This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json) Hash identifier: TzyL/7McvTicU9ICXo1DOJI54enUfQUVKOase58wVps= Subject key identifier: DA:3C:E4:77:98:D8:D4:77:08:C6:B6:1B:96:B2:92:38:39:7E:F5:23 Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39 Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539 Certificate serial: 019BB2F067A2F3CA10B97D63FE0C5370CBDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 16:00:58 +0000 Manifest this update: Mon 12 Jan 2026 16:00:58 +0000 Manifest next update: Tue 13 Jan 2026 16:00:58 +0000 Files and hashes: 1: DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa (hash: utTjxlZWKu9J3DkdZuLkviiFIN8/pSjqYt+kL5WYAx4=) 2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: sHKnGmNt1AmyAvU4wNZUZrVM7SCkXwi8FB4B0mv0X5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:f0:67:a2:f3:ca:10:b9:7d:63:fe:0c:53:70:cb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539 Validity Not Before: Jan 12 16:00:58 2026 GMT Not After : Jan 13 16:00:58 2026 GMT Subject: CN=da3ce47798d8d47708c6b61b96b29238397ef523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:5a:02:c7:15:c7:a3:0e:65:59:a0:3d:f2: 6a:78:61:22:74:6b:d1:dd:5a:dd:9f:4e:c4:fd:82: c8:02:cb:8b:b7:bc:7b:91:74:46:75:41:86:cb:8d: dc:60:3e:41:80:62:b2:68:28:d2:f5:7f:42:a4:1f: 05:27:20:6c:41:17:35:92:a3:8d:5c:0a:34:7f:57: 67:da:38:a3:91:4f:d0:34:f0:45:a5:f7:e7:f0:e7: 58:68:f5:9c:70:95:03:c4:9a:70:43:ce:56:38:5a: 6b:6d:a7:37:a3:e3:08:71:19:7a:a1:d3:c8:54:11: b4:74:27:d2:03:50:fa:2e:12:f5:da:8b:83:7b:46: 12:8a:6f:71:ba:a6:c8:53:2e:c7:cf:0f:3a:2b:44: 06:b7:9c:8d:90:06:51:43:8d:5a:15:18:cb:aa:24: 8d:ef:ad:ae:37:62:50:8b:a0:ec:ce:44:0f:e2:88: 84:c1:58:9e:c3:c1:54:69:5d:a6:c6:f0:18:ed:62: 36:04:e1:d3:a0:44:ef:64:94:9a:9f:2b:5d:eb:ae: 55:53:f5:77:6c:ec:dd:ee:a4:c9:82:3b:a5:ab:1e: 01:fa:0e:62:e7:3b:ab:36:cf:a2:cc:f4:7c:c8:ab: 57:dd:12:31:59:c1:4b:95:b4:66:e3:45:86:12:99: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:E4:77:98:D8:D4:77:08:C6:B6:1B:96:B2:92:38:39:7E:F5:23 X509v3 Authority Key Identifier: keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:60:0a:8e:55:a4:65:b8:d6:47:b3:3b:25:ac:44:b8:4d:f8: 7d:de:76:c1:fb:79:a4:9c:fc:38:4d:fe:d8:97:67:6d:a2:de: d8:46:c1:e6:63:d7:11:f6:73:51:ae:fb:dc:3c:57:b3:1c:b8: 7b:80:24:fc:d2:d1:39:f3:f5:3c:c3:93:92:40:75:58:21:a0: 32:5d:e1:96:bc:6f:ce:46:12:b6:69:48:01:8d:29:21:92:0f: d6:20:1a:30:1f:49:ce:5f:bf:ca:b6:ad:a5:0f:5c:af:09:55: 34:28:e7:9c:73:86:09:1a:82:ea:cf:e4:2c:91:bc:04:69:ae: b0:a4:43:1a:e8:23:38:3a:b7:61:ae:01:63:93:74:42:0a:fe: 76:ca:de:ab:aa:d9:96:5f:44:fa:b1:95:0e:08:01:a5:65:a7: f0:ff:5e:cd:c6:78:d8:f4:a9:f7:3a:6f:34:cd:b5:f4:5b:da: de:45:de:2a:a9:1a:75:f6:3c:10:9f:b1:e3:fc:6d:56:95:59: ab:78:f0:f9:68:f5:d0:15:1e:5e:50:da:11:30:1a:86:a5:16: ec:e6:96:4c:9b:c6:71:57:92:b4:82:ce:98:09:4b:a1:bb:cd: 72:10:60:dd:e0:d0:22:64:54:3e:1e:c3:3d:6f:74:00:77:b7: 9b:11:ed:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuy8Gei88oQuX1j/gxTcMvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZWUzMjI3OWMxNmRhY2RiNTM0OWYxYjg3YzU3ZDc0YzUw ZWE1MzkwHhcNMjYwMTEyMTYwMDU4WhcNMjYwMTEzMTYwMDU4WjAzMTEwLwYDVQQD EyhkYTNjZTQ3Nzk4ZDhkNDc3MDhjNmI2MWI5NmIyOTIzODM5N2VmNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu25aAscVx6MOZVmgPfJqeGEidGvR 3Vrdn07E/YLIAsuLt7x7kXRGdUGGy43cYD5BgGKyaCjS9X9CpB8FJyBsQRc1kqON XAo0f1dn2jijkU/QNPBFpffn8OdYaPWccJUDxJpwQ85WOFprbac3o+MIcRl6odPI VBG0dCfSA1D6LhL12ouDe0YSim9xuqbIUy7Hzw86K0QGt5yNkAZRQ41aFRjLqiSN 762uN2JQi6DszkQP4oiEwView8FUaV2mxvAY7WI2BOHToETvZJSanytd665VU/V3 bOzd7qTJgjulqx4B+g5i5zurNs+izPR8yKtX3RIxWcFLlbRm40WGEpncfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo85HeY2NR3CMa2G5aykjg5fvUjMB8GA1UdIwQY MBaAFPzuMiecFtrNtTSfG4fFfXTFDqU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgt MzA0NjZkZWMzOTA1LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgtMzA0NjZkZWMzOTA1 LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGAKjlWk ZbjWR7M7JaxEuE34fd52wft5pJz8OE3+2JdnbaLe2EbB5mPXEfZzUa773DxXsxy4 e4Ak/NLROfP1PMOTkkB1WCGgMl3hlrxvzkYStmlIAY0pIZIP1iAaMB9Jzl+/yrat pQ9crwlVNCjnnHOGCRqC6s/kLJG8BGmusKRDGugjODq3Ya4BY5N0Qgr+dsreq6rZ ll9E+rGVDggBpWWn8P9ezcZ42PSp9zpvNM219Fva3kXeKqkadfY8EJ+x4/xtVpVZ q3jw+Wj10BUeXlDaETAahqUW7OaWTJvGcVeStILOmAlLobvNchBg3eDQImRUPh7D PW90AHe3mxHtAw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:27:42 2026 by rpki-client