This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json) Hash identifier: NJtIx5FFRPpqAXlLn/51GUyrj5e+Y999lZ60lExtTdk= Subject key identifier: 8F:A4:15:BB:70:26:94:64:7A:7B:B0:DA:FD:B9:86:85:BA:D5:60:95 Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Certificate serial: 019BF8086925C42EC26818DD05287F472B7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft Manifest number: 0EDD Signing time: Mon 26 Jan 2026 02:00:59 +0000 Manifest this update: Mon 26 Jan 2026 02:00:59 +0000 Manifest next update: Tue 27 Jan 2026 02:00:59 +0000 Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: glQRP8RWUKbcYIFiIa4u47oljR4uyS1SqCFtse5k+kg=) 2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:69:25:c4:2e:c2:68:18:dd:05:28:7f:47:2b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Validity Not Before: Jan 26 02:00:59 2026 GMT Not After : Jan 27 02:00:59 2026 GMT Subject: CN=8fa415bb702694647a7bb0dafdb98685bad56095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:1b:04:7c:74:4b:eb:70:99:d6:c8:44:64: 6c:d8:a8:4e:5b:04:52:50:b0:7f:6f:ff:d9:7d:ee: af:c3:62:4b:30:93:dc:81:56:73:df:69:52:2d:9f: 29:0a:08:ad:c5:6b:98:0a:6e:8f:94:69:9a:c7:81: d6:06:f8:40:1c:2c:52:25:a9:ea:b4:59:8f:17:52: 77:a4:16:ff:1b:fb:b2:e6:b9:3f:59:a4:89:ae:87: d0:17:e1:36:83:65:c0:20:20:72:28:a6:17:50:99: 44:da:ab:78:40:e7:5f:ec:c3:e3:cb:61:9a:38:02: 55:68:2c:87:7c:a9:24:7d:58:8a:29:da:fd:c9:50: 2c:57:c3:16:7e:36:e1:18:b8:d1:ae:8f:62:7a:7a: 69:c4:51:18:48:63:e4:b1:4d:21:6a:59:c1:be:ab: 55:1a:9e:99:d0:a1:b5:ad:e0:d1:e7:3b:e5:58:a5: 81:ba:39:99:ac:48:50:de:29:bb:15:b8:be:4d:39: 1f:5f:dc:de:9f:63:f1:0c:ee:e5:9f:05:2a:19:f8: ad:82:65:5d:bc:98:37:54:8c:d0:0c:59:ce:6d:b1: 38:64:d8:88:02:1a:c5:53:59:90:13:70:c8:0e:35: 32:63:7b:b6:3d:88:ef:a3:8e:8c:f5:2d:3c:45:2f: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A4:15:BB:70:26:94:64:7A:7B:B0:DA:FD:B9:86:85:BA:D5:60:95 X509v3 Authority Key Identifier: keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:12:06:d6:2d:65:54:d9:37:e1:f6:90:57:93:25:f0:d8: b2:f4:0b:e4:f6:f6:e5:88:f5:46:4c:f1:62:af:5b:a9:43:c1: 42:32:e3:a6:c2:b1:78:af:43:b0:72:8b:4c:a6:c0:ce:95:35: 99:13:97:bc:37:09:72:eb:af:c8:68:e1:00:88:99:a9:1e:b1: aa:bf:35:58:f4:cc:37:97:c9:7e:48:91:3d:74:8c:28:9b:b0: 87:71:ae:6d:c1:36:6f:4c:d5:a5:92:a3:dc:f9:19:bb:c7:6d: a9:9f:0f:c1:6b:3b:eb:91:54:b0:12:02:5e:80:89:56:ee:88: 7f:bb:8a:eb:2d:58:6b:b7:07:e3:c5:5e:2f:db:46:55:e3:5b: d3:86:e0:c9:e2:b1:c2:34:72:7b:e5:69:34:93:bf:b4:c0:2e: 23:c6:98:b7:92:ab:29:cf:a2:87:14:f4:89:37:17:79:73:82: ae:8b:e6:79:08:16:e5:1c:b2:aa:eb:75:13:9c:8b:c9:39:2d: 73:62:ef:b5:ee:99:01:80:16:35:64:ec:52:8b:e6:fd:ee:b5: 08:45:e2:8f:02:0a:9b:91:c3:20:66:4f:9c:8d:e4:72:bc:39: 0a:b0:e9:f6:5d:3c:8d:5d:90:5a:c6:b5:59:66:04:13:ca:b3: b2:1a:e3:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CGklxC7CaBjdBSh/Ryt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3 Y2JkYmYwHhcNMjYwMTI2MDIwMDU5WhcNMjYwMTI3MDIwMDU5WjAzMTEwLwYDVQQD Eyg4ZmE0MTViYjcwMjY5NDY0N2E3YmIwZGFmZGI5ODY4NWJhZDU2MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT0bBHx0S+twmdbIRGRs2KhOWwRS ULB/b//Zfe6vw2JLMJPcgVZz32lSLZ8pCgitxWuYCm6PlGmax4HWBvhAHCxSJanq tFmPF1J3pBb/G/uy5rk/WaSJrofQF+E2g2XAICByKKYXUJlE2qt4QOdf7MPjy2Ga OAJVaCyHfKkkfViKKdr9yVAsV8MWfjbhGLjRro9ienppxFEYSGPksU0halnBvqtV Gp6Z0KG1reDR5zvlWKWBujmZrEhQ3im7Fbi+TTkfX9zen2PxDO7lnwUqGfitgmVd vJg3VIzQDFnObbE4ZNiIAhrFU1mQE3DIDjUyY3u2PYjvo46M9S08RS+gvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+kFbtwJpRkenuw2v25hoW61WCVMB8GA1UdIwQY MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNoSBtYt ZVTZN+H2kFeTJfDYsvQL5Pb25Yj1RkzxYq9bqUPBQjLjpsKxeK9DsHKLTKbAzpU1 mROXvDcJcuuvyGjhAIiZqR6xqr81WPTMN5fJfkiRPXSMKJuwh3GubcE2b0zVpZKj 3PkZu8dtqZ8PwWs765FUsBICXoCJVu6If7uK6y1Ya7cH48VeL9tGVeNb04bgyeKx wjRye+VpNJO/tMAuI8aYt5KrKc+ihxT0iTcXeXOCrovmeQgW5Ryyqut1E5yLyTkt c2Lvte6ZAYAWNWTsUovm/e61CEXijwIKm5HDIGZPnI3kcrw5CrDp9l08jV2QWsa1 WWYEE8qzshrjzg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:28 2026 by rpki-client