This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json) Hash identifier: A/J+hOvoLzIefe5DRxcwhzBDCFD+RpYy0XTCMmUX4X8= Subject key identifier: 28:D2:38:39:57:3D:C6:27:8C:71:01:86:D4:DD:7F:39:6C:E4:5C:A5 Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380 Certificate serial: 019B796E6122ECAE51D8957E44EC6F3151C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft Manifest number: 17A9 Signing time: Thu 01 Jan 2026 12:00:35 +0000 Manifest this update: Thu 01 Jan 2026 12:00:35 +0000 Manifest next update: Fri 02 Jan 2026 12:00:35 +0000 Files and hashes: 1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=) 2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: ecTFEUhRQOvWwSFDLadpZDcGZCbjbjZQRyfXdbT9JhE=) 3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=) 4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:6e:61:22:ec:ae:51:d8:95:7e:44:ec:6f:31:51:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380 Validity Not Before: Jan 1 12:00:35 2026 GMT Not After : Jan 2 12:00:35 2026 GMT Subject: CN=28d23839573dc6278c710186d4dd7f396ce45ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:73:15:36:48:bc:00:c3:46:00:1a:9e:42: d8:9e:da:0a:6b:98:15:93:fb:e4:7d:ee:31:96:35: 6c:3d:6a:17:df:08:5a:13:5b:9d:86:8f:53:28:52: 9f:18:12:64:b7:34:2a:0f:32:12:da:6a:41:83:c6: 02:3f:77:c3:97:ea:4d:a0:db:5c:27:ec:b7:25:c3: f5:7c:0c:99:5c:b4:c4:8e:e2:6a:ac:c6:d2:d5:1b: 22:35:fc:cc:ba:6c:54:75:55:5e:8f:b3:f5:84:fa: e6:91:8e:58:ae:58:5e:7f:e9:8c:07:cd:1d:0f:ce: 58:39:e0:4a:17:16:14:25:ad:06:02:fd:ea:89:65: 08:64:e1:de:01:7a:0a:a1:14:1b:ff:77:9e:8a:5e: ec:7f:23:7f:c8:f0:05:2f:35:f2:3c:ab:f0:df:2a: 9e:b9:24:99:69:6d:28:56:f2:10:d9:1c:b4:7c:d4: cb:39:30:e5:7c:e1:c6:ae:f6:fe:bf:7d:4e:93:13: a5:19:b0:e7:8e:0d:f7:6a:63:c5:c4:10:79:53:35: 65:dd:fb:6e:8b:d8:fd:a4:07:30:27:9d:ed:93:02: 17:51:d7:14:fd:fe:15:52:2c:b6:4f:63:eb:44:90: ef:e3:05:4e:0d:fb:42:78:50:a0:fc:d3:a2:fc:cf: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D2:38:39:57:3D:C6:27:8C:71:01:86:D4:DD:7F:39:6C:E4:5C:A5 X509v3 Authority Key Identifier: keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:10:35:f1:f9:a5:78:d4:f2:ed:1d:79:4a:2f:6f:94:a4: 65:fe:f7:f3:3e:1f:1d:5d:a0:48:31:a9:18:90:df:1c:5a:f2: e3:32:1a:fb:a2:c8:e9:9d:80:80:fd:75:62:c3:c0:43:8f:4a: 43:05:4e:50:d6:e3:87:c6:c7:f3:b2:0b:ac:24:7f:c7:a0:4d: 9d:f0:4b:4c:30:e1:e0:65:64:f9:1a:ed:cf:da:9f:fd:95:d7: ca:e1:6a:1f:aa:25:69:11:f8:77:4c:a8:90:86:00:8c:1c:29: ca:03:d9:8b:f9:97:7e:39:65:52:69:9f:5e:c7:15:07:ab:bc: bf:fc:df:6d:f1:6d:ae:1f:01:1e:bd:57:54:f7:3e:b5:72:e0: b2:e5:dd:72:3f:e0:36:50:28:92:62:1a:a6:a4:3e:2c:d6:92: 39:9c:d6:a7:64:f0:07:9c:c3:17:5c:e6:92:51:b8:0d:a9:b3: 2e:ff:51:4e:1f:75:1a:f2:fe:aa:97:c4:58:db:87:05:ee:39: 57:7b:47:57:ee:43:9b:7f:a2:00:fc:0d:b2:7e:15:2c:ee:b5: 2f:6f:28:4f:18:78:3f:6c:f4:72:b9:64:95:1e:ae:3f:e8:b2: 07:2b:2e:d4:8f:f0:20:44:7e:40:75:cc:1f:be:15:c2:2a:3d: c8:71:c9:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5bmEi7K5R2JV+ROxvMVHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0 OGEzODAwHhcNMjYwMTAxMTIwMDM1WhcNMjYwMTAyMTIwMDM1WjAzMTEwLwYDVQQD EygyOGQyMzgzOTU3M2RjNjI3OGM3MTAxODZkNGRkN2YzOTZjZTQ1Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYJzFTZIvADDRgAankLYntoKa5gV k/vkfe4xljVsPWoX3whaE1udho9TKFKfGBJktzQqDzIS2mpBg8YCP3fDl+pNoNtc J+y3JcP1fAyZXLTEjuJqrMbS1RsiNfzMumxUdVVej7P1hPrmkY5Yrlhef+mMB80d D85YOeBKFxYUJa0GAv3qiWUIZOHeAXoKoRQb/3eeil7sfyN/yPAFLzXyPKvw3yqe uSSZaW0oVvIQ2Ry0fNTLOTDlfOHGrvb+v31OkxOlGbDnjg33amPFxBB5UzVl3ftu i9j9pAcwJ53tkwIXUdcU/f4VUiy2T2PrRJDv4wVODftCeFCg/NOi/M/1lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjSODlXPcYnjHEBhtTdfzls5FylMB8GA1UdIwQY MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt MTZiMzZkMDgwMWU5LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5 LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe0QNfH5 pXjU8u0deUovb5SkZf738z4fHV2gSDGpGJDfHFry4zIa+6LI6Z2AgP11YsPAQ49K QwVOUNbjh8bH87ILrCR/x6BNnfBLTDDh4GVk+Rrtz9qf/ZXXyuFqH6olaRH4d0yo kIYAjBwpygPZi/mXfjllUmmfXscVB6u8v/zfbfFtrh8BHr1XVPc+tXLgsuXdcj/g NlAokmIapqQ+LNaSOZzWp2TwB5zDF1zmklG4DamzLv9RTh91GvL+qpfEWNuHBe45 V3tHV+5Dm3+iAPwNsn4VLO61L28oTxh4P2z0crlklR6uP+iyBysu1I/wIER+QHXM H74Vwio9yHHJiQ== -----END CERTIFICATE-----Generated at Thu Jan 1 14:22:55 2026 by rpki-client