This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json) Hash identifier: EMVks08TEbA9GN5uDUzePRtRc4k3pLTInWFLZvaQNJU= Subject key identifier: 5B:0B:7C:DA:50:7B:EB:8F:8B:67:45:C6:B0:7B:DF:0C:C5:96:6E:F3 Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9 Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9 Certificate serial: 019B951CD1A81D3F64ED6AEC28C6BBEA285E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft Manifest number: 1735 Signing time: Tue 06 Jan 2026 21:00:52 +0000 Manifest this update: Tue 06 Jan 2026 21:00:52 +0000 Manifest next update: Wed 07 Jan 2026 21:00:52 +0000 Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=) 2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: e1nLOPJ38fJnaJtFWpiisFAHvpWhj+m8iXge+nFwENU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:1c:d1:a8:1d:3f:64:ed:6a:ec:28:c6:bb:ea:28:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9 Validity Not Before: Jan 6 21:00:52 2026 GMT Not After : Jan 7 21:00:52 2026 GMT Subject: CN=5b0b7cda507beb8f8b6745c6b07bdf0cc5966ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:54:1c:be:39:65:02:b0:4b:77:b0:9d:f5:e2: e2:8b:f1:32:ab:bf:75:c6:0e:d4:9a:f4:b4:6e:9e: 6f:88:cc:1e:0d:b6:6d:db:8b:7d:ba:1e:66:e2:19: a6:9d:ba:9c:14:a9:26:0b:bb:92:a1:ac:d2:14:bf: 07:6d:f5:93:93:70:82:44:e3:ed:48:0c:55:ae:ce: dc:2f:c5:dd:12:73:72:aa:2e:7a:d8:4e:03:06:f8: bf:c5:02:76:14:7c:98:5e:27:de:65:f1:14:e9:aa: c4:ab:89:fe:8b:46:60:70:2f:7e:59:cb:92:f2:58: dc:b4:ea:53:e1:51:75:f2:90:c1:a6:31:2c:bb:b0: 97:01:ac:b8:3a:b4:ee:29:0f:ac:8c:ea:c1:26:96: 99:56:e8:61:cf:ce:48:69:86:cb:67:44:d1:1a:fb: 05:d7:d8:b2:69:ed:bf:35:a6:74:2a:71:98:ad:19: 93:b6:75:da:f0:36:28:57:7a:de:77:2f:a3:27:3b: e6:0d:1d:39:16:25:70:42:66:48:07:fc:24:a0:b7: 00:fb:63:e0:1e:98:08:17:c2:8b:b3:3a:c4:09:95: 0f:9c:e9:e2:1f:e9:69:09:84:00:b8:0d:ea:8d:8b: 9f:78:b8:29:7d:1e:2a:39:f5:c1:7e:9f:37:a0:1e: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:7C:DA:50:7B:EB:8F:8B:67:45:C6:B0:7B:DF:0C:C5:96:6E:F3 X509v3 Authority Key Identifier: keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b8:de:d2:dc:ca:f0:59:63:36:98:ac:b6:d8:69:90:bf:f3: 9e:e6:95:67:7a:d5:b0:01:e1:37:27:03:5b:53:08:16:13:de: 17:24:22:e8:a2:b0:d5:19:82:70:13:3b:44:41:f0:a1:72:da: 50:d5:e1:e9:a7:e8:65:b3:e6:38:2e:13:76:11:48:d1:af:65: bd:b2:6d:e1:50:8d:43:9f:da:f3:a6:ed:44:b0:7f:f9:de:c6: 87:41:1a:1e:4c:ce:af:19:dd:c9:ce:e0:d3:05:fe:ec:a6:11: cb:47:a2:41:11:63:b7:32:1f:38:9c:83:5d:4e:9a:7b:a8:2f: cf:f6:9f:da:49:5d:8b:ee:80:99:09:93:36:78:66:1a:4f:01: 52:d5:82:ee:ba:0a:5f:77:0e:e1:6c:7b:05:b8:38:92:f9:83: 9a:d5:08:0b:9c:fd:fe:71:04:d0:71:f3:56:3d:2e:4e:d3:fd: a2:8c:b8:0b:f3:68:fa:59:b2:18:46:1b:a7:ff:d1:ac:a1:28: 59:f2:d2:e5:8e:93:1b:cb:06:cc:44:27:45:41:d0:ff:b4:25: c1:b8:8f:b1:c6:39:84:70:73:9c:33:8c:0c:e8:d5:d8:3f:b7: ce:64:20:82:88:c8:18:b2:2c:ce:51:45:20:c8:76:69:41:bc: a6:be:48:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVHNGoHT9k7WrsKMa76iheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZWNlYWM4MTI1NTM0YTU3OTQ3OTYyZGIyODkwM2ZhZDdh YzNhZjkwHhcNMjYwMTA2MjEwMDUyWhcNMjYwMTA3MjEwMDUyWjAzMTEwLwYDVQQD Eyg1YjBiN2NkYTUwN2JlYjhmOGI2NzQ1YzZiMDdiZGYwY2M1OTY2ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FQcvjllArBLd7Cd9eLii/Eyq791 xg7UmvS0bp5viMweDbZt24t9uh5m4hmmnbqcFKkmC7uSoazSFL8HbfWTk3CCROPt SAxVrs7cL8XdEnNyqi562E4DBvi/xQJ2FHyYXifeZfEU6arEq4n+i0ZgcC9+WcuS 8ljctOpT4VF18pDBpjEsu7CXAay4OrTuKQ+sjOrBJpaZVuhhz85IaYbLZ0TRGvsF 19iyae2/NaZ0KnGYrRmTtnXa8DYoV3redy+jJzvmDR05FiVwQmZIB/wkoLcA+2Pg HpgIF8KLszrECZUPnOniH+lpCYQAuA3qjYufeLgpfR4qOfXBfp83oB6RnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsLfNpQe+uPi2dFxrB73wzFlm7zMB8GA1UdIwQY MBaAFKPs6sgSVTSleUeWLbKJA/rXrDr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQt YTliZDVlNDEwYWVkLzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQtYTliZDVlNDEwYWVk LzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7je0tzK 8FljNpistthpkL/znuaVZ3rVsAHhNycDW1MIFhPeFyQi6KKw1RmCcBM7REHwoXLa UNXh6afoZbPmOC4TdhFI0a9lvbJt4VCNQ5/a86btRLB/+d7Gh0EaHkzOrxndyc7g 0wX+7KYRy0eiQRFjtzIfOJyDXU6ae6gvz/af2kldi+6AmQmTNnhmGk8BUtWC7roK X3cO4Wx7Bbg4kvmDmtUIC5z9/nEE0HHzVj0uTtP9ooy4C/No+lmyGEYbp//RrKEo WfLS5Y6TG8sGzEQnRUHQ/7QlwbiPscY5hHBznDOMDOjV2D+3zmQggojIGLIszlFF IMh2aUG8pr5ICQ== -----END CERTIFICATE-----Generated at Wed Jan 7 07:01:06 2026 by rpki-client