This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft File: OzBfl6JvMdgAYFn7OrGerPt4NFU.mft (raw, json) Hash identifier: 3faa/A8jGkyykIv5+YAZMIw5g3DsiN6Zl834JP2JwJ8= Subject key identifier: A5:AF:C2:00:5A:AF:E5:D9:44:8F:E5:AE:0C:80:70:49:86:80:9D:59 Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55 Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455 Certificate serial: 019B9AB14BBEA468CD51CDD046CB8A55C76B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft Manifest number: 0BA3 Signing time: Wed 07 Jan 2026 23:01:09 +0000 Manifest this update: Wed 07 Jan 2026 23:01:09 +0000 Manifest next update: Thu 08 Jan 2026 23:01:09 +0000 Files and hashes: 1: Nph9BsHMAWz3v3KuWSmSYaAs3t0.roa (hash: PiH06TnQZKY0ou+2ssqAuJ7EJt+8n060evKXmiAMkgE=) 2: OzBfl6JvMdgAYFn7OrGerPt4NFU.crl (hash: w9pWMA68MO0WuMpYr9SJBsj5zzEsHMXdMpmej4byrCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:b1:4b:be:a4:68:cd:51:cd:d0:46:cb:8a:55:c7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455 Validity Not Before: Jan 7 23:01:09 2026 GMT Not After : Jan 8 23:01:09 2026 GMT Subject: CN=a5afc2005aafe5d9448fe5ae0c80704986809d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:35:32:9e:f6:a1:ee:54:7a:30:00:59:22: 96:43:61:7a:5c:79:04:54:ad:8c:ef:da:67:40:7c: 18:eb:49:0b:30:dd:3f:22:70:31:d4:38:e0:f2:63: 17:ee:a5:8d:2f:be:37:2b:9d:8d:5a:c0:a7:ab:b8: d7:ad:c7:d0:53:78:52:01:d1:80:9e:d0:a2:b7:46: d6:e2:54:fa:cc:51:0c:c0:5f:c7:a6:a8:75:9a:27: 2f:1a:e8:2f:bf:cd:e5:74:c2:5b:77:df:03:62:f2: 97:85:fe:25:f9:9b:8e:3b:3e:a8:22:64:ab:b7:b0: e4:f8:5e:2a:90:05:a3:19:06:3d:05:ba:7a:74:db: 13:70:54:e1:b4:37:c1:bc:17:1e:28:45:19:e5:01: 16:d0:4e:72:d7:2e:dc:91:e2:c0:c6:b8:2e:19:2a: 06:13:19:e8:70:80:74:5c:db:51:ae:e2:9a:f2:1c: f0:f0:de:90:91:3b:e4:d3:58:87:7b:99:d7:4c:b4: 32:e1:eb:c7:2e:d5:aa:49:70:a7:9e:b3:d4:f1:d5: f7:ab:03:57:64:9f:0b:8a:66:f3:d6:ab:14:03:1f: 8e:a2:b8:72:1b:7f:a2:b9:8b:15:23:64:a3:c1:47: 6c:ad:6b:ee:6e:1d:cf:b9:42:fb:05:fc:ff:62:30: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AF:C2:00:5A:AF:E5:D9:44:8F:E5:AE:0C:80:70:49:86:80:9D:59 X509v3 Authority Key Identifier: keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:58:00:bd:a3:89:c8:9a:0f:97:a1:31:34:6c:67:98:9d:86: d8:98:b5:0c:8d:35:1d:94:1e:01:5d:20:ec:86:3d:ea:14:f3: f1:c3:61:16:04:aa:a6:71:a2:9a:11:a2:7a:70:24:53:19:cd: cd:53:0d:9b:db:93:fe:09:a8:99:67:50:da:75:5f:63:8b:a2: 0c:6f:e4:68:c2:79:b0:72:60:dc:8c:02:45:7c:d4:46:6c:e2: b5:9a:05:db:ec:c6:64:7d:ce:91:60:d7:8d:7a:01:46:02:13: 42:ff:df:81:4c:98:c2:bd:35:ef:a8:7d:5f:8d:ed:52:bd:ce: 0c:e3:33:16:d7:4d:cd:d6:bf:a8:99:50:42:8f:3b:d3:79:00: 6a:df:78:f8:f0:cd:7e:e2:40:8f:64:cc:4a:a6:53:f1:f5:a7: a1:ea:2b:61:bd:30:07:27:56:4f:a0:d8:7a:b2:ec:61:23:a1: a8:81:47:f5:dd:0d:e8:bf:54:90:75:7f:57:44:ad:5d:0c:98: 26:9a:c4:91:3c:82:c7:1e:c7:f0:0d:e8:88:0b:30:ce:86:98: 1d:5c:44:ad:42:ac:0b:b9:ff:db:e8:23:c9:f0:47:10:3c:0d: 0b:6e:18:bd:79:98:4f:0c:41:ee:c2:48:83:08:b0:64:c4:8a: a2:45:4a:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuasUu+pGjNUc3QRsuKVcdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzA1Zjk3YTI2ZjMxZDgwMDYwNTlmYjNhYjE5ZWFjZmI3 ODM0NTUwHhcNMjYwMTA3MjMwMTA5WhcNMjYwMTA4MjMwMTA5WjAzMTEwLwYDVQQD EyhhNWFmYzIwMDVhYWZlNWQ5NDQ4ZmU1YWUwYzgwNzA0OTg2ODA5ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GI1Mp72oe5UejAAWSKWQ2F6XHkE VK2M79pnQHwY60kLMN0/InAx1Djg8mMX7qWNL743K52NWsCnq7jXrcfQU3hSAdGA ntCit0bW4lT6zFEMwF/Hpqh1micvGugvv83ldMJbd98DYvKXhf4l+ZuOOz6oImSr t7Dk+F4qkAWjGQY9Bbp6dNsTcFThtDfBvBceKEUZ5QEW0E5y1y7ckeLAxrguGSoG ExnocIB0XNtRruKa8hzw8N6QkTvk01iHe5nXTLQy4evHLtWqSXCnnrPU8dX3qwNX ZJ8Limbz1qsUAx+OorhyG3+iuYsVI2SjwUdsrWvubh3PuUL7Bfz/YjDsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWvwgBar+XZRI/lrgyAcEmGgJ1ZMB8GA1UdIwQY MBaAFDswX5eibzHYAGBZ+zqxnqz7eDRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYWE5NTEtNmM0OC00OTNkLWFkODkt NThiOWIwYzI0NDBiLzEvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xYWE5NTEtNmM0OC00OTNkLWFkODktNThiOWIwYzI0NDBi LzEvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1gAvaOJ yJoPl6ExNGxnmJ2G2Ji1DI01HZQeAV0g7IY96hTz8cNhFgSqpnGimhGienAkUxnN zVMNm9uT/gmomWdQ2nVfY4uiDG/kaMJ5sHJg3IwCRXzURmzitZoF2+zGZH3OkWDX jXoBRgITQv/fgUyYwr0176h9X43tUr3ODOMzFtdNzda/qJlQQo8703kAat94+PDN fuJAj2TMSqZT8fWnoeorYb0wBydWT6DYerLsYSOhqIFH9d0N6L9UkHV/V0StXQyY JprEkTyCxx7H8A3oiAswzoaYHVxErUKsC7n/2+gjyfBHEDwNC24YvXmYTwxB7sJI gwiwZMSKokVKjg== -----END CERTIFICATE-----Generated at Thu Jan 8 05:20:25 2026 by rpki-client