This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json) Hash identifier: 65882kEda+WqRefuLvxfSndcjfa1W6dSrC+kQh/Ka1w= Subject key identifier: 9F:4C:1E:06:F4:31:A0:9C:5D:A9:47:A6:BD:3B:8A:76:7E:16:0E:69 Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55 Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955 Certificate serial: 019BF507193711D2C49BF02082A016D9FF37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 12:00:41 +0000 Manifest this update: Sun 25 Jan 2026 12:00:41 +0000 Manifest next update: Mon 26 Jan 2026 12:00:41 +0000 Files and hashes: 1: 1fdoYbF1BlY10AtHX0oyATlegZU.roa (hash: ScmG+2ZtY9JeVcBqU02B8s2PL2hBc09415DNXsVH6S4=) 2: Kfl3pnk4WRj9Z0Qy6749dOLgU38.roa (hash: W89Dd5nFnJf5pZ0zuNV80AiSYR5AN7HLCE+G+TMesdY=) 3: eibg4ZEnhDAF0BIGFxRMgi-8alw.roa (hash: K0SZCBFUjjQRjunsDhj0Z17K3KIWoaFscZhyHqRSICA=) 4: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: z6I/3llJ1Fw3SCL0MoyDArto0z2TmsHrlIFSiu2k/rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:19:37:11:d2:c4:9b:f0:20:82:a0:16:d9:ff:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955 Validity Not Before: Jan 25 12:00:41 2026 GMT Not After : Jan 26 12:00:41 2026 GMT Subject: CN=9f4c1e06f431a09c5da947a6bd3b8a767e160e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:86:76:ad:16:24:71:75:6c:99:29:f6:fc: d2:d2:81:18:8a:87:0c:c4:9f:22:cd:28:93:f5:34: 82:1d:25:6a:59:12:26:95:70:aa:93:21:d6:e7:a5: d4:6a:7e:6e:07:79:7c:9a:4c:a2:be:0f:7d:e5:34: ce:c1:93:70:2a:24:22:9a:2b:fa:1f:28:39:d4:57: f1:46:8f:0f:f6:88:47:39:13:b8:e7:2e:53:0e:44: e6:0d:d9:93:4a:f6:7d:2b:5d:c9:0a:0d:b5:7b:79: eb:ae:a7:56:26:e5:9a:73:9e:c1:96:a8:41:20:d3: b0:20:46:b7:a8:0b:12:6d:a5:36:82:56:cb:19:79: 64:d6:64:c4:de:42:ad:53:81:85:11:f2:d9:83:32: 34:fe:a1:1b:c1:da:5e:5f:93:3f:6d:f9:d5:c8:b1: e1:82:32:a3:6d:18:ba:c5:b0:64:ff:19:4c:be:51: e8:68:6a:ae:61:c5:7b:b3:18:1c:db:50:97:9a:69: c9:b2:91:de:19:05:d5:2e:14:ba:b6:ff:b7:49:63: c0:40:64:33:ed:bb:49:02:57:01:1c:10:af:74:4e: 06:7c:6f:74:02:15:6f:30:b9:5a:aa:a3:80:1d:fe: bf:7f:cf:ee:ed:9f:c0:03:ef:f6:35:22:ec:fd:af: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4C:1E:06:F4:31:A0:9C:5D:A9:47:A6:BD:3B:8A:76:7E:16:0E:69 X509v3 Authority Key Identifier: keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c6:6f:4e:19:f5:8e:45:8b:f9:42:62:86:3d:35:44:f6:1d: c5:ff:3e:7b:5d:a6:d2:ef:8f:03:34:07:b2:9d:8f:d4:45:70: d1:6b:15:29:0f:9a:48:9e:2d:56:e4:5c:be:74:47:02:e2:55: b6:73:da:cd:82:08:9a:f6:a5:b0:c6:2e:8c:b8:70:e5:93:54: f5:4d:32:e3:27:85:ec:3d:af:e7:1b:fd:b7:47:41:e5:51:64: fa:5d:d9:a4:74:18:10:d0:f1:9d:f9:c6:76:bc:20:f0:a8:8e: d2:c8:7e:bf:76:3e:4e:e7:7c:bb:8b:25:55:66:5a:46:85:46: 3e:8b:c1:15:70:05:54:06:78:41:3d:0d:98:9a:d5:08:19:58: cd:00:db:9a:f8:1d:0d:c7:f3:7f:dc:7c:47:6a:8a:a3:2f:d2: 7e:95:21:76:1b:85:54:78:1f:4d:aa:1b:f6:15:53:0d:b5:96: bd:ab:b9:86:7a:16:3e:e2:28:2a:2b:6a:ab:00:dc:f4:38:a3: ec:10:c8:cf:29:da:4e:97:a7:46:6b:10:d7:2b:84:f6:b6:24: b9:a0:ec:e1:e1:70:7c:62:58:ff:4e:5b:39:21:e4:df:f2:4a: 8c:5f:bc:ab:a3:bd:66:0f:72:e1:cc:7b:0c:56:a7:42:2d:70: 17:6f:36:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Bxk3EdLEm/AggqAW2f83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNGNmOTAzMjljNDdiYTM0M2E2NmNkNjVkMzg4MzNhMzU3 YjU5NTUwHhcNMjYwMTI1MTIwMDQxWhcNMjYwMTI2MTIwMDQxWjAzMTEwLwYDVQQD Eyg5ZjRjMWUwNmY0MzFhMDljNWRhOTQ3YTZiZDNiOGE3NjdlMTYwZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy6Gdq0WJHF1bJkp9vzS0oEYiocM xJ8izSiT9TSCHSVqWRImlXCqkyHW56XUan5uB3l8mkyivg995TTOwZNwKiQimiv6 Hyg51FfxRo8P9ohHORO45y5TDkTmDdmTSvZ9K13JCg21e3nrrqdWJuWac57BlqhB INOwIEa3qAsSbaU2glbLGXlk1mTE3kKtU4GFEfLZgzI0/qEbwdpeX5M/bfnVyLHh gjKjbRi6xbBk/xlMvlHoaGquYcV7sxgc21CXmmnJspHeGQXVLhS6tv+3SWPAQGQz 7btJAlcBHBCvdE4GfG90AhVvMLlaqqOAHf6/f8/u7Z/AA+/2NSLs/a/ZFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9MHgb0MaCcXalHpr07inZ+Fg5pMB8GA1UdIwQY MBaAFKJM+QMpxHujQ6Zs1l04gzo1e1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmIt MzM5ODVkYjgwNDdhLzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmItMzM5ODVkYjgwNDdh LzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8ZvThn1 jkWL+UJihj01RPYdxf8+e12m0u+PAzQHsp2P1EVw0WsVKQ+aSJ4tVuRcvnRHAuJV tnPazYIImvalsMYujLhw5ZNU9U0y4yeF7D2v5xv9t0dB5VFk+l3ZpHQYENDxnfnG drwg8KiO0sh+v3Y+Tud8u4slVWZaRoVGPovBFXAFVAZ4QT0NmJrVCBlYzQDbmvgd Dcfzf9x8R2qKoy/SfpUhdhuFVHgfTaob9hVTDbWWvau5hnoWPuIoKitqqwDc9Dij 7BDIzynaTpenRmsQ1yuE9rYkuaDs4eFwfGJY/05bOSHk3/JKjF+8q6O9Zg9y4cx7 DFanQi1wF282Vw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:54 2026 by rpki-client