This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json) Hash identifier: eoaUvCQAotDr19qsu8osIvhpY/AXHb1KY4m63ThH1WM= Subject key identifier: 18:7F:C4:42:48:68:2B:56:65:52:6A:F6:2C:9D:73:E5:5D:46:27:CC Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818 Certificate serial: 019BAEDD77D65C4EED8993F580EDC389B808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft Manifest number: 1142 Signing time: Sun 11 Jan 2026 21:01:48 +0000 Manifest this update: Sun 11 Jan 2026 21:01:48 +0000 Manifest next update: Mon 12 Jan 2026 21:01:48 +0000 Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: +0aiHcjzwPUq2tS+Sp9/G6WrHEVN4fYnnhGaIrywctY=) 2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:77:d6:5c:4e:ed:89:93:f5:80:ed:c3:89:b8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818 Validity Not Before: Jan 11 21:01:48 2026 GMT Not After : Jan 12 21:01:48 2026 GMT Subject: CN=187fc44248682b5665526af62c9d73e55d4627cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:1e:5a:bb:b9:2d:3b:66:19:50:49:2a:fe: 18:12:c5:fb:53:c5:02:15:26:2e:eb:60:a2:f9:3c: 4b:37:b4:90:50:eb:9e:2b:f0:40:3a:89:8f:30:6d: 65:08:c0:6c:f7:89:9a:1b:33:29:a4:74:f2:c9:a0: 94:c5:d5:6e:e7:d4:43:74:7e:97:5f:8b:fb:10:b1: 1b:e0:56:37:09:43:93:4a:0b:6d:e1:62:28:5e:67: b8:29:25:d6:90:05:f6:a2:a1:7f:8a:5c:92:ba:e6: 0c:5e:c6:25:41:ba:0e:23:15:c1:a4:b8:74:6d:18: 8d:78:5b:79:ba:bb:55:ae:47:07:81:58:62:fe:02: 5a:72:20:f1:0d:a5:3d:63:8d:0c:b5:a5:51:ef:f5: 82:30:1b:17:51:b0:3d:4d:b1:59:16:d3:8f:5d:93: 63:29:30:eb:27:f1:a7:99:35:51:c0:85:ac:b4:dd: 99:1a:1c:8b:d5:9c:41:f9:8a:90:a1:35:08:27:03: 7a:d1:98:96:89:0d:bb:13:6b:3c:db:0d:9c:13:2c: ef:39:a0:4e:aa:04:37:ef:a3:84:f0:9f:6d:74:99: 23:b9:64:d3:61:e1:3c:d0:8a:af:fe:83:73:7d:88: f2:b8:18:33:09:9f:59:b5:ff:af:b3:01:9c:8a:38: 8e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:C4:42:48:68:2B:56:65:52:6A:F6:2C:9D:73:E5:5D:46:27:CC X509v3 Authority Key Identifier: keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6d:17:f1:1a:6c:84:c1:6f:ea:3a:a4:09:53:a1:05:74:3b: 47:11:1f:41:21:48:ce:01:e4:11:a2:25:be:ee:74:b3:0d:38: 2d:13:17:ee:bb:5a:96:88:38:c6:dc:58:d6:d9:90:e4:ff:09: 7f:db:cc:ae:4c:b4:d8:4a:86:3e:18:46:1b:0c:dd:24:53:28: 55:a5:bb:99:96:4c:42:65:f9:90:ea:0e:83:3d:3f:b1:e1:a4: 29:60:84:e9:aa:76:26:c9:c4:67:77:8a:44:5d:f6:de:63:5e: 89:09:09:6f:b1:cc:93:64:1b:14:85:ea:9c:42:58:8b:cb:f4: dc:a5:bb:6e:ff:ab:17:df:6e:ac:f6:43:6a:cc:44:0e:8b:dd: 18:05:e4:75:b1:e8:ad:9a:98:a4:04:a6:02:c8:c5:d9:6d:c1: 6c:b4:08:9b:c6:8c:54:6f:cb:cd:68:eb:5e:a5:92:17:a0:59: 38:1a:1d:3b:6f:93:a2:d4:d9:74:84:38:71:ea:2f:64:0b:79: 9d:fa:85:2a:ef:f7:aa:4a:37:e5:0c:ff:3c:54:31:63:9c:a1: 49:78:5c:93:a0:91:c4:04:0e:1c:5b:7f:9d:6e:75:8a:a2:dd: af:ee:61:70:4e:a4:5f:99:e6:f0:be:68:be:55:57:3f:38:57: 31:6d:b5:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3XfWXE7tiZP1gO3DibgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz NmM4MTgwHhcNMjYwMTExMjEwMTQ4WhcNMjYwMTEyMjEwMTQ4WjAzMTEwLwYDVQQD EygxODdmYzQ0MjQ4NjgyYjU2NjU1MjZhZjYyYzlkNzNlNTVkNDYyN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM8eWru5LTtmGVBJKv4YEsX7U8UC FSYu62Ci+TxLN7SQUOueK/BAOomPMG1lCMBs94maGzMppHTyyaCUxdVu59RDdH6X X4v7ELEb4FY3CUOTSgtt4WIoXme4KSXWkAX2oqF/ilySuuYMXsYlQboOIxXBpLh0 bRiNeFt5urtVrkcHgVhi/gJaciDxDaU9Y40MtaVR7/WCMBsXUbA9TbFZFtOPXZNj KTDrJ/GnmTVRwIWstN2ZGhyL1ZxB+YqQoTUIJwN60ZiWiQ27E2s82w2cEyzvOaBO qgQ376OE8J9tdJkjuWTTYeE80Iqv/oNzfYjyuBgzCZ9Ztf+vswGcijiOJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh/xEJIaCtWZVJq9iydc+VdRifMMB8GA1UdIwQY MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt NDUwZDIyOTViYTQ5LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5 LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW0X8Rps hMFv6jqkCVOhBXQ7RxEfQSFIzgHkEaIlvu50sw04LRMX7rtalog4xtxY1tmQ5P8J f9vMrky02EqGPhhGGwzdJFMoVaW7mZZMQmX5kOoOgz0/seGkKWCE6ap2JsnEZ3eK RF323mNeiQkJb7HMk2QbFIXqnEJYi8v03KW7bv+rF99urPZDasxEDovdGAXkdbHo rZqYpASmAsjF2W3BbLQIm8aMVG/LzWjrXqWSF6BZOBodO2+TotTZdIQ4ceovZAt5 nfqFKu/3qko35Qz/PFQxY5yhSXhck6CRxAQOHFt/nW51iqLdr+5hcE6kX5nm8L5o vlVXPzhXMW218A== -----END CERTIFICATE-----Generated at Mon Jan 12 02:58:38 2026 by rpki-client