This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json) Hash identifier: j0vdyVnUmYsqlGDk8KNspSDRX95asRFpO661J6mvBUY= Subject key identifier: FE:66:E8:7D:0D:B3:55:42:0D:EA:EC:17:FF:27:41:89:A4:87:33:80 Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Certificate serial: 019BAB36DE182294F23AAE9041D1D3AC0AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft Manifest number: 102E Signing time: Sun 11 Jan 2026 04:00:58 +0000 Manifest this update: Sun 11 Jan 2026 04:00:58 +0000 Manifest next update: Mon 12 Jan 2026 04:00:58 +0000 Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: NHaeGYyGLN+5MbhP4gMsXIQPfLp351mvawqOfwAqMJg=) 2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:36:de:18:22:94:f2:3a:ae:90:41:d1:d3:ac:0a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Validity Not Before: Jan 11 04:00:58 2026 GMT Not After : Jan 12 04:00:58 2026 GMT Subject: CN=fe66e87d0db355420deaec17ff274189a4873380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ba:0a:f7:f6:4f:3e:21:ce:7b:d0:43:78:01: f2:8e:2f:b8:56:69:b6:68:88:2b:69:16:21:d7:d3: 17:a3:a9:1a:e6:66:82:33:91:25:80:d6:75:0b:9d: ef:54:f2:da:ce:a0:cd:55:ee:6e:6e:13:78:12:79: 00:15:07:e3:e7:e1:03:b4:75:3e:78:c8:f9:8c:87: 5e:e3:89:33:fa:ee:8f:70:82:fb:c9:0a:46:7d:b1: 01:2f:5d:5c:05:9e:30:00:14:c7:a5:91:14:41:d9: 83:63:9c:03:fd:cf:d1:0e:bd:ad:08:af:5f:d0:4a: 5f:24:8f:e5:55:2a:2e:84:f9:01:8e:e0:d4:82:be: 35:c1:bf:20:16:f7:0f:fb:f8:af:a7:b1:5e:2f:4a: 14:5f:8d:b7:41:c4:c1:77:67:0c:41:b0:f1:0d:74: 73:8f:b6:5d:f1:83:15:55:8c:b0:d4:01:71:f6:3d: 7d:61:79:b2:8f:db:a3:0f:cf:fe:90:3b:ef:0c:75: 3f:27:89:e1:05:13:a3:29:84:8c:32:d8:80:1c:6f: 86:2d:f4:45:7b:aa:44:b6:28:cf:9a:62:12:44:e4: 42:66:a5:56:40:d2:d8:7c:21:6f:70:08:c6:29:ba: ee:c7:45:82:52:e2:40:46:7e:76:dd:78:74:06:7e: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:66:E8:7D:0D:B3:55:42:0D:EA:EC:17:FF:27:41:89:A4:87:33:80 X509v3 Authority Key Identifier: keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:14:6b:b4:0b:7a:d8:ea:7f:73:69:e3:c2:67:0e:a7:a5:b9: 2b:bb:60:a1:22:25:bf:9a:1e:22:9d:49:b1:70:bf:66:0e:b0: 44:f1:3b:9e:f9:a9:17:82:c7:e2:ef:81:b6:2a:46:d4:e0:6f: 39:56:99:f2:39:21:09:87:f1:b2:17:16:79:92:2f:39:04:9a: 12:be:16:60:67:52:a8:90:1d:30:ac:e2:fd:46:05:32:8e:69: 70:a7:9b:b3:a8:f2:98:48:a6:89:b3:4b:31:5b:89:20:e7:7d: d1:9e:50:b6:30:ad:63:7c:83:b9:2d:13:6c:20:4c:75:b1:45: 15:fa:b4:af:d9:ce:6c:f7:24:31:e9:76:c7:c0:a9:b7:e5:6b: a9:bd:e2:98:91:de:c1:c7:f8:89:2a:3e:cf:3d:e8:73:17:8d: 2d:47:0c:fd:7e:f2:b3:52:c2:cc:70:80:d3:f4:65:1e:62:b1: 9b:5c:f9:a4:e3:10:cb:0f:64:1d:78:6f:a5:ca:43:33:ab:89: ab:a2:f9:1e:40:d5:22:0c:05:4e:4a:18:8e:cb:82:27:f9:82: 36:92:34:43:30:8d:73:ca:70:fd:9e:ab:3b:9b:ce:73:75:4d: e4:e0:0c:29:64:c9:98:fe:47:3f:f4:10:2f:d3:92:ea:d0:c5: 58:72:10:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurNt4YIpTyOq6QQdHTrAqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1 ZDBhNTEwHhcNMjYwMTExMDQwMDU4WhcNMjYwMTEyMDQwMDU4WjAzMTEwLwYDVQQD EyhmZTY2ZTg3ZDBkYjM1NTQyMGRlYWVjMTdmZjI3NDE4OWE0ODczMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87oK9/ZPPiHOe9BDeAHyji+4Vmm2 aIgraRYh19MXo6ka5maCM5ElgNZ1C53vVPLazqDNVe5ubhN4EnkAFQfj5+EDtHU+ eMj5jIde44kz+u6PcIL7yQpGfbEBL11cBZ4wABTHpZEUQdmDY5wD/c/RDr2tCK9f 0EpfJI/lVSouhPkBjuDUgr41wb8gFvcP+/ivp7FeL0oUX423QcTBd2cMQbDxDXRz j7Zd8YMVVYyw1AFx9j19YXmyj9ujD8/+kDvvDHU/J4nhBROjKYSMMtiAHG+GLfRF e6pEtijPmmISRORCZqVWQNLYfCFvcAjGKbrux0WCUuJARn523Xh0Bn69MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5m6H0Ns1VCDersF/8nQYmkhzOAMB8GA1UdIwQY MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1 LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxRrtAt6 2Op/c2njwmcOp6W5K7tgoSIlv5oeIp1JsXC/Zg6wRPE7nvmpF4LH4u+BtipG1OBv OVaZ8jkhCYfxshcWeZIvOQSaEr4WYGdSqJAdMKzi/UYFMo5pcKebs6jymEimibNL MVuJIOd90Z5QtjCtY3yDuS0TbCBMdbFFFfq0r9nObPckMel2x8Cpt+Vrqb3imJHe wcf4iSo+zz3ocxeNLUcM/X7ys1LCzHCA0/RlHmKxm1z5pOMQyw9kHXhvpcpDM6uJ q6L5HkDVIgwFTkoYjsuCJ/mCNpI0QzCNc8pw/Z6rO5vOc3VN5OAMKWTJmP5HP/QQ L9OS6tDFWHIQFQ== -----END CERTIFICATE-----Generated at Sun Jan 11 12:31:01 2026 by rpki-client