This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json) Hash identifier: HnMln8RHsg6all70nNrigkRmQER2AKDU4qdZljqG6o8= Subject key identifier: E0:44:DC:6A:52:A0:18:37:D1:3C:8B:07:E0:85:08:F8:1A:A7:DA:8C Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c Certificate serial: 019BFD65D69FA951D9363CEAD603AB8EBE36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft Manifest number: 01DA Signing time: Tue 27 Jan 2026 03:01:08 +0000 Manifest this update: Tue 27 Jan 2026 03:01:08 +0000 Manifest next update: Wed 28 Jan 2026 03:01:08 +0000 Files and hashes: 1: IZRU9aitBtasi5s8LfvUyXF6gJI.roa (hash: A+EvTFUEfhqDufK4w5HaH/h/6GcXexGhKX2pAinc5hA=) 2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: MuYgmpQOE8F6wm+iAIqrJl9AZ5Y4dssUk6+41hB4khE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:d6:9f:a9:51:d9:36:3c:ea:d6:03:ab:8e:be:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c Validity Not Before: Jan 27 03:01:08 2026 GMT Not After : Jan 28 03:01:08 2026 GMT Subject: CN=e044dc6a52a01837d13c8b07e08508f81aa7da8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:d7:bb:90:94:e7:65:d1:b7:55:83:47:e1: c1:d9:88:17:73:dc:5e:67:7c:7d:0e:f4:db:57:e7: 97:3d:e1:24:01:90:83:62:3b:14:c5:b2:fb:fc:c1: 11:12:42:bc:3f:21:78:18:46:b8:4a:e9:be:b9:2b: f5:3d:0a:e9:65:84:d4:b3:17:89:43:eb:ef:f2:ec: 04:3c:8e:b9:aa:cc:64:e9:63:11:e5:26:fa:13:17: 4c:52:cf:c5:96:53:c8:1f:21:7c:d8:dc:ec:53:24: 40:71:e7:01:d6:ac:e5:a8:e0:de:23:bc:b5:51:13: 03:35:d2:49:5a:76:17:ad:e3:1b:f4:2a:12:e8:47: 95:ac:7f:00:b6:3d:d6:26:0d:9b:e7:5f:df:9f:46: a5:a6:59:b3:06:5e:99:97:5d:ea:f4:88:60:77:dd: f1:69:f2:ba:d7:b2:4a:3a:27:65:75:21:1a:ba:2c: 16:5c:48:9f:14:e5:72:18:1f:24:ca:25:50:1c:a8: 2a:88:88:65:b2:09:85:8d:8f:2f:b6:7f:b9:03:bd: 48:e4:c1:45:40:08:6e:ac:d8:e3:19:3c:c1:f1:8d: f4:93:8d:cd:95:fd:a1:19:f0:0e:6f:36:8b:71:71: 12:e9:bc:b8:04:4f:2e:61:1e:9a:3f:d9:0d:e8:b4: 51:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:44:DC:6A:52:A0:18:37:D1:3C:8B:07:E0:85:08:F8:1A:A7:DA:8C X509v3 Authority Key Identifier: keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ae:ff:5f:b4:af:17:c0:fe:3a:7a:82:6b:08:25:d4:d6:fe: a9:d2:36:85:65:2b:1e:89:f8:79:eb:42:1d:cb:ef:e8:79:5b: c1:f9:14:61:c2:9e:7e:2a:50:69:a9:d2:19:3d:93:a7:00:67: aa:f6:2f:45:a1:44:6d:b4:8a:99:75:9b:6d:63:b3:b2:35:3c: 01:3b:eb:c5:35:34:ac:64:e7:e2:c6:6a:6b:73:f7:b3:9c:ba: 2e:f9:72:81:ca:79:20:b2:da:ce:4d:05:ef:38:d1:1e:7b:19: b2:90:32:24:41:8f:9b:46:86:77:a5:25:04:0b:f2:a9:c5:fa: 80:25:67:55:55:a1:6a:e4:d3:1a:2f:ee:49:33:b3:b6:5f:29: 51:1c:3e:77:02:b2:2d:ef:58:6d:9d:1d:0f:58:a3:c2:e2:b6: 97:b6:d9:86:21:d5:7d:31:b7:20:ad:3e:47:01:e0:b5:61:34: f7:7f:7b:da:6e:5a:c9:e5:bb:ef:ba:27:2d:db:ac:f9:17:b5: ff:2b:55:da:b1:4b:48:5b:a2:50:ad:a5:8f:d3:11:5d:06:29: 61:b0:4b:35:ba:6c:2a:d5:e3:e0:4c:2b:88:61:a7:66:2c:ff: 68:25:99:4d:af:db:d6:bf:b3:3c:7e:88:e3:d6:7e:1e:ea:30: 89:c7:eb:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZdafqVHZNjzq1gOrjr42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWI2NzBlODE0NmVmNTI3NGFlNDVlYjMwZDI5ZTk3MDA2 NWJhMmMwHhcNMjYwMTI3MDMwMTA4WhcNMjYwMTI4MDMwMTA4WjAzMTEwLwYDVQQD EyhlMDQ0ZGM2YTUyYTAxODM3ZDEzYzhiMDdlMDg1MDhmODFhYTdkYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVnXu5CU52XRt1WDR+HB2YgXc9xe Z3x9DvTbV+eXPeEkAZCDYjsUxbL7/MEREkK8PyF4GEa4Sum+uSv1PQrpZYTUsxeJ Q+vv8uwEPI65qsxk6WMR5Sb6ExdMUs/FllPIHyF82NzsUyRAcecB1qzlqODeI7y1 URMDNdJJWnYXreMb9CoS6EeVrH8Atj3WJg2b51/fn0alplmzBl6Zl13q9Ihgd93x afK617JKOidldSEauiwWXEifFOVyGB8kyiVQHKgqiIhlsgmFjY8vtn+5A71I5MFF QAhurNjjGTzB8Y30k43Nlf2hGfAObzaLcXES6by4BE8uYR6aP9kN6LRRiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBE3GpSoBg30TyLB+CFCPgap9qMMB8GA1UdIwQY MBaAFKOrZw6BRu9SdK5F6zDSnpcAZbosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzIt NjBkNWJlMWI3ZGE5LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzItNjBkNWJlMWI3ZGE5 LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU67/X7Sv F8D+OnqCawgl1Nb+qdI2hWUrHon4eetCHcvv6HlbwfkUYcKefipQaanSGT2TpwBn qvYvRaFEbbSKmXWbbWOzsjU8ATvrxTU0rGTn4sZqa3P3s5y6Lvlygcp5ILLazk0F 7zjRHnsZspAyJEGPm0aGd6UlBAvyqcX6gCVnVVWhauTTGi/uSTOztl8pURw+dwKy Le9YbZ0dD1ijwuK2l7bZhiHVfTG3IK0+RwHgtWE093972m5ayeW777onLdus+Re1 /ytV2rFLSFuiUK2lj9MRXQYpYbBLNbpsKtXj4EwriGGnZiz/aCWZTa/b1r+zPH6I 49Z+HuowicfrLQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:26 2026 by rpki-client