This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json) Hash identifier: wzcJlvdcJNnGbtwOmFVUo3fAsTkCZOlrvwwNsOYjgLU= Subject key identifier: 79:B4:B5:2F:24:1F:6B:92:5A:56:6E:64:5D:DA:AA:50:45:CF:49:FF Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1 Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1 Certificate serial: 019B7C6F381568C3E5744D465D99F5271DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft Manifest number: 13D0 Signing time: Fri 02 Jan 2026 02:00:22 +0000 Manifest this update: Fri 02 Jan 2026 02:00:22 +0000 Manifest next update: Sat 03 Jan 2026 02:00:22 +0000 Files and hashes: 1: Ieo-AC5YDpT5XaC-tbGvdsSwkLE.roa (hash: sib5MLrWFBDEBml1a5atNNLAsn61q4TVzPsWvIidTuU=) 2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: qPZXKiGQQosIY6xGiqEYNy9kYl+xI7fZ7HsNzyqzY7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:6f:38:15:68:c3:e5:74:4d:46:5d:99:f5:27:1d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1 Validity Not Before: Jan 2 02:00:22 2026 GMT Not After : Jan 3 02:00:22 2026 GMT Subject: CN=79b4b52f241f6b925a566e645ddaaa5045cf49ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:52:df:58:aa:48:f3:73:96:8c:19:81:2f: 8a:4e:78:02:43:9c:fb:c0:77:69:94:91:c8:63:b3: e6:d0:db:6b:ee:b8:c2:e5:20:42:f2:ca:ed:28:71: b1:4c:1b:c1:5a:bc:d1:81:c5:95:db:a5:8e:ea:0c: 81:2b:0d:18:bc:8b:87:d1:92:f1:bb:aa:c1:ee:60: e5:2c:39:d0:d0:1b:f1:7d:5e:99:0b:cb:41:a6:2f: b8:1f:b9:ac:2e:a2:30:34:90:8a:07:4d:b4:1f:d1: 1d:70:22:83:f6:6a:72:f0:49:9e:e6:c2:1c:ec:67: e7:20:67:ed:a6:a9:f6:44:55:71:43:4c:8a:c0:c3: a2:08:31:07:1f:2a:98:02:1a:4d:24:b6:0b:64:3b: cd:84:a0:20:59:09:05:1a:ef:f5:8a:c6:5e:92:5d: d2:cf:87:63:94:db:ec:e7:44:19:f1:80:ae:1f:69: 48:af:53:58:a9:e7:52:6e:62:48:e7:a6:a2:90:e3: 8f:17:5f:62:3b:90:28:45:36:6e:d0:3d:22:40:63: a4:58:0c:79:59:06:82:89:85:69:c1:f5:00:2d:83: 35:18:de:55:d0:27:2d:84:b7:07:fc:85:9e:3a:ed: b1:1b:bf:61:da:71:90:f6:4c:98:d6:78:5f:0b:ed: ee:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:B5:2F:24:1F:6B:92:5A:56:6E:64:5D:DA:AA:50:45:CF:49:FF X509v3 Authority Key Identifier: keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:dc:6a:99:7e:5a:68:d4:71:c5:b7:eb:c4:92:7b:a9:80:35: 76:35:76:7a:e5:4c:11:8a:85:cd:a3:55:52:1f:99:b6:26:56: 3f:e9:61:e5:9f:5b:00:de:2b:f6:cb:88:78:e9:cc:ab:14:9f: c1:ec:73:52:b9:d0:eb:cd:15:1d:04:c7:71:f1:7e:18:bb:cf: 30:1c:6f:92:5a:1b:70:e8:03:c1:55:46:f6:c6:bb:78:60:9c: b8:85:90:5b:c2:c5:43:80:70:65:90:7d:1c:86:99:12:90:83: a4:6b:b6:1d:5a:7d:ef:bd:b9:3b:69:19:a8:5b:19:fe:fc:20: 4c:d0:82:04:25:ac:34:a9:62:af:c4:d5:8e:f5:37:56:9e:ea: 57:a0:f2:d4:52:2a:74:bc:d2:22:87:88:24:14:64:a2:69:af: d8:50:85:49:58:38:33:16:55:e3:97:aa:e5:87:99:bb:cd:47: 4c:12:e9:dc:7e:db:01:95:13:03:90:11:c7:d9:02:5a:3a:ca: 4c:45:8f:5f:41:51:64:da:ad:30:28:37:8e:35:a5:30:00:d7: 55:07:77:e1:96:2a:a6:8b:52:bd:f3:2d:99:19:53:98:be:48: 43:84:3f:af:2e:73:7b:90:97:b6:a2:92:43:d9:0f:f0:a2:2e: 76:75:01:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8bzgVaMPldE1GXZn1Jx3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTNjNGVjN2IzNjExMmZjZTUyMWY1YmVmMjg3M2M3YjRj Yzg4ZDEwHhcNMjYwMTAyMDIwMDIyWhcNMjYwMTAzMDIwMDIyWjAzMTEwLwYDVQQD Eyg3OWI0YjUyZjI0MWY2YjkyNWE1NjZlNjQ1ZGRhYWE1MDQ1Y2Y0OWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyilS31iqSPNzlowZgS+KTngCQ5z7 wHdplJHIY7Pm0Ntr7rjC5SBC8srtKHGxTBvBWrzRgcWV26WO6gyBKw0YvIuH0ZLx u6rB7mDlLDnQ0BvxfV6ZC8tBpi+4H7msLqIwNJCKB020H9EdcCKD9mpy8Eme5sIc 7GfnIGftpqn2RFVxQ0yKwMOiCDEHHyqYAhpNJLYLZDvNhKAgWQkFGu/1isZekl3S z4djlNvs50QZ8YCuH2lIr1NYqedSbmJI56aikOOPF19iO5AoRTZu0D0iQGOkWAx5 WQaCiYVpwfUALYM1GN5V0CcthLcH/IWeOu2xG79h2nGQ9kyY1nhfC+3uowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm0tS8kH2uSWlZuZF3aqlBFz0n/MB8GA1UdIwQY MBaAFKLjxOx7NhEvzlIfW+8oc8e0zIjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYt ZGE1MTNjYzY5ODM5LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYtZGE1MTNjYzY5ODM5 LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtxqmX5a aNRxxbfrxJJ7qYA1djV2euVMEYqFzaNVUh+ZtiZWP+lh5Z9bAN4r9suIeOnMqxSf wexzUrnQ680VHQTHcfF+GLvPMBxvklobcOgDwVVG9sa7eGCcuIWQW8LFQ4BwZZB9 HIaZEpCDpGu2HVp97725O2kZqFsZ/vwgTNCCBCWsNKlir8TVjvU3Vp7qV6Dy1FIq dLzSIoeIJBRkommv2FCFSVg4MxZV45eq5YeZu81HTBLp3H7bAZUTA5ARx9kCWjrK TEWPX0FRZNqtMCg3jjWlMADXVQd34ZYqpotSvfMtmRlTmL5IQ4Q/ry5ze5CXtqKS Q9kP8KIudnUB2Q== -----END CERTIFICATE-----Generated at Fri Jan 2 11:31:01 2026 by rpki-client