This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json) Hash identifier: xPQeoW33V5+O89jtpi/TxQVok94XPokRNjy+xalxqH8= Subject key identifier: 7B:72:B2:D9:8E:12:FA:0A:84:EC:3D:80:AA:60:ED:36:BC:54:3F:28 Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Certificate serial: 019BFE0A34DA4FE7141EAA9C20018B6DD5AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft Manifest number: 94 Signing time: Tue 27 Jan 2026 06:00:40 +0000 Manifest this update: Tue 27 Jan 2026 06:00:40 +0000 Manifest next update: Wed 28 Jan 2026 06:00:40 +0000 Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=) 2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: Y+gyEoNzo/Nx2EyhudJgKy/ifUCtaScZtkrpN9kYdDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:34:da:4f:e7:14:1e:aa:9c:20:01:8b:6d:d5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Validity Not Before: Jan 27 06:00:40 2026 GMT Not After : Jan 28 06:00:40 2026 GMT Subject: CN=7b72b2d98e12fa0a84ec3d80aa60ed36bc543f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:b5:0e:34:12:4d:b8:58:0b:c4:8d:d0:a5: 7e:f4:01:fa:e1:c5:a1:0f:13:f4:f0:29:17:93:d7: 74:ce:a9:9e:ce:17:2e:72:b9:25:a4:bc:41:89:26: 19:98:8b:56:44:c4:2d:a9:ca:68:1c:e1:d8:b7:b8: 94:50:f7:47:32:22:12:8d:2c:d3:6e:38:a0:20:e9: 3d:91:d6:70:2e:97:b6:d5:03:e2:c5:95:c2:8c:78: ce:0a:fd:cb:c5:37:bb:8e:8f:a3:86:46:59:c7:96: 5a:6f:13:3d:3e:46:49:c5:d5:a3:b9:cb:a6:1f:c9: 86:a7:d1:f7:40:24:12:44:1c:b8:98:94:79:2b:11: 00:6c:6d:de:aa:fd:4f:2c:ee:05:4c:21:6a:00:8e: 38:0d:3a:2a:2b:6c:a0:36:53:de:37:bd:57:d3:b2: 95:78:1b:ad:7d:56:8e:0a:0b:4f:5c:3c:82:f9:79: 05:6c:dd:6f:e9:13:38:0c:61:e9:0a:7d:5b:7c:c6: d4:57:41:5e:a8:19:37:6d:90:20:00:76:91:47:7a: d2:80:e0:88:6a:05:e7:ab:20:1d:d9:f8:a0:89:89: cf:04:4e:79:52:a9:41:8d:d9:ff:51:fb:f6:57:7b: ec:6e:91:25:bc:15:82:30:cc:11:68:83:72:5e:b6: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:72:B2:D9:8E:12:FA:0A:84:EC:3D:80:AA:60:ED:36:BC:54:3F:28 X509v3 Authority Key Identifier: keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:48:5a:eb:63:7e:31:b5:08:00:aa:e1:c5:98:d5:42:d2:33: 69:c0:bc:71:36:ba:49:06:c6:7a:49:9e:14:31:27:29:41:46: 12:77:2e:a8:d2:45:e6:2b:6e:18:33:cf:fc:dd:0b:04:3a:d5: e7:7f:ae:98:c1:7a:ee:82:19:28:9e:85:5b:cf:53:41:05:4a: ca:f9:d9:27:f3:85:1e:7c:04:a3:5f:11:96:63:f8:37:1a:41: 67:15:f0:b8:25:0b:68:c7:69:24:f5:18:cb:fe:8f:cb:d7:19: 4c:02:96:34:db:60:1a:c8:41:43:0b:59:8c:13:cf:73:eb:a3: 37:f1:11:96:ff:82:b6:7b:fc:0e:6d:11:e9:67:54:f9:6a:14: a6:9e:8b:13:d9:00:16:2d:71:dc:54:db:39:e0:56:d1:32:8c: 6f:e8:fd:cf:b8:8b:1c:07:9a:be:cf:7e:d6:f2:93:88:4b:5d: 56:45:69:61:9b:49:fa:a8:3c:4b:c4:9e:4d:74:17:39:4e:71: 30:19:cb:d8:0b:70:06:66:21:bc:04:e8:17:24:8f:a8:f4:bb: d4:6b:f6:80:33:89:7c:7e:d2:d6:93:33:14:35:4a:b4:b0:df: bc:77:0f:b1:2c:15:a6:1c:46:e6:a9:45:fb:34:d1:92:c3:60: 49:e6:1b:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CjTaT+cUHqqcIAGLbdWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw MDAzYjAwHhcNMjYwMTI3MDYwMDQwWhcNMjYwMTI4MDYwMDQwWjAzMTEwLwYDVQQD Eyg3YjcyYjJkOThlMTJmYTBhODRlYzNkODBhYTYwZWQzNmJjNTQzZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdC1DjQSTbhYC8SN0KV+9AH64cWh DxP08CkXk9d0zqmezhcucrklpLxBiSYZmItWRMQtqcpoHOHYt7iUUPdHMiISjSzT bjigIOk9kdZwLpe21QPixZXCjHjOCv3LxTe7jo+jhkZZx5ZabxM9PkZJxdWjucum H8mGp9H3QCQSRBy4mJR5KxEAbG3eqv1PLO4FTCFqAI44DToqK2ygNlPeN71X07KV eButfVaOCgtPXDyC+XkFbN1v6RM4DGHpCn1bfMbUV0FeqBk3bZAgAHaRR3rSgOCI agXnqyAd2figiYnPBE55UqlBjdn/Ufv2V3vsbpElvBWCMMwRaINyXrbU5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtystmOEvoKhOw9gKpg7Ta8VD8oMB8GA1UdIwQY MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt Y2VlOTNjMjVlNjM5LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5 LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUha62N+ MbUIAKrhxZjVQtIzacC8cTa6SQbGekmeFDEnKUFGEncuqNJF5ituGDPP/N0LBDrV 53+umMF67oIZKJ6FW89TQQVKyvnZJ/OFHnwEo18RlmP4NxpBZxXwuCULaMdpJPUY y/6Py9cZTAKWNNtgGshBQwtZjBPPc+ujN/ERlv+Ctnv8Dm0R6WdU+WoUpp6LE9kA Fi1x3FTbOeBW0TKMb+j9z7iLHAeavs9+1vKTiEtdVkVpYZtJ+qg8S8SeTXQXOU5x MBnL2AtwBmYhvAToFySPqPS71Gv2gDOJfH7S1pMzFDVKtLDfvHcPsSwVphxG5qlF +zTRksNgSeYbjw== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:22 2026 by rpki-client