This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json) Hash identifier: 2tFtJWJZTGLMAMvil2dyQMokdMYs1cYX4o7SBNhIu6Y= Subject key identifier: 0D:A4:CA:C7:8E:DD:8B:C5:D8:A9:87:F7:8C:1D:7D:C3:3A:83:8A:74 Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Certificate serial: 019B7DEFF81799713EB5581A74DAC91B34B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft Manifest number: 056E Signing time: Fri 02 Jan 2026 09:00:37 +0000 Manifest this update: Fri 02 Jan 2026 09:00:37 +0000 Manifest next update: Sat 03 Jan 2026 09:00:37 +0000 Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=) 2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 2CAiMSduFiEETHd5tgWX9qswEzSZ9fxWslfKdudJD5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ef:f8:17:99:71:3e:b5:58:1a:74:da:c9:1b:34:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Validity Not Before: Jan 2 09:00:37 2026 GMT Not After : Jan 3 09:00:37 2026 GMT Subject: CN=0da4cac78edd8bc5d8a987f78c1d7dc33a838a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6c:c5:0d:ef:15:a1:38:3c:f2:f6:5d:aa:5f: 25:18:b5:59:20:41:38:7a:36:aa:5e:dc:1b:cc:30: 75:88:91:22:19:32:ef:06:5f:62:33:b9:0b:a9:ef: cd:b6:68:6f:ad:8b:41:03:f7:78:f1:10:95:87:f6: ff:26:49:e7:45:b7:f6:33:df:98:6b:64:5a:d2:47: a7:e8:14:7d:f7:4c:2a:56:d5:f6:7f:25:6d:22:e6: c8:e1:72:c2:a1:08:b5:55:0c:66:70:05:5a:50:ee: bb:34:0a:c1:84:3b:d5:b9:8a:32:53:36:02:c2:c8: 6e:5d:ef:a2:fd:79:f1:5c:99:36:5f:ac:1e:51:90: 15:b6:2c:da:ef:2f:64:9f:ba:e7:c6:12:a5:d6:8c: 90:a0:b6:6c:36:21:05:b5:0a:4c:04:fb:7e:f3:78: aa:0c:21:00:07:ae:34:f8:59:70:66:52:d0:49:1b: fa:dd:d9:e2:84:6a:fb:88:7d:af:76:41:04:93:a2: ad:e7:7d:b2:c6:26:67:c8:c4:99:08:93:54:c2:f6: d8:49:bd:4a:f3:bd:78:29:fa:ab:17:cd:05:74:84: 48:5e:05:fc:4d:26:fb:af:2b:93:b9:37:fb:7c:ec: a1:c2:9e:97:2a:c3:fc:5c:61:47:53:a9:8a:26:bc: 11:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:CA:C7:8E:DD:8B:C5:D8:A9:87:F7:8C:1D:7D:C3:3A:83:8A:74 X509v3 Authority Key Identifier: keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:09:f1:51:76:f4:c5:be:cb:c9:b8:62:ef:c8:26:ed:3f:ea: b7:e3:a6:73:49:1d:b7:29:ad:20:80:44:53:7f:7c:e7:a6:5d: cc:ba:20:0d:ef:d4:10:53:02:bc:bb:b3:e4:21:3d:7d:57:8f: 27:2a:83:d1:1a:83:50:82:f8:a7:b3:a2:1b:d2:61:8b:9a:f5: fd:b3:2a:8c:a1:a2:52:77:78:ac:0b:9c:1d:25:41:7e:55:14: 14:af:93:f6:36:47:56:65:30:ed:f9:a5:27:95:cf:8f:d6:20: ec:63:45:9a:17:7e:0f:f5:41:17:45:50:24:4d:f1:64:a4:87: 1d:c1:20:33:51:62:5b:7e:ae:45:54:50:b0:0e:f6:a8:51:fb: b6:39:81:85:28:af:fc:77:89:60:d9:d3:3a:49:68:d5:83:98: c8:ec:6b:66:7b:cd:bd:4e:35:e0:ac:a2:7c:79:0c:8a:0f:0d: 42:74:e6:f5:84:09:b2:f4:5d:6b:9c:ce:cf:c5:eb:db:dc:0d: f4:3b:f4:58:2d:0b:14:4c:81:9e:b9:bb:77:af:4d:3b:00:27: a1:fd:be:5b:a5:8f:3e:03:9f:3c:2a:d2:13:8e:dc:ee:e6:87: 13:60:b9:6b:00:66:05:2f:e1:62:ae:8c:26:71:8f:f0:8e:31: 3e:e3:89:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt97/gXmXE+tVgadNrJGzS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy NDk4ZWYwHhcNMjYwMTAyMDkwMDM3WhcNMjYwMTAzMDkwMDM3WjAzMTEwLwYDVQQD EygwZGE0Y2FjNzhlZGQ4YmM1ZDhhOTg3Zjc4YzFkN2RjMzNhODM4YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WzFDe8VoTg88vZdql8lGLVZIEE4 ejaqXtwbzDB1iJEiGTLvBl9iM7kLqe/NtmhvrYtBA/d48RCVh/b/JknnRbf2M9+Y a2Ra0ken6BR990wqVtX2fyVtIubI4XLCoQi1VQxmcAVaUO67NArBhDvVuYoyUzYC wshuXe+i/XnxXJk2X6weUZAVtiza7y9kn7rnxhKl1oyQoLZsNiEFtQpMBPt+83iq DCEAB640+FlwZlLQSRv63dnihGr7iH2vdkEEk6Kt532yxiZnyMSZCJNUwvbYSb1K 8714KfqrF80FdIRIXgX8TSb7ryuTuTf7fOyhwp6XKsP8XGFHU6mKJrwRpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2kyseO3YvF2KmH94wdfcM6g4p0MB8GA1UdIwQY MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgnxUXb0 xb7Lybhi78gm7T/qt+Omc0kdtymtIIBEU39856ZdzLogDe/UEFMCvLuz5CE9fVeP JyqD0RqDUIL4p7OiG9Jhi5r1/bMqjKGiUnd4rAucHSVBflUUFK+T9jZHVmUw7fml J5XPj9Yg7GNFmhd+D/VBF0VQJE3xZKSHHcEgM1FiW36uRVRQsA72qFH7tjmBhSiv /HeJYNnTOklo1YOYyOxrZnvNvU414KyifHkMig8NQnTm9YQJsvRda5zOz8Xr29wN 9Dv0WC0LFEyBnrm7d69NOwAnof2+W6WPPgOfPCrSE47c7uaHE2C5awBmBS/hYq6M JnGP8I4xPuOJsA== -----END CERTIFICATE-----Generated at Fri Jan 2 17:03:19 2026 by rpki-client