This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json) Hash identifier: nhSyP7DtPPnnIk8/QxS5a8g1jON+ypMIdUENKaG7W74= Subject key identifier: 6F:F4:9A:2E:19:7A:D6:BF:49:E6:38:18:CA:91:F2:69:10:FB:F3:94 Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624 Certificate serial: 019BF61A298D6406BBFC6651FE7A1F04D03F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft Manifest number: 0BD2 Signing time: Sun 25 Jan 2026 17:01:08 +0000 Manifest this update: Sun 25 Jan 2026 17:01:08 +0000 Manifest next update: Mon 26 Jan 2026 17:01:08 +0000 Files and hashes: 1: asyZDaQ-XW7-4t0bK9m3pWvFWkQ.roa (hash: MJ3PLYemtybhNz0UiINpuNk3w+GLF2ZOrUhy5GVte4o=) 2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: lD0heVAYO9XyQLOLVRLVH4ziTNPLoMEBW0xDlVEtVM8=) 3: zRqtOZF-gQSY1lw46NbjxTdegwo.roa (hash: XNy6oMhww9HHcF0MTFIo/vS5TPp+j3NibXiN6cMPZe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:29:8d:64:06:bb:fc:66:51:fe:7a:1f:04:d0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624 Validity Not Before: Jan 25 17:01:08 2026 GMT Not After : Jan 26 17:01:08 2026 GMT Subject: CN=6ff49a2e197ad6bf49e63818ca91f26910fbf394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:b8:04:0a:57:6b:b5:40:a6:f8:1b:74:96: 88:8e:99:b2:19:43:dc:5d:3b:51:0a:c2:3c:7b:f4: 2a:1b:0d:b9:30:6b:c7:f9:a1:e3:87:bc:7e:1c:e8: 35:38:ba:cb:cf:4b:e8:5e:f2:7f:69:9a:bd:ea:45: 66:57:cc:72:1c:9c:5c:48:d5:b9:64:ce:25:12:40: 78:9e:ba:9e:a7:d8:93:cc:28:ea:b0:d3:2c:32:dc: a8:20:9b:2e:70:c8:1a:a8:9e:57:26:d9:42:52:af: 50:af:65:5b:90:61:41:4b:25:f0:9f:d0:46:70:9c: 5e:7c:38:73:eb:89:e3:91:82:a2:3c:b5:c3:4c:bc: d4:dc:3b:24:b8:06:b7:df:30:a2:1b:cc:dc:93:61: c5:45:fb:81:04:20:84:0f:e8:2d:86:52:43:58:00: 08:4a:47:da:ed:59:2b:ae:d8:ea:9b:54:f5:08:39: 83:17:d6:ec:e3:0f:ab:00:69:40:11:1c:fa:58:9d: 6d:06:1c:e6:d4:1d:61:6b:2e:38:37:68:19:1c:da: 3f:9d:9b:c1:8d:34:6a:b2:f7:1b:7d:c2:22:8d:67: 94:3e:1d:4a:94:2b:5b:cf:cc:5d:b1:5f:64:9b:fd: 1f:8d:10:f9:20:0d:7f:2e:b9:29:27:1b:e2:e1:3a: 35:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F4:9A:2E:19:7A:D6:BF:49:E6:38:18:CA:91:F2:69:10:FB:F3:94 X509v3 Authority Key Identifier: keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b9:ea:ae:5f:9d:0e:24:ce:86:9a:94:be:e6:6a:dc:31:e2: a4:f2:eb:f6:f8:d7:9c:73:74:cc:2f:27:29:83:81:b0:9f:7c: ce:56:27:06:a6:56:b4:64:f3:a8:21:f7:48:da:1e:1f:b1:39: b9:7a:dc:93:5d:2e:23:37:70:65:2c:a1:bc:17:25:b3:06:e9: 50:fc:9f:ee:f5:93:22:7f:9a:9f:d3:c6:88:96:61:e4:23:78: fe:0b:2a:f9:6e:bc:3f:be:a0:a5:6f:44:1b:9e:75:bf:f3:7e: ff:2f:a6:99:22:a0:91:13:d5:62:7c:ac:27:45:88:d2:be:e8: 30:7b:03:7a:bf:ce:77:c4:b1:4f:e4:7f:17:b0:95:ab:f3:e0: 88:4f:c4:12:a5:8b:81:ea:a9:6c:f1:0e:87:32:92:cc:c4:11: dd:21:5d:09:dc:60:3f:10:69:f1:73:9b:86:11:51:51:95:71: 3b:15:62:7b:ff:12:06:91:de:d9:00:0e:c5:ba:2f:a6:bb:24: 8b:f2:1e:9b:3c:65:5e:57:9b:33:e8:0a:80:44:6c:41:78:36: ea:a0:56:c3:96:7f:70:cb:2f:22:46:65:e8:82:cc:ef:3b:e5: 30:20:2f:b7:19:1c:14:97:36:77:c0:18:04:0e:15:58:b0:ce: 7f:e4:e8:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GimNZAa7/GZR/nofBNA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz Y2M2MjQwHhcNMjYwMTI1MTcwMTA4WhcNMjYwMTI2MTcwMTA4WjAzMTEwLwYDVQQD Eyg2ZmY0OWEyZTE5N2FkNmJmNDllNjM4MThjYTkxZjI2OTEwZmJmMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPO4BApXa7VApvgbdJaIjpmyGUPc XTtRCsI8e/QqGw25MGvH+aHjh7x+HOg1OLrLz0voXvJ/aZq96kVmV8xyHJxcSNW5 ZM4lEkB4nrqep9iTzCjqsNMsMtyoIJsucMgaqJ5XJtlCUq9Qr2VbkGFBSyXwn9BG cJxefDhz64njkYKiPLXDTLzU3DskuAa33zCiG8zck2HFRfuBBCCED+gthlJDWAAI Skfa7Vkrrtjqm1T1CDmDF9bs4w+rAGlAERz6WJ1tBhzm1B1hay44N2gZHNo/nZvB jTRqsvcbfcIijWeUPh1KlCtbz8xdsV9km/0fjRD5IA1/LrkpJxvi4To11wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/0mi4Zeta/SeY4GMqR8mkQ+/OUMB8GA1UdIwQY MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt NjUwOTZkYmNhYzMwLzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrnqrl+d DiTOhpqUvuZq3DHipPLr9vjXnHN0zC8nKYOBsJ98zlYnBqZWtGTzqCH3SNoeH7E5 uXrck10uIzdwZSyhvBclswbpUPyf7vWTIn+an9PGiJZh5CN4/gsq+W68P76gpW9E G551v/N+/y+mmSKgkRPVYnysJ0WI0r7oMHsDer/Od8SxT+R/F7CVq/PgiE/EEqWL geqpbPEOhzKSzMQR3SFdCdxgPxBp8XObhhFRUZVxOxVie/8SBpHe2QAOxbovprsk i/IemzxlXlebM+gKgERsQXg26qBWw5Z/cMsvIkZl6ILM7zvlMCAvtxkcFJc2d8AY BA4VWLDOf+To8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:21 2026 by rpki-client