This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json) Hash identifier: KxupkNFnDc81BbI9iysmeP5qxbW7O884kzWasnrGGDc= Subject key identifier: 81:A4:89:0C:F8:56:FB:A3:51:86:EC:09:D3:B7:52:C4:A1:AE:22:0F Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860 Certificate serial: 019BF34FEED2D4A57B8382CEC6FE3BF898D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft Manifest number: 0F83 Signing time: Sun 25 Jan 2026 04:01:00 +0000 Manifest this update: Sun 25 Jan 2026 04:01:00 +0000 Manifest next update: Mon 26 Jan 2026 04:01:00 +0000 Files and hashes: 1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: kQyjU+X5jrFEbirxAmqgEHFjwyLeoxCCndXZrfcdQe8=) 2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=) 3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=) 4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=) 5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:ee:d2:d4:a5:7b:83:82:ce:c6:fe:3b:f8:98:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860 Validity Not Before: Jan 25 04:01:00 2026 GMT Not After : Jan 26 04:01:00 2026 GMT Subject: CN=81a4890cf856fba35186ec09d3b752c4a1ae220f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:94:c3:eb:0b:1e:51:96:da:c9:f2:32:a0: ba:44:49:1e:43:56:77:8a:dc:fb:d7:87:e2:ea:16: d7:9b:54:e1:0f:ec:5a:fc:81:14:67:84:ab:12:a8: 3b:2c:dc:50:52:c2:50:22:b8:ef:fd:c5:f5:7c:6a: 44:16:b2:ed:b9:6a:49:e7:6f:59:85:b5:e8:7d:6d: 6b:55:db:32:e3:b2:1a:24:1d:9f:88:4f:32:07:12: 99:fd:47:c6:f8:49:01:47:90:03:93:fb:da:9c:0d: 7a:40:29:01:e1:00:02:54:3a:60:46:dc:8d:07:61: aa:59:e3:37:81:25:b3:c9:c5:6c:8a:15:30:6f:78: 4e:6c:95:ab:23:c6:eb:90:c1:53:8d:e9:45:a1:9c: f0:6f:52:2d:ee:95:f1:62:e3:1f:8d:34:37:19:3a: 77:37:01:93:76:3d:57:77:97:36:24:be:f0:e3:7f: 04:d3:6b:d5:d6:69:19:79:9a:3b:a3:eb:4e:34:f0: 20:87:d0:99:5a:9c:f9:f6:2c:a0:0a:3a:cf:0b:41: 26:0d:70:28:fe:0e:7d:71:de:c3:7f:49:5c:54:bd: 9f:4e:25:50:07:08:03:59:92:96:cb:34:fe:ae:13: d7:ac:d6:b5:ef:99:7b:e9:d2:0d:7c:8a:30:5d:cf: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:89:0C:F8:56:FB:A3:51:86:EC:09:D3:B7:52:C4:A1:AE:22:0F X509v3 Authority Key Identifier: keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3c:4d:62:ce:17:34:af:07:7a:2b:a4:ff:b9:03:bb:53:2a: 40:9a:38:04:58:55:de:d7:20:11:69:2d:f4:3a:83:9f:ba:5e: 1a:ae:db:fc:02:ef:31:21:15:79:dd:f6:8e:da:bd:55:79:af: 24:46:0a:3b:73:14:c3:55:5c:73:0f:c6:c0:df:e7:29:1e:f7: f0:54:98:36:bd:f2:db:2e:ae:6b:0a:1a:c2:41:66:70:29:8e: 8d:1c:86:57:e1:00:8a:eb:4b:cb:f1:53:88:7c:80:55:19:d5: a4:84:e0:c5:6f:a1:6a:c8:6a:76:e8:cc:d5:a4:af:35:f6:48: 5a:34:1f:02:8a:09:35:9a:82:06:00:b7:b8:69:99:79:c2:1c: 2d:49:5a:78:19:9f:4e:4b:cd:21:af:8c:72:b6:dd:e5:f7:8e: ed:b0:b8:34:2d:91:31:2e:a2:69:6c:3b:39:8a:0f:7b:71:50: 53:cc:02:ce:bd:47:d1:88:bb:2b:f6:05:6e:52:b3:4e:95:5a: 06:3b:73:e6:dd:82:38:27:c6:1d:c0:23:21:40:24:03:51:21: 5d:8c:ab:b4:91:ac:5d:f8:4a:9d:3a:5d:a0:50:54:df:84:9c: 24:1a:4c:2a:39:a5:47:2b:ce:18:dc:d7:7d:56:a7:83:17:9d: 81:60:09:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT+7S1KV7g4LOxv47+JjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1 ZWQ4NjAwHhcNMjYwMTI1MDQwMTAwWhcNMjYwMTI2MDQwMTAwWjAzMTEwLwYDVQQD Eyg4MWE0ODkwY2Y4NTZmYmEzNTE4NmVjMDlkM2I3NTJjNGExYWUyMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVqUw+sLHlGW2snyMqC6REkeQ1Z3 itz714fi6hbXm1ThD+xa/IEUZ4SrEqg7LNxQUsJQIrjv/cX1fGpEFrLtuWpJ529Z hbXofW1rVdsy47IaJB2fiE8yBxKZ/UfG+EkBR5ADk/vanA16QCkB4QACVDpgRtyN B2GqWeM3gSWzycVsihUwb3hObJWrI8brkMFTjelFoZzwb1It7pXxYuMfjTQ3GTp3 NwGTdj1Xd5c2JL7w438E02vV1mkZeZo7o+tONPAgh9CZWpz59iygCjrPC0EmDXAo /g59cd7Df0lcVL2fTiVQBwgDWZKWyzT+rhPXrNa175l76dINfIowXc8HDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGkiQz4VvujUYbsCdO3UsShriIPMB8GA1UdIwQY MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDxNYs4X NK8Heiuk/7kDu1MqQJo4BFhV3tcgEWkt9DqDn7peGq7b/ALvMSEVed32jtq9VXmv JEYKO3MUw1Vccw/GwN/nKR738FSYNr3y2y6uawoawkFmcCmOjRyGV+EAiutLy/FT iHyAVRnVpITgxW+hashqdujM1aSvNfZIWjQfAooJNZqCBgC3uGmZecIcLUlaeBmf TkvNIa+Mcrbd5feO7bC4NC2RMS6iaWw7OYoPe3FQU8wCzr1H0Yi7K/YFblKzTpVa Bjtz5t2COCfGHcAjIUAkA1EhXYyrtJGsXfhKnTpdoFBU34ScJBpMKjmlRyvOGNzX fVangxedgWAJKA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:51:45 2026 by rpki-client