This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json) Hash identifier: CeYG8sA3rIVYGUlvZjc+TyO0fbdD6iYLb4J4RdxqDk8= Subject key identifier: E7:37:53:2B:D8:AC:90:86:51:77:9D:19:84:2F:4C:72:20:84:75:B9 Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73 Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173 Certificate serial: 019BFC8A085E8074232A5FCBFE5DD668A734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 23:01:02 +0000 Manifest this update: Mon 26 Jan 2026 23:01:02 +0000 Manifest next update: Tue 27 Jan 2026 23:01:02 +0000 Files and hashes: 1: E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa (hash: 6QZmnjSIaFmg0mpij0y/20sY5ruAuIBmod+jn1qrIQA=) 2: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: bH2emVSCCcqWQt3CH2UZrSOOWBDtdtolZ3J+xCikG7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:08:5e:80:74:23:2a:5f:cb:fe:5d:d6:68:a7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173 Validity Not Before: Jan 26 23:01:02 2026 GMT Not After : Jan 27 23:01:02 2026 GMT Subject: CN=e737532bd8ac908651779d19842f4c72208475b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:26:5b:a6:8b:a9:30:c8:08:a2:0b:e4:95: ed:b6:fe:11:45:ce:dc:6e:3d:ad:32:cc:67:f9:c9: 4d:2d:06:c5:2a:8e:f9:6e:c3:c7:cb:df:74:da:1d: fa:92:48:90:9c:9b:17:29:8d:92:d1:31:ba:56:9b: a1:9a:ff:31:f2:1b:f2:d2:75:9e:15:bb:26:16:98: 77:0c:fe:67:cf:ae:d9:24:89:cb:a9:9e:d3:a2:a7: be:e4:72:92:51:bb:38:0e:a7:b5:f6:ef:24:e3:a5: 0f:ca:6d:62:25:94:32:ad:bb:11:cf:c7:c5:24:5c: 8f:14:f7:06:5f:c6:be:0f:a3:65:4e:4f:55:29:d3: b4:ad:d2:81:c6:b7:a7:d5:b4:18:5c:87:5e:ba:d2: e2:76:57:6b:d6:0a:d7:3c:51:79:50:5a:43:40:a8: f5:9d:ab:1b:af:66:0f:94:ac:d8:c6:9d:3c:81:4e: 86:6a:b2:bf:68:62:54:05:69:17:26:f8:5d:02:51: 88:d9:15:78:2c:e4:50:a1:bf:69:53:03:8a:85:53: 94:d9:40:7f:62:f7:71:2d:1b:6d:eb:db:b6:e0:7a: db:f4:1b:d3:1d:f7:2c:95:d0:bc:66:b5:22:8a:f6: 60:4c:dc:6d:9c:e2:95:10:e5:ba:76:ac:9b:bc:41: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:37:53:2B:D8:AC:90:86:51:77:9D:19:84:2F:4C:72:20:84:75:B9 X509v3 Authority Key Identifier: keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:61:1f:0f:07:b8:d3:a3:07:b7:4b:4a:7e:c5:4c:77:ce:40: 4f:03:b1:1a:1a:ce:4e:de:65:ca:ed:08:54:34:08:4d:b6:3c: ed:b0:78:74:d3:da:21:6e:b1:c4:61:4a:4c:7e:90:ef:30:f4: 59:d0:19:2e:c8:78:40:1b:d2:9d:5e:17:44:62:03:b8:59:6e: 52:a8:68:32:ca:cc:28:74:61:1a:4c:90:a2:12:6e:6e:0e:79: 78:fa:b1:c7:25:a9:8b:f4:6e:d4:46:d5:ac:ac:fd:85:01:33: 85:65:13:7b:f2:fe:7b:81:2b:7d:44:f3:1f:b5:15:17:cf:30: 3b:9a:92:51:19:c9:7f:63:47:1e:12:c0:d9:29:62:73:c6:e4: 30:dc:91:90:23:34:ff:6f:fa:69:29:8f:67:2c:a8:af:cc:bb: f2:0c:d3:89:be:0f:e3:a0:31:15:82:6c:57:16:cb:89:67:b4: ab:c0:33:c3:99:cc:be:84:15:cc:82:6e:91:f7:25:c3:27:17: 8a:08:52:4d:51:37:ed:69:8f:83:27:a5:28:da:0a:b0:f4:5c: 4d:f1:44:24:7b:7f:7d:d2:96:01:80:01:b5:ec:a1:68:2f:9f: 34:54:f4:88:aa:68:24:be:95:a2:2f:f7:e6:51:48:0f:52:22: cd:d2:9d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ighegHQjKl/L/l3WaKc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk MzYxNzMwHhcNMjYwMTI2MjMwMTAyWhcNMjYwMTI3MjMwMTAyWjAzMTEwLwYDVQQD EyhlNzM3NTMyYmQ4YWM5MDg2NTE3NzlkMTk4NDJmNGM3MjIwODQ3NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wUmW6aLqTDICKIL5JXttv4RRc7c bj2tMsxn+clNLQbFKo75bsPHy9902h36kkiQnJsXKY2S0TG6Vpuhmv8x8hvy0nWe FbsmFph3DP5nz67ZJInLqZ7Toqe+5HKSUbs4Dqe19u8k46UPym1iJZQyrbsRz8fF JFyPFPcGX8a+D6NlTk9VKdO0rdKBxren1bQYXIdeutLidldr1grXPFF5UFpDQKj1 nasbr2YPlKzYxp08gU6GarK/aGJUBWkXJvhdAlGI2RV4LORQob9pUwOKhVOU2UB/ YvdxLRtt69u24Hrb9BvTHfcsldC8ZrUiivZgTNxtnOKVEOW6dqybvEGsXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc3UyvYrJCGUXedGYQvTHIghHW5MB8GA1UdIwQY MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2EfDwe4 06MHt0tKfsVMd85ATwOxGhrOTt5lyu0IVDQITbY87bB4dNPaIW6xxGFKTH6Q7zD0 WdAZLsh4QBvSnV4XRGIDuFluUqhoMsrMKHRhGkyQohJubg55ePqxxyWpi/Ru1EbV rKz9hQEzhWUTe/L+e4ErfUTzH7UVF88wO5qSURnJf2NHHhLA2Slic8bkMNyRkCM0 /2/6aSmPZyyor8y78gzTib4P46AxFYJsVxbLiWe0q8Azw5nMvoQVzIJukfclwycX ighSTVE37WmPgyelKNoKsPRcTfFEJHt/fdKWAYABteyhaC+fNFT0iKpoJL6Voi/3 5lFID1IizdKd6w== -----END CERTIFICATE-----Generated at Tue Jan 27 03:10:53 2026 by rpki-client