This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json) Hash identifier: H/fBwr+xzOTXusozc0Eo/EBfar891mHr3OKFGbTIg14= Subject key identifier: 56:37:C8:09:DC:ED:64:8C:F0:F5:70:B9:12:A6:72:CA:A7:04:47:28 Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93 Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193 Certificate serial: 019BAF13AE323D8D7D0B56DD084BC71DCD25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft Manifest number: 14D1 Signing time: Sun 11 Jan 2026 22:01:01 +0000 Manifest this update: Sun 11 Jan 2026 22:01:01 +0000 Manifest next update: Mon 12 Jan 2026 22:01:01 +0000 Files and hashes: 1: Ne74LLa0nfzZuK4THnD6BGKIM7Q.roa (hash: jISOsp+VyfAbEpR6bMtcVFG4B/gUZHPkFBIPoaBcPQs=) 2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: QjMiwrbbZErzr/q4G3+biZU9gcSXFkI4e2CGUY+8Nks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:13:ae:32:3d:8d:7d:0b:56:dd:08:4b:c7:1d:cd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193 Validity Not Before: Jan 11 22:01:01 2026 GMT Not After : Jan 12 22:01:01 2026 GMT Subject: CN=5637c809dced648cf0f570b912a672caa7044728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:5d:a0:6f:be:78:47:0e:d7:bb:ad:b3:1c: a6:dc:69:e2:ba:f0:2f:26:87:f6:6f:bb:04:72:94: 34:e1:12:c2:31:68:84:93:90:a3:e6:96:d2:08:f9: b8:58:4a:21:99:35:dd:67:cf:22:b8:d9:6c:60:92: 46:e5:7f:7e:dd:4e:77:0d:d1:8e:a0:7d:88:2b:1a: f6:c2:e8:85:13:4d:37:fc:3f:af:5b:1a:48:3a:3e: 2f:cb:6c:8a:cc:49:85:53:4e:a7:a2:fa:91:f3:7d: 1f:d3:ef:13:9f:59:6f:79:c3:86:8e:3e:6e:85:a6: 51:04:53:20:f3:83:d8:0c:03:9a:28:d1:18:7e:21: ca:ea:52:a1:38:e8:2d:0b:85:a5:92:87:1a:79:ba: d1:90:ab:97:99:fb:44:23:c2:32:cc:2c:59:8f:d8: 27:39:92:29:48:01:b1:96:25:78:39:29:07:1f:8b: 8c:81:27:23:63:79:2e:35:f9:c5:f0:99:a6:8f:59: d0:6f:0b:3b:7f:90:14:56:c0:cf:01:98:43:dc:bd: 2b:a8:ff:87:cd:d6:40:b0:1d:b6:dc:a4:e1:3f:33: 52:a7:10:e8:28:10:5e:49:16:b0:6f:4a:e5:2c:67: 30:c8:72:91:49:a1:98:21:0c:27:87:70:ee:db:8f: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:37:C8:09:DC:ED:64:8C:F0:F5:70:B9:12:A6:72:CA:A7:04:47:28 X509v3 Authority Key Identifier: keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ed:3a:3c:f1:57:fc:45:67:34:96:f4:b4:41:fb:91:60:90: 27:c1:fa:ab:08:41:70:9e:6e:ec:c0:f9:6b:ab:90:a2:ac:cb: d3:e6:83:b3:b2:78:3f:97:c0:02:49:29:c9:0a:78:82:41:61: 31:5a:b5:6a:7d:53:f7:fe:7f:ad:68:f3:33:5e:7d:a2:17:d6: 4d:16:d3:22:2a:cd:32:fa:bf:05:98:05:f3:f1:7b:fe:74:18: 2b:73:d1:01:39:5f:1f:e9:e4:d9:d9:2e:f7:d6:54:2b:9a:d5: 86:27:71:43:2a:91:8d:46:01:18:f0:3c:28:2f:1c:ed:40:48: fd:c3:93:9d:86:af:ad:2f:52:a5:f9:3b:27:89:b5:08:b3:4c: a3:b8:71:31:cd:57:e1:ec:4c:02:90:b7:32:24:9a:d8:1a:63: 70:23:81:ea:1a:a8:6a:d3:07:9c:4b:84:5b:58:7f:cc:e3:c2: 67:cc:d3:d3:a5:5f:eb:25:08:01:cf:cf:84:03:02:00:d3:cb: d9:be:47:85:2e:17:f2:ce:a5:b0:9e:01:85:62:e1:b6:18:80: 02:8f:23:92:e2:ea:5a:1a:d8:53:4e:ee:b4:cd:d5:91:c9:56: 38:f4:9e:ad:4a:17:31:cd:e3:bc:a8:53:e7:86:2e:b0:96:3c: 74:03:76:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvE64yPY19C1bdCEvHHc0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZDM5MDdmODExY2I4M2YxNmI4MTY3ODVlMzgwYmMyNGM4 YWMxOTMwHhcNMjYwMTExMjIwMTAxWhcNMjYwMTEyMjIwMTAxWjAzMTEwLwYDVQQD Eyg1NjM3YzgwOWRjZWQ2NDhjZjBmNTcwYjkxMmE2NzJjYWE3MDQ0NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloJdoG++eEcO17utsxym3GniuvAv Jof2b7sEcpQ04RLCMWiEk5Cj5pbSCPm4WEohmTXdZ88iuNlsYJJG5X9+3U53DdGO oH2IKxr2wuiFE003/D+vWxpIOj4vy2yKzEmFU06novqR830f0+8Tn1lvecOGjj5u haZRBFMg84PYDAOaKNEYfiHK6lKhOOgtC4WlkocaebrRkKuXmftEI8IyzCxZj9gn OZIpSAGxliV4OSkHH4uMgScjY3kuNfnF8Jmmj1nQbws7f5AUVsDPAZhD3L0rqP+H zdZAsB223KThPzNSpxDoKBBeSRawb0rlLGcwyHKRSaGYIQwnh3Du248AkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY3yAnc7WSM8PVwuRKmcsqnBEcoMB8GA1UdIwQY MBaAFKPTkH+BHLg/FrgWeF44C8JMisGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2It MzMyMDI3MWZiM2FjLzEvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2ItMzMyMDI3MWZiM2Fj LzEvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe06PPFX /EVnNJb0tEH7kWCQJ8H6qwhBcJ5u7MD5a6uQoqzL0+aDs7J4P5fAAkkpyQp4gkFh MVq1an1T9/5/rWjzM159ohfWTRbTIirNMvq/BZgF8/F7/nQYK3PRATlfH+nk2dku 99ZUK5rVhidxQyqRjUYBGPA8KC8c7UBI/cOTnYavrS9Spfk7J4m1CLNMo7hxMc1X 4exMApC3MiSa2BpjcCOB6hqoatMHnEuEW1h/zOPCZ8zT06Vf6yUIAc/PhAMCANPL 2b5HhS4X8s6lsJ4BhWLhthiAAo8jkuLqWhrYU07utM3VkclWOPSerUoXMc3jvKhT 54YusJY8dAN2Iw== -----END CERTIFICATE-----Generated at Mon Jan 12 02:02:33 2026 by rpki-client