This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json) Hash identifier: Gq0UvYL0b6E8mc/FskaB+/1I4hzNSaTVCIl0i+5hWwk= Subject key identifier: BC:56:E8:7A:6F:8E:68:C2:FB:67:F1:EE:4B:A2:DD:72:F9:B6:EC:5C Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Certificate serial: 019BAD25A4B5E027FC917C746C4C37D01D06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft Manifest number: 102F Signing time: Sun 11 Jan 2026 13:01:23 +0000 Manifest this update: Sun 11 Jan 2026 13:01:23 +0000 Manifest next update: Mon 12 Jan 2026 13:01:23 +0000 Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: rpOuz0LWaEWYJptdd7WonpA7OFWACQ37zYJORwTlNTA=) 2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:25:a4:b5:e0:27:fc:91:7c:74:6c:4c:37:d0:1d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Validity Not Before: Jan 11 13:01:23 2026 GMT Not After : Jan 12 13:01:23 2026 GMT Subject: CN=bc56e87a6f8e68c2fb67f1ee4ba2dd72f9b6ec5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:ed:9f:a8:c8:69:98:6f:66:58:32:e7:83: 80:f3:c0:8e:a1:84:a7:ef:dc:5a:83:79:db:4e:06: 36:fe:51:dd:96:1c:63:02:32:eb:c4:dc:e6:b2:88: 28:32:bf:a2:3d:dc:d2:4b:2b:75:d5:94:9f:53:58: 95:79:29:6d:e5:27:c5:ca:dc:46:92:36:c5:20:90: 55:32:f4:22:b7:54:4f:39:1d:3d:b7:af:74:12:91: 04:1c:73:06:d8:78:93:e0:9b:cc:30:17:ca:8d:41: cd:31:26:a4:bc:16:9e:be:0f:dd:24:69:25:85:31: ec:3d:1e:66:dd:46:61:4e:c3:51:d0:b2:07:8d:f9: a5:90:71:ff:b1:3c:8a:67:be:64:a4:2a:a4:cf:0c: 0c:9e:a9:af:9f:32:d5:47:31:57:11:c5:be:c0:92: 95:4c:46:a9:68:7a:f8:3c:60:75:61:03:9b:36:2b: dc:f0:9a:89:fa:2f:62:ab:41:08:bb:e8:00:f0:bc: 24:42:0e:9a:ef:be:d3:ce:f1:0d:3e:70:6f:f4:c5: 82:12:e5:0a:04:54:f9:f9:57:df:44:80:db:bb:24: 0e:a0:d6:bc:98:84:8c:eb:e2:41:be:54:9c:df:57: 19:2c:61:5c:69:11:65:48:b7:bf:9b:46:c8:ed:c7: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:E8:7A:6F:8E:68:C2:FB:67:F1:EE:4B:A2:DD:72:F9:B6:EC:5C X509v3 Authority Key Identifier: keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d1:22:9b:77:8d:1e:d6:4a:1e:df:c3:e3:c0:20:52:71:a9: 66:f2:f4:56:18:a3:92:54:4d:73:0f:4c:23:60:41:95:9d:da: 39:11:7b:62:fb:37:2f:47:0e:ad:07:fb:ea:f3:6c:4f:82:c9: 14:f0:3f:99:43:be:d0:e8:76:56:03:db:3a:b0:d4:07:7a:2c: c3:59:34:7c:9e:ce:f0:f5:7f:ae:f6:37:f8:13:ee:b5:e4:f6: 26:eb:bc:a0:bb:75:33:32:7e:b7:1f:0f:e4:79:14:7f:cb:d2: cc:8d:3c:71:b0:f7:8a:17:54:f1:85:b6:18:cc:47:21:a1:7c: 41:80:d4:c8:e6:3e:32:32:99:17:e5:4c:4b:4a:c9:9c:8b:7c: 7e:10:7d:09:53:ef:a4:39:3c:db:bb:4c:bf:27:6b:26:57:52: 16:34:e0:8e:a3:31:5e:b8:51:ca:da:bc:d0:21:1c:39:55:6d: 1f:6a:13:b1:c7:d2:5a:f1:de:9d:7d:54:90:dd:55:b6:1f:0a: 96:8c:d0:bf:61:01:cf:36:71:fa:14:1f:b2:6a:a6:5e:45:4e: 07:54:22:58:b3:46:3f:c9:c2:d8:c3:9e:88:da:19:66:e4:78: 65:3c:8e:59:be:56:ad:b8:1a:37:82:73:23:ca:2e:0c:76:d0: 51:c2:2b:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutJaS14Cf8kXx0bEw30B0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1 ZDBhNTEwHhcNMjYwMTExMTMwMTIzWhcNMjYwMTEyMTMwMTIzWjAzMTEwLwYDVQQD EyhiYzU2ZTg3YTZmOGU2OGMyZmI2N2YxZWU0YmEyZGQ3MmY5YjZlYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSftn6jIaZhvZlgy54OA88COoYSn 79xag3nbTgY2/lHdlhxjAjLrxNzmsogoMr+iPdzSSyt11ZSfU1iVeSlt5SfFytxG kjbFIJBVMvQit1RPOR09t690EpEEHHMG2HiT4JvMMBfKjUHNMSakvBaevg/dJGkl hTHsPR5m3UZhTsNR0LIHjfmlkHH/sTyKZ75kpCqkzwwMnqmvnzLVRzFXEcW+wJKV TEapaHr4PGB1YQObNivc8JqJ+i9iq0EIu+gA8LwkQg6a777TzvENPnBv9MWCEuUK BFT5+VffRIDbuyQOoNa8mISM6+JBvlSc31cZLGFcaRFlSLe/m0bI7ce6kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxW6HpvjmjC+2fx7kui3XL5tuxcMB8GA1UdIwQY MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1 LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtEim3eN HtZKHt/D48AgUnGpZvL0VhijklRNcw9MI2BBlZ3aORF7Yvs3L0cOrQf76vNsT4LJ FPA/mUO+0Oh2VgPbOrDUB3osw1k0fJ7O8PV/rvY3+BPuteT2Juu8oLt1MzJ+tx8P 5HkUf8vSzI08cbD3ihdU8YW2GMxHIaF8QYDUyOY+MjKZF+VMS0rJnIt8fhB9CVPv pDk827tMvydrJldSFjTgjqMxXrhRytq80CEcOVVtH2oTscfSWvHenX1UkN1Vth8K lozQv2EBzzZx+hQfsmqmXkVOB1QiWLNGP8nC2MOeiNoZZuR4ZTyOWb5WrbgaN4Jz I8ouDHbQUcIrgg== -----END CERTIFICATE-----Generated at Sun Jan 11 22:52:52 2026 by rpki-client