This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: KE1o/j/AaZPSQRgnX04mfulARgU4PW6kqRea5SpGA6g= Subject key identifier: 14:D5:91:A5:29:F5:9B:23:B2:68:43:5A:CB:4F:D2:19:15:BD:18:8D Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019BF6BF640008A5C2B9C4CF03334E0E11D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 1528 Signing time: Sun 25 Jan 2026 20:01:36 +0000 Manifest this update: Sun 25 Jan 2026 20:01:36 +0000 Manifest next update: Mon 26 Jan 2026 20:01:36 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: 5fvx1Di6jjxp23betiX7GLxYdfbkskQY2Bk59YFCTKw=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:64:00:08:a5:c2:b9:c4:cf:03:33:4e:0e:11:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jan 25 20:01:36 2026 GMT Not After : Jan 26 20:01:36 2026 GMT Subject: CN=14d591a529f59b23b268435acb4fd21915bd188d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:d0:e9:61:44:63:f4:fa:9f:8b:8f:5b:22: e2:23:0b:ba:e8:7b:c4:d0:2a:98:de:f7:bd:52:e1: 98:44:75:07:df:72:42:29:d3:7f:5c:3e:18:75:f7: d0:96:72:e1:11:ac:31:4c:ef:f5:cd:cd:92:38:80: e9:f5:00:5e:0b:22:d3:81:e7:3b:50:c2:02:d9:7e: bf:af:7d:29:fa:de:b7:c2:13:8e:7c:5b:a5:d3:2e: 42:c5:1b:f1:fe:68:d9:cd:ae:5e:b7:c2:97:1b:a9: 5e:eb:ee:8c:db:4e:25:92:aa:a1:0b:fd:cb:5e:a9: f7:50:ec:f7:12:25:c8:f7:67:ec:41:c3:d1:0c:c1: 6c:13:19:03:04:f3:9a:ba:90:cf:c8:0f:8f:78:5f: d9:3a:2b:b4:ef:69:3b:27:b6:86:71:1c:31:a7:80: c0:28:f4:cd:76:15:72:73:01:19:67:03:fc:53:72: d2:ae:5d:7a:83:a4:f7:30:b4:f4:58:a9:a7:10:9a: b9:54:3a:7d:4f:0d:4d:05:e2:58:f5:63:79:a4:9e: a3:75:6a:31:47:ef:72:33:d6:62:6e:7a:67:3a:8f: 3f:7f:a5:1b:fd:94:ee:af:d5:ce:b7:b2:12:ba:85: 50:e8:2a:aa:5e:08:99:88:71:a1:fd:e9:ac:b8:a4: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:91:A5:29:F5:9B:23:B2:68:43:5A:CB:4F:D2:19:15:BD:18:8D X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:72:08:b3:da:e1:9d:96:16:0b:a0:ec:e3:c9:92:27:01:46: 60:3b:b5:a4:9d:44:c5:f4:be:2d:90:21:83:9d:14:89:dc:64: f6:27:54:27:b9:9d:c9:00:4a:4f:df:4c:88:31:38:61:dd:e1: c6:3d:0c:27:27:8d:04:a8:fd:d9:d7:96:5d:d7:eb:e3:35:26: 47:37:5d:a5:09:e2:6b:14:f4:89:eb:37:04:0f:1e:cf:dc:27: ac:98:41:7f:89:6d:19:06:37:eb:fe:94:6b:4d:b2:69:84:2a: 3f:bd:30:74:92:cf:2e:30:e2:9f:91:42:6b:db:b6:8f:43:29: d0:0f:f7:88:18:02:fd:62:75:fd:c7:67:ec:cd:4d:1a:a7:4a: d2:e2:56:1d:d1:c1:08:d6:c8:e5:d4:1c:4a:c8:63:29:95:30: 7e:a0:2e:6a:f7:41:50:b9:f6:8d:e8:16:7e:e3:6a:7e:f9:2a: 05:f8:cc:91:bd:d7:45:d0:21:59:d2:ce:33:2f:72:4f:bf:71: a5:5b:81:71:4d:fb:4c:f7:d6:ee:87:ee:06:c2:ae:6f:c9:fb: 16:53:56:f8:6a:fa:e9:18:01:9c:43:fc:13:1e:f3:2f:5f:91: 5a:5b:f2:4c:d5:f0:74:8f:c9:bb:bd:bc:fe:8d:b2:e6:55:06: 8b:1c:c3:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v2QACKXCucTPAzNODhHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMTI1MjAwMTM2WhcNMjYwMTI2MjAwMTM2WjAzMTEwLwYDVQQD EygxNGQ1OTFhNTI5ZjU5YjIzYjI2ODQzNWFjYjRmZDIxOTE1YmQxODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT7Q6WFEY/T6n4uPWyLiIwu66HvE 0CqY3ve9UuGYRHUH33JCKdN/XD4YdffQlnLhEawxTO/1zc2SOIDp9QBeCyLTgec7 UMIC2X6/r30p+t63whOOfFul0y5CxRvx/mjZza5et8KXG6le6+6M204lkqqhC/3L Xqn3UOz3EiXI92fsQcPRDMFsExkDBPOaupDPyA+PeF/ZOiu072k7J7aGcRwxp4DA KPTNdhVycwEZZwP8U3LSrl16g6T3MLT0WKmnEJq5VDp9Tw1NBeJY9WN5pJ6jdWox R+9yM9ZibnpnOo8/f6Ub/ZTur9XOt7ISuoVQ6CqqXgiZiHGh/emsuKSc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTVkaUp9ZsjsmhDWstP0hkVvRiNMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXIIs9rh nZYWC6Ds48mSJwFGYDu1pJ1ExfS+LZAhg50Uidxk9idUJ7mdyQBKT99MiDE4Yd3h xj0MJyeNBKj92deWXdfr4zUmRzddpQniaxT0ies3BA8ez9wnrJhBf4ltGQY36/6U a02yaYQqP70wdJLPLjDin5FCa9u2j0Mp0A/3iBgC/WJ1/cdn7M1NGqdK0uJWHdHB CNbI5dQcSshjKZUwfqAuavdBULn2jegWfuNqfvkqBfjMkb3XRdAhWdLOMy9yT79x pVuBcU37TPfW7ofuBsKub8n7FlNW+Gr66RgBnEP8Ex7zL1+RWlvyTNXwdI/Ju728 /o2y5lUGixzDvA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:51:48 2026 by rpki-client