This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json) Hash identifier: JQWJdJRr8ub+Y+2uN8RJDYa9qZw628HjDg0o+rx3Y18= Subject key identifier: 17:5C:CA:43:E3:5A:8C:D4:F4:2E:70:04:58:22:98:90:F7:05:93:F7 Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Certificate serial: 019BAEA640CD66CCE8FF903DCD32314CD446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft Manifest number: 17C8 Signing time: Sun 11 Jan 2026 20:01:29 +0000 Manifest this update: Sun 11 Jan 2026 20:01:29 +0000 Manifest next update: Mon 12 Jan 2026 20:01:29 +0000 Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: CXicjpvuj8VULumhpBjgQPJVqvc07OeH2ezTB5wGAFM=) 2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a6:40:cd:66:cc:e8:ff:90:3d:cd:32:31:4c:d4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a Validity Not Before: Jan 11 20:01:29 2026 GMT Not After : Jan 12 20:01:29 2026 GMT Subject: CN=175cca43e35a8cd4f42e700458229890f70593f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:b8:4c:1c:31:d1:d9:6b:3c:c2:49:f4:2e: 4f:70:f2:bf:db:1d:1d:ca:57:81:82:de:8b:7c:7d: 31:bc:19:77:ad:c3:bd:79:85:95:d2:89:89:d4:c9: d6:c9:42:7d:61:8b:74:bf:f6:0f:1f:33:0e:a6:c0: 0d:66:4e:64:01:23:d2:e8:db:59:66:12:3c:af:30: 53:ab:c7:54:0d:49:df:fa:ca:43:88:58:bb:cd:3f: 4b:72:d8:54:6d:27:07:f4:60:69:ba:d2:ad:65:55: 08:a6:bd:78:01:41:e4:23:33:02:8e:32:f5:70:a5: 29:f7:48:7d:32:7a:b9:93:5f:5a:21:65:71:ec:9b: 52:75:73:e9:11:80:e7:e1:c4:22:b6:66:f5:65:de: 61:0a:0c:f8:29:c5:fa:e6:ac:fc:a3:15:e1:43:be: 4e:61:3c:17:5e:8e:ae:49:c4:09:ed:41:83:8c:cd: fc:e6:b3:cf:72:64:a4:63:00:2d:9d:73:f7:94:2b: c2:5e:90:99:c8:fd:d2:0a:b0:ef:0a:04:e5:10:8c: 0c:db:cc:bf:53:d8:1c:9b:d4:f1:e7:f7:66:0f:c4: db:48:68:8c:fa:02:d4:0c:74:0e:38:dc:bc:aa:87: 94:05:ef:63:98:ef:ce:56:3d:7d:01:5d:3d:46:ca: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5C:CA:43:E3:5A:8C:D4:F4:2E:70:04:58:22:98:90:F7:05:93:F7 X509v3 Authority Key Identifier: keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b5:bf:da:8a:1d:22:42:e8:70:f0:b4:f5:14:4d:a7:43:77: f9:8e:e9:34:cc:c2:eb:e9:73:9c:fd:b8:2d:cf:23:c6:43:ef: 09:b7:21:73:48:a7:10:7a:24:d4:c0:66:6e:a9:c2:2e:4a:57: ad:1f:33:b8:ce:80:3e:e6:ce:9e:13:25:fd:87:12:cc:ab:3a: 25:64:e8:ea:8c:fd:74:ef:61:eb:ed:79:04:1d:7f:9e:0c:39: 5c:0d:10:bb:d4:a5:03:6b:09:28:b2:1e:47:a7:e9:8b:fd:1b: 09:86:a1:5c:d8:68:e2:ca:83:c8:0e:db:af:4e:d2:a7:d6:d0: e9:db:d6:22:e4:cd:e2:d7:ec:d2:7e:b8:00:f0:93:9f:36:36: bc:dd:a9:58:ea:ee:c7:25:50:4c:f5:c6:7f:44:16:86:7e:f6: 9d:e9:20:16:24:d2:30:df:d6:3c:8e:a6:68:3d:44:a1:ab:0b: 7d:ff:d2:24:01:e4:f4:72:07:01:2b:84:d0:db:6b:dc:80:36: 8f:f7:02:e1:d1:b8:48:c8:13:e4:4d:59:a5:aa:2b:33:8a:8a: 44:59:d6:72:a0:06:85:af:5f:67:10:e2:35:e4:b1:01:77:05: a0:cc:00:fd:42:23:c1:2f:87:83:b3:8d:bf:10:f9:e8:69:18: a8:91:22:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuupkDNZszo/5A9zTIxTNRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlZDg3YjY2OWQwNWI0MjBkZjVhYTlhNjEzMmVhNmZi NTFhNWEwHhcNMjYwMTExMjAwMTI5WhcNMjYwMTEyMjAwMTI5WjAzMTEwLwYDVQQD EygxNzVjY2E0M2UzNWE4Y2Q0ZjQyZTcwMDQ1ODIyOTg5MGY3MDU5M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqC4TBwx0dlrPMJJ9C5PcPK/2x0d yleBgt6LfH0xvBl3rcO9eYWV0omJ1MnWyUJ9YYt0v/YPHzMOpsANZk5kASPS6NtZ ZhI8rzBTq8dUDUnf+spDiFi7zT9LcthUbScH9GBputKtZVUIpr14AUHkIzMCjjL1 cKUp90h9Mnq5k19aIWVx7JtSdXPpEYDn4cQitmb1Zd5hCgz4KcX65qz8oxXhQ75O YTwXXo6uScQJ7UGDjM385rPPcmSkYwAtnXP3lCvCXpCZyP3SCrDvCgTlEIwM28y/ U9gcm9Tx5/dmD8TbSGiM+gLUDHQOONy8qoeUBe9jmO/OVj19AV09RspydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdcykPjWozU9C5wBFgimJD3BZP3MB8GA1UdIwQY MBaAFKPm7Ye2adBbQg31qpphMupvtRpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMt N2I4ZWEwZjgzMDgxLzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMtN2I4ZWEwZjgzMDgx LzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbW/2ood IkLocPC09RRNp0N3+Y7pNMzC6+lznP24Lc8jxkPvCbchc0inEHok1MBmbqnCLkpX rR8zuM6APubOnhMl/YcSzKs6JWTo6oz9dO9h6+15BB1/ngw5XA0Qu9SlA2sJKLIe R6fpi/0bCYahXNho4sqDyA7br07Sp9bQ6dvWIuTN4tfs0n64APCTnzY2vN2pWOru xyVQTPXGf0QWhn72nekgFiTSMN/WPI6maD1EoasLff/SJAHk9HIHASuE0Ntr3IA2 j/cC4dG4SMgT5E1ZpaorM4qKRFnWcqAGha9fZxDiNeSxAXcFoMwA/UIjwS+Hg7ON vxD56GkYqJEi/w== -----END CERTIFICATE-----Generated at Sun Jan 11 23:16:50 2026 by rpki-client