This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json) Hash identifier: 7HhdQLqljabQHYlCuuj4rXz4US9nQPdJiTsLXSYSNbo= Subject key identifier: 17:12:14:7C:AC:1D:24:1A:04:05:18:96:F2:8F:0A:DE:23:F6:B3:D9 Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Certificate serial: 019BF9F70D6E366EE2A668CA841B9A836D08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 11:01:16 +0000 Manifest this update: Mon 26 Jan 2026 11:01:16 +0000 Manifest next update: Tue 27 Jan 2026 11:01:16 +0000 Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: zJyRA2l0MHpxpJCXyUlvPEgzWNT68Xk75huDEt5YOjk=) 2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f7:0d:6e:36:6e:e2:a6:68:ca:84:1b:9a:83:6d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Validity Not Before: Jan 26 11:01:16 2026 GMT Not After : Jan 27 11:01:16 2026 GMT Subject: CN=1712147cac1d241a04051896f28f0ade23f6b3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:3d:71:57:52:8b:83:a6:4c:27:a7:15:25: 3a:97:08:5d:fa:43:59:26:40:28:62:df:4a:db:5b: 3f:a7:43:68:9c:35:a5:ba:6d:57:ae:b1:da:91:c8: 68:ea:eb:2e:54:72:5d:7e:65:38:45:bb:09:5a:c7: 0a:a7:ca:83:38:0c:dc:61:f3:25:5d:b9:01:d7:71: cd:05:6d:6a:4d:08:7f:2a:74:04:c7:82:2b:1d:21: 48:5b:ad:15:67:6a:fb:2f:cf:91:e3:b3:0c:37:b9: 7a:1c:15:b9:50:0d:9f:cf:55:0d:23:0f:c9:04:c5: 35:99:42:df:c0:58:17:2e:0e:07:c0:17:cc:4e:75: 98:69:3e:b3:98:29:50:89:9d:2e:f4:55:2e:af:48: f1:38:8e:7c:ba:8e:62:dc:22:3f:57:ab:b1:89:8f: 4d:19:ea:45:d8:90:4d:4f:30:36:24:a2:8f:34:dc: f4:a1:fa:e3:7b:06:6c:08:32:d0:2e:f0:10:60:1a: 6c:54:d9:74:37:04:29:fd:46:d4:25:cf:73:b2:ca: 86:4e:70:94:19:26:f7:dc:6d:04:7e:49:0c:1b:c0: 53:7a:54:d9:cb:d5:b3:1c:50:cf:85:96:95:fe:3f: b4:ea:da:2e:1e:8b:f2:82:5a:8d:48:44:1d:8b:ce: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:14:7C:AC:1D:24:1A:04:05:18:96:F2:8F:0A:DE:23:F6:B3:D9 X509v3 Authority Key Identifier: keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:eb:08:f5:af:28:f4:b5:05:ff:f5:af:a3:76:b5:02:19: dd:85:5b:ce:b4:87:2a:fe:3b:80:23:39:ee:ce:3c:57:dc:a0: 50:68:eb:3a:cd:c0:1d:b0:dd:8c:b7:bd:d5:5e:23:c4:45:0f: b7:2f:2f:b9:ca:8f:75:4d:24:e8:64:6b:ec:f4:b2:2d:ae:72: 11:17:01:26:eb:2e:9a:c1:68:59:81:4e:e1:e7:c5:b7:ca:e7: ee:9d:92:27:ca:7e:e6:0c:e8:5a:d2:2f:3f:dc:31:32:52:96: c9:6f:0a:59:33:d2:87:fb:4b:a5:de:b1:58:34:63:44:34:8e: ed:47:36:6f:26:a0:b0:9f:c7:bb:88:cc:87:27:ae:81:98:1e: ea:ec:ad:f8:70:1c:b8:d6:31:30:64:67:2b:7c:52:3b:c9:6c: 85:cf:6d:7f:e9:63:cb:e9:98:f6:8e:24:97:3b:71:4e:40:65: 84:a1:ca:dc:2a:76:0c:fe:fa:e0:ce:b6:c5:c7:5f:cd:0c:10: 47:cc:5b:e8:1d:b0:fb:9d:65:fe:05:7f:73:b0:e3:66:4a:2f: 6c:4a:72:a5:dd:79:4e:e6:a3:b5:02:b6:15:57:7b:62:86:34: ad:50:0a:87:b7:80:b1:44:bd:08:5e:4c:b7:e9:ff:bc:1a:4a: 2f:f2:d6:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59w1uNm7ipmjKhBuag20IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlZDg3YjY2OWQwNWI0MjBkZjVhYTlhNjEzMmVhNmZi NTFhNWEwHhcNMjYwMTI2MTEwMTE2WhcNMjYwMTI3MTEwMTE2WjAzMTEwLwYDVQQD EygxNzEyMTQ3Y2FjMWQyNDFhMDQwNTE4OTZmMjhmMGFkZTIzZjZiM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoc9cVdSi4OmTCenFSU6lwhd+kNZ JkAoYt9K21s/p0NonDWlum1XrrHakcho6usuVHJdfmU4RbsJWscKp8qDOAzcYfMl XbkB13HNBW1qTQh/KnQEx4IrHSFIW60VZ2r7L8+R47MMN7l6HBW5UA2fz1UNIw/J BMU1mULfwFgXLg4HwBfMTnWYaT6zmClQiZ0u9FUur0jxOI58uo5i3CI/V6uxiY9N GepF2JBNTzA2JKKPNNz0ofrjewZsCDLQLvAQYBpsVNl0NwQp/UbUJc9zssqGTnCU GSb33G0EfkkMG8BTelTZy9WzHFDPhZaV/j+06touHovyglqNSEQdi8573QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcSFHysHSQaBAUYlvKPCt4j9rPZMB8GA1UdIwQY MBaAFKPm7Ye2adBbQg31qpphMupvtRpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMt N2I4ZWEwZjgzMDgxLzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMtN2I4ZWEwZjgzMDgx LzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJvrCPWv KPS1Bf/1r6N2tQIZ3YVbzrSHKv47gCM57s48V9ygUGjrOs3AHbDdjLe91V4jxEUP ty8vucqPdU0k6GRr7PSyLa5yERcBJusumsFoWYFO4efFt8rn7p2SJ8p+5gzoWtIv P9wxMlKWyW8KWTPSh/tLpd6xWDRjRDSO7Uc2byagsJ/Hu4jMhyeugZge6uyt+HAc uNYxMGRnK3xSO8lshc9tf+ljy+mY9o4klztxTkBlhKHK3Cp2DP764M62xcdfzQwQ R8xb6B2w+51l/gV/c7DjZkovbEpypd15TuajtQK2FVd7YoY0rVAKh7eAsUS9CF5M t+n/vBpKL/LWDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:16 2026 by rpki-client