This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json) Hash identifier: lD/rmdPTzLjK2jJeHWgAtxlIzihSeIUYtPgc3cvBQ5A= Subject key identifier: F7:D9:F6:E2:7F:A5:85:D3:69:E5:AC:A3:40:2D:A3:8B:01:F0:20:81 Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98 Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198 Certificate serial: 019BF5E3BF0694C677421077AC91ADA8E074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 16:01:42 +0000 Manifest this update: Sun 25 Jan 2026 16:01:42 +0000 Manifest next update: Mon 26 Jan 2026 16:01:42 +0000 Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=) 2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: cXyRWUTGN9jDISFVuxXVoUGDzXEfQv1DEmTtU46WDaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:bf:06:94:c6:77:42:10:77:ac:91:ad:a8:e0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198 Validity Not Before: Jan 25 16:01:42 2026 GMT Not After : Jan 26 16:01:42 2026 GMT Subject: CN=f7d9f6e27fa585d369e5aca3402da38b01f02081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:fc:e2:dd:82:af:97:7d:ed:76:30:ac:a8: 48:f1:72:7d:72:a2:2a:53:cc:fa:6b:82:26:0d:be: c5:3f:cd:2d:ce:15:c2:4a:08:1b:1f:0a:75:43:2a: da:5a:29:cb:f0:5a:8e:ce:13:7b:b5:51:7e:35:59: 17:ee:05:a3:15:d3:27:33:09:3f:02:fe:12:2e:3f: e0:9f:d9:c8:0b:cd:46:73:68:d7:dd:f5:b3:e4:de: 0a:3e:53:be:32:cb:60:0e:68:40:26:14:03:e8:cd: 4b:a6:ef:26:60:a0:5d:6a:45:11:24:5d:e4:93:47: ad:09:3b:0b:30:ac:c6:6f:69:de:86:4c:32:51:b5: 7f:67:82:18:d5:99:cb:9a:b4:d7:0d:54:9d:40:6b: 30:ff:db:71:6d:a1:e3:b2:d0:59:9b:a8:a8:60:2d: 2d:b1:6f:27:e4:29:c5:9a:71:ae:2d:55:ec:a8:3e: c1:fb:0a:b9:9e:b3:78:21:05:e4:37:f1:16:cd:0d: 67:4b:f7:02:d5:f5:04:ae:4a:9c:31:dc:01:c2:8b: 49:ae:8a:17:65:1b:94:b8:26:bd:62:a3:1a:e0:a1: b6:14:01:9c:b6:cc:a3:62:63:08:2c:f2:1a:fa:8a: d6:78:2d:90:8f:1b:b5:d9:3f:7e:30:33:77:c5:66: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D9:F6:E2:7F:A5:85:D3:69:E5:AC:A3:40:2D:A3:8B:01:F0:20:81 X509v3 Authority Key Identifier: keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a5:a0:94:3d:11:a6:28:1c:87:dd:7d:67:c3:e1:c2:d2:78: eb:38:9e:aa:98:98:a1:ec:67:fd:b3:1f:81:a6:38:05:7d:4b: 23:87:b4:b2:3e:c1:20:2d:c5:e1:ad:68:eb:ee:fb:13:ee:09: c8:a2:11:5f:71:85:b2:66:96:69:3e:2d:09:9e:63:8e:98:2c: ef:35:49:76:98:a8:d3:10:0c:e1:c2:d1:69:be:2e:1c:9f:88: 5b:25:b3:31:54:d8:7f:96:f1:a5:4b:74:f4:7e:20:1c:ff:89: 8c:eb:3c:5a:16:2c:bd:73:04:d1:a2:4c:8a:df:bb:d2:1c:ff: 37:40:e8:a1:e0:87:2f:d3:3e:0c:e2:ad:40:3e:6b:1a:37:62: 70:61:7b:07:66:ce:10:a4:69:e1:16:8f:41:6b:bb:4e:73:0d: 88:51:92:09:98:9f:53:45:34:04:fd:74:8a:e6:0f:6b:c4:24: ea:35:ed:e8:09:dd:2c:5e:13:c3:71:a5:b7:22:75:22:26:b1: ce:ee:b3:f1:bf:d9:d0:37:33:77:a5:66:b1:84:e5:24:c0:5d: 31:34:f6:75:46:4b:07:0a:2c:88:76:0a:de:66:ec:50:05:ee: 07:64:64:8c:52:e1:5e:13:0b:6d:ab:00:8e:3d:a3:8b:a9:49: f1:18:44:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1478GlMZ3QhB3rJGtqOB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZTI1YWNhNDM0ZmVlYjZmNTczYWE0NjNhMTJjNjk0MGJj NGQxOTgwHhcNMjYwMTI1MTYwMTQyWhcNMjYwMTI2MTYwMTQyWjAzMTEwLwYDVQQD EyhmN2Q5ZjZlMjdmYTU4NWQzNjllNWFjYTM0MDJkYTM4YjAxZjAyMDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyr84t2Cr5d97XYwrKhI8XJ9cqIq U8z6a4ImDb7FP80tzhXCSggbHwp1QyraWinL8FqOzhN7tVF+NVkX7gWjFdMnMwk/ Av4SLj/gn9nIC81Gc2jX3fWz5N4KPlO+MstgDmhAJhQD6M1Lpu8mYKBdakURJF3k k0etCTsLMKzGb2nehkwyUbV/Z4IY1ZnLmrTXDVSdQGsw/9txbaHjstBZm6ioYC0t sW8n5CnFmnGuLVXsqD7B+wq5nrN4IQXkN/EWzQ1nS/cC1fUErkqcMdwBwotJrooX ZRuUuCa9YqMa4KG2FAGctsyjYmMILPIa+orWeC2Qjxu12T9+MDN3xWYM/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfZ9uJ/pYXTaeWso0Ato4sB8CCBMB8GA1UdIwQY MBaAFPziWspDT+629XOqRjoSxpQLxNGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUt NjQzZTQ0NzQ0NGQ2LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUtNjQzZTQ0NzQ0NGQ2 LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6WglD0R pigch919Z8PhwtJ46zieqpiYoexn/bMfgaY4BX1LI4e0sj7BIC3F4a1o6+77E+4J yKIRX3GFsmaWaT4tCZ5jjpgs7zVJdpio0xAM4cLRab4uHJ+IWyWzMVTYf5bxpUt0 9H4gHP+JjOs8WhYsvXME0aJMit+70hz/N0DooeCHL9M+DOKtQD5rGjdicGF7B2bO EKRp4RaPQWu7TnMNiFGSCZifU0U0BP10iuYPa8Qk6jXt6AndLF4Tw3GltyJ1Iiax zu6z8b/Z0Dczd6VmsYTlJMBdMTT2dUZLBwosiHYK3mbsUAXuB2RkjFLhXhMLbasA jj2ji6lJ8RhEWw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:42 2026 by rpki-client