This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json) Hash identifier: Yu7ltrky3V8LZjE/RaF/5x6UNzaGICLC78oSIlr+9XI= Subject key identifier: B8:DC:86:7D:EA:23:4A:24:E3:2C:EF:68:EF:E4:B0:A0:34:BE:88:90 Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1 Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1 Certificate serial: 019BB139FA0D0F8AD7B90BFDF34F484906EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 08:02:05 +0000 Manifest this update: Mon 12 Jan 2026 08:02:05 +0000 Manifest next update: Tue 13 Jan 2026 08:02:05 +0000 Files and hashes: 1: FomC0OD_NwetWkEPOTha3fWVMKU.roa (hash: dczkmLKUdcB3drX74PqMZvKfYmTs+5M5HtjBYhjGfvk=) 2: drBhV9alP4OW6ofNZOxW9TLw2f0.roa (hash: lbZ8swZRlTMR5bgvRpyD4YhMPyncb/ksvL8xrpAMysA=) 3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: XwhHyZAoWQa9k/aSBBmAB6gaqVicoqt2HHcgLUw9dc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:fa:0d:0f:8a:d7:b9:0b:fd:f3:4f:48:49:06:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1 Validity Not Before: Jan 12 08:02:05 2026 GMT Not After : Jan 13 08:02:05 2026 GMT Subject: CN=b8dc867dea234a24e32cef68efe4b0a034be8890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:00:71:91:df:18:14:85:ce:54:32:ae:c1: 50:fe:69:83:36:1f:93:d7:22:a4:6b:f0:0f:3e:51: 01:38:bb:2f:a4:a0:47:e8:26:e6:78:52:5f:23:3a: 9d:b7:f0:37:9a:52:b7:42:b5:f1:30:b3:04:78:0a: 69:ef:78:7c:a4:f5:48:3c:78:84:a4:fb:7c:f8:fd: 7d:b0:87:c5:a8:57:13:37:e6:e0:3e:d4:1e:8e:3c: 6f:72:95:3a:89:c0:84:09:2d:2a:63:b9:a4:51:ca: 2b:a8:c4:28:ee:5a:83:d1:32:6e:4a:58:2c:56:9c: d3:3d:e2:3a:d2:4e:70:4f:a8:43:bb:0d:c3:7a:b4: 25:c9:b0:91:7b:e0:82:b1:fc:79:97:23:59:28:1e: 9b:94:c1:67:ff:70:45:c0:01:38:c7:0c:84:51:74: 17:d2:41:18:4d:ae:74:5a:4e:46:77:eb:2a:75:44: e2:37:b2:47:dd:48:af:89:12:95:6d:b5:f9:41:95: b5:31:27:ee:fa:4b:57:49:d7:6f:aa:69:9a:79:c5: e0:4c:9b:72:72:f2:f6:40:94:a6:02:ad:49:4e:ba: 8a:78:ca:a1:d1:6f:2b:41:da:2c:84:d5:91:c8:37: 35:e5:f1:8c:90:96:87:7d:b0:70:4d:77:3b:fd:52: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DC:86:7D:EA:23:4A:24:E3:2C:EF:68:EF:E4:B0:A0:34:BE:88:90 X509v3 Authority Key Identifier: keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:82:ad:a1:a3:18:3f:1b:da:53:dc:9b:89:a1:8a:73:db:82: 1b:09:16:e3:61:b2:16:72:2f:29:60:95:3f:c7:20:61:ea:27: d9:25:df:8a:31:46:5b:54:e9:d1:9c:1d:01:d3:c3:f4:ad:82: 24:2b:9a:6b:c4:4f:05:e5:f8:f4:f8:5b:be:88:3f:56:24:05: b2:97:e0:25:f6:d7:ab:25:06:00:64:5a:03:1a:1d:58:bd:a6: b9:e2:59:82:11:cb:1d:6e:63:3b:a8:41:a9:73:8b:fb:17:fd: 90:48:bd:af:18:54:13:10:04:7c:22:73:56:80:fe:9d:a9:89: 44:6f:26:90:4c:5e:4b:e5:d3:56:de:58:34:49:6c:83:12:df: 81:94:37:86:9c:a9:41:cc:bd:50:0f:19:a7:ab:6b:7d:1a:fd: 68:cf:19:9b:b8:87:6a:b6:f1:f3:0a:a7:16:d5:8c:ba:3c:e0: 3c:b2:8d:c7:71:32:d7:5e:5f:ea:f5:c3:0d:33:cf:4c:1f:02: 63:9f:44:e2:45:d1:7e:29:f1:d3:65:68:b9:a2:06:e9:1b:10: 37:b3:61:17:02:78:5e:d0:12:dd:7c:e2:ce:dd:5f:36:71:63: b3:c2:9c:21:bd:89:3e:e0:a4:28:9c:2d:f0:1f:e2:ed:43:32: 99:1e:bf:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxOfoND4rXuQv9809ISQbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4 YWE5YzEwHhcNMjYwMTEyMDgwMjA1WhcNMjYwMTEzMDgwMjA1WjAzMTEwLwYDVQQD EyhiOGRjODY3ZGVhMjM0YTI0ZTMyY2VmNjhlZmU0YjBhMDM0YmU4ODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI4AcZHfGBSFzlQyrsFQ/mmDNh+T 1yKka/APPlEBOLsvpKBH6CbmeFJfIzqdt/A3mlK3QrXxMLMEeApp73h8pPVIPHiE pPt8+P19sIfFqFcTN+bgPtQejjxvcpU6icCECS0qY7mkUcorqMQo7lqD0TJuSlgs VpzTPeI60k5wT6hDuw3DerQlybCRe+CCsfx5lyNZKB6blMFn/3BFwAE4xwyEUXQX 0kEYTa50Wk5Gd+sqdUTiN7JH3UiviRKVbbX5QZW1MSfu+ktXSddvqmmaecXgTJty cvL2QJSmAq1JTrqKeMqh0W8rQdoshNWRyDc15fGMkJaHfbBwTXc7/VKZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjchn3qI0ok4yzvaO/ksKA0voiQMB8GA1UdIwQY MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt YTllYTIwNTcwNDJiLzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoKtoaMY PxvaU9ybiaGKc9uCGwkW42GyFnIvKWCVP8cgYeon2SXfijFGW1Tp0ZwdAdPD9K2C JCuaa8RPBeX49Phbvog/ViQFspfgJfbXqyUGAGRaAxodWL2mueJZghHLHW5jO6hB qXOL+xf9kEi9rxhUExAEfCJzVoD+namJRG8mkExeS+XTVt5YNElsgxLfgZQ3hpyp Qcy9UA8Zp6trfRr9aM8Zm7iHarbx8wqnFtWMujzgPLKNx3Ey115f6vXDDTPPTB8C Y59E4kXRfinx02VouaIG6RsQN7NhFwJ4XtAS3Xzizt1fNnFjs8KcIb2JPuCkKJwt 8B/i7UMymR6/GA== -----END CERTIFICATE-----Generated at Mon Jan 12 10:19:29 2026 by rpki-client