This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json) Hash identifier: czDT3RzW0Qz9jIE5Hd+0RYjuhudPXunY75vaJC3Q27o= Subject key identifier: 41:59:AD:F7:4D:57:29:B3:81:FA:5D:B8:77:CA:5F:4D:67:33:73:9B Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818 Certificate serial: 019BFA2DB87F6A4762DBD4EEE8E88B7F5F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft Manifest number: 1169 Signing time: Mon 26 Jan 2026 12:00:58 +0000 Manifest this update: Mon 26 Jan 2026 12:00:58 +0000 Manifest next update: Tue 27 Jan 2026 12:00:58 +0000 Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: 23Fs2jgZEUsvi1dxMUsDlHkBMLe+VDQ8hfFnqlrFun0=) 2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:b8:7f:6a:47:62:db:d4:ee:e8:e8:8b:7f:5f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818 Validity Not Before: Jan 26 12:00:58 2026 GMT Not After : Jan 27 12:00:58 2026 GMT Subject: CN=4159adf74d5729b381fa5db877ca5f4d6733739b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:0e:0d:7f:6f:b3:13:5d:fd:33:3b:f7:f1: 2a:3d:5e:0b:82:1d:85:d7:5b:b7:d9:05:0d:52:e5: 77:7d:77:95:69:23:1d:5b:9a:9b:c5:7b:91:7d:42: c4:49:78:0d:23:a5:54:bb:de:5f:58:16:0c:46:57: 12:97:f5:19:8a:25:48:41:0b:31:3c:25:fa:5f:71: a3:56:68:65:40:1c:6c:1a:5c:9b:9f:bb:dc:77:63: c2:7b:ef:e7:e3:e8:1f:fa:4e:cd:70:71:69:9b:cd: f8:f2:37:54:a4:b2:5d:12:7f:fe:3f:57:ff:5c:97: 69:2a:7c:cb:fb:fe:b5:fd:9b:ab:07:b1:21:bf:37: 68:91:cd:3f:27:f4:0b:15:69:7b:06:4d:65:ee:46: 43:f8:4f:7f:cb:07:89:80:8d:30:54:df:3b:e7:07: 17:59:f3:43:5d:b7:0c:b7:03:fc:5c:8d:07:5b:ed: 21:12:f0:07:0b:79:42:98:68:5c:60:55:a9:cd:30: a4:91:1f:d9:26:4c:7f:c4:4b:1d:7c:de:41:59:02: c1:11:e0:23:7e:b2:4c:09:ce:60:92:8e:06:59:9e: 81:10:fb:30:6d:3c:87:21:be:c0:37:c5:25:cf:a8: e4:3a:30:d6:1a:db:d0:9c:eb:e3:16:38:16:54:c6: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:AD:F7:4D:57:29:B3:81:FA:5D:B8:77:CA:5F:4D:67:33:73:9B X509v3 Authority Key Identifier: keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1b:30:f7:4a:06:7a:52:b1:71:2a:9e:5f:b8:89:47:12:19: 0b:44:93:53:c4:81:11:78:ed:1a:48:d4:44:ae:68:99:6d:13: 20:42:77:23:42:81:0d:16:35:83:ea:c5:3b:cc:3c:45:ed:79: 93:af:66:8e:3a:06:17:24:59:1c:98:21:20:03:81:02:83:04: af:7a:96:2c:a0:5d:b9:25:d5:f6:0c:b4:f4:fb:8b:b3:9f:ab: b2:31:b1:78:b1:f8:a1:7e:d6:b4:c3:f0:8f:c8:0e:6f:84:eb: ad:f6:c8:45:40:6a:a5:57:2e:c1:69:7f:5e:b8:e4:73:e4:ce: 61:51:c1:f3:5e:27:ee:df:df:57:6b:b0:0d:2a:81:68:ec:a4: e9:01:b2:0b:1c:b8:63:f7:93:c2:c6:c0:56:d8:1a:16:6b:c9: 86:8f:31:6d:cb:58:9b:85:8b:e0:9a:8a:23:ea:10:92:3f:fe: e5:ea:09:b3:f4:1d:94:fe:dd:f3:ff:e2:b2:30:b5:db:f0:ed: bc:e8:cb:8c:6f:eb:10:0c:d0:8d:c6:b8:39:98:f0:b3:36:77: 48:45:c4:b3:5b:17:e6:96:53:ca:40:4f:b1:51:29:85:c9:60: 4c:54:ac:fd:09:fd:bb:cc:8c:80:64:04:f7:f5:35:29:77:ec: a3:d5:51:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lbh/akdi29Tu6OiLf19WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz NmM4MTgwHhcNMjYwMTI2MTIwMDU4WhcNMjYwMTI3MTIwMDU4WjAzMTEwLwYDVQQD Eyg0MTU5YWRmNzRkNTcyOWIzODFmYTVkYjg3N2NhNWY0ZDY3MzM3MzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqsODX9vsxNd/TM79/EqPV4Lgh2F 11u32QUNUuV3fXeVaSMdW5qbxXuRfULESXgNI6VUu95fWBYMRlcSl/UZiiVIQQsx PCX6X3GjVmhlQBxsGlybn7vcd2PCe+/n4+gf+k7NcHFpm8348jdUpLJdEn/+P1f/ XJdpKnzL+/61/ZurB7Ehvzdokc0/J/QLFWl7Bk1l7kZD+E9/yweJgI0wVN875wcX WfNDXbcMtwP8XI0HW+0hEvAHC3lCmGhcYFWpzTCkkR/ZJkx/xEsdfN5BWQLBEeAj frJMCc5gko4GWZ6BEPswbTyHIb7AN8Ulz6jkOjDWGtvQnOvjFjgWVMZvewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFZrfdNVymzgfpduHfKX01nM3ObMB8GA1UdIwQY MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt NDUwZDIyOTViYTQ5LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5 LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhsw90oG elKxcSqeX7iJRxIZC0STU8SBEXjtGkjURK5omW0TIEJ3I0KBDRY1g+rFO8w8Re15 k69mjjoGFyRZHJghIAOBAoMEr3qWLKBduSXV9gy09PuLs5+rsjGxeLH4oX7WtMPw j8gOb4TrrfbIRUBqpVcuwWl/Xrjkc+TOYVHB814n7t/fV2uwDSqBaOyk6QGyCxy4 Y/eTwsbAVtgaFmvJho8xbctYm4WL4JqKI+oQkj/+5eoJs/QdlP7d8//isjC12/Dt vOjLjG/rEAzQjca4OZjwszZ3SEXEs1sX5pZTykBPsVEphclgTFSs/Qn9u8yMgGQE 9/U1KXfso9VR0g== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:20 2026 by rpki-client