This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json) Hash identifier: SfygF/wfTHyfO5hfCnx2eCaHw96BQikx7TqyImUdiss= Subject key identifier: 9C:83:2B:E0:EE:63:52:10:11:F4:6D:1C:8F:39:AE:C5:23:F0:F3:F6 Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa Certificate serial: 019B9C698113F4B830FD6CC079E8A3C1230A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft Manifest number: 17B9 Signing time: Thu 08 Jan 2026 07:01:58 +0000 Manifest this update: Thu 08 Jan 2026 07:01:58 +0000 Manifest next update: Fri 09 Jan 2026 07:01:58 +0000 Files and hashes: 1: 3X66D8rd_nYfhEI9M4q9SKmLMaM.roa (hash: hH7Y3DCETnMnnmJRKV+CQ8Ci7Hnqb3mZqszadLViFz4=) 2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: NNUskEuXtS86n1HKOpFYbNRPZcR5/xNzLiVNMVekivQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:69:81:13:f4:b8:30:fd:6c:c0:79:e8:a3:c1:23:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa Validity Not Before: Jan 8 07:01:58 2026 GMT Not After : Jan 9 07:01:58 2026 GMT Subject: CN=9c832be0ee63521011f46d1c8f39aec523f0f3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:eb:9a:9e:28:53:95:3a:50:97:16:a9:f8:14: b2:ee:d2:c8:9e:af:2f:ff:d7:9d:49:c4:55:ed:04: eb:49:64:61:56:50:dc:f3:28:03:3f:c1:61:d8:5b: f0:22:f4:5a:31:3e:c6:28:7c:c2:cb:16:ba:30:e7: 1d:c6:c2:e0:19:39:1e:a9:1d:1a:4b:8a:1b:07:2d: a0:64:55:1a:3e:20:ed:ad:17:d6:d9:b3:80:ad:c6: f5:af:b2:45:3b:ed:94:a4:36:92:df:a8:1f:e3:2d: eb:45:96:c6:82:66:fe:b8:74:2f:6f:32:b2:46:c3: 41:35:b2:d0:c3:c6:4a:20:e0:bc:19:89:c3:36:8c: 75:8b:21:5d:b3:20:61:36:e8:fe:bc:8b:be:0e:46: 7c:e2:0c:db:c0:73:a6:28:f7:b3:dc:3e:0a:0f:b3: dd:0a:9a:60:fe:b2:5b:59:04:49:ba:76:bc:65:3d: c8:88:ea:86:c1:0d:48:e0:19:5d:82:08:15:55:28: 95:af:5a:58:39:14:22:37:8e:21:68:6b:43:ab:3c: de:ca:17:6e:d4:70:87:79:21:09:4b:60:9e:d9:2f: 4e:ee:54:76:a1:ef:50:ff:99:e5:9a:3d:13:47:f7: 7d:1c:ad:39:6b:61:af:09:bc:0f:8d:8d:68:21:ab: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:83:2B:E0:EE:63:52:10:11:F4:6D:1C:8F:39:AE:C5:23:F0:F3:F6 X509v3 Authority Key Identifier: keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:19:d6:2b:59:8d:56:83:42:f8:28:3d:ac:fe:cb:cb:65:3b: 83:3e:b8:ae:24:e2:d6:06:ec:2a:f0:af:ca:20:d4:79:d4:5b: 64:3e:c3:5d:92:f2:0f:60:7b:c8:49:72:ae:46:f3:a9:ba:7f: 6b:86:1f:74:c1:3a:1f:33:a8:da:74:6d:40:04:9f:61:6b:80: ee:e3:1c:0b:d9:77:72:41:21:f2:da:18:a2:26:0c:b9:b7:ea: 75:c5:48:03:d9:42:9d:4b:89:14:51:16:0b:93:24:98:07:c5: 5c:f3:5d:17:a1:25:7e:62:44:81:d6:ac:35:23:57:42:5a:33: af:6d:62:3c:9a:32:32:e3:d5:d5:81:ba:6a:39:00:eb:ec:cf: 12:1e:ee:ee:a7:d7:3e:4c:14:7b:17:24:21:a6:08:ad:38:d9: 22:6c:52:7c:44:11:f2:37:f0:b4:9d:e7:3d:92:61:4c:a4:44: 31:67:8c:f7:9a:ec:80:3f:f9:73:d8:7a:4f:bb:6d:29:c2:da: 30:b8:5b:80:21:51:a4:f9:fb:61:8c:84:20:0d:84:1c:83:ff: d8:05:67:32:ba:de:42:6c:b3:bb:43:4a:f7:8a:74:b7:06:8e: 26:55:32:67:f6:65:49:4c:5f:9a:cf:0f:e8:94:18:86:cc:00: 6f:5a:39:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZucaYET9Lgw/WzAeeijwSMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZmQxNmMyNDdjZjQ2NmVlZDMxYTMwNGJiOGYxN2ZhMzIx NWFhYWEwHhcNMjYwMTA4MDcwMTU4WhcNMjYwMTA5MDcwMTU4WjAzMTEwLwYDVQQD Eyg5YzgzMmJlMGVlNjM1MjEwMTFmNDZkMWM4ZjM5YWVjNTIzZjBmM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OuanihTlTpQlxap+BSy7tLInq8v /9edScRV7QTrSWRhVlDc8ygDP8Fh2FvwIvRaMT7GKHzCyxa6MOcdxsLgGTkeqR0a S4obBy2gZFUaPiDtrRfW2bOArcb1r7JFO+2UpDaS36gf4y3rRZbGgmb+uHQvbzKy RsNBNbLQw8ZKIOC8GYnDNox1iyFdsyBhNuj+vIu+DkZ84gzbwHOmKPez3D4KD7Pd Cppg/rJbWQRJuna8ZT3IiOqGwQ1I4BldgggVVSiVr1pYORQiN44haGtDqzzeyhdu 1HCHeSEJS2Ce2S9O7lR2oe9Q/5nlmj0TR/d9HK05a2GvCbwPjY1oIavKLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyDK+DuY1IQEfRtHI85rsUj8PP2MB8GA1UdIwQY MBaAFKH9FsJHz0Zu7TGjBLuPF/oyFaqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTct NmNlZjFhYmFiM2ZjLzEvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTctNmNlZjFhYmFiM2Zj LzEvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2hnWK1mN VoNC+Cg9rP7Ly2U7gz64riTi1gbsKvCvyiDUedRbZD7DXZLyD2B7yElyrkbzqbp/ a4YfdME6HzOo2nRtQASfYWuA7uMcC9l3ckEh8toYoiYMubfqdcVIA9lCnUuJFFEW C5MkmAfFXPNdF6ElfmJEgdasNSNXQlozr21iPJoyMuPV1YG6ajkA6+zPEh7u7qfX PkwUexckIaYIrTjZImxSfEQR8jfwtJ3nPZJhTKREMWeM95rsgD/5c9h6T7ttKcLa MLhbgCFRpPn7YYyEIA2EHIP/2AVnMrreQmyzu0NK94p0twaOJlUyZ/ZlSUxfms8P 6JQYhswAb1o5iA== -----END CERTIFICATE-----Generated at Thu Jan 8 11:05:55 2026 by rpki-client