This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json) Hash identifier: z4XAqTa+gSmKuaMknR6sZHobKoDu5buOqtk9g9APOuE= Subject key identifier: D6:FA:70:82:3F:97:45:67:B7:EB:0A:D7:78:47:43:1E:0C:A9:1C:23 Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Certificate serial: 019BA6ECB01C1C8D15C9DF5065E29625EBDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft Manifest number: 08A5 Signing time: Sat 10 Jan 2026 08:01:27 +0000 Manifest this update: Sat 10 Jan 2026 08:01:27 +0000 Manifest next update: Sun 11 Jan 2026 08:01:27 +0000 Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: onYROVn6QReiB80lj5Hz8YpX01UQV/y8GT4FKffmJZQ=) 2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=) 3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a6:ec:b0:1c:1c:8d:15:c9:df:50:65:e2:96:25:eb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Validity Not Before: Jan 10 08:01:27 2026 GMT Not After : Jan 11 08:01:27 2026 GMT Subject: CN=d6fa70823f974567b7eb0ad77847431e0ca91c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:60:dc:d3:00:f1:c0:b1:ce:67:3b:90:5b: c0:c9:a0:7a:f8:e6:0f:18:21:71:1e:3a:70:b6:5b: f2:78:6d:64:8c:00:58:98:6e:cd:d1:94:2c:cc:90: 95:a9:8b:14:e8:ed:29:df:ff:66:2a:75:5e:b2:82: c7:27:15:bf:03:fc:d5:43:ce:9c:1d:25:dc:90:62: 73:4d:70:8a:17:42:80:62:d1:a5:cb:c7:28:0d:79: 85:e7:aa:56:0a:66:a9:d4:b4:b0:51:9b:6e:b2:5a: c8:20:31:e7:b3:61:db:d1:2a:b4:e2:a6:db:66:6d: 1d:3e:2a:ad:66:d7:24:29:b4:54:26:c7:48:91:9e: 4a:f9:91:46:ee:91:d4:6f:5f:d4:86:b5:da:fd:20: 61:bd:6a:aa:19:a6:09:f6:8b:98:03:c5:d4:66:97: 89:3e:18:a7:eb:0d:5e:b5:4a:6c:91:20:19:cb:c9: 21:73:67:88:1d:4d:54:93:7e:71:c5:d6:4e:e6:f6: df:ef:42:c2:07:ee:f9:af:8f:7a:e3:a1:45:75:f9: 01:f9:b5:ed:0c:10:c5:86:47:3b:bf:0e:4c:28:d6: 88:5a:22:8f:f0:b6:85:9e:7d:30:eb:2d:32:de:93: 38:30:c6:6b:9b:63:63:0c:04:fd:5d:f7:8e:fd:d0: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FA:70:82:3F:97:45:67:B7:EB:0A:D7:78:47:43:1E:0C:A9:1C:23 X509v3 Authority Key Identifier: keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a9:54:7d:96:cc:df:bd:1f:f5:98:6e:bf:1f:8c:df:9a:e1: 3f:11:48:a0:8c:e5:51:1e:b1:0b:eb:16:82:5a:57:0a:0a:64: f7:2e:4b:6f:6e:88:39:d4:ea:a2:96:2e:3c:6c:b1:e3:23:ed: 17:52:63:24:7c:4b:72:29:4d:d3:fb:e3:c0:c5:05:b1:11:71: a1:e5:c1:ab:3b:51:f1:43:80:43:8b:34:f1:f0:91:c1:b1:49: 80:f3:d9:e2:5e:d4:27:f4:2d:46:8b:d3:62:25:6c:69:50:1b: 03:58:e4:e3:05:9e:18:46:d1:93:8e:e8:5e:a0:0e:96:3f:76: f5:98:7f:e8:9a:9a:07:ef:65:73:38:c8:6c:f5:a8:6e:af:0f: e4:af:fb:02:76:8a:8b:24:f8:20:d8:07:6b:1e:2c:4b:af:f9: a8:8d:27:b9:1e:49:15:c2:47:b8:29:b5:9b:43:ad:62:24:1a: d9:cd:0b:62:c7:c1:a8:30:dc:6e:09:3d:cb:09:a4:51:b7:ec: 19:b7:d4:95:b5:1e:4b:eb:36:50:f9:6d:8d:c6:bb:77:c3:00: 6e:e7:ec:b8:55:fc:a0:d8:bc:91:e8:9e:e6:2a:6d:69:65:74: b7:6c:28:53:9f:32:9b:ae:a2:25:9a:a2:ff:c4:bf:3c:a0:94: 37:88:67:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZum7LAcHI0Vyd9QZeKWJevbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3 ZmJhYzQwHhcNMjYwMTEwMDgwMTI3WhcNMjYwMTExMDgwMTI3WjAzMTEwLwYDVQQD EyhkNmZhNzA4MjNmOTc0NTY3YjdlYjBhZDc3ODQ3NDMxZTBjYTkxYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6tg3NMA8cCxzmc7kFvAyaB6+OYP GCFxHjpwtlvyeG1kjABYmG7N0ZQszJCVqYsU6O0p3/9mKnVesoLHJxW/A/zVQ86c HSXckGJzTXCKF0KAYtGly8coDXmF56pWCmap1LSwUZtuslrIIDHns2Hb0Sq04qbb Zm0dPiqtZtckKbRUJsdIkZ5K+ZFG7pHUb1/UhrXa/SBhvWqqGaYJ9ouYA8XUZpeJ Phin6w1etUpskSAZy8khc2eIHU1Uk35xxdZO5vbf70LCB+75r49646FFdfkB+bXt DBDFhkc7vw5MKNaIWiKP8LaFnn0w6y0y3pM4MMZrm2NjDAT9XfeO/dA61wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb6cII/l0Vnt+sK13hHQx4MqRwjMB8GA1UdIwQY MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1 LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqlUfZbM 370f9Zhuvx+M35rhPxFIoIzlUR6xC+sWglpXCgpk9y5Lb26IOdTqopYuPGyx4yPt F1JjJHxLcilN0/vjwMUFsRFxoeXBqztR8UOAQ4s08fCRwbFJgPPZ4l7UJ/QtRovT YiVsaVAbA1jk4wWeGEbRk47oXqAOlj929Zh/6JqaB+9lczjIbPWobq8P5K/7AnaK iyT4INgHax4sS6/5qI0nuR5JFcJHuCm1m0OtYiQa2c0LYsfBqDDcbgk9ywmkUbfs GbfUlbUeS+s2UPltjca7d8MAbufsuFX8oNi8keie5iptaWV0t2woU58ym66iJZqi /8S/PKCUN4hnfw== -----END CERTIFICATE-----Generated at Sat Jan 10 14:31:03 2026 by rpki-client