This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json) Hash identifier: L9fXago7jRMyJ9AV40RA12yfzBuwdQmm2/TRRckT/V8= Subject key identifier: C6:0D:21:C9:65:D5:41:3F:78:A4:02:C3:E7:D3:60:0B:D6:12:DE:EA Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b Certificate serial: 019B7E2740DBACDCD86B616BF00D01DC7856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft Manifest number: 0601 Signing time: Fri 02 Jan 2026 10:01:00 +0000 Manifest this update: Fri 02 Jan 2026 10:01:00 +0000 Manifest next update: Sat 03 Jan 2026 10:01:00 +0000 Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: HhAS2203+1AKWxCbMyZ6E0It6uC7VROIiTIFANUQZtE=) 2: cJoSZCFXqDtUSGkR6NyIWGdWJ5c.roa (hash: +4bfJl1WilU4FwTMIun4/VtCPiBZ9GR88vkRCY6T3TI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:27:40:db:ac:dc:d8:6b:61:6b:f0:0d:01:dc:78:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b Validity Not Before: Jan 2 10:01:00 2026 GMT Not After : Jan 3 10:01:00 2026 GMT Subject: CN=c60d21c965d5413f78a402c3e7d3600bd612deea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:c5:21:ea:33:30:6d:c1:c1:ab:d3:a3:3f: 1e:67:52:2f:da:33:19:92:b7:d1:8c:07:36:1b:55: ab:bd:65:d2:4a:31:84:ed:2b:c4:83:0a:57:23:9e: 9d:9d:39:e4:e8:58:8a:c6:fb:bf:66:da:27:83:bf: 6f:df:27:28:42:23:f2:ac:0c:1a:ef:38:34:5c:f5: db:41:e6:7b:aa:b8:79:31:b0:bd:d9:bf:07:8d:ac: 90:0e:f6:cc:49:c4:f1:d7:43:11:5c:6a:f8:85:db: cd:18:61:bd:68:ef:11:26:1c:ac:d4:be:bc:49:91: 26:d3:a4:58:1e:04:23:be:22:ea:1e:41:86:4b:41: f8:91:ef:51:f3:c8:86:5b:b7:a5:d7:dd:8b:0a:86: c5:22:b9:3c:1f:a0:95:27:ea:75:bc:25:6d:51:31: 91:c0:59:8b:a2:fc:86:6c:90:10:7e:06:f7:5c:dd: 8e:08:a1:42:a5:01:48:5f:8c:2a:54:e3:49:54:12: df:cc:ff:97:b1:d4:21:55:d7:77:c2:d2:50:88:ce: e4:9f:9a:5c:08:80:12:79:73:8b:16:b4:6d:40:74: 3b:da:35:90:f1:05:57:ba:4b:7a:fc:cd:3c:47:d8: 83:5a:5c:5c:ee:cb:1d:42:cf:fa:06:af:03:67:62: c0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:21:C9:65:D5:41:3F:78:A4:02:C3:E7:D3:60:0B:D6:12:DE:EA X509v3 Authority Key Identifier: keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1e:92:38:27:de:2d:68:81:79:6f:df:1d:80:00:30:88:8c: a1:63:e6:11:03:32:33:9d:14:70:23:14:45:25:56:31:f1:27: d9:3f:ed:34:a9:34:fe:a4:72:f4:a3:1f:c2:93:e3:88:ac:b6: 52:b6:9c:a8:bc:49:21:43:31:bd:50:78:6f:f0:a2:c2:4f:eb: 61:63:73:96:2f:ac:22:96:40:73:69:93:e8:8f:72:aa:61:73: d2:b2:bc:b7:67:36:7f:f9:e2:9d:90:03:cf:01:b2:30:59:6c: 62:a6:a9:41:c7:29:77:51:5c:a7:20:bd:a2:b9:a3:3c:c8:87: 3d:cc:33:f5:7d:bd:0b:10:fd:bf:bf:94:02:23:19:de:a6:fc: 30:75:0d:58:9b:23:95:97:c0:2e:6b:01:c1:5f:61:38:8b:8f: d7:99:ad:7e:33:21:46:b7:bd:81:d9:45:00:89:52:b2:75:17: cc:13:12:32:63:20:2c:97:11:cc:78:47:fd:36:1f:77:5f:79: 2d:b3:c2:eb:4a:4f:ee:67:55:3c:d8:c6:8d:35:5b:86:4a:11: 55:03:1e:a6:dd:20:2b:93:04:8f:1c:98:de:39:0a:df:14:42: 44:ec:5c:29:8e:2f:da:bb:06:47:3d:de:aa:4c:dc:38:c9:f2: 58:78:00:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+J0DbrNzYa2Fr8A0B3HhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTVhZWJhY2E3MzMxNmRjNDY4MGM4MDhiNzkzZTZhMDk1 NjVmMWIwHhcNMjYwMTAyMTAwMTAwWhcNMjYwMTAzMTAwMTAwWjAzMTEwLwYDVQQD EyhjNjBkMjFjOTY1ZDU0MTNmNzhhNDAyYzNlN2QzNjAwYmQ2MTJkZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN7FIeozMG3BwavToz8eZ1Iv2jMZ krfRjAc2G1WrvWXSSjGE7SvEgwpXI56dnTnk6FiKxvu/Ztong79v3ycoQiPyrAwa 7zg0XPXbQeZ7qrh5MbC92b8HjayQDvbMScTx10MRXGr4hdvNGGG9aO8RJhys1L68 SZEm06RYHgQjviLqHkGGS0H4ke9R88iGW7el192LCobFIrk8H6CVJ+p1vCVtUTGR wFmLovyGbJAQfgb3XN2OCKFCpQFIX4wqVONJVBLfzP+XsdQhVdd3wtJQiM7kn5pc CIASeXOLFrRtQHQ72jWQ8QVXukt6/M08R9iDWlxc7ssdQs/6Bq8DZ2LA9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYNIcll1UE/eKQCw+fTYAvWEt7qMB8GA1UdIwQY MBaAFDuVrrrKczFtxGgMgIt5PmoJVl8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2Et MDIzY2MxZmMxOTEwLzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2EtMDIzY2MxZmMxOTEw LzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB6SOCfe LWiBeW/fHYAAMIiMoWPmEQMyM50UcCMURSVWMfEn2T/tNKk0/qRy9KMfwpPjiKy2 UracqLxJIUMxvVB4b/Ciwk/rYWNzli+sIpZAc2mT6I9yqmFz0rK8t2c2f/ninZAD zwGyMFlsYqapQccpd1FcpyC9ormjPMiHPcwz9X29CxD9v7+UAiMZ3qb8MHUNWJsj lZfALmsBwV9hOIuP15mtfjMhRre9gdlFAIlSsnUXzBMSMmMgLJcRzHhH/TYfd195 LbPC60pP7mdVPNjGjTVbhkoRVQMept0gK5MEjxyY3jkK3xRCROxcKY4v2rsGRz3e qkzcOMnyWHgAjA== -----END CERTIFICATE-----Generated at Fri Jan 2 19:47:33 2026 by rpki-client