This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json) Hash identifier: VibZQH24tsPIOk6TZXR8ilrEUnuE0W26bifRW1/VPGc= Subject key identifier: C2:7B:0D:5B:C2:F3:82:62:B5:C3:FB:B8:8C:B3:40:7F:00:E6:04:50 Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Certificate serial: 019BD13132FA5AC80795F292F3D25203EBEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft Manifest number: 17D9 Signing time: Sun 18 Jan 2026 13:00:20 +0000 Manifest this update: Sun 18 Jan 2026 13:00:20 +0000 Manifest next update: Mon 19 Jan 2026 13:00:20 +0000 Files and hashes: 1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=) 2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=) 3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=) 4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: mcQGWQkmedI7xW59zDJyYcfSrBO2B2q85pr+cTuqmtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:31:32:fa:5a:c8:07:95:f2:92:f3:d2:52:03:eb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390 Validity Not Before: Jan 18 13:00:20 2026 GMT Not After : Jan 19 13:00:20 2026 GMT Subject: CN=c27b0d5bc2f38262b5c3fbb88cb3407f00e60450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:e4:c0:fc:b9:e0:12:27:70:4c:41:1a:9a: 79:19:f4:6d:19:2e:5e:ec:a3:eb:57:ef:21:e1:c4: 9d:01:33:59:38:45:10:3e:14:80:49:b3:01:4c:b4: c7:f0:1f:30:d9:6d:28:b8:02:a6:52:8e:f4:b8:fd: 88:7c:01:99:8e:95:b9:8a:8b:a8:d6:ef:31:82:13: 35:5d:60:ec:a6:ec:c6:02:7a:f1:cc:78:72:23:17: ac:cf:38:15:99:04:4e:33:54:8d:b9:ab:b4:fa:f8: 3b:4d:03:4d:ed:ba:ca:bb:3b:f6:fc:fa:e8:14:45: bf:e0:5b:19:c2:c3:2b:10:63:00:f2:ca:c4:91:cc: ff:79:5b:9c:f1:4a:ef:c4:bb:85:3f:0c:18:50:c7: b3:11:42:18:72:51:91:fd:9e:2c:03:f6:ab:3e:44: f8:4a:96:01:c6:e2:e9:c5:bb:db:64:31:e3:d9:3e: 52:a1:64:f3:7f:18:c1:b8:51:20:d7:45:b0:b9:84: 7b:6c:16:f5:f8:88:a4:a6:0c:e9:c9:42:1d:e6:09: 46:dd:c1:91:6e:12:9f:59:b7:91:cd:e1:0a:c2:5b: 8a:09:5c:34:d9:9a:13:92:8d:3a:f9:7e:54:f1:2f: 59:8c:6f:79:d5:31:55:62:82:9e:d6:64:7b:ef:17: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7B:0D:5B:C2:F3:82:62:B5:C3:FB:B8:8C:B3:40:7F:00:E6:04:50 X509v3 Authority Key Identifier: keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:af:55:df:82:d4:a9:67:0b:e0:1e:8b:39:e9:03:4f:98:bb: cd:48:1d:df:1d:25:7e:b5:1a:db:f0:94:95:a3:8c:f7:72:08: 30:85:97:9f:20:4e:a6:99:2b:e6:99:0c:d5:38:0d:67:6f:53: dc:40:24:81:db:37:47:82:0b:9a:50:78:17:e7:55:f4:ee:78: e4:df:b6:ab:33:a4:63:90:fc:a1:a2:d3:48:1a:13:ce:98:2b: 42:ae:7f:fb:81:2d:41:79:96:7d:ea:cd:e3:6a:ce:9d:54:42: 7b:12:09:92:54:ce:67:d7:aa:a6:67:36:46:f6:c7:7f:4a:6f: 12:82:96:7e:29:9d:1c:82:0e:37:32:44:f2:ab:ca:c4:03:05: ea:b4:3d:e5:ea:c9:2a:26:8d:09:59:17:af:c4:ae:4b:81:3c: 75:2e:1e:47:cd:5a:30:9c:d7:f6:aa:99:93:82:76:f2:1a:17: 75:f9:f8:b7:aa:f6:28:99:5e:da:5f:e5:95:f5:d9:d2:5d:b2: 6a:86:b3:a7:91:3d:88:78:fa:a8:65:df:a5:08:83:f1:2f:74: 3d:b2:3e:ca:98:34:3f:d7:0b:eb:d9:65:b0:56:a7:94:69:f3: 23:90:48:85:76:db:a0:38:63:25:0a:67:97:51:cc:a8:81:32: b7:62:3a:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRMTL6WsgHlfKS89JSA+vsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1 ODEzOTAwHhcNMjYwMTE4MTMwMDIwWhcNMjYwMTE5MTMwMDIwWjAzMTEwLwYDVQQD EyhjMjdiMGQ1YmMyZjM4MjYyYjVjM2ZiYjg4Y2IzNDA3ZjAwZTYwNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT7kwPy54BIncExBGpp5GfRtGS5e 7KPrV+8h4cSdATNZOEUQPhSASbMBTLTH8B8w2W0ouAKmUo70uP2IfAGZjpW5iouo 1u8xghM1XWDspuzGAnrxzHhyIxeszzgVmQROM1SNuau0+vg7TQNN7brKuzv2/Pro FEW/4FsZwsMrEGMA8srEkcz/eVuc8UrvxLuFPwwYUMezEUIYclGR/Z4sA/arPkT4 SpYBxuLpxbvbZDHj2T5SoWTzfxjBuFEg10WwuYR7bBb1+IikpgzpyUId5glG3cGR bhKfWbeRzeEKwluKCVw02ZoTko06+X5U8S9ZjG951TFVYoKe1mR77xeeWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ7DVvC84JitcP7uIyzQH8A5gRQMB8GA1UdIwQY MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1 LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK69V34LU qWcL4B6LOekDT5i7zUgd3x0lfrUa2/CUlaOM93IIMIWXnyBOppkr5pkM1TgNZ29T 3EAkgds3R4ILmlB4F+dV9O545N+2qzOkY5D8oaLTSBoTzpgrQq5/+4EtQXmWferN 42rOnVRCexIJklTOZ9eqpmc2RvbHf0pvEoKWfimdHIIONzJE8qvKxAMF6rQ95erJ KiaNCVkXr8SuS4E8dS4eR81aMJzX9qqZk4J28hoXdfn4t6r2KJle2l/llfXZ0l2y aoazp5E9iHj6qGXfpQiD8S90PbI+ypg0P9cL69llsFanlGnzI5BIhXbboDhjJQpn l1HMqIEyt2I60Q== -----END CERTIFICATE-----Generated at Sun Jan 18 17:44:21 2026 by rpki-client