This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json) Hash identifier: +7hOo0ftl71C1FbCr6EpRWb89SxYLa50piJRM5qGHaY= Subject key identifier: AE:75:57:25:1C:A2:00:C2:9B:37:85:8C:31:04:5D:BA:07:7B:75:9F Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a Certificate serial: 019BF34FFF49F201D1A3CEEE4C1E38A729BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft Manifest number: 14CB Signing time: Sun 25 Jan 2026 04:01:04 +0000 Manifest this update: Sun 25 Jan 2026 04:01:04 +0000 Manifest next update: Mon 26 Jan 2026 04:01:04 +0000 Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=) 2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=) 3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=) 4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=) 5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=) 6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=) 7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=) 8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: Nd41EKxAl6x5t5nHUiEN+Cqdh8R04o+y54SkilvYXco=) 9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:ff:49:f2:01:d1:a3:ce:ee:4c:1e:38:a7:29:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a Validity Not Before: Jan 25 04:01:04 2026 GMT Not After : Jan 26 04:01:04 2026 GMT Subject: CN=ae7557251ca200c29b37858c31045dba077b759f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:aa:bc:2c:5c:94:53:87:6b:fd:8b:ed:e1: ef:9a:14:2f:4b:3c:0e:3e:28:3a:dd:60:3e:38:43: 49:eb:30:9e:32:fe:ea:b6:be:20:b6:48:14:54:13: 11:06:bb:33:ab:91:72:8c:ba:e8:c3:3d:44:1e:5d: 88:4b:de:ca:b1:67:b6:8c:5c:81:1b:0c:61:34:79: 83:3a:b4:92:20:49:57:ba:6b:51:f4:5c:ed:a4:f9: 59:a4:8e:fc:0a:62:38:0e:31:64:22:ea:54:88:8b: 69:0a:49:65:f2:31:34:8e:d2:ff:2c:9f:1a:cc:0b: c8:09:3a:ab:97:71:dc:6f:b9:eb:fa:a2:71:a9:0d: 7b:ed:22:22:95:ba:fa:d0:11:fe:5a:06:18:52:6d: a5:2b:2a:75:ad:e9:29:0c:76:be:9c:ba:56:ea:0d: c0:bb:1f:5a:ba:20:db:58:fb:79:3a:bc:86:1e:95: 99:9d:d3:af:97:c9:a8:d9:b4:c6:5d:de:97:ac:0d: b1:64:83:4d:4e:00:d8:bc:36:05:4f:31:70:7a:e7: be:2f:61:96:82:2d:93:3e:60:02:e0:dd:45:9b:2d: e1:4b:e2:72:13:f8:52:4c:62:4a:a6:e6:6f:6c:08: 11:e2:d4:8b:f0:4b:96:18:3f:15:45:ff:81:c1:be: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:75:57:25:1C:A2:00:C2:9B:37:85:8C:31:04:5D:BA:07:7B:75:9F X509v3 Authority Key Identifier: keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:81:43:06:55:06:8e:59:ca:d7:6a:31:e1:0e:4c:7b:ee:44: 27:36:9e:c3:32:a5:95:ea:b6:af:60:b1:4a:46:1d:5d:b7:c0: fa:46:91:85:52:e9:ba:32:93:a4:78:9b:f0:6a:f4:31:8c:16: ae:e4:09:2b:61:ce:9b:b9:e2:50:08:12:c0:77:84:01:b2:dc: 0b:f6:c7:da:2f:81:62:b9:88:14:65:00:09:91:f1:63:87:38: f6:90:2f:4d:85:8c:c2:af:a8:27:2c:36:e3:de:2c:55:5f:fb: 0e:d5:25:df:a6:b7:34:b3:3c:0f:e5:f1:92:2f:39:26:76:8d: f0:c6:2d:09:11:e8:99:29:bb:5f:b0:6a:f0:0d:6f:c0:f0:c3: 29:90:df:a7:de:ba:72:48:4c:21:fc:0f:15:ed:aa:3f:be:8e: eb:dc:27:c4:ba:7f:1b:d9:5b:a9:f7:85:1b:61:75:2b:43:c2: 55:23:3e:46:9a:22:84:98:8f:38:54:54:b4:8f:10:a5:49:76: 1f:1f:a7:0d:d5:90:89:cb:b8:dd:67:fd:6a:57:f7:0d:ad:f4: ee:b8:40:65:7f:6a:2c:3b:b0:b1:50:30:24:5f:3c:1d:9e:43: 5d:ee:33:69:6c:b8:2c:48:63:5b:04:39:95:cc:7a:3a:8e:df: e9:c6:f2:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT/9J8gHRo87uTB44pym+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5 NmM1M2EwHhcNMjYwMTI1MDQwMTA0WhcNMjYwMTI2MDQwMTA0WjAzMTEwLwYDVQQD EyhhZTc1NTcyNTFjYTIwMGMyOWIzNzg1OGMzMTA0NWRiYTA3N2I3NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYaqvCxclFOHa/2L7eHvmhQvSzwO Pig63WA+OENJ6zCeMv7qtr4gtkgUVBMRBrszq5FyjLrowz1EHl2IS97KsWe2jFyB GwxhNHmDOrSSIElXumtR9FztpPlZpI78CmI4DjFkIupUiItpCkll8jE0jtL/LJ8a zAvICTqrl3Hcb7nr+qJxqQ177SIilbr60BH+WgYYUm2lKyp1rekpDHa+nLpW6g3A ux9auiDbWPt5OryGHpWZndOvl8mo2bTGXd6XrA2xZINNTgDYvDYFTzFweue+L2GW gi2TPmAC4N1Fmy3hS+JyE/hSTGJKpuZvbAgR4tSL8EuWGD8VRf+Bwb5pHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK51VyUcogDCmzeFjDEEXboHe3WfMB8GA1UdIwQY MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4FDBlUG jlnK12ox4Q5Me+5EJzaewzKlleq2r2CxSkYdXbfA+kaRhVLpujKTpHib8Gr0MYwW ruQJK2HOm7niUAgSwHeEAbLcC/bH2i+BYrmIFGUACZHxY4c49pAvTYWMwq+oJyw2 494sVV/7DtUl36a3NLM8D+Xxki85JnaN8MYtCRHomSm7X7Bq8A1vwPDDKZDfp966 ckhMIfwPFe2qP76O69wnxLp/G9lbqfeFG2F1K0PCVSM+RpoihJiPOFRUtI8QpUl2 Hx+nDdWQicu43Wf9alf3Da307rhAZX9qLDuwsVAwJF88HZ5DXe4zaWy4LEhjWwQ5 lcx6Oo7f6cbyQA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:50:17 2026 by rpki-client