This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json) Hash identifier: rVt/MY//RpuI/Wm55uKymNGJ36/zE/Ge1auwdFVX6bM= Subject key identifier: C1:C5:B8:80:95:BF:C4:07:4F:29:D2:39:56:38:1A:23:E2:B1:B4:F0 Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826 Certificate serial: 019BFB408FB934BD95EFDCEEE19B66FC71E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft Manifest number: 0ED1 Signing time: Mon 26 Jan 2026 17:01:10 +0000 Manifest this update: Mon 26 Jan 2026 17:01:10 +0000 Manifest next update: Tue 27 Jan 2026 17:01:10 +0000 Files and hashes: 1: jRCRVJYAGBXYgrtW6iJFIwl-3T4.roa (hash: zd3vqx8SZ7kQ7l/rKEA4mZdGGLkEyNUj7EHXRniiHWs=) 2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: Hq5gZJmo/X0VtOZkKlNilRgkVJIC3rW13WDTZVYwy4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:8f:b9:34:bd:95:ef:dc:ee:e1:9b:66:fc:71:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826 Validity Not Before: Jan 26 17:01:10 2026 GMT Not After : Jan 27 17:01:10 2026 GMT Subject: CN=c1c5b88095bfc4074f29d23956381a23e2b1b4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:96:7d:c7:cc:2c:2d:3e:70:3c:d0:fc:77:51: 8c:54:ab:cc:5c:45:da:39:4b:1f:0c:b7:f9:a3:ff: 64:00:ad:2d:3f:d8:24:3a:eb:26:ca:29:05:85:fd: 3c:65:46:19:9f:06:89:70:2a:84:79:c5:30:68:cf: 03:26:af:94:68:be:ed:80:b4:1b:7b:2a:02:56:3e: 46:3e:4c:8a:bf:a9:ca:70:90:37:49:2a:3d:07:69: 65:31:6f:6b:29:c7:38:02:98:69:39:94:9f:f1:9b: 1f:95:3b:8f:d9:90:09:03:b2:45:ff:be:99:e8:80: c4:43:7b:b1:16:c5:54:c2:fd:c9:99:70:bd:29:bd: 83:c5:58:f9:af:1c:01:6e:97:1d:bf:9f:37:7d:8d: 18:fb:fb:61:31:dd:32:0a:4d:3c:28:97:65:65:80: 2a:df:b2:bf:9b:98:0e:92:86:db:2e:52:2f:de:b1: 06:22:59:3b:15:61:aa:62:b3:03:ce:ce:a7:80:c9: 9d:28:08:fb:90:cd:c9:91:5c:c3:83:3b:65:3d:4a: f3:f1:31:23:a9:71:12:44:8a:0a:b7:e1:6f:3a:03: a8:9e:9a:4c:04:09:3c:dc:72:53:f5:8c:15:1f:21: 7b:75:ec:c1:6a:06:8f:47:e7:65:05:ba:e8:ea:08: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C5:B8:80:95:BF:C4:07:4F:29:D2:39:56:38:1A:23:E2:B1:B4:F0 X509v3 Authority Key Identifier: keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1f:0b:45:6d:fe:57:61:cf:9f:3e:2c:cb:83:24:fb:35:35: 2b:f5:07:89:67:09:ad:bf:3f:bf:d3:2d:d8:3a:5a:c1:8e:3d: b8:33:44:dc:b9:1d:28:88:d4:7a:9d:a8:7d:fb:ea:3b:72:11: 17:b0:66:3d:34:01:eb:e6:89:c3:ff:e1:c8:01:1f:8d:2a:2a: 90:bd:46:3a:66:81:88:7a:1b:13:17:ba:4c:ec:e6:c4:a0:cd: 1d:c0:c5:35:c7:9d:1e:98:7f:b9:92:40:f8:46:86:53:f9:aa: d8:58:b9:ab:c4:4d:34:03:0f:ad:ed:c3:99:52:33:e7:8d:c4: 37:84:c8:58:be:81:c5:0b:08:42:b4:2d:9e:60:64:44:d2:2e: bc:1f:56:9b:1c:9c:48:20:7a:a9:15:9d:52:dd:dd:22:6c:0e: 79:f4:e1:28:e5:22:a1:32:24:79:bc:0e:a9:dc:56:bf:4d:75: 2f:c3:f8:28:84:8b:de:8a:de:c3:ef:8e:82:0a:47:26:ca:5a: 74:d6:54:92:e4:d7:54:90:2c:08:0f:c6:a5:eb:d1:f9:f1:3d: 65:17:f2:b0:a9:bd:24:90:17:ec:78:8b:2e:b9:8b:66:dc:4c: ca:3d:72:08:41:89:c4:f4:14:2c:ba:7b:ee:21:b8:5d:39:2a: 1a:28:8f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QI+5NL2V79zu4Ztm/HHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1 NTM4MjYwHhcNMjYwMTI2MTcwMTEwWhcNMjYwMTI3MTcwMTEwWjAzMTEwLwYDVQQD EyhjMWM1Yjg4MDk1YmZjNDA3NGYyOWQyMzk1NjM4MWEyM2UyYjFiNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pZ9x8wsLT5wPND8d1GMVKvMXEXa OUsfDLf5o/9kAK0tP9gkOusmyikFhf08ZUYZnwaJcCqEecUwaM8DJq+UaL7tgLQb eyoCVj5GPkyKv6nKcJA3SSo9B2llMW9rKcc4AphpOZSf8ZsflTuP2ZAJA7JF/76Z 6IDEQ3uxFsVUwv3JmXC9Kb2DxVj5rxwBbpcdv583fY0Y+/thMd0yCk08KJdlZYAq 37K/m5gOkobbLlIv3rEGIlk7FWGqYrMDzs6ngMmdKAj7kM3JkVzDgztlPUrz8TEj qXESRIoKt+FvOgOonppMBAk83HJT9YwVHyF7dezBagaPR+dlBbro6ghgdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHFuICVv8QHTynSOVY4GiPisbTwMB8GA1UdIwQY MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOB8LRW3+ V2HPnz4sy4Mk+zU1K/UHiWcJrb8/v9Mt2DpawY49uDNE3LkdKIjUep2offvqO3IR F7BmPTQB6+aJw//hyAEfjSoqkL1GOmaBiHobExe6TOzmxKDNHcDFNcedHph/uZJA +EaGU/mq2Fi5q8RNNAMPre3DmVIz543EN4TIWL6BxQsIQrQtnmBkRNIuvB9Wmxyc SCB6qRWdUt3dImwOefThKOUioTIkebwOqdxWv011L8P4KISL3orew++OggpHJspa dNZUkuTXVJAsCA/GpevR+fE9ZRfysKm9JJAX7HiLLrmLZtxMyj1yCEGJxPQULLp7 7iG4XTkqGiiPOA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:58:44 2026 by rpki-client