This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json) Hash identifier: YHmbRwieqUU9PbPqkD4vFAbjL0UkuY8FNVoqU7nJ3HY= Subject key identifier: 18:0C:34:39:41:2F:B7:EC:B8:24:9B:EE:5D:A9:FF:2E:5C:08:0B:F2 Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a Certificate serial: 019BF6F5ED914C0821E730C86EDAD4BE585B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft Manifest number: 1017 Signing time: Sun 25 Jan 2026 21:01:10 +0000 Manifest this update: Sun 25 Jan 2026 21:01:10 +0000 Manifest next update: Mon 26 Jan 2026 21:01:10 +0000 Files and hashes: 1: GtRugG7rUNXwN8D-4_Fmv8xBbi4.roa (hash: /BvITM4S5y0rZ1AQGGceJ5QHF+EoXg6/6ygN/nHgl9Y=) 2: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: 9UjNdHYZG2qRxyCrojShksMFo66M9mDlCvDNmV8sSK8=) 3: _09CYID6_CGhAezIzwAbTFbsCi8.roa (hash: dZSTZUSxmSRc4nvVBTT8GAEBkxmPLHGJ4SuadjBnT94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:ed:91:4c:08:21:e7:30:c8:6e:da:d4:be:58:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a Validity Not Before: Jan 25 21:01:10 2026 GMT Not After : Jan 26 21:01:10 2026 GMT Subject: CN=180c3439412fb7ecb8249bee5da9ff2e5c080bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:1d:6d:a8:60:15:51:43:a9:83:8f:4d:bf: 5d:25:b6:be:ad:b6:b9:64:29:19:50:14:c2:c8:4d: 6d:6d:8f:d1:16:0c:c4:77:87:e3:fd:fc:c1:0b:ca: fe:7c:34:97:29:ed:d3:22:95:4d:d8:87:1d:0f:6d: 1a:a0:30:23:bf:90:33:b6:2a:7a:3b:9b:aa:a4:48: 76:c9:fe:b9:24:1b:a5:d4:74:ca:f4:b6:c3:c2:56: dd:ce:19:27:63:c9:ac:ab:b7:09:70:e3:71:96:5a: a9:61:29:c0:8e:b2:f8:44:b7:72:53:12:39:14:bf: 49:6a:a3:10:18:3e:82:76:94:3a:49:19:05:75:bd: 6f:f6:1c:44:4f:e2:08:07:2e:aa:26:1d:94:fe:d1: 48:41:6e:bf:f9:a1:44:27:ce:ab:f1:04:d5:cc:cf: 1e:6a:65:69:5a:cc:c0:fa:97:21:18:cc:29:86:bd: 05:08:4b:66:af:fd:ae:23:43:f4:78:43:d5:05:e3: 0a:d5:89:4d:81:c0:7e:9e:75:c8:38:e5:8b:b8:2f: 13:36:ac:42:6a:b7:07:4f:0d:bd:82:dc:a7:22:6e: 7b:7b:7b:aa:25:3c:e2:17:94:7a:a6:1d:1e:2f:c7: 03:1e:fc:90:7d:d4:75:06:10:bf:c3:52:f3:8b:ef: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0C:34:39:41:2F:B7:EC:B8:24:9B:EE:5D:A9:FF:2E:5C:08:0B:F2 X509v3 Authority Key Identifier: keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:29:c2:5b:90:ee:91:bc:25:d7:21:0e:1a:90:fe:dd:55:e9: bf:7f:2c:39:87:ea:75:fe:31:cd:a8:1f:58:7b:1e:10:d3:83: d9:84:91:75:46:d2:58:33:51:ce:fd:8d:4c:d1:3f:d5:e8:58: c1:f4:28:1f:60:df:86:ba:de:11:a7:95:c4:3f:ea:1f:6e:d3: c7:69:ae:97:95:38:b5:17:08:51:78:60:d2:e0:10:22:5b:1f: 44:79:a9:df:ec:ff:e8:dd:f1:97:ef:b3:5a:ee:b2:10:b1:79: eb:36:c1:b8:d1:6c:79:1e:d6:06:af:cc:43:da:71:3b:23:0a: 08:54:51:6e:3c:20:96:a0:41:cb:37:f8:b4:ad:3d:8e:00:b4: 0a:74:39:45:32:03:a7:c1:b1:ec:f6:d5:6d:f0:67:41:38:fd: e7:5e:3f:ad:f8:1c:a0:f2:1c:76:3a:94:0a:c8:fd:35:f7:f7: 3f:e4:44:df:fc:57:ed:b5:d3:98:ae:30:a2:53:ad:a4:84:71: fb:32:50:b9:99:14:72:5a:93:fa:ba:93:87:41:4e:f2:c8:10: e7:f7:44:45:d1:f6:2c:d3:02:6e:af:62:95:51:3e:36:6d:61: 94:01:09:85:7c:ae:c9:f4:c0:12:f5:d9:42:23:a5:76:be:48: 9a:fb:6c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29e2RTAgh5zDIbtrUvlhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Y2U0YzBhYmUyNzg1ZDQ2YTU1NzE4NTIxNzAzNzA0MjNi NWM1OWEwHhcNMjYwMTI1MjEwMTEwWhcNMjYwMTI2MjEwMTEwWjAzMTEwLwYDVQQD EygxODBjMzQzOTQxMmZiN2VjYjgyNDliZWU1ZGE5ZmYyZTVjMDgwYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlswdbahgFVFDqYOPTb9dJba+rba5 ZCkZUBTCyE1tbY/RFgzEd4fj/fzBC8r+fDSXKe3TIpVN2IcdD20aoDAjv5Aztip6 O5uqpEh2yf65JBul1HTK9LbDwlbdzhknY8msq7cJcONxllqpYSnAjrL4RLdyUxI5 FL9JaqMQGD6CdpQ6SRkFdb1v9hxET+IIBy6qJh2U/tFIQW6/+aFEJ86r8QTVzM8e amVpWszA+pchGMwphr0FCEtmr/2uI0P0eEPVBeMK1YlNgcB+nnXIOOWLuC8TNqxC arcHTw29gtynIm57e3uqJTziF5R6ph0eL8cDHvyQfdR1BhC/w1Lzi+9NnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgMNDlBL7fsuCSb7l2p/y5cCAvyMB8GA1UdIwQY MBaAFDnOTAq+J4XUalVxhSFwNwQjtcWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYt OWY0NDI5ZjMzODFlLzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYtOWY0NDI5ZjMzODFl LzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSnCW5Du kbwl1yEOGpD+3VXpv38sOYfqdf4xzagfWHseENOD2YSRdUbSWDNRzv2NTNE/1ehY wfQoH2DfhrreEaeVxD/qH27Tx2mul5U4tRcIUXhg0uAQIlsfRHmp3+z/6N3xl++z Wu6yELF56zbBuNFseR7WBq/MQ9pxOyMKCFRRbjwglqBByzf4tK09jgC0CnQ5RTID p8Gx7PbVbfBnQTj9514/rfgcoPIcdjqUCsj9Nff3P+RE3/xX7bXTmK4wolOtpIRx +zJQuZkUclqT+rqTh0FO8sgQ5/dERdH2LNMCbq9ilVE+Nm1hlAEJhXyuyfTAEvXZ QiOldr5Imvts2w== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:29 2026 by rpki-client