This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json) Hash identifier: 8NTs8MIlhG6typjDzjhP7hjXOKMTjEpc2qo+CrwxkmY= Subject key identifier: 2C:95:1B:36:85:67:40:CC:38:20:AB:1B:17:E0:D7:6C:81:97:4A:F7 Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98 Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798 Certificate serial: 019BFF1D71D0B1F372E02A7FEF39A67AEF52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft Manifest number: 12 Signing time: Tue 27 Jan 2026 11:01:18 +0000 Manifest this update: Tue 27 Jan 2026 11:01:18 +0000 Manifest next update: Wed 28 Jan 2026 11:01:18 +0000 Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: CyHDzU6ug04GHUaiGxdm3Lke/O51GLMntXmGAVGPgFk=) 2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:71:d0:b1:f3:72:e0:2a:7f:ef:39:a6:7a:ef:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798 Validity Not Before: Jan 27 11:01:18 2026 GMT Not After : Jan 28 11:01:18 2026 GMT Subject: CN=2c951b36856740cc3820ab1b17e0d76c81974af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:d2:42:b7:3e:74:69:4d:e6:8e:c9:68:54: e7:0d:ed:5a:5a:25:22:9d:ff:86:68:c8:8d:28:42: fb:d8:3a:ca:06:90:a2:a0:f0:de:6d:b5:59:0a:b5: 31:9f:1e:82:1f:0d:41:d9:fd:72:6e:8a:a2:d7:e1: 81:2c:a2:05:69:bb:60:65:1c:2a:35:17:88:70:2d: 2a:e0:18:16:35:a3:59:f6:b0:40:04:f1:f7:de:1b: 4f:ed:29:7c:dd:98:53:2e:d4:5e:bb:f8:8b:9f:aa: d8:e0:86:26:52:8c:a4:a6:6d:4e:f3:64:b8:41:a8: 81:e2:40:a9:08:c2:4f:e1:da:72:9e:65:54:4f:44: b2:54:6d:29:e8:62:e7:69:90:06:ba:44:80:09:2b: 15:0e:20:e6:ed:50:72:3f:38:77:c2:ae:d2:8e:ba: 72:0c:f3:5d:b9:47:53:d9:fb:41:31:28:f7:4d:e6: f4:52:e8:24:31:09:75:70:8e:7e:74:77:a0:ca:63: 9a:d8:d5:20:0f:95:a8:97:dc:24:f2:3f:05:db:a7: 60:3a:95:44:a0:a4:fe:bf:ca:1a:01:65:5b:87:78: 90:35:ce:68:2e:b8:05:75:0f:8d:46:cc:f4:b0:f0: a3:d0:29:24:23:fe:dd:cd:cb:c8:d4:26:91:dc:08: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:95:1B:36:85:67:40:CC:38:20:AB:1B:17:E0:D7:6C:81:97:4A:F7 X509v3 Authority Key Identifier: keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1a:2a:e4:82:db:3e:72:f7:bb:d7:ad:6a:6b:70:e7:f0:c5: e1:08:3f:24:91:0b:87:82:78:73:cd:fe:27:c2:a1:28:ef:8f: 09:b0:82:23:ca:b7:4a:4b:bd:b4:93:e2:11:89:3d:1e:eb:4f: ed:91:d4:45:a7:2b:8c:cc:6e:5e:e3:bd:e8:0b:b4:37:68:04: cd:ff:98:23:97:e6:e4:e8:c2:65:e4:21:2c:cd:f4:95:cd:2c: 86:bc:2d:31:0a:ec:38:71:f3:99:e4:5a:63:1e:c5:2e:65:f4: 18:5b:a6:e2:0e:0d:07:b5:1d:4e:60:eb:25:a6:fb:dc:81:67: 9a:9f:13:fc:3a:cb:32:44:d8:53:ee:ef:8f:f6:36:8a:13:79: 9d:28:a4:a4:1d:7f:9a:3b:0d:d3:40:be:44:c6:41:3c:f3:59: de:ea:da:52:d2:41:36:ed:34:35:df:ba:44:61:83:2b:cc:64: bd:27:00:3d:da:fc:88:12:bb:77:86:1c:6f:6f:31:e8:a2:04: 15:7e:f9:4c:69:ca:ae:68:e5:ef:2a:34:cc:73:82:d3:12:0b: fd:3d:68:4c:49:dd:33:95:cd:08:6f:68:57:23:22:20:43:5b: 7d:c4:0c:48:2e:e4:90:06:f8:12:bc:6c:e0:7b:d9:d7:ba:c1: b6:ae:77:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HXHQsfNy4Cp/7zmmeu9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhOGUwNzk0MGRjZDYzNDRlMWE4MTYyMGJkNzhhMjY4YmU5 YzM3OTgwHhcNMjYwMTI3MTEwMTE4WhcNMjYwMTI4MTEwMTE4WjAzMTEwLwYDVQQD EygyYzk1MWIzNjg1Njc0MGNjMzgyMGFiMWIxN2UwZDc2YzgxOTc0YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyejSQrc+dGlN5o7JaFTnDe1aWiUi nf+GaMiNKEL72DrKBpCioPDebbVZCrUxnx6CHw1B2f1yboqi1+GBLKIFabtgZRwq NReIcC0q4BgWNaNZ9rBABPH33htP7Sl83ZhTLtReu/iLn6rY4IYmUoykpm1O82S4 QaiB4kCpCMJP4dpynmVUT0SyVG0p6GLnaZAGukSACSsVDiDm7VByPzh3wq7Sjrpy DPNduUdT2ftBMSj3Teb0UugkMQl1cI5+dHegymOa2NUgD5Wol9wk8j8F26dgOpVE oKT+v8oaAWVbh3iQNc5oLrgFdQ+NRsz0sPCj0CkkI/7dzcvI1CaR3AjPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyVGzaFZ0DMOCCrGxfg12yBl0r3MB8GA1UdIwQY MBaAFDqOB5QNzWNE4agWIL14omi+nDeYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEt NWE2OTQ2MDc0MzVlLzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jOGUyMGEtNTg5Zi00NGZjLTk2NGEtNWE2OTQ2MDc0MzVl LzEvT280SGxBM05ZMFRocUJZZ3ZYaWlhTDZjTjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBoq5ILb PnL3u9etamtw5/DF4Qg/JJELh4J4c83+J8KhKO+PCbCCI8q3Sku9tJPiEYk9HutP 7ZHURacrjMxuXuO96Au0N2gEzf+YI5fm5OjCZeQhLM30lc0shrwtMQrsOHHzmeRa Yx7FLmX0GFum4g4NB7UdTmDrJab73IFnmp8T/DrLMkTYU+7vj/Y2ihN5nSikpB1/ mjsN00C+RMZBPPNZ3uraUtJBNu00Nd+6RGGDK8xkvScAPdr8iBK7d4Ycb28x6KIE FX75TGnKrmjl7yo0zHOC0xIL/T1oTEndM5XNCG9oVyMiIENbfcQMSC7kkAb4Erxs 4HvZ17rBtq53Bg== -----END CERTIFICATE-----Generated at Tue Jan 27 17:09:30 2026 by rpki-client