This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json) Hash identifier: 2MTnV6fuxP3/hB3qq54TVvb/YqbrPjb3/YGYTAgqr3U= Subject key identifier: B7:A0:0A:A3:1C:E3:03:CA:A6:05:82:C7:EA:89:93:B2:8C:D2:16:06 Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93 Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193 Certificate serial: 019B796E4442DD9FE400488BAABE285D78AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft Manifest number: 14B5 Signing time: Thu 01 Jan 2026 12:00:28 +0000 Manifest this update: Thu 01 Jan 2026 12:00:28 +0000 Manifest next update: Fri 02 Jan 2026 12:00:28 +0000 Files and hashes: 1: KHmBEFAHu1D8g7BNr6DM90HcrdE.roa (hash: cHCWZbVIixRYPkJFTsJoo7AK/4mwhNH2E0rmOh1q4HI=) 2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: fpMwDoxfwgRL3ZO5YrkdGs5lqQKUrO7EfuqD2a740C0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:6e:44:42:dd:9f:e4:00:48:8b:aa:be:28:5d:78:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193 Validity Not Before: Jan 1 12:00:28 2026 GMT Not After : Jan 2 12:00:28 2026 GMT Subject: CN=b7a00aa31ce303caa60582c7ea8993b28cd21606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:0f:a8:0a:59:f7:4f:36:b0:3e:03:37:cd: b5:76:57:1e:e5:e1:36:69:8d:f0:83:f1:df:66:15: 7f:8f:b3:55:97:49:2a:b5:81:19:af:83:ca:2c:69: 78:16:88:b0:1a:d4:30:fd:cd:1b:dd:15:2e:bb:0e: 66:40:3b:93:8d:28:56:d3:ef:ec:90:7f:4c:5f:9a: c4:a5:a8:2e:cd:d2:e9:66:ec:63:ab:d0:97:5f:0b: 47:a3:48:e1:03:5d:d4:bc:27:89:35:a4:39:3e:72: cc:bd:26:3f:af:e2:8d:0d:e1:f0:1e:24:7e:7b:8b: 6e:2b:36:2c:2d:ae:d4:c5:ff:00:5a:97:bb:f5:ed: 14:4d:93:f9:83:35:1c:e4:a8:58:c3:b0:b0:07:f8: e4:45:21:3d:56:f5:74:c8:81:d1:01:2f:66:8e:a8: b3:f4:6b:27:d1:0f:99:40:2e:ca:ee:bd:7e:26:ae: 59:43:f8:2e:8a:61:38:be:f5:77:d7:60:89:30:b2: 13:43:45:c5:ff:6e:3d:6b:49:f5:32:66:07:15:40: 3f:80:37:13:15:be:45:61:bb:eb:41:34:37:33:29: 4f:dd:86:f1:40:2c:ff:77:43:da:8b:da:3a:0a:23: cd:6e:33:45:c4:89:07:0a:73:eb:ba:e4:bb:f2:01: ce:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A0:0A:A3:1C:E3:03:CA:A6:05:82:C7:EA:89:93:B2:8C:D2:16:06 X509v3 Authority Key Identifier: keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:26:8b:76:69:ba:ef:06:5e:be:08:ff:b9:9f:14:a0:b1:86: 73:55:0b:d7:89:bb:b1:38:e4:dc:bc:49:8b:f9:7a:fa:7b:af: ba:0c:20:06:8f:4e:a7:23:19:fc:1c:1c:58:f6:42:2f:b4:6e: 9d:54:a1:0b:b3:f8:94:33:b0:e7:02:36:6d:92:9b:a8:52:fe: 94:d6:ae:78:6c:b5:11:42:a2:f8:49:2a:2e:46:f1:a5:9a:7e: 1d:6d:72:91:6d:e7:f8:20:c3:34:76:a8:2b:e2:b0:cf:73:cc: 44:8d:7e:26:c4:47:a2:ef:5d:f2:63:5f:f8:35:d0:e1:2c:48: 7f:b6:ca:51:3f:c8:d7:bb:45:a2:fc:71:8d:e7:2e:80:c9:69: 82:65:8b:8a:a0:b1:2c:b8:5c:04:8b:85:98:0b:db:70:80:60: 7b:70:08:c7:bf:ee:81:ba:63:75:52:fd:04:b1:99:04:0e:46: d2:c0:0d:b8:72:d3:60:c7:e4:84:f2:17:f0:fa:42:1e:57:54: 21:2e:81:97:22:69:37:f1:ee:06:c2:be:e4:7a:28:eb:18:35: 5a:d1:ff:d8:04:a1:54:7d:6d:79:fc:3d:88:83:33:8c:9d:78: e0:f7:10:6a:4f:aa:20:db:ca:2a:c0:bb:e6:9c:1c:f2:7f:f4: d7:ef:3b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5bkRC3Z/kAEiLqr4oXXiqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZDM5MDdmODExY2I4M2YxNmI4MTY3ODVlMzgwYmMyNGM4 YWMxOTMwHhcNMjYwMTAxMTIwMDI4WhcNMjYwMTAyMTIwMDI4WjAzMTEwLwYDVQQD EyhiN2EwMGFhMzFjZTMwM2NhYTYwNTgyYzdlYTg5OTNiMjhjZDIxNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5UPqApZ9082sD4DN821dlce5eE2 aY3wg/HfZhV/j7NVl0kqtYEZr4PKLGl4FoiwGtQw/c0b3RUuuw5mQDuTjShW0+/s kH9MX5rEpaguzdLpZuxjq9CXXwtHo0jhA13UvCeJNaQ5PnLMvSY/r+KNDeHwHiR+ e4tuKzYsLa7Uxf8AWpe79e0UTZP5gzUc5KhYw7CwB/jkRSE9VvV0yIHRAS9mjqiz 9Gsn0Q+ZQC7K7r1+Jq5ZQ/guimE4vvV312CJMLITQ0XF/249a0n1MmYHFUA/gDcT Fb5FYbvrQTQ3MylP3YbxQCz/d0Pai9o6CiPNbjNFxIkHCnPruuS78gHO7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLegCqMc4wPKpgWCx+qJk7KM0hYGMB8GA1UdIwQY MBaAFKPTkH+BHLg/FrgWeF44C8JMisGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2It MzMyMDI3MWZiM2FjLzEvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2ItMzMyMDI3MWZiM2Fj LzEvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyaLdmm6 7wZevgj/uZ8UoLGGc1UL14m7sTjk3LxJi/l6+nuvugwgBo9OpyMZ/BwcWPZCL7Ru nVShC7P4lDOw5wI2bZKbqFL+lNaueGy1EUKi+EkqLkbxpZp+HW1ykW3n+CDDNHao K+Kwz3PMRI1+JsRHou9d8mNf+DXQ4SxIf7bKUT/I17tFovxxjecugMlpgmWLiqCx LLhcBIuFmAvbcIBge3AIx7/ugbpjdVL9BLGZBA5G0sANuHLTYMfkhPIX8PpCHldU IS6BlyJpN/HuBsK+5Hoo6xg1WtH/2AShVH1tefw9iIMzjJ144PcQak+qINvKKsC7 5pwc8n/01+87rA== -----END CERTIFICATE-----Generated at Thu Jan 1 14:13:22 2026 by rpki-client