This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json) Hash identifier: H5BxtOZysrZwqKuN99lSXh2luMt3t3VjTHqNy53brmA= Subject key identifier: 9D:43:4C:0F:C8:4C:51:FC:7C:61:57:8A:30:58:7D:D1:F8:94:AC:03 Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31 Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31 Certificate serial: 019BFBAF351B36A8AB031D299BE4A01CE621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft Manifest number: 15 Signing time: Mon 26 Jan 2026 19:02:02 +0000 Manifest this update: Mon 26 Jan 2026 19:02:02 +0000 Manifest next update: Tue 27 Jan 2026 19:02:02 +0000 Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=) 2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: hkcuIvPo8SSOr+2Sg9pHTJ0XOK5nL+mPqo0YodYfp30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:af:35:1b:36:a8:ab:03:1d:29:9b:e4:a0:1c:e6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31 Validity Not Before: Jan 26 19:02:02 2026 GMT Not After : Jan 27 19:02:02 2026 GMT Subject: CN=9d434c0fc84c51fc7c61578a30587dd1f894ac03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:62:af:3f:25:ad:d5:1f:7c:15:4a:f1:69: a7:68:40:1d:e0:84:85:a7:97:09:63:db:7e:0e:13: 83:71:77:e1:85:1b:0d:2b:e1:c1:9f:76:c6:3a:2d: 93:95:5a:49:8c:5a:60:08:26:ac:4d:98:7c:09:78: 18:e3:00:73:38:a5:f2:0f:26:72:c9:bc:1d:28:f9: 95:71:f7:69:02:5b:77:30:e5:b8:65:a4:f5:f7:d2: 4c:98:31:90:03:3d:4b:a6:3e:9b:b4:75:32:a8:bd: 41:80:16:5a:8c:51:64:73:be:d6:8c:94:48:b4:92: 96:e9:b8:bb:2c:e3:e1:cc:f2:26:22:09:f6:b5:6b: 30:ab:c1:e6:e6:c6:01:b4:4c:6c:6a:92:60:72:af: da:79:c4:75:d6:21:59:7f:48:46:af:59:f6:0f:eb: 5d:0f:45:82:bc:cb:02:77:94:cd:41:db:70:d3:9a: 50:ac:62:82:d3:54:b1:8c:45:3d:a1:6a:36:92:83: 10:4b:36:83:b4:27:69:79:b8:06:10:4f:5d:85:1b: dc:81:93:2e:7e:9b:1f:9b:ff:2d:9f:aa:f7:66:5e: 6c:41:c1:4a:97:4a:78:bf:a6:be:45:9d:44:54:c8: 58:f8:63:52:5f:61:35:69:a0:79:f9:d9:78:bd:7c: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:43:4C:0F:C8:4C:51:FC:7C:61:57:8A:30:58:7D:D1:F8:94:AC:03 X509v3 Authority Key Identifier: keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:66:ed:d5:e1:57:17:e9:25:f3:83:00:27:dc:44:66:7f: ed:2e:b9:0e:5f:ba:d0:c2:3d:3a:8e:cf:53:7e:f8:3d:6c:db: 6c:75:33:ce:00:ef:2f:f0:b5:74:5c:80:b5:7d:44:43:8f:44: 59:68:cd:ec:b6:10:c7:a3:b9:a8:a8:f4:b2:64:61:71:a8:18: a4:23:ec:07:14:8d:8f:c8:37:94:8b:7c:9d:76:f9:9c:84:a4: 61:aa:54:5f:90:69:2e:1a:6c:86:63:c2:72:7b:f4:9e:aa:6e: 39:93:5a:03:b8:41:00:f7:b8:d4:60:f4:72:f6:35:df:12:50: 7a:25:b4:58:ee:29:8a:85:11:94:83:a3:ac:e9:b8:27:6a:84: 18:ab:00:96:4b:74:45:c6:1c:02:3d:c2:fd:c0:d0:f4:cb:f8: 98:da:7a:49:8b:23:db:a2:65:4d:59:a5:c1:1b:c2:ad:44:ca: ce:37:fd:d5:c2:52:7a:8e:46:95:c3:0d:df:b2:cf:7f:b9:77: 09:5a:f7:47:29:42:96:93:95:31:b7:98:66:d1:06:e8:84:7d: 59:f2:64:e9:32:06:96:52:3f:5f:fd:55:a0:13:13:b6:37:1e: 86:20:aa:0d:3b:8d:19:a1:cb:01:4e:98:05:55:ef:0a:d5:a1: 3d:af:5a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rzUbNqirAx0pm+SgHOYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGMyOTZhOWZlNWE2MDUxNTgyZTVhZGU0NzU0OTg1ZjZm MTFiMzEwHhcNMjYwMTI2MTkwMjAyWhcNMjYwMTI3MTkwMjAyWjAzMTEwLwYDVQQD Eyg5ZDQzNGMwZmM4NGM1MWZjN2M2MTU3OGEzMDU4N2RkMWY4OTRhYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvBirz8lrdUffBVK8WmnaEAd4ISF p5cJY9t+DhODcXfhhRsNK+HBn3bGOi2TlVpJjFpgCCasTZh8CXgY4wBzOKXyDyZy ybwdKPmVcfdpAlt3MOW4ZaT199JMmDGQAz1Lpj6btHUyqL1BgBZajFFkc77WjJRI tJKW6bi7LOPhzPImIgn2tWswq8Hm5sYBtExsapJgcq/aecR11iFZf0hGr1n2D+td D0WCvMsCd5TNQdtw05pQrGKC01SxjEU9oWo2koMQSzaDtCdpebgGEE9dhRvcgZMu fpsfm/8tn6r3Zl5sQcFKl0p4v6a+RZ1EVMhY+GNSX2E1aaB5+dl4vXzifQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1DTA/ITFH8fGFXijBYfdH4lKwDMB8GA1UdIwQY MBaAFKCMKWqf5aYFFYLlreR1SYX28RsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTkt YWZiN2U4ZTczMGNjLzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82MDA3ODktZDcxZC00OTY4LThiYTktYWZiN2U4ZTczMGNj LzEvb0l3cGFwX2xwZ1VWZ3VXdDVIVkpoZmJ4R3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0dm7dXh VxfpJfODACfcRGZ/7S65Dl+60MI9Oo7PU374PWzbbHUzzgDvL/C1dFyAtX1EQ49E WWjN7LYQx6O5qKj0smRhcagYpCPsBxSNj8g3lIt8nXb5nISkYapUX5BpLhpshmPC cnv0nqpuOZNaA7hBAPe41GD0cvY13xJQeiW0WO4pioURlIOjrOm4J2qEGKsAlkt0 RcYcAj3C/cDQ9Mv4mNp6SYsj26JlTVmlwRvCrUTKzjf91cJSeo5GlcMN37LPf7l3 CVr3RylClpOVMbeYZtEG6IR9WfJk6TIGllI/X/1VoBMTtjcehiCqDTuNGaHLAU6Y BVXvCtWhPa9a3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 22:08:04 2026 by rpki-client