This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json) Hash identifier: 6nLgQw7Qz49JLXgY/YW5olqexFZW+XP5wdCf+xOF41U= Subject key identifier: 1A:B7:91:6A:28:D3:32:08:33:0B:14:47:57:B4:02:0F:22:B5:6B:77 Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d Certificate serial: 019B7ECC1549104D91623C1F095212805512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft Manifest number: 137D Signing time: Fri 02 Jan 2026 13:01:02 +0000 Manifest this update: Fri 02 Jan 2026 13:01:02 +0000 Manifest next update: Sat 03 Jan 2026 13:01:02 +0000 Files and hashes: 1: 5ATSOSiA10EtAdDvyzpiFcAS2U0.roa (hash: FEzcVGC/mYd4L2CAAAA7gfNC+WWkBe4b/x0RPbYqcaw=) 2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: uI18l0D4DFPYRJvyLHrZwJk8JsnXKtTynGkZzrXBI+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:cc:15:49:10:4d:91:62:3c:1f:09:52:12:80:55:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d Validity Not Before: Jan 2 13:01:02 2026 GMT Not After : Jan 3 13:01:02 2026 GMT Subject: CN=1ab7916a28d33208330b144757b4020f22b56b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:56:97:c2:6d:76:db:4a:2b:5d:ae:6b:7f:bb: 0d:bd:4a:23:3e:e8:91:12:ea:6c:64:6b:8e:7b:8b: 8f:f1:a0:dd:cc:be:b5:e6:e6:c1:04:f1:d2:8e:ad: f5:4b:86:fc:27:15:9a:71:47:7e:ab:ab:0d:0b:bc: 65:88:44:f7:92:10:cf:6b:78:62:c8:66:8c:22:9a: f2:9b:8e:fd:87:54:b6:f1:95:b4:07:45:95:c3:ff: a5:9d:0a:53:4b:f8:71:7b:d1:a5:77:e5:68:a8:c1: 45:13:72:24:d2:98:24:47:30:f4:73:ec:d4:8a:7e: 97:57:9e:e3:c0:6e:c3:d9:22:8c:cb:18:df:d0:3f: ca:c6:29:50:54:ba:ba:81:59:23:29:1c:f8:98:c1: ea:bf:82:0a:c8:16:67:c1:72:cc:59:bd:8b:20:74: 02:3c:b6:e4:15:62:05:e7:25:5e:07:11:3a:b9:cd: 9d:44:a8:c8:65:bf:de:98:17:66:1f:af:aa:5b:63: 26:80:b6:d8:70:e8:49:69:66:d4:25:8c:ed:b9:77: dd:d0:f0:23:75:45:ef:50:be:49:bf:10:1e:56:a1: b7:c2:78:e5:c9:c1:88:f7:1f:f5:de:f0:fa:fb:e1: 31:b5:dd:4d:dd:8b:0b:dd:3a:df:d0:7c:a0:77:a2: b0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B7:91:6A:28:D3:32:08:33:0B:14:47:57:B4:02:0F:22:B5:6B:77 X509v3 Authority Key Identifier: keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b7:34:fe:f8:a4:d0:be:74:8d:a4:ef:df:9f:62:8d:58:57: 91:bd:0d:b8:02:e1:be:bd:06:36:da:6d:2c:67:8f:ee:4a:0f: 07:70:52:b8:52:43:24:27:1b:aa:94:1c:b0:33:b7:6d:53:c1: 44:cb:0d:b0:0b:a8:93:c0:53:f4:b4:fb:72:3d:24:ba:0e:21: 16:7f:48:7b:a4:e6:76:50:d3:97:a4:b5:fb:95:57:90:d4:1c: 39:13:7d:36:6a:d3:a6:a5:81:4b:fb:26:83:ab:97:28:6c:75: 38:27:f1:50:41:36:94:15:3d:42:47:54:4b:23:08:eb:18:d7: b4:05:9b:8f:e4:3b:3b:9c:c3:48:70:3c:e1:ff:b7:73:f4:08: 00:9b:39:46:f3:51:5d:64:d8:54:69:87:2e:1c:49:4c:5e:b2: 9b:41:b8:ae:37:21:95:fd:38:e7:4c:30:f5:d1:5e:7f:e0:13: 60:96:20:b1:11:5f:f4:35:51:e4:f6:41:ea:d3:d9:11:d3:02: d2:da:36:d0:f5:79:98:7e:fa:44:8a:c2:6f:be:45:4b:41:fd: d9:fb:b7:85:0a:e2:cc:12:0a:4d:15:90:d3:da:8e:10:7c:18: c7:f9:96:e2:e0:50:ea:f9:84:a3:6a:5c:15:2b:82:48:94:10: 59:10:17:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+zBVJEE2RYjwfCVISgFUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjI4ZTM5ZjQ3MWFkZGM3NWU3MWEzOTFiODJkZDkyNWM3 ZjA4MWQwHhcNMjYwMTAyMTMwMTAyWhcNMjYwMTAzMTMwMTAyWjAzMTEwLwYDVQQD EygxYWI3OTE2YTI4ZDMzMjA4MzMwYjE0NDc1N2I0MDIwZjIyYjU2Yjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51aXwm1220orXa5rf7sNvUojPuiR EupsZGuOe4uP8aDdzL615ubBBPHSjq31S4b8JxWacUd+q6sNC7xliET3khDPa3hi yGaMIprym479h1S28ZW0B0WVw/+lnQpTS/hxe9Gld+VoqMFFE3Ik0pgkRzD0c+zU in6XV57jwG7D2SKMyxjf0D/KxilQVLq6gVkjKRz4mMHqv4IKyBZnwXLMWb2LIHQC PLbkFWIF5yVeBxE6uc2dRKjIZb/emBdmH6+qW2MmgLbYcOhJaWbUJYztuXfd0PAj dUXvUL5JvxAeVqG3wnjlycGI9x/13vD6++Extd1N3YsL3Trf0Hygd6KwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq3kWoo0zIIMwsUR1e0Ag8itWt3MB8GA1UdIwQY MBaAFKFijjn0ca3cdecaORuC3ZJcfwgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEt MDI1YTBlNmYwNWFlLzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEtMDI1YTBlNmYwNWFl LzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7c0/vik 0L50jaTv359ijVhXkb0NuALhvr0GNtptLGeP7koPB3BSuFJDJCcbqpQcsDO3bVPB RMsNsAuok8BT9LT7cj0kug4hFn9Ie6TmdlDTl6S1+5VXkNQcORN9NmrTpqWBS/sm g6uXKGx1OCfxUEE2lBU9QkdUSyMI6xjXtAWbj+Q7O5zDSHA84f+3c/QIAJs5RvNR XWTYVGmHLhxJTF6ym0G4rjchlf0450ww9dFef+ATYJYgsRFf9DVR5PZB6tPZEdMC 0to20PV5mH76RIrCb75FS0H92fu3hQrizBIKTRWQ09qOEHwYx/mW4uBQ6vmEo2pc FSuCSJQQWRAXyQ== -----END CERTIFICATE-----Generated at Fri Jan 2 14:47:56 2026 by rpki-client