This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json) Hash identifier: 0RIBAgp+RcWpmeOpYMdjmgyYaPWuiVD3s67t+/5KGRQ= Subject key identifier: A3:AB:08:4C:F2:52:EB:A3:09:A9:0B:E7:8D:C7:0B:67:25:2C:AE:7C Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Certificate serial: 019B8A2C28C9162397002099C2BD2D068294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft Manifest number: 074F Signing time: Sun 04 Jan 2026 18:01:48 +0000 Manifest this update: Sun 04 Jan 2026 18:01:48 +0000 Manifest next update: Mon 05 Jan 2026 18:01:48 +0000 Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=) 2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: buIDfe3imWYsGavFHd+MtAOyDD5vnqVPxYIFV9M1WzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:2c:28:c9:16:23:97:00:20:99:c2:bd:2d:06:82:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Validity Not Before: Jan 4 18:01:48 2026 GMT Not After : Jan 5 18:01:48 2026 GMT Subject: CN=a3ab084cf252eba309a90be78dc70b67252cae7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:5c:9e:8c:c6:5a:0e:57:bb:f1:7e:f1:b5: 4c:e9:bf:2a:53:99:39:c4:64:44:47:4b:8d:cf:0f: b0:5c:41:14:40:d5:67:ca:b9:88:dc:c7:7f:66:e7: 8a:9b:24:4b:42:07:ae:0d:2e:2b:b8:61:91:0b:f0: a9:24:21:60:ef:8f:96:ea:7d:00:42:fb:8a:9a:ce: 11:df:05:96:10:90:5b:c1:4f:86:16:89:c0:b8:94: 3a:6e:9f:11:13:65:23:a7:21:a7:6d:6c:d0:a5:82: 92:8e:41:a0:84:96:8e:e4:1b:56:31:f6:4f:c7:db: b1:cb:b9:ed:1b:1d:90:e5:cb:71:ad:ca:4d:e3:68: a5:dc:14:ee:04:bd:11:67:c4:c1:d9:26:4b:9e:13: 9d:1e:a2:87:df:06:d1:25:b2:0e:b3:6a:b2:6f:5a: 97:85:a6:fd:e8:5c:de:a0:e2:87:91:53:1b:ac:f0: 15:0d:b4:b3:a5:26:8d:f4:5c:d5:6d:46:5c:8f:a9: 28:99:ec:c1:66:36:9a:a2:ef:ab:2d:b2:40:3f:15: 7e:cd:84:29:12:3a:97:1d:d9:49:40:48:18:e6:5b: af:f3:7a:fe:19:3b:73:71:f4:8a:5d:af:c7:3b:63: 49:65:2c:d5:48:b7:85:08:81:a5:df:38:a6:70:f9: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:08:4C:F2:52:EB:A3:09:A9:0B:E7:8D:C7:0B:67:25:2C:AE:7C X509v3 Authority Key Identifier: keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:73:e3:a0:92:aa:2d:41:3c:36:e8:73:e3:41:d1:5d:92:e4: c9:89:93:69:76:5e:9b:ff:2e:a0:c3:f3:d7:7b:8b:91:60:b4: 58:4f:15:1e:93:8f:5f:9f:11:3f:9b:41:f6:64:c5:b6:7a:98: c9:2c:8d:ed:b8:7a:f5:94:07:98:20:6f:75:a9:f4:af:f8:16: 83:5e:9a:4f:2a:cd:16:ae:30:04:8e:61:86:37:a9:1c:4b:95: 5b:d9:f5:be:ef:b3:bb:c8:2b:4b:c2:b4:bc:74:ad:da:b8:48: be:95:19:5f:e4:d9:16:b7:13:7c:00:83:68:67:f1:f8:89:ea: 34:6a:46:65:b7:65:12:57:b9:eb:14:9f:12:bb:ad:43:92:69: 50:fb:22:52:db:60:d6:cc:1a:b4:60:0d:fc:16:38:5b:8d:a6: d4:82:bb:fa:9d:ba:9e:5e:9a:14:43:56:6e:c3:83:88:91:c0: 7e:bc:19:9f:50:b0:09:7e:34:38:3d:ab:ae:19:bb:ed:cf:fb: 54:c0:4d:61:c7:03:2f:fb:5b:ff:16:2b:24:9c:f6:ec:f1:1e: 40:3e:42:2a:8e:04:a5:fc:40:8f:4c:12:74:4a:3a:6d:4b:f4: e9:51:8d:8f:83:43:13:97:54:ce:02:14:82:f6:aa:3e:89:28: 85:88:8b:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuKLCjJFiOXACCZwr0tBoKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3 NDkxOWUwHhcNMjYwMTA0MTgwMTQ4WhcNMjYwMTA1MTgwMTQ4WjAzMTEwLwYDVQQD EyhhM2FiMDg0Y2YyNTJlYmEzMDlhOTBiZTc4ZGM3MGI2NzI1MmNhZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQFcnozGWg5Xu/F+8bVM6b8qU5k5 xGRER0uNzw+wXEEUQNVnyrmI3Md/ZueKmyRLQgeuDS4ruGGRC/CpJCFg74+W6n0A QvuKms4R3wWWEJBbwU+GFonAuJQ6bp8RE2UjpyGnbWzQpYKSjkGghJaO5BtWMfZP x9uxy7ntGx2Q5ctxrcpN42il3BTuBL0RZ8TB2SZLnhOdHqKH3wbRJbIOs2qyb1qX hab96FzeoOKHkVMbrPAVDbSzpSaN9FzVbUZcj6komezBZjaaou+rLbJAPxV+zYQp EjqXHdlJQEgY5luv83r+GTtzcfSKXa/HO2NJZSzVSLeFCIGl3zimcPlOfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOrCEzyUuujCakL543HC2clLK58MB8GA1UdIwQY MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHPjoJKq LUE8Nuhz40HRXZLkyYmTaXZem/8uoMPz13uLkWC0WE8VHpOPX58RP5tB9mTFtnqY ySyN7bh69ZQHmCBvdan0r/gWg16aTyrNFq4wBI5hhjepHEuVW9n1vu+zu8grS8K0 vHSt2rhIvpUZX+TZFrcTfACDaGfx+InqNGpGZbdlEle56xSfErutQ5JpUPsiUttg 1swatGAN/BY4W42m1IK7+p26nl6aFENWbsODiJHAfrwZn1CwCX40OD2rrhm77c/7 VMBNYccDL/tb/xYrJJz27PEeQD5CKo4EpfxAj0wSdEo6bUv06VGNj4NDE5dUzgIU gvaqPokohYiLUg== -----END CERTIFICATE-----Generated at Mon Jan 5 01:45:43 2026 by rpki-client