This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json) Hash identifier: YgjkWST4PwKFBMxiTk9rG9tPyJaENV0eSstIObZPkOo= Subject key identifier: 95:47:3B:BB:B3:7C:66:BA:3C:2B:C1:D5:C5:E3:71:29:6D:25:3C:5D Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Certificate serial: 019BF3F4FF98D133C4ECA9FDDD271712BC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 07:01:18 +0000 Manifest this update: Sun 25 Jan 2026 07:01:18 +0000 Manifest next update: Mon 26 Jan 2026 07:01:18 +0000 Files and hashes: 1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=) 2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=) 3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=) 4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 1Er8PDpAbJhwtEJzadysVntst4vkoQNl5ByDrYbV500=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:ff:98:d1:33:c4:ec:a9:fd:dd:27:17:12:bc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Validity Not Before: Jan 25 07:01:18 2026 GMT Not After : Jan 26 07:01:18 2026 GMT Subject: CN=95473bbbb37c66ba3c2bc1d5c5e371296d253c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:5a:f5:0e:25:9e:4c:98:89:78:0b:17:91: 85:fa:a3:c8:21:60:b6:83:6c:d4:d8:ec:1f:4c:22: a0:a9:93:2f:b0:da:05:58:70:db:03:e7:6a:4c:6f: 27:40:b5:0b:15:8c:4b:7c:34:73:c4:00:07:c0:0c: 16:75:68:b5:7a:7a:64:46:6b:aa:8c:df:c9:77:3b: 2a:ab:19:3a:cf:ce:d6:26:05:ba:ca:9b:3a:68:fb: b4:5b:65:99:94:e7:8c:c7:8c:6c:2f:78:92:fd:d3: 99:a0:a1:01:7c:75:fb:d7:d5:77:4b:00:17:1b:82: 0b:eb:18:d9:30:32:6c:62:32:7e:a2:5a:a3:19:b0: 60:dc:32:cf:fd:0a:82:28:7f:9e:06:a1:53:2d:8a: df:55:a2:df:35:0c:ff:bb:2f:85:13:82:58:01:c5: 87:5f:70:e5:67:42:dd:e3:bf:1a:a1:09:7d:d6:93: be:f0:42:16:e0:df:84:98:2f:c6:a8:e5:49:c2:1f: 3d:54:0a:9a:ad:c6:a9:ae:c6:eb:69:ab:d9:1c:3d: 2e:65:af:13:4d:bc:45:e8:7d:55:91:6e:e4:d5:8d: a6:24:e7:b0:fa:f8:66:30:d8:15:05:d5:ff:48:84: a7:d3:3e:5d:e0:42:c9:6a:47:31:fa:f0:c7:6c:1b: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:47:3B:BB:B3:7C:66:BA:3C:2B:C1:D5:C5:E3:71:29:6D:25:3C:5D X509v3 Authority Key Identifier: keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:13:2b:cc:64:f4:2c:9d:16:1c:88:8e:91:28:6e:39:aa:3d: 2a:63:18:c9:8e:91:b4:d4:5e:96:80:1c:f9:62:67:5c:da:78: 1a:4c:d3:d2:e7:a3:e0:ef:fa:0d:3e:05:9a:57:a0:0f:0a:6e: 56:0f:cc:fc:fa:6f:0f:b0:71:17:d0:39:6f:b9:99:07:ec:3e: 2e:b6:ed:2c:da:f7:23:42:ee:cd:4b:3f:9d:ad:aa:e9:55:07: 56:9f:01:95:f0:ea:4b:de:b9:59:8e:6b:d8:b9:a4:93:a5:af: b6:fc:0e:0e:ed:d2:91:2c:24:a8:bc:d8:43:91:79:40:38:2f: 8f:d3:d3:8d:3d:c4:87:c9:cd:f2:e0:63:58:3a:41:8d:88:7f: 3d:57:97:ea:51:32:4f:79:df:c8:82:1a:e7:5b:40:18:0f:0e: d1:23:57:d0:66:a0:a6:49:06:25:3f:3c:8c:62:cb:73:7f:7f: 91:f9:00:d2:cc:3a:af:2f:05:e3:34:0b:e1:c5:fa:5d:58:97: c6:17:66:8c:1c:e3:d2:9e:37:b3:92:be:5a:53:82:d2:8d:a8: 88:40:24:05:a4:a8:42:5f:87:83:0d:9d:63:b9:77:8e:1e:3e: f7:32:2e:0e:12:a9:0f:e5:67:ca:28:ab:f2:72:97:47:0f:70: 16:77:fc:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9P+Y0TPE7Kn93ScXErwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1 ODEzOTAwHhcNMjYwMTI1MDcwMTE4WhcNMjYwMTI2MDcwMTE4WjAzMTEwLwYDVQQD Eyg5NTQ3M2JiYmIzN2M2NmJhM2MyYmMxZDVjNWUzNzEyOTZkMjUzYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwNa9Q4lnkyYiXgLF5GF+qPIIWC2 g2zU2OwfTCKgqZMvsNoFWHDbA+dqTG8nQLULFYxLfDRzxAAHwAwWdWi1enpkRmuq jN/Jdzsqqxk6z87WJgW6yps6aPu0W2WZlOeMx4xsL3iS/dOZoKEBfHX719V3SwAX G4IL6xjZMDJsYjJ+olqjGbBg3DLP/QqCKH+eBqFTLYrfVaLfNQz/uy+FE4JYAcWH X3DlZ0Ld478aoQl91pO+8EIW4N+EmC/GqOVJwh89VAqarcaprsbraavZHD0uZa8T TbxF6H1VkW7k1Y2mJOew+vhmMNgVBdX/SISn0z5d4ELJakcx+vDHbBvRPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVHO7uzfGa6PCvB1cXjcSltJTxdMB8GA1UdIwQY MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1 LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxMrzGT0 LJ0WHIiOkShuOao9KmMYyY6RtNReloAc+WJnXNp4GkzT0uej4O/6DT4FmlegDwpu Vg/M/PpvD7BxF9A5b7mZB+w+LrbtLNr3I0LuzUs/na2q6VUHVp8BlfDqS965WY5r 2Lmkk6WvtvwODu3SkSwkqLzYQ5F5QDgvj9PTjT3Eh8nN8uBjWDpBjYh/PVeX6lEy T3nfyIIa51tAGA8O0SNX0GagpkkGJT88jGLLc39/kfkA0sw6ry8F4zQL4cX6XViX xhdmjBzj0p43s5K+WlOC0o2oiEAkBaSoQl+Hgw2dY7l3jh4+9zIuDhKpD+Vnyiir 8nKXRw9wFnf8hA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:46 2026 by rpki-client