This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json) Hash identifier: 1/npHAc22aDPnbPA/W51NA0ZzwHSSs1hRjG+OhzO0ek= Subject key identifier: 45:51:C9:2D:88:16:F6:94:D4:82:4C:1B:B9:38:51:1D:90:32:95:8C Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Certificate serial: 019BF619AA5047E3E8FE40440B192C4E963A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 17:00:35 +0000 Manifest this update: Sun 25 Jan 2026 17:00:35 +0000 Manifest next update: Mon 26 Jan 2026 17:00:35 +0000 Files and hashes: 1: j9ww1jAwapmyeB5Mda6akaTrn0o.roa (hash: UwM+UovIswrmaEoszqiNrb1qkN6U8QlTDAf/jDU0nmE=) 2: k45hDQDW5QvPS-wSqExMPGV9b9E.roa (hash: rZfIBJAHm9qJyp7jxnj7VeKyOR2YVXy0cyWacYrYiYI=) 3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: ch9hBknaRAm99np/tk188yhuoLPQDV3DVIdKw8JSgrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:aa:50:47:e3:e8:fe:40:44:0b:19:2c:4e:96:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Validity Not Before: Jan 25 17:00:35 2026 GMT Not After : Jan 26 17:00:35 2026 GMT Subject: CN=4551c92d8816f694d4824c1bb938511d9032958c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:5a:60:80:c0:24:32:6d:2e:c8:1e:23:ed: eb:14:b3:a8:b8:c9:ff:8e:e5:8e:3e:d9:14:d9:d0: 86:60:ff:b5:8b:15:d2:2e:a3:07:01:d8:9c:86:cc: 33:3a:0d:2b:fc:c9:5d:d0:43:fb:41:42:1b:db:b7: ff:d6:0f:a8:6a:5f:86:b4:4f:f8:d5:86:dd:9a:96: d4:05:69:be:0d:3c:82:83:5c:da:7c:3b:1b:e0:96: a2:ec:ff:65:1a:7e:42:5b:1a:ec:e0:9a:d6:7f:69: 6f:bb:3a:7c:72:77:0f:36:a2:00:89:34:ae:b6:c5: a3:b4:75:71:9b:bb:2e:77:26:af:18:77:7d:4b:93: 4f:54:d2:2b:81:7f:34:ae:54:6a:fa:40:ad:28:85: 4c:15:76:24:41:c1:b2:98:3e:d8:e1:c7:8e:62:95: bb:b2:7e:63:fd:4b:7a:35:1d:82:2b:f9:5a:17:dd: 0d:51:54:37:81:bf:35:28:44:c6:ca:ad:a3:20:91: 88:62:7e:80:65:e3:46:db:0a:67:b6:3e:7d:8c:77: f9:96:de:67:3f:db:5d:e5:11:1c:cf:35:c6:e8:94: e8:96:60:22:e6:a2:cf:a3:9c:94:84:4e:6f:d2:d1: a1:53:70:c4:09:ef:36:20:f5:56:65:3f:75:f6:4b: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:51:C9:2D:88:16:F6:94:D4:82:4C:1B:B9:38:51:1D:90:32:95:8C X509v3 Authority Key Identifier: keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:f4:20:22:e4:d4:b3:68:28:d7:4c:8b:98:f0:62:34:2d: 7a:37:0a:77:d0:40:61:89:1b:ff:35:33:ed:fd:5f:1a:5d:af: b2:26:f5:75:0a:8f:dc:4d:12:10:41:0c:51:3c:2c:56:77:5e: c1:6d:14:c0:23:f3:8f:32:b4:28:3f:63:25:a2:41:4d:75:14: 96:63:65:ff:60:dd:04:49:56:c2:07:15:5e:d0:88:2a:04:cd: 88:e0:47:10:67:44:98:2c:d1:ab:6a:58:12:3a:4b:b4:17:45: 1b:b5:7d:4d:c0:2a:f5:3d:d9:96:f5:15:c8:d8:87:1e:0b:13: 28:e6:c1:84:85:49:18:d3:1d:6e:8b:75:d8:5b:ee:c5:8e:cb: c3:38:54:95:19:7f:a9:bb:f8:3b:2c:61:1d:76:8d:8b:e7:2d: a1:fb:1d:20:81:1e:8a:0f:a4:d8:74:4d:0e:6e:9a:80:43:c4: 5f:4d:b5:4f:77:0f:7e:37:b1:95:cf:f0:77:88:8b:18:dc:0d: b4:74:ff:99:11:39:ea:7c:e2:be:e2:86:7f:84:bb:6b:f7:7d: 44:1d:71:ea:b2:af:3b:84:02:d2:f2:88:62:f6:fc:ab:91:ea: 1d:01:74:cf:48:02:74:89:28:67:ca:2b:9b:48:13:66:2f:3f: 1f:90:27:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GapQR+Po/kBECxksTpY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5 OWVhMzEwHhcNMjYwMTI1MTcwMDM1WhcNMjYwMTI2MTcwMDM1WjAzMTEwLwYDVQQD Eyg0NTUxYzkyZDg4MTZmNjk0ZDQ4MjRjMWJiOTM4NTExZDkwMzI5NThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AxaYIDAJDJtLsgeI+3rFLOouMn/ juWOPtkU2dCGYP+1ixXSLqMHAdichswzOg0r/Mld0EP7QUIb27f/1g+oal+GtE/4 1YbdmpbUBWm+DTyCg1zafDsb4Jai7P9lGn5CWxrs4JrWf2lvuzp8cncPNqIAiTSu tsWjtHVxm7sudyavGHd9S5NPVNIrgX80rlRq+kCtKIVMFXYkQcGymD7Y4ceOYpW7 sn5j/Ut6NR2CK/laF90NUVQ3gb81KETGyq2jIJGIYn6AZeNG2wpntj59jHf5lt5n P9td5REczzXG6JTolmAi5qLPo5yUhE5v0tGhU3DECe82IPVWZT919kuZqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVRyS2IFvaU1IJMG7k4UR2QMpWMMB8GA1UdIwQY MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt NjVmODI0N2ZmYTkxLzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMX0ICLk 1LNoKNdMi5jwYjQtejcKd9BAYYkb/zUz7f1fGl2vsib1dQqP3E0SEEEMUTwsVnde wW0UwCPzjzK0KD9jJaJBTXUUlmNl/2DdBElWwgcVXtCIKgTNiOBHEGdEmCzRq2pY EjpLtBdFG7V9TcAq9T3ZlvUVyNiHHgsTKObBhIVJGNMdbot12FvuxY7LwzhUlRl/ qbv4OyxhHXaNi+ctofsdIIEeig+k2HRNDm6agEPEX021T3cPfjexlc/wd4iLGNwN tHT/mRE56nzivuKGf4S7a/d9RB1x6rKvO4QC0vKIYvb8q5HqHQF0z0gCdIkoZ8or m0gTZi8/H5An8g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:45 2026 by rpki-client