd: e3:c8:8d:11:30:38:bb:8a:4d:b0:36:28:81:a7:3b: 4d:8b:5a:a8:1f:e9:8f:4d:b4:e8:4d:dd:ca:c0:af: 8b:c3:82:02:8d:1e:06:9f:51:97:ac:ea:04:3e:c8: 65:e2:e2:74:d0:1d:1f:4c:80:cd:c0:a0:89:db:61: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:67:95:F7:57:E1:83:60:7F:87:D4:81:89:99:5A:78:5A:B7:58:D0 X509v3 Authority Key Identifier: keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:70:3f:46:37:a3:5e:7f:87:30:a2:9c:d8:bb:2a:02:1f:4c: 4b:e9:32:36:12:59:43:90:db:38:a3:15:21:96:d6:09:32:f6: df:9b:86:cb:d0:7a:c4:db:09:68:87:d7:ad:95:79:a2:8c:f0: 52:34:f3:32:28:2c:bd:7a:f3:89:8d:18:ed:e4:5b:98:2d:d7: 70:b2:89:57:6d:5b:47:e8:21:94:c4:98:45:ef:3b:aa:9f:15: 51:e8:d4:cc:a7:32:12:e1:50:46:ad:71:38:17:ec:d7:5a:98: 01:22:15:37:20:c7:46:4e:b5:48:71:b6:fb:27:0a:93:88:8b: 0f:f3:2d:59:9c:64:1a:27:0b:44:8c:9c:2b:ba:fa:7e:38:93: 11:38:89:8d:2b:15:ae:38:82:07:ac:99:84:9f:89:eb:f7:20: f4:91:46:ee:de:0a:c3:d4:7a:bf:47:8b:68:2c:61:1f:c9:04: 86:53:e1:ef:e7:4a:b5:b0:c3:12:00:bc:8d:11:dc:0c:18:e1: 4c:11:a3:f9:30:c4:9e:ec:d8:aa:7c:f7:4a:90:89:92:b7:b4: 71:86:b1:23:a4:0d:96:7c:da:99:38:de:d4:89:1a:d5:5e:c4: f6:c4:d5:8c:ed:54:24:bf:d6:50:3c:bb:a0:9b:19:09:bd:bb: bf:1e:2e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiatUX7bEk3YRUrm3gV7ERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk Y2U1NjEwHhcNMjYwMTA5MTEwMTA4WhcNMjYwMTEwMTEwMTA4WjAzMTEwLwYDVQQD EygxMDY3OTVmNzU3ZTE4MzYwN2Y4N2Q0ODE4OTk5NWE3ODVhYjc1OGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/hadOSwCZATwJraArG0/ajrFOx PIy5mhT8TGOFYTgmbh6icGGdVkgzLzs+Cv6FFf8GOQufopYggI8WIE9Kf4r34at5 3pBPw2MvqovW/5yTMjN84/2+wHQB91xNuMp024iYYJKkWkOqcmhggJX8KQ8ticsv N1sFHpjLDVBK2H6v8R4zKNVdL3cA0fODufwOhssoDshiXu9x818ytEFqkrTmPz5h T5dQDTc1LOfgoUEVWYtGRa2xjygU41p/khvl/v3jyI0RMDi7ik2wNiiBpztNi1qo H+mPTbToTd3KwK+Lw4ICjR4Gn1GXrOoEPshl4uJ00B0fTIDNwKCJ22HfdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBnlfdX4YNgf4fUgYmZWnhat1jQMB8GA1UdIwQY MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0 LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXA/Rjej Xn+HMKKc2LsqAh9MS+kyNhJZQ5DbOKMVIZbWCTL235uGy9B6xNsJaIfXrZV5oozw UjTzMigsvXrziY0Y7eRbmC3XcLKJV21bR+ghlMSYRe87qp8VUejUzKcyEuFQRq1x OBfs11qYASIVNyDHRk61SHG2+ycKk4iLD/MtWZxkGicLRIycK7r6fjiTETiJjSsV rjiCB6yZhJ+J6/cg9JFG7t4Kw9R6v0eLaCxhH8kEhlPh7+dKtbDDEgC8jRHcDBjh TBGj+TDEnuzYqnz3SpCJkre0cYaxI6QNlnzamTje1Ika1V7E9sTVjO1UJL/WUDy7 oJsZCb27vx4uXw== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:33 2026 by rpki-client