This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json) Hash identifier: yA6LfFTl2/Bsa31rrSR1DTii2RgqL+enVQCMt6A75iI= Subject key identifier: DD:3F:04:2D:F1:05:1E:DB:C7:15:73:98:06:04:6D:A6:09:0C:BE:EE Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Certificate serial: 019BF4629A969AB6E7B3C29128D907DFEF17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 09:01:01 +0000 Manifest this update: Sun 25 Jan 2026 09:01:01 +0000 Manifest next update: Mon 26 Jan 2026 09:01:01 +0000 Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: JkKP69WrpTfhtmmj8JcfM4cPFMMeiRX6An1hIo6xbD8=) 2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:9a:96:9a:b6:e7:b3:c2:91:28:d9:07:df:ef:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Validity Not Before: Jan 25 09:01:01 2026 GMT Not After : Jan 26 09:01:01 2026 GMT Subject: CN=dd3f042df1051edbc715739806046da6090cbeee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:25:47:0c:c9:e6:83:7d:4c:e6:89:55:78: f8:7a:33:e0:48:48:df:b3:9b:cf:3b:38:7a:98:53: 19:79:5c:38:36:9d:5d:e3:b0:81:f1:64:3a:ab:79: 7f:e7:e9:0e:79:26:2d:20:ee:b8:a6:35:ad:91:6a: 50:10:36:5b:3a:10:5f:a2:19:25:07:1e:fe:a3:0b: 0f:19:a8:56:b0:bc:46:a7:7d:cd:77:03:6f:71:df: ef:e8:cb:4d:9d:e9:22:fb:79:dc:29:3a:f3:e7:92: 8e:8e:1c:3f:04:ca:23:80:e6:a7:0d:70:3a:f7:ce: d8:c3:38:9d:74:16:c5:db:7f:3c:6b:76:b6:11:6c: f8:f5:6b:8c:fe:24:74:ca:2b:31:22:c6:1d:f5:f9: e8:0e:df:79:0d:b6:c0:55:6c:6b:21:6f:8f:96:64: d5:71:16:2b:19:da:24:3e:39:87:b2:a4:eb:ca:01: e7:25:5d:c3:ec:8c:7f:4d:a4:3c:22:9b:18:af:4f: 30:35:b6:0e:08:5c:e0:0b:dd:cf:ba:8f:3b:1b:6c: a3:41:b4:aa:8b:ed:26:40:bd:5b:57:bb:35:15:06: 6a:91:af:8a:0c:ea:9e:dc:b4:15:98:9a:0d:94:c3: 96:84:d8:f6:ae:6c:fc:e7:4b:23:c2:a0:39:57:3c: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3F:04:2D:F1:05:1E:DB:C7:15:73:98:06:04:6D:A6:09:0C:BE:EE X509v3 Authority Key Identifier: keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c7:5b:9f:1b:a1:bf:17:1e:fb:de:ad:0b:b9:c1:98:c1:94: 3c:3e:f9:3f:6d:16:55:d1:d8:42:dd:ab:9b:66:76:e6:87:86: 88:7f:5b:86:f8:47:2b:61:ca:49:55:2d:7a:cc:dc:4a:b7:8f: e8:9a:67:5a:e4:f9:05:bf:09:a0:eb:98:92:86:b2:d6:c3:71: b1:62:31:b3:54:7b:d6:dc:3a:43:8b:df:c1:9f:db:83:ca:49: 03:27:58:46:64:f6:8d:ae:2e:7e:db:cd:a7:35:73:b0:e1:77: 30:49:46:fd:50:dc:81:49:a4:70:b7:6f:a8:3e:ca:d5:6a:79: 20:29:1c:86:b7:43:a9:67:9c:07:89:c6:4a:c4:2d:6b:c4:80: b4:2c:75:24:bb:03:3e:84:eb:91:e5:45:35:b9:0f:d4:ae:b8: 9a:32:51:25:88:8c:1b:07:28:74:17:08:14:69:c4:3e:19:f4: c2:74:c3:6d:a7:9b:bd:22:75:97:6a:f7:a0:d2:63:ff:a3:fc: 01:9d:0b:9a:be:63:f1:1d:56:93:0b:62:a0:b2:1e:98:4b:04: d9:89:4d:2a:78:87:a2:8c:ca:ed:7c:1b:0f:8e:cf:41:c4:2b: 30:21:fc:7b:2b:3e:fc:e5:d4:b3:b5:d5:7a:a7:9c:2b:92:8b: 47:a3:0c:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YpqWmrbns8KRKNkH3+8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy NGIyOGQwHhcNMjYwMTI1MDkwMTAxWhcNMjYwMTI2MDkwMTAxWjAzMTEwLwYDVQQD EyhkZDNmMDQyZGYxMDUxZWRiYzcxNTczOTgwNjA0NmRhNjA5MGNiZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjMlRwzJ5oN9TOaJVXj4ejPgSEjf s5vPOzh6mFMZeVw4Np1d47CB8WQ6q3l/5+kOeSYtIO64pjWtkWpQEDZbOhBfohkl Bx7+owsPGahWsLxGp33NdwNvcd/v6MtNneki+3ncKTrz55KOjhw/BMojgOanDXA6 987YwziddBbF2388a3a2EWz49WuM/iR0yisxIsYd9fnoDt95DbbAVWxrIW+PlmTV cRYrGdokPjmHsqTrygHnJV3D7Ix/TaQ8IpsYr08wNbYOCFzgC93Puo87G2yjQbSq i+0mQL1bV7s1FQZqka+KDOqe3LQVmJoNlMOWhNj2rmz850sjwqA5VzwKPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0/BC3xBR7bxxVzmAYEbaYJDL7uMB8GA1UdIwQY MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusdbnxuh vxce+96tC7nBmMGUPD75P20WVdHYQt2rm2Z25oeGiH9bhvhHK2HKSVUteszcSreP 6JpnWuT5Bb8JoOuYkoay1sNxsWIxs1R71tw6Q4vfwZ/bg8pJAydYRmT2ja4uftvN pzVzsOF3MElG/VDcgUmkcLdvqD7K1Wp5ICkchrdDqWecB4nGSsQta8SAtCx1JLsD PoTrkeVFNbkP1K64mjJRJYiMGwcodBcIFGnEPhn0wnTDbaebvSJ1l2r3oNJj/6P8 AZ0Lmr5j8R1WkwtioLIemEsE2YlNKniHoozK7XwbD47PQcQrMCH8eys+/OXUs7XV eqecK5KLR6MMcQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:35 2026 by rpki-client