This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json) Hash identifier: OkB0u3uLwwC4JA0VSSE/eCIaPAmhozAGrqTwUxaXt+E= Subject key identifier: B7:A1:F9:5C:A3:27:93:33:D2:A6:AA:4E:5A:D2:B1:E2:AA:88:4A:9C Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Certificate serial: 019BF6BF17FD1070F344AF99288199219FA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft Manifest number: 0E67 Signing time: Sun 25 Jan 2026 20:01:17 +0000 Manifest this update: Sun 25 Jan 2026 20:01:17 +0000 Manifest next update: Mon 26 Jan 2026 20:01:17 +0000 Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: QaXSL0/XdhxOLmSNboopbyKNWMsZET36rU4BmygyQ28=) 2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:17:fd:10:70:f3:44:af:99:28:81:99:21:9f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Validity Not Before: Jan 25 20:01:17 2026 GMT Not After : Jan 26 20:01:17 2026 GMT Subject: CN=b7a1f95ca3279333d2a6aa4e5ad2b1e2aa884a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:ea:c1:91:ae:40:fa:eb:c2:9a:d8:be:02: 09:c1:8f:75:2a:f0:ff:9c:31:48:c1:12:7f:a8:57: 3d:c4:ba:22:28:4a:cf:7e:c5:10:fb:22:73:44:68: 2d:22:83:10:41:f4:69:dc:08:ca:a5:ee:ec:5b:bb: 1d:30:cb:f0:3b:64:ba:7b:1d:ef:bc:0b:31:d8:34: a6:4f:2d:c9:19:9b:d2:09:00:2f:49:04:15:fc:30: 4b:33:71:6b:87:91:4d:d1:71:c2:21:fa:7b:48:46: 6a:df:ed:0b:e4:4e:c2:5e:83:f4:e8:f0:67:ec:62: e4:d4:75:45:83:06:36:9d:b9:91:16:d4:a8:a0:dc: c3:a8:eb:6d:49:9b:47:f4:69:6d:25:ec:32:c2:18: 61:25:03:df:55:e7:a6:5e:88:0f:98:ba:1c:1c:b4: 8f:70:a7:97:5a:7a:fa:9c:5e:9a:3f:32:a4:36:a3: d0:f3:6e:e9:29:3e:7a:65:42:36:4b:62:8c:82:40: 08:c5:69:2e:83:7b:94:d9:e7:46:74:a1:24:02:bb: b3:dd:5e:07:25:3b:60:b0:7f:75:1e:54:3f:19:a3: f2:d0:8a:9e:e1:a7:fb:1c:fa:53:38:0b:f2:a8:f3: ae:c9:45:cc:2d:26:db:c2:c4:8c:38:a1:7b:34:62: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A1:F9:5C:A3:27:93:33:D2:A6:AA:4E:5A:D2:B1:E2:AA:88:4A:9C X509v3 Authority Key Identifier: keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:e4:e1:d9:d9:29:f5:40:42:a9:cb:0a:85:b4:bf:2e:8b:22: 5b:f2:1e:5e:c6:b4:87:1a:cc:29:30:78:38:72:df:f4:ae:91: c5:42:2e:55:a0:fc:5f:fc:24:e6:16:dc:98:ec:c5:ae:5e:d7: 0f:82:fb:d9:ed:d0:94:5d:b6:98:8b:08:2a:f4:bd:90:39:47: 24:00:98:0e:27:4e:75:de:c1:5d:40:ab:6f:ed:be:90:af:0e: a1:25:28:41:7d:80:5e:30:f3:c0:75:fe:2d:9a:79:44:80:7e: b0:81:f0:48:53:6e:b8:bb:3d:55:d1:cb:d6:ed:cb:31:0a:dc: 59:d7:ba:95:4b:77:fa:dd:2f:a8:f5:b7:ef:21:4d:f6:cb:ec: 4d:cc:6f:55:06:0f:7d:71:8c:cb:b6:52:85:df:7c:1f:1d:b3: 9d:24:f1:b2:59:e9:65:dd:bf:ab:b4:f5:45:a2:6d:bc:ae:06: 44:72:41:f2:93:1d:4b:d5:d6:f1:11:fa:e6:01:30:59:83:84: 15:86:de:86:25:5a:1b:0c:d9:e6:69:f9:ce:04:7a:06:82:79: 75:50:de:fd:14:41:58:ed:e7:5f:2c:58:88:8e:6f:01:46:59: f9:f2:44:79:c9:ec:44:c2:ae:0d:ee:b6:a6:94:ed:be:35:34: 47:04:83:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vxf9EHDzRK+ZKIGZIZ+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy NTQyMjkwHhcNMjYwMTI1MjAwMTE3WhcNMjYwMTI2MjAwMTE3WjAzMTEwLwYDVQQD EyhiN2ExZjk1Y2EzMjc5MzMzZDJhNmFhNGU1YWQyYjFlMmFhODg0YTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd/qwZGuQPrrwprYvgIJwY91KvD/ nDFIwRJ/qFc9xLoiKErPfsUQ+yJzRGgtIoMQQfRp3AjKpe7sW7sdMMvwO2S6ex3v vAsx2DSmTy3JGZvSCQAvSQQV/DBLM3Frh5FN0XHCIfp7SEZq3+0L5E7CXoP06PBn 7GLk1HVFgwY2nbmRFtSooNzDqOttSZtH9GltJewywhhhJQPfVeemXogPmLocHLSP cKeXWnr6nF6aPzKkNqPQ827pKT56ZUI2S2KMgkAIxWkug3uU2edGdKEkAruz3V4H JTtgsH91HlQ/GaPy0Iqe4af7HPpTOAvyqPOuyUXMLSbbwsSMOKF7NGJHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeh+VyjJ5Mz0qaqTlrSseKqiEqcMB8GA1UdIwQY MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt MzFlYTIwOTRiNTU3LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3 LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3OTh2dkp 9UBCqcsKhbS/LosiW/IeXsa0hxrMKTB4OHLf9K6RxUIuVaD8X/wk5hbcmOzFrl7X D4L72e3QlF22mIsIKvS9kDlHJACYDidOdd7BXUCrb+2+kK8OoSUoQX2AXjDzwHX+ LZp5RIB+sIHwSFNuuLs9VdHL1u3LMQrcWde6lUt3+t0vqPW37yFN9svsTcxvVQYP fXGMy7ZShd98Hx2znSTxslnpZd2/q7T1RaJtvK4GRHJB8pMdS9XW8RH65gEwWYOE FYbehiVaGwzZ5mn5zgR6BoJ5dVDe/RRBWO3nXyxYiI5vAUZZ+fJEecnsRMKuDe62 ppTtvjU0RwSDJA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:19 2026 by rpki-client