This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json) Hash identifier: fsho7tvwFRPD7NtD0zYGmH6EFnbO1RBLFnazkb1LbNg= Subject key identifier: 7B:A6:4A:8D:51:9B:20:88:23:49:27:E5:14:41:16:60:2F:78:75:60 Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826 Certificate serial: 019BF5752695402DB1580F26C09A5C094C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft Manifest number: 0ECE Signing time: Sun 25 Jan 2026 14:00:53 +0000 Manifest this update: Sun 25 Jan 2026 14:00:53 +0000 Manifest next update: Mon 26 Jan 2026 14:00:53 +0000 Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=) 2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: uiDcl25h4v+lyjirOpSfNJxzrfm9H8Cegm96bPMioEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:26:95:40:2d:b1:58:0f:26:c0:9a:5c:09:4c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826 Validity Not Before: Jan 25 14:00:53 2026 GMT Not After : Jan 26 14:00:53 2026 GMT Subject: CN=7ba64a8d519b2088234927e5144116602f787560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:45:1e:a4:f0:c3:73:63:c8:f4:46:36:60:ed: 7d:b3:92:31:2b:88:11:15:ec:a9:df:52:af:dc:df: ce:63:b2:9f:ce:3a:82:6c:5a:1d:b1:30:ef:bc:bf: 77:15:19:ef:5a:f6:0b:90:b5:a2:97:28:91:16:a8: d6:06:9a:48:2b:99:6c:24:17:af:8e:b0:d3:f2:15: f4:f9:aa:4c:0f:66:90:94:28:2e:b0:5a:49:30:13: 08:f5:8d:1e:6d:54:bd:c6:fc:c7:fa:95:80:3a:72: 37:39:ac:c0:4c:8d:4a:70:59:da:dc:b7:ef:00:ec: 50:40:80:74:69:b1:88:18:cb:e8:46:93:9f:24:70: be:ce:6e:44:d0:7c:4f:4d:05:03:98:6d:c5:ec:ef: 6f:77:b2:f3:eb:10:6f:29:d2:0a:45:c0:d8:84:b9: 81:7c:a0:04:70:7d:ac:4d:31:69:5e:bc:ed:c7:1d: 0a:93:51:58:f5:77:e9:7c:6b:04:1c:3c:a9:d4:4e: d9:93:15:c6:ef:0a:e5:23:57:42:8b:a2:af:8f:c9: e2:a8:dc:a5:96:b5:a0:d7:2c:fd:3f:44:07:16:d7: 7b:cd:70:f8:35:02:63:3d:68:58:ef:d5:b8:fb:9d: a9:e8:cb:fd:6b:5b:c7:c9:34:01:38:b7:28:a1:38: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A6:4A:8D:51:9B:20:88:23:49:27:E5:14:41:16:60:2F:78:75:60 X509v3 Authority Key Identifier: keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e4:90:8f:0a:e6:21:2b:2f:52:74:95:92:bc:e1:6a:90:39: e3:8c:0c:58:dd:a5:49:57:3d:c8:f7:ab:e4:11:64:68:d5:73: b2:66:2f:df:d6:62:7f:b4:d5:26:f7:6c:81:df:d9:d8:3f:1d: c5:ae:4d:e4:b8:7c:b9:cd:ca:7e:75:f1:8a:a1:1a:4a:dc:33: 14:a0:6a:42:1c:12:c6:e6:83:53:66:dc:0e:11:02:cf:4a:26: 8e:79:c8:95:c7:43:f9:e2:03:50:26:6f:8f:de:a6:de:d4:23: f8:86:22:33:e4:61:2a:55:2a:c6:02:0c:ff:e3:40:e5:cd:b0: 6e:c0:fb:3f:1b:ba:8a:73:b9:de:f0:55:cc:62:d6:6c:22:db: cb:ce:55:a6:68:16:e0:03:0f:a9:7b:a4:b5:96:f4:1f:b7:26: fb:22:dc:3d:44:93:f9:40:94:61:fd:9c:84:8c:12:9c:9d:59: ba:83:67:ce:30:6b:7e:a8:74:5b:c8:3d:01:f5:07:ba:45:27: 1e:7c:d3:41:f6:a1:e9:bf:ec:ee:d2:57:a8:1a:4d:d3:df:52: 5a:a2:06:71:47:f9:20:7e:aa:23:53:fd:42:b8:38:85:c3:08: 3a:77:af:75:e0:83:3e:0b:c7:cf:4f:b4:3b:35:0d:fd:f5:56: 53:80:a8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSaVQC2xWA8mwJpcCUwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1 NTM4MjYwHhcNMjYwMTI1MTQwMDUzWhcNMjYwMTI2MTQwMDUzWjAzMTEwLwYDVQQD Eyg3YmE2NGE4ZDUxOWIyMDg4MjM0OTI3ZTUxNDQxMTY2MDJmNzg3NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kUepPDDc2PI9EY2YO19s5IxK4gR Feyp31Kv3N/OY7KfzjqCbFodsTDvvL93FRnvWvYLkLWilyiRFqjWBppIK5lsJBev jrDT8hX0+apMD2aQlCgusFpJMBMI9Y0ebVS9xvzH+pWAOnI3OazATI1KcFna3Lfv AOxQQIB0abGIGMvoRpOfJHC+zm5E0HxPTQUDmG3F7O9vd7Lz6xBvKdIKRcDYhLmB fKAEcH2sTTFpXrztxx0Kk1FY9XfpfGsEHDyp1E7ZkxXG7wrlI1dCi6Kvj8niqNyl lrWg1yz9P0QHFtd7zXD4NQJjPWhY79W4+52p6Mv9a1vHyTQBOLcooTiMVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHumSo1RmyCII0kn5RRBFmAveHVgMB8GA1UdIwQY MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuSQjwrm ISsvUnSVkrzhapA544wMWN2lSVc9yPer5BFkaNVzsmYv39Zif7TVJvdsgd/Z2D8d xa5N5Lh8uc3KfnXxiqEaStwzFKBqQhwSxuaDU2bcDhECz0omjnnIlcdD+eIDUCZv j96m3tQj+IYiM+RhKlUqxgIM/+NA5c2wbsD7Pxu6inO53vBVzGLWbCLby85VpmgW 4AMPqXuktZb0H7cm+yLcPUST+UCUYf2chIwSnJ1ZuoNnzjBrfqh0W8g9AfUHukUn HnzTQfah6b/s7tJXqBpN099SWqIGcUf5IH6qI1P9Qrg4hcMIOnevdeCDPgvHz0+0 OzUN/fVWU4CoSw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:57 2026 by rpki-client