This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json) Hash identifier: hOQu14VeoKjwMdquvjLOqezttUxCMoTDdEv6rKpvooM= Subject key identifier: FE:EF:6B:2C:C5:AD:56:31:D8:E5:9E:36:9D:FD:1A:44:BD:57:8F:0A Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Certificate serial: 019BFB403F7156787B66F60B9005F7FF8C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft Manifest number: 0C37 Signing time: Mon 26 Jan 2026 17:00:50 +0000 Manifest this update: Mon 26 Jan 2026 17:00:50 +0000 Manifest next update: Tue 27 Jan 2026 17:00:50 +0000 Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=) 2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: PJavlroIfwRoAfAeHng9hcK/SEAcFu6oNpZA8/1VXvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:3f:71:56:78:7b:66:f6:0b:90:05:f7:ff:8c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Validity Not Before: Jan 26 17:00:50 2026 GMT Not After : Jan 27 17:00:50 2026 GMT Subject: CN=feef6b2cc5ad5631d8e59e369dfd1a44bd578f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:8d:2c:d3:95:43:91:73:9a:90:7f:0f:b1: 78:ba:08:fd:66:0a:44:cd:be:80:70:f0:90:b0:1b: 66:e7:09:46:05:07:24:24:6f:fe:31:6a:b8:00:5b: 93:98:42:8e:c8:dc:46:16:0b:6f:40:12:92:4e:c4: 34:5f:43:24:7d:4a:95:f7:76:8f:49:5d:e3:fb:37: fb:17:bf:0e:8c:38:27:24:2c:67:7a:d1:2b:e5:96: dc:51:aa:19:06:51:a4:ee:26:18:38:dc:a2:73:47: c9:9c:8a:27:0e:9c:91:75:00:85:13:ae:64:90:a1: a6:22:95:1b:1d:ff:ad:c9:7a:28:97:f5:b2:81:b0: f3:c2:83:a2:ec:a4:3b:fb:3a:e8:48:c3:f4:b6:67: 8a:14:6e:4d:56:69:7e:61:9a:11:2b:84:7c:66:4b: 54:23:18:1a:f5:fb:20:23:bc:ae:d9:d3:28:78:c0: f1:bd:9a:9d:f0:cf:48:e7:bd:9b:f9:d2:58:66:19: 75:b6:54:d1:07:e2:12:2e:77:f6:22:63:b3:08:69: de:68:2a:ee:84:ff:42:a3:a1:75:40:08:b7:40:b5: 9e:73:d8:8f:f1:28:5a:7d:da:13:79:14:4d:d6:f1: 30:18:ff:9d:8d:81:0f:c2:7a:f3:87:cb:f3:23:12: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EF:6B:2C:C5:AD:56:31:D8:E5:9E:36:9D:FD:1A:44:BD:57:8F:0A X509v3 Authority Key Identifier: keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4f:d4:7c:24:3b:df:92:d7:1e:47:c0:07:c6:28:a4:30:13: 6e:c4:39:12:12:82:2c:25:7b:7d:d6:bf:55:3b:24:dc:84:66: c4:45:58:24:81:b0:cd:74:d9:b8:9f:27:0f:7d:b6:b5:f9:ef: a1:1a:1d:75:f5:34:32:be:14:27:7e:f0:ff:7c:e6:74:8d:25: 8b:9a:c4:79:82:19:65:af:2e:23:07:e7:22:c3:22:b4:ac:12: c1:e2:f9:cf:22:8a:1a:92:91:49:52:c5:f9:15:bc:e1:c8:c5: e5:dc:66:4d:2a:ad:d0:e2:34:11:ab:48:5b:e7:81:e1:8e:9b: 0f:29:48:49:06:58:14:d6:ef:fb:ab:e1:c5:92:ad:02:59:51: b6:5a:1f:88:ba:ce:60:45:ef:dd:06:b6:c6:af:63:b9:00:8e: 73:75:02:6b:89:2e:cd:40:9b:40:c6:ba:57:73:b6:54:92:a9: ff:cb:a2:24:17:2d:98:de:9e:04:f1:74:fd:3b:82:2a:1e:ac: 2a:e7:6c:87:d9:aa:a7:58:4d:0a:aa:2e:34:9a:be:c2:2d:dc: 09:7e:76:fc:52:31:aa:7a:0e:fe:8c:e6:2a:6d:c2:4c:a4:e4: 73:85:19:e7:ac:bb:d8:d6:c6:f2:dc:0f:29:ac:b2:e9:46:f9: a7:b4:8f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QD9xVnh7ZvYLkAX3/4ycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm Y2M1ZTIwHhcNMjYwMTI2MTcwMDUwWhcNMjYwMTI3MTcwMDUwWjAzMTEwLwYDVQQD EyhmZWVmNmIyY2M1YWQ1NjMxZDhlNTllMzY5ZGZkMWE0NGJkNTc4ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV6NLNOVQ5FzmpB/D7F4ugj9ZgpE zb6AcPCQsBtm5wlGBQckJG/+MWq4AFuTmEKOyNxGFgtvQBKSTsQ0X0MkfUqV93aP SV3j+zf7F78OjDgnJCxnetEr5ZbcUaoZBlGk7iYYONyic0fJnIonDpyRdQCFE65k kKGmIpUbHf+tyXool/WygbDzwoOi7KQ7+zroSMP0tmeKFG5NVml+YZoRK4R8ZktU Ixga9fsgI7yu2dMoeMDxvZqd8M9I572b+dJYZhl1tlTRB+ISLnf2ImOzCGneaCru hP9Co6F1QAi3QLWec9iP8ShafdoTeRRN1vEwGP+djYEPwnrzh8vzIxKIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7vayzFrVYx2OWeNp39GkS9V48KMB8GA1UdIwQY MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfE/UfCQ7 35LXHkfAB8YopDATbsQ5EhKCLCV7fda/VTsk3IRmxEVYJIGwzXTZuJ8nD322tfnv oRoddfU0Mr4UJ37w/3zmdI0li5rEeYIZZa8uIwfnIsMitKwSweL5zyKKGpKRSVLF +RW84cjF5dxmTSqt0OI0EatIW+eB4Y6bDylISQZYFNbv+6vhxZKtAllRtlofiLrO YEXv3Qa2xq9juQCOc3UCa4kuzUCbQMa6V3O2VJKp/8uiJBctmN6eBPF0/TuCKh6s Kudsh9mqp1hNCqouNJq+wi3cCX52/FIxqnoO/ozmKm3CTKTkc4UZ56y72NbG8twP Kayy6Ub5p7SPdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:44 2026 by rpki-client