This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json) Hash identifier: SV58zJA2BcbFVQB6syYyQWrfHSkMr1ZIjA2Nxtna4bk= Subject key identifier: 4C:A0:E2:4A:66:DF:EA:3D:F2:E9:78:47:24:3C:2A:65:62:13:D4:68 Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce Certificate serial: 019BFA6483C8981EA3667C423089E5F3B8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft Manifest number: 0907 Signing time: Mon 26 Jan 2026 13:00:49 +0000 Manifest this update: Mon 26 Jan 2026 13:00:49 +0000 Manifest next update: Tue 27 Jan 2026 13:00:49 +0000 Files and hashes: 1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: CQsBIXgkPt9On0j1cQ+Kd4gYf1K5w4DbI6APtWe+YwM=) 2: futCv-J21MxYYna1NlT0XMLEUxQ.roa (hash: Nuw/WTHENdY0hVuqEP9gOdFLaQ350WDyvFQ78Xtrdks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:83:c8:98:1e:a3:66:7c:42:30:89:e5:f3:b8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce Validity Not Before: Jan 26 13:00:49 2026 GMT Not After : Jan 27 13:00:49 2026 GMT Subject: CN=4ca0e24a66dfea3df2e97847243c2a656213d468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:d4:d6:54:26:0b:09:fd:d2:15:66:ec:bb: e0:c7:15:3b:76:92:f3:18:e3:76:93:7c:1b:de:12: ca:d2:e2:d4:b0:80:53:56:f3:c5:98:37:40:47:1f: 56:ba:e5:3d:2e:3b:b6:c0:7a:73:ca:31:c8:e8:30: 2a:43:d6:5e:15:e0:f7:7a:f6:31:8b:af:01:34:72: 99:e1:4b:c4:ad:29:dd:a3:3e:ab:12:0f:f1:06:b8: b4:f4:dd:c0:ba:f1:bc:ec:30:ec:1d:07:3d:00:86: 3e:ce:ad:73:e8:41:fe:d7:39:8f:bb:ef:43:57:9b: db:9b:cf:12:fe:3e:00:88:61:51:1b:38:35:4e:0b: 91:79:13:dd:e2:a5:92:aa:a0:b9:73:ea:b1:28:58: de:a1:ca:d9:06:1c:5b:13:02:0f:57:6f:9b:29:9a: bf:d4:b1:0d:32:85:8d:89:ee:93:32:a2:7c:2f:00: ab:fa:93:49:f6:f2:c5:ce:38:4e:1b:10:f9:bc:d5: 0c:c0:a3:64:1e:05:db:a5:66:98:99:9f:c6:03:94: ff:d9:cd:ca:97:85:1f:78:3c:22:ea:6f:b9:dd:58: 52:21:e8:68:16:4a:8f:e8:12:56:39:ea:0f:9c:6e: f6:e4:18:f3:89:c1:99:0a:42:84:d6:93:23:71:f6: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A0:E2:4A:66:DF:EA:3D:F2:E9:78:47:24:3C:2A:65:62:13:D4:68 X509v3 Authority Key Identifier: keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2e:8a:bb:36:12:9b:96:87:c2:6c:e6:39:cf:c4:1d:0a:1e: 94:ae:52:6a:a9:e0:79:fe:93:a5:14:ff:bc:29:fe:4f:df:c2: 5a:e4:54:60:1b:7b:03:70:32:6f:7d:b6:19:fe:12:01:37:e5: 23:da:5f:18:7d:e9:4f:fe:4a:52:a8:f1:54:24:01:fc:47:53: d7:a1:52:25:58:17:5b:78:1e:6c:3a:b9:12:cd:5e:6e:79:ee: 17:6d:c5:bf:dd:20:b4:99:4a:4d:0b:ff:83:e2:f4:9c:c4:66: 1f:f2:56:55:60:21:81:b8:f2:05:81:32:24:8f:9b:11:ef:29: a8:02:a2:8d:ec:37:95:cd:ae:42:05:97:b9:01:04:7d:c9:6d: db:9b:d5:32:38:9b:b2:f6:18:99:af:11:78:bc:fd:02:80:ea: cf:f5:52:67:01:75:69:68:82:62:3a:b5:62:63:96:2e:13:33: 2c:28:e2:9e:01:3c:3e:cc:40:88:82:43:d2:77:ae:19:18:b7: 3a:26:9a:b8:d3:06:91:1e:1d:6c:bb:e1:6c:43:43:44:94:80: b4:51:ae:de:d0:4b:af:78:d3:50:68:04:37:3e:98:d4:4e:e2: 31:7c:9c:b2:e2:54:e2:3a:df:0f:b0:13:25:7c:7d:63:9c:c8: b1:8c:0e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZIPImB6jZnxCMInl87i8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDI5ZWIwYmQ4NzAzYmUyZTVmMGFjY2MyODFiZjIyMTYw NGIwY2UwHhcNMjYwMTI2MTMwMDQ5WhcNMjYwMTI3MTMwMDQ5WjAzMTEwLwYDVQQD Eyg0Y2EwZTI0YTY2ZGZlYTNkZjJlOTc4NDcyNDNjMmE2NTYyMTNkNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb3U1lQmCwn90hVm7LvgxxU7dpLz GON2k3wb3hLK0uLUsIBTVvPFmDdARx9WuuU9Lju2wHpzyjHI6DAqQ9ZeFeD3evYx i68BNHKZ4UvErSndoz6rEg/xBri09N3AuvG87DDsHQc9AIY+zq1z6EH+1zmPu+9D V5vbm88S/j4AiGFRGzg1TguReRPd4qWSqqC5c+qxKFjeocrZBhxbEwIPV2+bKZq/ 1LENMoWNie6TMqJ8LwCr+pNJ9vLFzjhOGxD5vNUMwKNkHgXbpWaYmZ/GA5T/2c3K l4UfeDwi6m+53VhSIehoFkqP6BJWOeoPnG725BjzicGZCkKE1pMjcfauKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyg4kpm3+o98ul4RyQ8KmViE9RoMB8GA1UdIwQY MBaAFDlCnrC9hwO+Ll8KzMKBvyIWBLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMt ZjJjNDhmYWY3ZjNkLzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMtZjJjNDhmYWY3ZjNk LzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy6KuzYS m5aHwmzmOc/EHQoelK5Saqngef6TpRT/vCn+T9/CWuRUYBt7A3Ayb322Gf4SATfl I9pfGH3pT/5KUqjxVCQB/EdT16FSJVgXW3gebDq5Es1ebnnuF23Fv90gtJlKTQv/ g+L0nMRmH/JWVWAhgbjyBYEyJI+bEe8pqAKijew3lc2uQgWXuQEEfclt25vVMjib svYYma8ReLz9AoDqz/VSZwF1aWiCYjq1YmOWLhMzLCjingE8PsxAiIJD0neuGRi3 OiaauNMGkR4dbLvhbENDRJSAtFGu3tBLr3jTUGgENz6Y1E7iMXycsuJU4jrfD7AT JXx9Y5zIsYwOng== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:06 2026 by rpki-client