This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json) Hash identifier: NtYnGPD53JifyTaIjIQLOMCdekBksqp+StpH2Ys3qVo= Subject key identifier: 5C:A6:CE:E4:2B:63:E2:4C:E6:B2:19:7F:00:EB:21:F4:1F:A7:B1:84 Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7 Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7 Certificate serial: 019BB2BA7055396B252C369965FE2C70EE48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft Manifest number: 17C4 Signing time: Mon 12 Jan 2026 15:02:01 +0000 Manifest this update: Mon 12 Jan 2026 15:02:01 +0000 Manifest next update: Tue 13 Jan 2026 15:02:01 +0000 Files and hashes: 1: 5W8H3hdhAkKM671WDMnpy7cCJuY.roa (hash: NKgi04O8geWs7LDTxcDB8TiJxs4zQ7+9gL3r7rWfDxU=) 2: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: 5QOhF0udlEKev8NE39RZJ3VDb9EqGNEvcNk/5u8sbVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:ba:70:55:39:6b:25:2c:36:99:65:fe:2c:70:ee:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7 Validity Not Before: Jan 12 15:02:01 2026 GMT Not After : Jan 13 15:02:01 2026 GMT Subject: CN=5ca6cee42b63e24ce6b2197f00eb21f41fa7b184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:68:f2:80:49:50:51:cf:03:c1:58:0f:25: ec:95:20:a4:cb:f0:05:fe:b2:e8:bb:32:ea:38:9c: 42:fe:98:92:50:da:02:9c:5c:93:e5:d5:1f:95:f1: 7b:65:ed:c6:3b:69:2f:71:15:8c:dc:7f:68:21:7c: e3:ea:f5:25:4c:f2:e1:54:1a:55:68:b4:e5:4f:68: 2b:0a:70:fe:c5:c1:b3:dd:db:89:51:42:bf:94:db: 40:bb:be:f6:1d:38:23:49:62:f1:24:a0:f2:2e:56: 88:d3:39:aa:33:26:2f:35:45:a2:35:2c:02:7d:84: 52:7e:b4:14:8c:83:2b:d4:a2:cb:e8:59:4f:dc:3f: 67:d4:3d:92:ee:ad:7d:ce:52:fe:31:af:10:b1:6a: 0d:30:b1:11:82:b2:f0:94:9a:c8:00:8c:42:90:e0: 9a:4d:ba:9d:33:79:34:99:2a:cf:d7:2d:e0:21:c1: 03:dc:c5:d2:4b:2e:ac:fc:2e:4b:13:6a:25:81:b8: 89:37:ba:e8:2a:38:ac:d2:1c:2f:95:fb:7d:93:47: f4:55:0c:ea:a3:6a:cf:6c:72:cb:7e:b5:a6:62:70: 52:35:33:84:c3:30:ae:11:17:44:78:4b:34:27:e2: b8:b9:2b:31:e9:de:f1:e7:91:9c:4b:28:09:8a:28: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:CE:E4:2B:63:E2:4C:E6:B2:19:7F:00:EB:21:F4:1F:A7:B1:84 X509v3 Authority Key Identifier: keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:95:0e:f0:34:3e:22:af:2e:5b:fe:2b:c7:b0:19:e5:46:0c: 84:66:8e:45:57:ab:98:15:21:8d:1c:4c:f6:6c:00:14:b1:e6: 25:72:ad:b4:78:20:14:55:c1:1d:43:e0:7a:0d:d8:f7:10:3e: 53:ff:c5:ac:2c:5e:7f:30:73:f2:5a:98:f1:f4:20:42:f2:de: 94:20:c1:e6:47:43:b1:41:74:ae:58:c3:4e:e5:a1:a8:eb:d1: 85:5a:43:62:73:ef:4f:24:73:7b:d9:37:31:71:4f:a8:7a:4b: c9:9f:f0:44:67:a6:16:ad:2a:47:32:9f:ef:dc:82:39:b2:c0: 9c:c8:70:15:cd:b6:19:95:9c:e2:0a:21:af:65:0d:20:cf:6d: 2a:8d:b7:b0:88:d0:13:84:d3:3b:06:53:3e:2b:87:9a:67:27: c5:bb:1e:18:85:37:70:60:b9:4c:83:a1:27:fc:1b:11:97:ce: de:f4:99:26:63:09:ba:53:30:e2:a7:a8:63:ee:2c:08:06:ba: 1b:84:e5:68:39:6a:aa:4d:14:29:9b:20:48:71:ff:04:0b:df: 97:33:f1:e9:f2:b2:d8:a7:fc:91:a2:8e:34:da:5b:29:10:6d: 97:3a:2e:12:4d:79:e0:15:ab:76:73:1f:27:8e:6a:00:9e:03: 75:e0:a6:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyunBVOWslLDaZZf4scO5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzZlNmFiMDg0YzllZWVkZTg2ZTJhZjZiZGU3MjE1Mjc0 Yjk1YTcwHhcNMjYwMTEyMTUwMjAxWhcNMjYwMTEzMTUwMjAxWjAzMTEwLwYDVQQD Eyg1Y2E2Y2VlNDJiNjNlMjRjZTZiMjE5N2YwMGViMjFmNDFmYTdiMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gdo8oBJUFHPA8FYDyXslSCky/AF /rLouzLqOJxC/piSUNoCnFyT5dUflfF7Ze3GO2kvcRWM3H9oIXzj6vUlTPLhVBpV aLTlT2grCnD+xcGz3duJUUK/lNtAu772HTgjSWLxJKDyLlaI0zmqMyYvNUWiNSwC fYRSfrQUjIMr1KLL6FlP3D9n1D2S7q19zlL+Ma8QsWoNMLERgrLwlJrIAIxCkOCa TbqdM3k0mSrP1y3gIcED3MXSSy6s/C5LE2olgbiJN7roKjis0hwvlft9k0f0VQzq o2rPbHLLfrWmYnBSNTOEwzCuERdEeEs0J+K4uSsx6d7x55GcSygJiiiH1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFymzuQrY+JM5rIZfwDrIfQfp7GEMB8GA1UdIwQY MBaAFDl25qsITJ7u3obir2vechUnS5WnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMt ZDY2Njc0Y2ZhNDI0LzEvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMtZDY2Njc0Y2ZhNDI0 LzEvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspUO8DQ+ Iq8uW/4rx7AZ5UYMhGaORVermBUhjRxM9mwAFLHmJXKttHggFFXBHUPgeg3Y9xA+ U//FrCxefzBz8lqY8fQgQvLelCDB5kdDsUF0rljDTuWhqOvRhVpDYnPvTyRze9k3 MXFPqHpLyZ/wRGemFq0qRzKf79yCObLAnMhwFc22GZWc4gohr2UNIM9tKo23sIjQ E4TTOwZTPiuHmmcnxbseGIU3cGC5TIOhJ/wbEZfO3vSZJmMJulMw4qeoY+4sCAa6 G4TlaDlqqk0UKZsgSHH/BAvflzPx6fKy2Kf8kaKONNpbKRBtlzouEk154BWrdnMf J45qAJ4DdeCm5Q== -----END CERTIFICATE-----Generated at Mon Jan 12 23:49:04 2026 by rpki-client