This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json) Hash identifier: Vy1/1qcjDZ70cS+lgI3wtEFTpVaOJf9Q6wE8ek1L9kY= Subject key identifier: 5A:C0:48:8B:A8:63:A4:C0:11:28:4E:5D:25:A8:40:86:8D:FA:7D:07 Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Certificate serial: 019BB3278D482725158C641A16019CD9AFAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft Manifest number: 0CA6 Signing time: Mon 12 Jan 2026 17:01:12 +0000 Manifest this update: Mon 12 Jan 2026 17:01:12 +0000 Manifest next update: Tue 13 Jan 2026 17:01:12 +0000 Files and hashes: 1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=) 2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: KTLXq46i4eIaRMqFaY8Y2hjdjhwaGZzK8GkOiSoEb4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:27:8d:48:27:25:15:8c:64:1a:16:01:9c:d9:af:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Validity Not Before: Jan 12 17:01:12 2026 GMT Not After : Jan 13 17:01:12 2026 GMT Subject: CN=5ac0488ba863a4c011284e5d25a840868dfa7d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:7b:6b:43:9f:5d:68:9f:52:eb:5c:6d:95: 7e:d8:31:5b:5a:bf:a1:74:9a:1b:1f:fe:3e:b5:26: c8:5f:d4:62:55:95:f9:23:36:75:d5:93:54:0c:66: 84:78:70:99:0a:48:99:0a:1a:9e:14:ce:07:8d:86: d6:93:03:f1:d9:8a:5c:28:94:17:99:1c:01:ac:56: f9:f4:89:91:07:3e:15:f6:10:7a:2c:59:b1:ec:d2: 90:11:93:55:c6:a8:c2:70:e2:94:cf:c9:0f:12:9f: c4:75:09:a7:f4:4d:40:23:9f:00:96:11:42:bb:31: a2:6d:2d:3d:da:42:15:03:53:6c:f4:5e:e2:61:ab: da:30:4f:f1:22:db:5c:2c:12:c6:9c:15:96:c9:33: 6f:e9:b2:9f:e4:4e:99:e3:32:20:00:0d:0f:87:76: de:00:32:c6:e9:a5:7c:9a:91:55:a7:cf:b4:7a:e0: c6:55:84:b7:bb:7d:4e:e2:0a:58:1d:8c:bd:b1:b5: 64:21:0c:fc:66:0e:52:65:71:c4:c3:41:8c:17:42: f0:d8:1d:39:17:00:67:2d:1a:84:29:b2:d7:f0:b4: dc:14:27:b8:32:da:d3:d8:b1:42:5b:85:75:d7:06: 18:74:39:b6:6a:ab:4d:f1:ee:a3:fe:d4:ce:f0:c9: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:48:8B:A8:63:A4:C0:11:28:4E:5D:25:A8:40:86:8D:FA:7D:07 X509v3 Authority Key Identifier: keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ed:6c:c3:25:3d:3f:b1:36:eb:8c:d4:4e:ea:bc:ce:ed:30: ea:57:43:71:8f:02:1d:8b:79:19:e4:1e:9a:0d:e2:c2:8e:4e: 6c:3a:92:b2:ed:eb:b5:7b:41:23:59:75:15:2c:e4:fc:cc:fa: 6d:b4:18:a3:49:58:34:ba:68:23:94:8c:70:30:68:dd:77:64: 5d:cd:c8:cf:a5:f3:90:25:8e:db:88:05:4e:a1:d3:ae:75:7c: 31:fe:d9:8f:34:4b:60:6a:23:7b:67:cb:c0:dc:86:e8:0c:d7: 37:7e:c2:30:81:44:1e:72:b4:02:c1:42:b5:d6:33:26:b7:f8: 85:24:55:42:08:a6:02:73:1f:16:4a:17:c0:0b:20:18:d1:16: 65:7e:1a:35:88:ec:d5:9a:86:a4:83:66:18:fe:1b:44:43:16: 5e:e5:09:5c:3d:78:7a:9d:ec:af:6a:3d:14:b1:1a:c8:ef:57: f4:93:37:34:fb:b5:06:bd:4a:6e:a4:a7:69:18:5d:f1:b7:58: 66:4b:c5:2d:d5:66:a5:3f:1c:d4:5a:4f:61:f5:f7:1c:21:df: 6e:ff:44:55:d9:34:65:4a:a1:e0:40:67:24:aa:bd:ec:6f:90: ef:7c:73:68:51:a0:c8:9a:12:25:cc:bb:50:5a:aa:45:e1:01: ae:f1:ad:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzJ41IJyUVjGQaFgGc2a+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl ZThhNmMwHhcNMjYwMTEyMTcwMTEyWhcNMjYwMTEzMTcwMTEyWjAzMTEwLwYDVQQD Eyg1YWMwNDg4YmE4NjNhNGMwMTEyODRlNWQyNWE4NDA4NjhkZmE3ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3F7a0OfXWifUutcbZV+2DFbWr+h dJobH/4+tSbIX9RiVZX5IzZ11ZNUDGaEeHCZCkiZChqeFM4HjYbWkwPx2YpcKJQX mRwBrFb59ImRBz4V9hB6LFmx7NKQEZNVxqjCcOKUz8kPEp/EdQmn9E1AI58AlhFC uzGibS092kIVA1Ns9F7iYavaME/xIttcLBLGnBWWyTNv6bKf5E6Z4zIgAA0Ph3be ADLG6aV8mpFVp8+0euDGVYS3u31O4gpYHYy9sbVkIQz8Zg5SZXHEw0GMF0Lw2B05 FwBnLRqEKbLX8LTcFCe4MtrT2LFCW4V11wYYdDm2aqtN8e6j/tTO8MkjaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrASIuoY6TAEShOXSWoQIaN+n0HMB8GA1UdIwQY MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt YWJjY2EyYjQ0ZTlmLzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATO1swyU9 P7E264zUTuq8zu0w6ldDcY8CHYt5GeQemg3iwo5ObDqSsu3rtXtBI1l1FSzk/Mz6 bbQYo0lYNLpoI5SMcDBo3XdkXc3Iz6XzkCWO24gFTqHTrnV8Mf7ZjzRLYGoje2fL wNyG6AzXN37CMIFEHnK0AsFCtdYzJrf4hSRVQgimAnMfFkoXwAsgGNEWZX4aNYjs 1ZqGpINmGP4bREMWXuUJXD14ep3sr2o9FLEayO9X9JM3NPu1Br1KbqSnaRhd8bdY ZkvFLdVmpT8c1FpPYfX3HCHfbv9EVdk0ZUqh4EBnJKq97G+Q73xzaFGgyJoSJcy7 UFqqReEBrvGtAA== -----END CERTIFICATE-----Generated at Mon Jan 12 23:49:14 2026 by rpki-client