This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: 4930qucLRRLbA9fF6kuD3Od90TZLOCczgcAVUZPut6w= Subject key identifier: 44:A8:8E:24:55:97:1D:A1:FC:3F:F5:F0:32:5B:78:DB:2C:22:B3:44 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019BFC8A9ADC431B625B24EDD058A89F32EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 152B Signing time: Mon 26 Jan 2026 23:01:40 +0000 Manifest this update: Mon 26 Jan 2026 23:01:40 +0000 Manifest next update: Tue 27 Jan 2026 23:01:40 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: Qaycn02HxBCmikCGDJkoGCwF1so5DLssND4/ehUfzP4=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:9a:dc:43:1b:62:5b:24:ed:d0:58:a8:9f:32:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jan 26 23:01:40 2026 GMT Not After : Jan 27 23:01:40 2026 GMT Subject: CN=44a88e2455971da1fc3ff5f0325b78db2c22b344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:78:72:a0:53:a1:dd:42:39:fd:5c:bb:98: 9d:2e:df:46:5d:86:67:5e:12:0c:5f:a1:fd:0f:95: 12:3b:cb:0c:5d:35:36:8e:92:49:d9:89:56:88:95: 0b:9a:b6:3a:7f:15:b4:1d:e5:52:e4:e9:40:f7:3c: 9a:44:62:15:00:1f:e8:db:07:d7:ef:a8:d8:90:c6: f7:fe:89:27:21:98:a5:11:54:d4:33:66:f0:e7:d0: 1a:f1:9f:3e:92:40:4c:95:28:68:e3:5d:2e:50:2a: 8c:01:69:7f:21:26:d3:91:29:50:aa:42:4f:7a:80: 71:dc:f7:00:8e:86:66:8e:1b:db:33:3d:e6:41:5f: ef:fd:99:0d:42:5f:14:4d:b6:e8:17:d4:d0:e6:5c: 55:d8:ca:02:9d:3f:15:79:39:58:42:a2:a6:e6:e9: 87:ed:ac:0d:a7:a6:1c:4d:53:ee:25:a6:40:d4:7c: 10:08:03:6b:d6:d8:74:5b:fc:27:db:3a:b1:f9:71: d2:2b:c7:7a:b4:99:91:3f:62:f5:77:94:7d:e3:16: 26:27:2f:bf:ee:d1:22:f4:00:d4:1a:bf:23:87:79: e4:d5:f9:af:e6:ab:a7:b1:3a:39:15:e3:45:91:0e: 4c:74:07:ab:5e:31:45:cd:1e:99:9c:fd:31:76:23: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:8E:24:55:97:1D:A1:FC:3F:F5:F0:32:5B:78:DB:2C:22:B3:44 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:33:51:83:36:36:96:90:69:f2:68:92:08:d2:28:11:65:96: cc:e4:9b:3b:d3:95:20:32:11:aa:cd:aa:58:cd:92:52:1a:48: 9b:83:01:96:f6:62:3c:9c:91:5a:9a:1a:aa:31:2b:0a:55:de: 6a:61:63:08:af:f5:5f:f5:2a:c2:33:01:6f:72:62:47:70:38: 74:69:ac:11:51:0f:f4:25:0d:1e:67:10:22:77:d8:3b:07:72: 62:8d:1a:05:c7:de:50:53:82:d3:1e:6b:2f:f5:2d:f7:68:65: 3a:f6:f8:d4:3f:8a:df:fb:3f:c9:0e:eb:58:6f:aa:26:75:18: 2f:c6:8c:38:c2:3e:36:94:d1:be:51:5a:bc:e5:c2:74:ae:16: 80:04:ef:f2:20:0e:38:e3:ed:a7:0c:a8:68:b4:07:a7:bf:6e: 51:ea:51:83:aa:94:71:3c:fd:0b:4a:cc:f6:b0:07:23:07:f5: 6e:64:76:1e:4a:a9:ee:61:ef:f2:4e:b3:7e:70:98:82:63:6e: ca:2a:58:91:85:03:4d:13:9f:95:b9:60:db:47:e6:bc:3a:1c: 2d:6f:6e:94:72:a3:e5:37:06:3e:3d:8f:f5:4f:10:8b:04:bf: c8:70:13:1e:85:4a:79:b0:63:a1:91:31:3d:bd:f4:9d:18:aa: d1:aa:d8:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iprcQxtiWyTt0FionzLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMTI2MjMwMTQwWhcNMjYwMTI3MjMwMTQwWjAzMTEwLwYDVQQD Eyg0NGE4OGUyNDU1OTcxZGExZmMzZmY1ZjAzMjViNzhkYjJjMjJiMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJd4cqBTod1COf1cu5idLt9GXYZn XhIMX6H9D5USO8sMXTU2jpJJ2YlWiJULmrY6fxW0HeVS5OlA9zyaRGIVAB/o2wfX 76jYkMb3/oknIZilEVTUM2bw59Aa8Z8+kkBMlSho410uUCqMAWl/ISbTkSlQqkJP eoBx3PcAjoZmjhvbMz3mQV/v/ZkNQl8UTbboF9TQ5lxV2MoCnT8VeTlYQqKm5umH 7awNp6YcTVPuJaZA1HwQCANr1th0W/wn2zqx+XHSK8d6tJmRP2L1d5R94xYmJy+/ 7tEi9ADUGr8jh3nk1fmv5qunsTo5FeNFkQ5MdAerXjFFzR6ZnP0xdiMfuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESojiRVlx2h/D/18DJbeNssIrNEMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzNRgzY2 lpBp8miSCNIoEWWWzOSbO9OVIDIRqs2qWM2SUhpIm4MBlvZiPJyRWpoaqjErClXe amFjCK/1X/UqwjMBb3JiR3A4dGmsEVEP9CUNHmcQInfYOwdyYo0aBcfeUFOC0x5r L/Ut92hlOvb41D+K3/s/yQ7rWG+qJnUYL8aMOMI+NpTRvlFavOXCdK4WgATv8iAO OOPtpwyoaLQHp79uUepRg6qUcTz9C0rM9rAHIwf1bmR2Hkqp7mHv8k6zfnCYgmNu yipYkYUDTROflblg20fmvDocLW9ulHKj5TcGPj2P9U8QiwS/yHATHoVKebBjoZEx Pb30nRiq0arYbA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:40 2026 by rpki-client