This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft File: o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json) Hash identifier: HvUT94SuYfnstn06zUdMJsigTaJivQHfKk8Oqta+2OY= Subject key identifier: A8:98:2A:11:37:1E:AB:B3:CB:9C:58:FF:89:25:FC:7E:53:2A:B6:6C Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Certificate serial: 019C0FDA4FCD1466095914E3B1B6E3FAE87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft Manifest number: 095F Signing time: Fri 30 Jan 2026 17:01:31 +0000 Manifest this update: Fri 30 Jan 2026 17:01:31 +0000 Manifest next update: Sat 31 Jan 2026 17:01:31 +0000 Files and hashes: 1: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (hash: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4=) 2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: ouf3jwwrnDebIHZfsh6Uc9W4MuHsnjw7XQ3dZ//jKYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:da:4f:cd:14:66:09:59:14:e3:b1:b6:e3:fa:e8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Validity Not Before: Jan 30 17:01:31 2026 GMT Not After : Jan 31 17:01:31 2026 GMT Subject: CN=a8982a11371eabb3cb9c58ff8925fc7e532ab66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:91:d6:fb:f0:d1:c9:46:9f:e1:97:6c:a3: 7a:27:7d:62:ab:d7:30:e2:ec:85:bf:e6:4e:c8:dd: 3a:f8:26:77:40:db:66:72:a6:ae:00:af:ed:94:48: b3:2b:5a:6d:f4:03:24:48:4d:40:ad:df:2d:c0:d5: f7:c0:d1:f3:89:f7:6f:94:11:a1:25:86:a5:f9:45: fc:06:b4:e9:01:3d:18:b5:d3:31:0b:69:21:01:84: 1b:42:58:06:54:80:1b:c6:8f:b9:1c:49:2e:72:8d: f8:b9:28:1e:80:ff:8b:c6:ec:22:7a:01:db:65:74: af:e5:5b:49:d6:e6:b1:d7:4a:aa:45:3a:59:24:24: f9:8a:b6:e9:ae:21:81:c8:f9:96:15:1a:ea:ed:50: ad:bd:bc:16:05:bc:2b:af:c5:b4:5c:13:89:6f:32: e5:15:35:ad:ed:05:ea:b4:29:d2:59:b0:f9:c1:44: 87:64:6c:62:7b:52:2e:cf:ce:50:6e:07:68:c2:8e: 35:d4:22:51:0f:db:b7:0e:71:8e:1c:d6:05:5f:3f: 78:d7:6a:4e:3e:c5:ed:1c:fb:a5:cb:ca:5c:9b:3b: 2e:d3:f5:03:e1:11:48:11:59:91:3a:b6:34:12:b5: f1:c4:0b:31:39:62:b4:7c:ca:ef:e0:6b:3c:b2:a9: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:2A:11:37:1E:AB:B3:CB:9C:58:FF:89:25:FC:7E:53:2A:B6:6C X509v3 Authority Key Identifier: keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d6:4d:f4:f4:6d:aa:fb:99:ed:e6:81:d9:a7:79:92:f1:8c: 54:a0:ce:2c:8b:0e:64:a2:b9:2a:63:0d:c2:fa:79:e3:8e:57: f4:e7:7d:b3:26:02:ad:1c:a6:c3:6b:99:f1:ad:3b:03:fc:3e: 6b:6c:54:d7:2e:f9:28:bd:4a:b8:de:1a:eb:03:41:0c:89:27: 8a:88:99:78:42:25:fa:09:e2:c8:59:bc:3a:b8:ef:1f:c5:4c: 90:7d:5f:06:53:e4:1f:8c:e6:48:52:bd:6a:56:91:c1:84:a0: 60:a8:a3:f4:77:76:07:5d:f3:ef:05:fe:5b:1f:57:0a:c6:bf: 7f:cc:78:25:ed:99:24:f6:e5:c1:73:ec:da:ca:cb:24:3b:68: 07:11:66:df:25:9f:8f:00:46:15:0a:dc:a6:2b:a1:a8:91:17: 47:e1:96:ea:b7:73:bd:6e:d9:ce:da:f8:07:ec:16:1a:1b:96: 9c:dd:ca:a3:da:f2:1d:d9:f8:bd:df:47:ee:e6:e4:78:81:89: db:03:1f:0f:f1:f4:72:79:0d:e5:11:b2:24:80:7c:b4:02:df: 76:f8:1c:b7:65:32:65:a2:a7:95:98:d1:14:5c:91:55:22:5f: 63:bf:0a:2b:63:4a:99:51:02:9d:24:0f:44:22:ad:ad:0c:6c: 7b:a1:75:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwP2k/NFGYJWRTjsbbj+uh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2VmOTNjYjdhY2IwZmI0OWJhMjg4YTdhMGZiZjI2ZDMw MDRmYTUwHhcNMjYwMTMwMTcwMTMxWhcNMjYwMTMxMTcwMTMxWjAzMTEwLwYDVQQD EyhhODk4MmExMTM3MWVhYmIzY2I5YzU4ZmY4OTI1ZmM3ZTUzMmFiNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6+R1vvw0clGn+GXbKN6J31iq9cw 4uyFv+ZOyN06+CZ3QNtmcqauAK/tlEizK1pt9AMkSE1Ard8twNX3wNHzifdvlBGh JYal+UX8BrTpAT0YtdMxC2khAYQbQlgGVIAbxo+5HEkuco34uSgegP+LxuwiegHb ZXSv5VtJ1uax10qqRTpZJCT5irbpriGByPmWFRrq7VCtvbwWBbwrr8W0XBOJbzLl FTWt7QXqtCnSWbD5wUSHZGxie1Iuz85Qbgdowo411CJRD9u3DnGOHNYFXz9412pO PsXtHPuly8pcmzsu0/UD4RFIEVmROrY0ErXxxAsxOWK0fMrv4Gs8sqnqBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiYKhE3Hquzy5xY/4kl/H5TKrZsMB8GA1UdIwQY MBaAFKPO+Ty3rLD7SbooinoPvybTAE+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDkt NGI1Njk0OWVlNzUwLzEvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDktNGI1Njk0OWVlNzUw LzEvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitZN9PRt qvuZ7eaB2ad5kvGMVKDOLIsOZKK5KmMNwvp5445X9Od9syYCrRymw2uZ8a07A/w+ a2xU1y75KL1KuN4a6wNBDIknioiZeEIl+gniyFm8OrjvH8VMkH1fBlPkH4zmSFK9 alaRwYSgYKij9Hd2B13z7wX+Wx9XCsa/f8x4Je2ZJPblwXPs2srLJDtoBxFm3yWf jwBGFQrcpiuhqJEXR+GW6rdzvW7Zztr4B+wWGhuWnN3Ko9ryHdn4vd9H7ubkeIGJ 2wMfD/H0cnkN5RGyJIB8tALfdvgct2UyZaKnlZjRFFyRVSJfY78KK2NKmVECnSQP RCKtrQxse6F1xQ== -----END CERTIFICATE-----Generated at Fri Jan 30 20:12:04 2026 by rpki-client