This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json) Hash identifier: L/mpStmZJMNetGcpSIbSosblTRZHtGg2G2OJcr+ENSA= Subject key identifier: 6D:61:00:F1:F6:73:0D:94:F0:CD:7B:44:3F:82:3B:51:58:B4:77:7A Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d Certificate serial: 019BB1022DE053F7CE8895EEBB152B03E70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft Manifest number: 131A Signing time: Mon 12 Jan 2026 07:01:08 +0000 Manifest this update: Mon 12 Jan 2026 07:01:08 +0000 Manifest next update: Tue 13 Jan 2026 07:01:08 +0000 Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=) 2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: JmmHt8CLPxCnfkU2VwVXYtFCfEjRtHch4AtD4J2QHXA=) 3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:02:2d:e0:53:f7:ce:88:95:ee:bb:15:2b:03:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d Validity Not Before: Jan 12 07:01:08 2026 GMT Not After : Jan 13 07:01:08 2026 GMT Subject: CN=6d6100f1f6730d94f0cd7b443f823b5158b4777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:96:de:5e:9c:4f:d5:21:50:69:28:36:d2: fd:09:39:13:83:a0:29:2f:ec:a6:a2:ab:a4:97:e9: 02:03:58:eb:7a:bf:87:f0:db:d0:f1:6b:94:8f:01: 8b:95:e0:e2:ba:be:7b:15:4d:86:d6:14:1c:f6:bb: cf:c7:ff:69:60:1e:05:5b:75:cf:4f:6b:31:f2:b5: 63:d0:fd:9f:92:cd:fd:53:a1:9c:d8:d6:4c:4d:bd: f2:53:13:f5:ff:4d:7e:ce:81:35:34:1d:c7:3d:df: 21:08:45:da:26:7e:8f:80:1b:bb:a2:b0:af:ae:ca: 62:b9:3a:54:ac:51:92:35:58:61:67:10:26:fe:e2: 65:30:26:6d:28:a9:85:88:38:9d:9e:74:28:a2:07: 50:17:62:69:76:09:22:08:53:bd:6a:d8:74:66:a4: b4:54:dc:6d:eb:0f:0b:41:d1:57:1e:63:e8:32:bc: a8:fe:41:d1:5e:75:13:ce:50:a1:40:96:7c:30:dc: 8a:6a:d5:10:fa:fd:ad:2c:21:7c:78:c9:d9:2a:c9: 4d:b0:e0:64:62:8c:f0:99:08:80:b3:ad:38:c0:51: 26:a0:f0:e0:82:50:6c:b4:01:39:2a:ff:15:46:1a: 74:18:8a:87:b6:c9:f4:2b:a3:f9:38:7b:89:9d:aa: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:00:F1:F6:73:0D:94:F0:CD:7B:44:3F:82:3B:51:58:B4:77:7A X509v3 Authority Key Identifier: keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:72:9d:78:b9:d2:c2:80:89:8a:c4:28:7a:a0:19:eb:2d:9f: ff:c5:fa:29:46:49:75:0c:62:d1:bd:a6:1c:e8:21:d8:5f:c6: b7:e9:aa:9b:ef:fe:35:69:cb:e1:4d:2c:0c:35:d0:ce:45:3e: 76:da:ab:f7:e8:b1:b9:a2:57:75:ae:0f:a8:13:39:a0:15:f5: 42:79:72:9c:40:9a:ab:a2:f2:98:50:8d:15:2f:b4:8b:71:ba: ff:de:aa:21:0e:25:1f:a2:34:40:21:4c:41:c8:f2:04:20:0c: 74:b9:3d:90:1c:62:6b:90:0f:14:a7:27:58:29:e1:fb:5a:0e: 3d:16:a0:11:eb:0d:57:a1:64:53:19:32:48:7a:5c:db:0f:8f: 61:24:07:ce:b1:86:a5:29:8f:cb:48:f7:7a:50:fc:e6:3d:47: e6:b1:ec:09:c1:5b:70:da:47:54:1b:23:a6:9d:72:e9:aa:29: b2:1e:9f:77:60:5f:53:43:75:da:ed:ce:fd:8c:16:75:95:b6: ab:63:88:94:08:a2:5e:71:97:c4:55:04:bd:7b:81:88:55:c8: eb:61:6e:39:dc:34:eb:40:ff:80:dc:11:e7:28:80:9e:25:09: ee:48:7e:bc:13:49:16:e7:bb:91:9f:9c:77:10:b1:f1:25:55: 76:5b:8d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxAi3gU/fOiJXuuxUrA+cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzM2VlYzAzZWExMjI3MTMyNzhiNDA2NmVjZjJiZmVhYTE1 NjNjMGQwHhcNMjYwMTEyMDcwMTA4WhcNMjYwMTEzMDcwMTA4WjAzMTEwLwYDVQQD Eyg2ZDYxMDBmMWY2NzMwZDk0ZjBjZDdiNDQzZjgyM2I1MTU4YjQ3NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWyW3l6cT9UhUGkoNtL9CTkTg6Ap L+ymoqukl+kCA1jrer+H8NvQ8WuUjwGLleDiur57FU2G1hQc9rvPx/9pYB4FW3XP T2sx8rVj0P2fks39U6Gc2NZMTb3yUxP1/01+zoE1NB3HPd8hCEXaJn6PgBu7orCv rspiuTpUrFGSNVhhZxAm/uJlMCZtKKmFiDidnnQoogdQF2JpdgkiCFO9ath0ZqS0 VNxt6w8LQdFXHmPoMryo/kHRXnUTzlChQJZ8MNyKatUQ+v2tLCF8eMnZKslNsOBk YozwmQiAs604wFEmoPDgglBstAE5Kv8VRhp0GIqHtsn0K6P5OHuJnap1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1hAPH2cw2U8M17RD+CO1FYtHd6MB8GA1UdIwQY MBaAFKM+7APqEicTJ4tAZuzyv+qhVjwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDct NTlhNWVlM2FkOWE4LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDctNTlhNWVlM2FkOWE4 LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHKdeLnS woCJisQoeqAZ6y2f/8X6KUZJdQxi0b2mHOgh2F/Gt+mqm+/+NWnL4U0sDDXQzkU+ dtqr9+ixuaJXda4PqBM5oBX1QnlynECaq6LymFCNFS+0i3G6/96qIQ4lH6I0QCFM QcjyBCAMdLk9kBxia5APFKcnWCnh+1oOPRagEesNV6FkUxkySHpc2w+PYSQHzrGG pSmPy0j3elD85j1H5rHsCcFbcNpHVBsjpp1y6aopsh6fd2BfU0N12u3O/YwWdZW2 q2OIlAiiXnGXxFUEvXuBiFXI62FuOdw060D/gNwR5yiAniUJ7kh+vBNJFue7kZ+c dxCx8SVVdluNUg== -----END CERTIFICATE-----Generated at Mon Jan 12 15:47:08 2026 by rpki-client