This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json) Hash identifier: ho3RdZn9GhVvODLLnFC7kS3i7qwMRmUiQwl7KgpHvxA= Subject key identifier: 6C:EF:CD:63:6F:B0:46:25:EB:2F:DA:AA:47:73:F7:DA:C1:1B:C3:43 Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Certificate serial: 019C0E90344246779A027079E2A9D4B6B4C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft Manifest number: 17FF Signing time: Fri 30 Jan 2026 11:00:57 +0000 Manifest this update: Fri 30 Jan 2026 11:00:57 +0000 Manifest next update: Sat 31 Jan 2026 11:00:57 +0000 Files and hashes: 1: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: cVoEA1gKGX2OAiJfs4VjGxwWWNxvRj+bekiP4KMD56A=) 2: WDi0x8_2l-5Bh0Kx0kgLvxWni0g.roa (hash: ZvSkcDxGhvi+aJsfbms5jhxFpHcmll85L+dtrGm8zwg=) 3: csloCIt3CTSVgebL58dJpxOdtC0.roa (hash: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:90:34:42:46:77:9a:02:70:79:e2:a9:d4:b6:b4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Validity Not Before: Jan 30 11:00:57 2026 GMT Not After : Jan 31 11:00:57 2026 GMT Subject: CN=6cefcd636fb04625eb2fdaaa4773f7dac11bc343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:db:4c:d6:48:02:d3:f5:71:e4:cb:04:00: 2d:d7:9f:0a:cb:3b:4d:2d:26:1b:3a:d2:45:7f:8c: b9:49:23:a9:a3:d6:5d:db:ab:93:d3:91:91:1f:ce: 80:40:21:0a:bd:2b:bc:26:e9:94:0c:db:ac:1a:d0: c7:5b:c6:41:9c:23:28:0b:b5:a0:0b:96:61:e8:e2: 10:a0:eb:85:01:47:fe:19:62:e4:e7:43:ca:57:d7: ac:93:13:cc:e3:7d:10:62:c3:68:1c:c1:e2:a9:2f: bc:35:47:1e:7a:75:90:2c:5b:34:56:40:2c:90:fb: 22:cd:3a:9e:31:45:51:fa:ab:a0:73:fb:e5:df:02: a7:7b:38:1f:84:cc:91:48:54:75:72:11:aa:78:66: 77:bc:ff:72:22:63:00:2a:34:ce:27:33:5d:9f:a2: ce:b7:23:5a:75:58:47:05:4c:6a:98:3e:27:6f:44: 58:7f:c1:4e:b5:84:19:da:27:15:5e:f8:3c:8f:2a: 59:1c:f9:35:ef:0c:1b:47:4f:46:0c:b2:f3:90:cc: 94:44:82:cc:c6:82:05:59:61:5d:4b:84:2e:ed:17: 02:b1:c9:f3:38:65:25:57:01:cc:64:8b:3f:ad:0e: 62:29:dc:5a:42:52:2b:99:6f:b4:53:27:e1:49:66: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:CD:63:6F:B0:46:25:EB:2F:DA:AA:47:73:F7:DA:C1:1B:C3:43 X509v3 Authority Key Identifier: keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ea:de:6a:73:55:eb:00:2c:30:d5:3d:bf:33:47:14:44:1f: 93:6a:1b:7a:62:eb:dc:bf:ef:f2:d4:73:37:9e:64:70:fa:49: c9:e5:66:5c:a4:20:f5:2b:88:06:b7:d6:97:1c:d4:c5:53:8f: a9:e5:39:1a:f8:e3:59:fd:53:26:ec:55:32:43:7a:4d:e4:53: 7a:15:1a:b4:80:23:09:1b:5c:17:34:a5:06:c3:63:74:f8:0e: af:fb:0f:6c:2c:be:ad:cd:73:04:61:bd:59:82:b5:e4:ce:54: e6:88:5a:8e:7b:3a:89:a8:97:17:5f:45:e0:f4:23:e0:ba:80: 09:fd:a0:17:2e:3f:fe:82:0a:b7:83:69:11:54:9e:f2:13:66: 58:77:33:f0:f2:95:12:d5:d2:88:27:2d:d5:cd:2a:bf:c3:7c: 15:57:f8:a8:7e:79:ce:41:97:45:0c:5c:b9:92:01:f6:3c:29: 98:6d:60:1f:8d:0c:6e:65:95:e8:4e:eb:b0:ec:5d:1c:89:a5: f8:12:e8:9a:9d:52:87:d1:61:bd:3a:2c:b3:bd:f2:b3:4c:25: 05:4f:5c:1c:9a:39:c6:8a:f6:85:f7:55:8a:f8:0e:f7:10:36: 56:40:e0:eb:90:18:eb:3e:3d:34:f8:90:2b:7e:77:c4:9b:49: 1a:8d:fe:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwOkDRCRneaAnB54qnUtrTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3 M2UyNjgwHhcNMjYwMTMwMTEwMDU3WhcNMjYwMTMxMTEwMDU3WjAzMTEwLwYDVQQD Eyg2Y2VmY2Q2MzZmYjA0NjI1ZWIyZmRhYWE0NzczZjdkYWMxMWJjMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28bbTNZIAtP1ceTLBAAt158KyztN LSYbOtJFf4y5SSOpo9Zd26uT05GRH86AQCEKvSu8JumUDNusGtDHW8ZBnCMoC7Wg C5Zh6OIQoOuFAUf+GWLk50PKV9eskxPM430QYsNoHMHiqS+8NUceenWQLFs0VkAs kPsizTqeMUVR+qugc/vl3wKnezgfhMyRSFR1chGqeGZ3vP9yImMAKjTOJzNdn6LO tyNadVhHBUxqmD4nb0RYf8FOtYQZ2icVXvg8jypZHPk17wwbR09GDLLzkMyURILM xoIFWWFdS4Qu7RcCscnzOGUlVwHMZIs/rQ5iKdxaQlIrmW+0UyfhSWb3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzvzWNvsEYl6y/aqkdz99rBG8NDMB8GA1UdIwQY MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsureanNV 6wAsMNU9vzNHFEQfk2obemLr3L/v8tRzN55kcPpJyeVmXKQg9SuIBrfWlxzUxVOP qeU5GvjjWf1TJuxVMkN6TeRTehUatIAjCRtcFzSlBsNjdPgOr/sPbCy+rc1zBGG9 WYK15M5U5ohajns6iaiXF19F4PQj4LqACf2gFy4//oIKt4NpEVSe8hNmWHcz8PKV EtXSiCct1c0qv8N8FVf4qH55zkGXRQxcuZIB9jwpmG1gH40MbmWV6E7rsOxdHIml +BLomp1Sh9FhvToss73ys0wlBU9cHJo5xor2hfdVivgO9xA2VkDg65AY6z49NPiQ K353xJtJGo3+Ig== -----END CERTIFICATE-----Generated at Fri Jan 30 17:20:14 2026 by rpki-client