This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json) Hash identifier: l3RbpCfy1UTWTLnphDiycb09PV9Vg8JrjczMa6In1Xw= Subject key identifier: 2A:8F:83:5F:9A:F2:01:DB:2D:95:52:01:D5:79:33:12:5B:FB:33:E9 Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0 Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0 Certificate serial: 019BF6514BC47F42E5F556CC6FFA5F21030E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:01:21 +0000 Manifest this update: Sun 25 Jan 2026 18:01:21 +0000 Manifest next update: Mon 26 Jan 2026 18:01:21 +0000 Files and hashes: 1: dz15OcBGpk_cfrn8xhk6BurTsy8.roa (hash: xEr9Xe5b8oihGpA9oK+zCpOpKPeDuBptibdAWRYh0iU=) 2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: BgUsW7PfNp9ashxw9ZYXiXr6CW+XHbpT8YnJtcHF1w0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:4b:c4:7f:42:e5:f5:56:cc:6f:fa:5f:21:03:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0 Validity Not Before: Jan 25 18:01:21 2026 GMT Not After : Jan 26 18:01:21 2026 GMT Subject: CN=2a8f835f9af201db2d955201d57933125bfb33e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:54:aa:33:ba:3f:79:95:cd:db:0c:cc:b5: 2d:7e:f6:f1:49:62:ec:f7:04:d4:a2:e8:72:ed:f6: 82:b4:b1:46:3e:d7:13:0e:34:00:6d:af:b6:b1:85: ef:d1:2d:4b:57:46:a6:7f:bc:02:4c:93:53:ea:b4: 2f:ad:1c:cc:30:82:f6:2f:e1:3d:d1:f0:8f:3f:67: 6a:16:c2:7d:a9:ef:e8:cd:6e:19:2b:dc:69:16:f2: 98:54:26:29:d1:e4:fe:15:a8:26:36:74:cf:4c:63: f6:28:bc:00:71:a0:6b:32:21:a5:8a:1f:9b:e8:bb: be:a5:6b:1b:3a:df:58:fa:10:4a:ce:3e:e8:a9:0b: 6d:17:5d:c2:97:0b:c1:3f:de:8f:59:f7:5a:7f:e2: fd:c1:cb:26:0e:f0:cd:4a:31:0d:10:5e:b7:9b:91: c2:bd:3d:5b:16:9f:d1:9e:dc:b7:fb:fa:50:cd:08: 4f:86:83:54:e2:d3:eb:68:7d:22:9f:ca:cc:5c:73: 05:62:e4:87:c3:cc:9a:26:cc:26:9a:48:89:fa:6b: d6:ef:c1:59:ce:50:c4:83:6b:37:5f:af:9c:39:fa: 2e:43:ba:f3:d7:46:89:5f:3f:88:a6:6c:92:2e:8e: 5e:3e:58:25:5d:c7:0a:24:30:71:44:f1:9f:71:a5: 34:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8F:83:5F:9A:F2:01:DB:2D:95:52:01:D5:79:33:12:5B:FB:33:E9 X509v3 Authority Key Identifier: keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:39:6d:a4:cb:1d:55:27:cc:a0:10:69:71:84:29:04:2a:6e: 0f:b7:61:65:6e:e0:b7:c8:d4:1a:6f:b7:5b:98:78:61:1e:ae: 29:0c:a9:90:6f:db:00:2e:48:15:e9:13:92:ae:16:97:04:2c: a5:cd:16:6e:15:1e:95:91:3f:61:ad:b7:63:b9:01:3f:ab:ac: 12:bb:05:1f:37:b5:b3:51:3b:62:82:87:9a:ce:56:df:e3:2e: 44:51:bf:b7:54:0e:8f:22:ec:eb:e1:b2:07:d1:64:e5:91:69: ce:f2:58:15:de:c3:13:ab:83:04:04:9c:32:10:9e:80:b8:57: 6e:8a:02:29:c4:e4:d0:c8:fd:3a:cc:16:79:69:28:4a:19:ac: 06:cc:b4:fa:9a:1e:1c:54:ac:04:f4:17:84:c0:e7:bb:95:aa: 37:17:d8:8f:ba:7a:da:cd:8d:bf:c7:b3:a4:35:98:b2:0b:c4: 54:5d:04:22:5f:44:e1:4c:a9:f1:da:6d:e0:e6:cf:4f:4c:d0: 0e:0a:7a:4e:07:62:31:80:f8:4f:2c:2b:0c:38:a1:5c:c5:22: c8:b3:65:13:41:88:05:a3:97:f8:71:c3:7b:44:8a:16:c3:9d: 1e:9a:f5:03:93:6b:42:e4:11:6c:60:0c:7f:10:4e:8a:25:ee: 2b:18:8d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UUvEf0Ll9VbMb/pfIQMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTBjNTkwNDRjODdlM2UyZGZhMTNjYmY5OTAyM2FlZTAx MmVmYTAwHhcNMjYwMTI1MTgwMTIxWhcNMjYwMTI2MTgwMTIxWjAzMTEwLwYDVQQD EygyYThmODM1ZjlhZjIwMWRiMmQ5NTUyMDFkNTc5MzMxMjViZmIzM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslZUqjO6P3mVzdsMzLUtfvbxSWLs 9wTUouhy7faCtLFGPtcTDjQAba+2sYXv0S1LV0amf7wCTJNT6rQvrRzMMIL2L+E9 0fCPP2dqFsJ9qe/ozW4ZK9xpFvKYVCYp0eT+FagmNnTPTGP2KLwAcaBrMiGlih+b 6Lu+pWsbOt9Y+hBKzj7oqQttF13ClwvBP96PWfdaf+L9wcsmDvDNSjENEF63m5HC vT1bFp/Rnty3+/pQzQhPhoNU4tPraH0in8rMXHMFYuSHw8yaJswmmkiJ+mvW78FZ zlDEg2s3X6+cOfouQ7rz10aJXz+IpmySLo5ePlglXccKJDBxRPGfcaU0LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqPg1+a8gHbLZVSAdV5MxJb+zPpMB8GA1UdIwQY MBaAFKDgxZBEyH4+LfoTy/mQI67gEu+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09ERmtFVElmajR0LWhQTC1aQWpydUFTNzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iMTU5MmQtM2EyMy00ZjQwLTgxYzgt MTYwMGI3NDJiNWRkLzEvb09ERmtFVElmajR0LWhQTC1aQWpydUFTNzZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9iMTU5MmQtM2EyMy00ZjQwLTgxYzgtMTYwMGI3NDJiNWRk LzEvb09ERmtFVElmajR0LWhQTC1aQWpydUFTNzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTltpMsd VSfMoBBpcYQpBCpuD7dhZW7gt8jUGm+3W5h4YR6uKQypkG/bAC5IFekTkq4WlwQs pc0WbhUelZE/Ya23Y7kBP6usErsFHze1s1E7YoKHms5W3+MuRFG/t1QOjyLs6+Gy B9Fk5ZFpzvJYFd7DE6uDBAScMhCegLhXbooCKcTk0Mj9OswWeWkoShmsBsy0+poe HFSsBPQXhMDnu5WqNxfYj7p62s2Nv8ezpDWYsgvEVF0EIl9E4Uyp8dpt4ObPT0zQ Dgp6TgdiMYD4TywrDDihXMUiyLNlE0GIBaOX+HHDe0SKFsOdHpr1A5NrQuQRbGAM fxBOiiXuKxiNKA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:48 2026 by rpki-client