This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json) Hash identifier: /04giBU/Q+nlQflSz5M7AVZAJhNkpVcqWTJHWshl2aI= Subject key identifier: CF:C4:36:6F:54:F0:BC:9F:71:2A:6E:7C:61:2C:4C:15:87:A7:68:D9 Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Certificate serial: 019BFB7749A67C66929169F5BAFCBF7C2653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 18:00:57 +0000 Manifest this update: Mon 26 Jan 2026 18:00:57 +0000 Manifest next update: Tue 27 Jan 2026 18:00:57 +0000 Files and hashes: 1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: DGPYraeBQSUT6RTZzDkwCWbx+MeTSwYt8jWwyhNW338=) 2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:49:a6:7c:66:92:91:69:f5:ba:fc:bf:7c:26:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Validity Not Before: Jan 26 18:00:57 2026 GMT Not After : Jan 27 18:00:57 2026 GMT Subject: CN=cfc4366f54f0bc9f712a6e7c612c4c1587a768d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:44:db:62:7d:c8:6c:71:e9:f4:85:6c:a1:8e: 1d:af:d3:80:99:13:88:92:80:82:1e:25:b9:fb:95: 30:19:10:73:7b:ae:93:4c:11:43:85:57:74:a5:2c: 70:f2:bf:87:ed:ba:bb:f7:19:ff:5c:b1:07:d2:fa: 21:dd:01:04:e8:49:a5:b5:f4:ca:1c:72:8d:89:2d: ba:5d:8f:b2:54:c0:73:d9:b2:f4:8c:0e:50:9b:e0: df:5e:71:83:2c:b4:7d:f5:1c:b2:96:30:fa:7b:b5: dc:e9:6f:1a:42:a6:f0:b5:13:de:60:31:f7:84:49: e9:c7:80:8b:b4:e0:5a:2c:d1:7f:30:2b:f1:fe:f2: b8:ee:d6:9f:43:a4:2f:4f:eb:d1:cb:ce:81:63:cd: db:db:35:3a:34:b8:aa:66:1a:39:02:6e:51:c6:6b: 4a:98:b1:56:9b:5b:a2:2a:85:61:b5:59:d2:61:73: 41:d7:56:6a:d4:7b:17:87:c8:2c:23:12:d4:0e:8c: 41:bf:91:92:52:8b:d0:ff:7c:1c:7e:1c:ae:70:44: 65:22:07:03:7e:e2:14:11:19:61:07:e7:ea:ad:39: 9b:ed:e4:ee:2e:ca:48:80:b0:6e:20:c8:4c:61:79: 81:d4:23:0a:59:2a:23:a3:6f:03:e3:43:4c:be:09: a3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C4:36:6F:54:F0:BC:9F:71:2A:6E:7C:61:2C:4C:15:87:A7:68:D9 X509v3 Authority Key Identifier: keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:04:dd:22:fb:b1:74:15:68:ab:d7:fa:39:3f:3f:1f:71:d8: 20:08:c2:b9:12:68:a8:a4:bb:51:48:77:3d:aa:c8:12:58:69: a4:e5:67:27:a3:15:d8:62:31:74:92:1f:ef:70:09:26:3e:c7: 1d:1a:45:fd:01:00:ba:4b:70:00:dd:b2:8c:03:7c:84:72:0b: 9c:08:45:2e:9a:57:17:66:41:0d:c0:9b:d1:ca:aa:8e:d7:e2: 99:e4:ad:bc:54:53:71:32:ca:41:ac:23:1d:37:63:d1:ef:a6: b6:02:44:82:d4:16:6d:2a:71:fa:70:e6:88:5d:08:0e:07:16: 46:21:5d:0e:19:ce:52:55:16:ca:c0:7b:60:5b:52:51:38:05: 4d:76:d4:b2:d3:e8:c9:f3:5a:70:fd:13:9e:88:fb:93:10:d8: d5:77:fb:77:03:7b:8e:91:39:3e:32:a6:1d:7e:8f:47:56:04: c7:63:31:a2:88:0e:56:e3:8a:e9:c9:a0:9c:82:29:75:14:3c: ad:0f:e9:fc:ee:ec:91:7c:b0:06:7e:82:52:1f:68:4c:90:d9: 55:fb:fe:86:ca:0c:49:86:a4:52:00:c3:59:78:48:a0:54:48: 5a:a7:1f:ac:eb:a8:cb:e3:20:21:27:33:b7:ed:d8:09:95:40: c9:1b:27:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d0mmfGaSkWn1uvy/fCZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz YmVhMWQwHhcNMjYwMTI2MTgwMDU3WhcNMjYwMTI3MTgwMDU3WjAzMTEwLwYDVQQD EyhjZmM0MzY2ZjU0ZjBiYzlmNzEyYTZlN2M2MTJjNGMxNTg3YTc2OGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ETbYn3IbHHp9IVsoY4dr9OAmROI koCCHiW5+5UwGRBze66TTBFDhVd0pSxw8r+H7bq79xn/XLEH0voh3QEE6EmltfTK HHKNiS26XY+yVMBz2bL0jA5Qm+DfXnGDLLR99RyyljD6e7Xc6W8aQqbwtRPeYDH3 hEnpx4CLtOBaLNF/MCvx/vK47tafQ6QvT+vRy86BY83b2zU6NLiqZho5Am5RxmtK mLFWm1uiKoVhtVnSYXNB11Zq1HsXh8gsIxLUDoxBv5GSUovQ/3wcfhyucERlIgcD fuIUERlhB+fqrTmb7eTuLspIgLBuIMhMYXmB1CMKWSojo28D40NMvgmjhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/ENm9U8LyfcSpufGEsTBWHp2jZMB8GA1UdIwQY MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3 LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2QTdIvux dBVoq9f6OT8/H3HYIAjCuRJoqKS7UUh3ParIElhppOVnJ6MV2GIxdJIf73AJJj7H HRpF/QEAuktwAN2yjAN8hHILnAhFLppXF2ZBDcCb0cqqjtfimeStvFRTcTLKQawj HTdj0e+mtgJEgtQWbSpx+nDmiF0IDgcWRiFdDhnOUlUWysB7YFtSUTgFTXbUstPo yfNacP0Tnoj7kxDY1Xf7dwN7jpE5PjKmHX6PR1YEx2MxoogOVuOK6cmgnIIpdRQ8 rQ/p/O7skXywBn6CUh9oTJDZVfv+hsoMSYakUgDDWXhIoFRIWqcfrOuoy+MgIScz t+3YCZVAyRsnng== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:44 2026 by rpki-client