This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json) Hash identifier: c+ZN/2cpF9tXyvvwwiNFOul/FMEAJOO7aGf8XwntGO8= Subject key identifier: 89:CD:D6:6A:75:E1:9B:33:D4:83:17:2E:14:84:A0:D0:51:0F:68:F1 Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582 Certificate serial: 019BF72D0506C0862C60ABBF9AC2E5487FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft Manifest number: 0E7F Signing time: Sun 25 Jan 2026 22:01:21 +0000 Manifest this update: Sun 25 Jan 2026 22:01:21 +0000 Manifest next update: Mon 26 Jan 2026 22:01:21 +0000 Files and hashes: 1: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: seF04mnQLHCZ3Jp57qD0xwr5cbhQClUdsCsLzd+CyTk=) 2: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:05:06:c0:86:2c:60:ab:bf:9a:c2:e5:48:7f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389755423f832a528c93136110f0fe4b10453582 Validity Not Before: Jan 25 22:01:21 2026 GMT Not After : Jan 26 22:01:21 2026 GMT Subject: CN=89cdd66a75e19b33d483172e1484a0d0510f68f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:44:04:4a:70:d2:9c:85:d3:f9:7b:b9:c1: e6:34:b7:49:16:53:7d:26:de:4b:51:63:03:6e:74: af:e1:d3:40:47:fb:d5:20:f8:40:84:3e:f6:9e:48: 44:51:cc:13:fa:63:1e:0d:ec:e8:14:b7:11:9a:ef: c6:32:da:78:7c:30:ca:8b:8c:61:0b:c2:71:9b:3a: 07:ff:cf:90:12:bc:02:60:32:0a:22:bc:77:29:d5: 79:02:e6:5b:77:c2:ab:cc:3f:61:6f:d7:f8:12:51: 2e:4a:5f:7b:ea:bf:3e:b1:7a:fc:72:b8:df:a8:aa: c3:65:db:29:eb:68:7d:de:7f:ac:96:17:54:f5:c5: 71:1a:a1:71:eb:29:31:7d:0e:dc:60:a7:96:cc:9d: f0:50:4d:08:66:3b:a8:2a:98:47:a7:4c:99:7a:1f: be:f9:32:05:7f:33:e1:09:b4:60:25:05:3a:cf:7c: 91:5e:ed:40:f1:7c:2d:48:e2:f4:19:dc:d8:45:9f: 3b:af:25:f7:75:eb:37:61:de:77:72:9d:72:68:95: 7c:5b:42:4c:f1:3c:c0:8a:3f:4a:f3:d9:53:df:02: 64:27:93:11:e1:54:b7:f6:54:44:d2:36:3b:b7:93: 78:a4:4d:a4:aa:9a:eb:03:9e:61:4b:d1:b4:a2:91: d5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CD:D6:6A:75:E1:9B:33:D4:83:17:2E:14:84:A0:D0:51:0F:68:F1 X509v3 Authority Key Identifier: keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f6:17:f4:67:3e:b3:05:bd:23:c9:0d:8b:43:a1:ee:da:39: fe:1c:ed:6f:d2:b3:73:bf:9d:8e:05:fe:4a:a1:fc:e8:92:96: a2:3c:5c:f2:70:66:ec:e4:46:f9:6a:70:a2:3d:9b:95:97:c7: 30:1f:01:fd:a9:3a:b1:e3:fa:8f:0f:db:dc:41:9f:be:4d:81: 70:59:77:41:c3:86:07:ee:c7:a5:b8:1d:7e:0e:94:74:03:bf: 15:33:39:83:3a:e4:43:5c:f2:ff:d6:d8:6d:48:77:56:b0:99: f1:cf:08:b2:6a:bf:0f:09:9c:06:b7:16:cd:2d:4d:79:bf:be: ee:c8:c5:22:ff:92:39:6c:da:05:a2:02:9c:17:69:f0:d4:c8: 3e:d6:57:54:63:5b:64:c1:7b:f1:09:93:3e:da:8a:d7:43:88: a4:19:f4:65:76:4a:f1:07:3f:69:29:b3:3b:02:a5:67:68:e4: 3b:62:6e:40:a9:c1:c9:75:67:54:bc:46:2d:fd:c8:aa:80:c6: 75:8e:65:38:e3:2f:98:f0:5e:0f:f1:bd:85:a8:d2:2f:7a:69: 2d:b4:8e:36:1d:27:d7:d2:2c:ea:cd:d1:b5:51:d6:e4:62:d9: 91:88:96:00:b6:c0:2f:b9:f0:50:b7:7d:a3:bf:09:c2:9c:4c: 66:5d:57:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LQUGwIYsYKu/msLlSH/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTc1NTQyM2Y4MzJhNTI4YzkzMTM2MTEwZjBmZTRiMTA0 NTM1ODIwHhcNMjYwMTI1MjIwMTIxWhcNMjYwMTI2MjIwMTIxWjAzMTEwLwYDVQQD Eyg4OWNkZDY2YTc1ZTE5YjMzZDQ4MzE3MmUxNDg0YTBkMDUxMGY2OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuONEBEpw0pyF0/l7ucHmNLdJFlN9 Jt5LUWMDbnSv4dNAR/vVIPhAhD72nkhEUcwT+mMeDezoFLcRmu/GMtp4fDDKi4xh C8JxmzoH/8+QErwCYDIKIrx3KdV5AuZbd8KrzD9hb9f4ElEuSl976r8+sXr8crjf qKrDZdsp62h93n+slhdU9cVxGqFx6ykxfQ7cYKeWzJ3wUE0IZjuoKphHp0yZeh++ +TIFfzPhCbRgJQU6z3yRXu1A8XwtSOL0GdzYRZ87ryX3des3Yd53cp1yaJV8W0JM 8TzAij9K89lT3wJkJ5MR4VS39lRE0jY7t5N4pE2kqprrA55hS9G0opHV1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInN1mp14Zsz1IMXLhSEoNBRD2jxMB8GA1UdIwQY MBaAFDiXVUI/gypSjJMTYRDw/ksQRTWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0Mjgt NDY5NTdiZDg4NjBkLzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0MjgtNDY5NTdiZDg4NjBk LzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvYX9Gc+ swW9I8kNi0Oh7to5/hztb9Kzc7+djgX+SqH86JKWojxc8nBm7ORG+Wpwoj2blZfH MB8B/ak6seP6jw/b3EGfvk2BcFl3QcOGB+7Hpbgdfg6UdAO/FTM5gzrkQ1zy/9bY bUh3VrCZ8c8Ismq/DwmcBrcWzS1Neb++7sjFIv+SOWzaBaICnBdp8NTIPtZXVGNb ZMF78QmTPtqK10OIpBn0ZXZK8Qc/aSmzOwKlZ2jkO2JuQKnByXVnVLxGLf3IqoDG dY5lOOMvmPBeD/G9hajSL3ppLbSONh0n19Is6s3RtVHW5GLZkYiWALbAL7nwULd9 o78JwpxMZl1Xxg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:00 2026 by rpki-client