This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json) Hash identifier: gHkbqQgM2XkWfwrW8HLxpIEojK0n18oDk2xfS51/wiY= Subject key identifier: 82:B2:85:18:19:82:7B:8A:20:26:B1:13:2B:A3:F3:06:80:FC:B6:E6 Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Certificate serial: 019BF651098D7C1A0C1F04F444CD5FE96694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:01:04 +0000 Manifest this update: Sun 25 Jan 2026 18:01:04 +0000 Manifest next update: Mon 26 Jan 2026 18:01:04 +0000 Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: jdmYKrMo32RFeM+q+/fj1pPcG19pFcMQrrbwlvb6qDA=) 2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:09:8d:7c:1a:0c:1f:04:f4:44:cd:5f:e9:66:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Validity Not Before: Jan 25 18:01:04 2026 GMT Not After : Jan 26 18:01:04 2026 GMT Subject: CN=82b2851819827b8a2026b1132ba3f30680fcb6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:92:e8:b0:b4:26:4b:a2:d2:48:99:94:37: 2a:e8:ad:9e:4e:eb:dd:10:d0:24:61:74:6d:0d:bd: 1b:73:4d:c5:63:f2:aa:ef:fe:30:0d:8e:d6:1b:1e: f6:de:07:98:1d:fc:a0:25:11:6e:5d:9a:31:77:b6: d1:23:64:7e:f4:e2:7b:51:84:d9:35:a2:e5:60:e4: 93:d6:3d:4e:57:76:61:eb:1b:91:ac:8a:02:47:29: 7b:b7:71:b0:bd:95:b8:2c:39:76:6d:e9:cf:25:da: aa:59:a2:cc:46:4d:84:a3:fa:d0:f0:c7:fe:ce:52: 4e:26:7a:49:6f:16:e3:a2:d4:f0:b1:a0:ae:2b:b7: ab:f8:6c:e4:7e:51:d9:82:53:77:5d:12:b6:7f:8f: 06:73:71:4c:78:fc:e4:90:b6:19:b1:31:f4:88:4c: 66:bc:9a:9f:44:80:4b:98:e0:63:94:6f:54:14:0a: c6:34:f8:da:e8:ad:dc:0c:95:89:eb:c7:40:2d:ed: 30:e7:8a:f1:69:ea:3b:cc:4b:19:95:78:7d:ee:6d: 89:dc:76:81:e8:7a:2e:e5:dc:68:a5:bc:36:a9:c7: 63:47:9a:0e:ee:6d:ce:ab:ca:8b:de:2b:29:d1:e9: 80:a5:be:a0:a5:6d:f2:f0:8e:07:61:07:c7:6a:74: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B2:85:18:19:82:7B:8A:20:26:B1:13:2B:A3:F3:06:80:FC:B6:E6 X509v3 Authority Key Identifier: keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:79:3e:cd:5d:70:db:a5:59:7a:b9:e4:5e:61:19:21:fb:40: 56:68:04:c8:94:c1:0d:7f:42:5b:a8:78:6e:4a:68:56:d8:0c: e9:34:fc:7f:9d:75:5e:27:df:3a:1b:2c:ce:9d:b4:26:74:52: f6:12:84:21:db:f5:a8:0e:b9:60:29:2e:40:b4:f0:73:f0:e9: e6:32:5e:d2:e8:73:cb:3a:e5:42:29:41:53:d6:0f:95:87:56: 95:d1:47:9e:b6:b1:c0:13:01:49:3c:ef:9b:70:ac:90:23:68: 61:68:dc:49:fb:52:60:1e:66:92:82:20:b1:11:0c:3f:45:8f: f8:f8:e9:71:2a:0e:57:9d:52:76:5c:34:8d:c0:dc:53:51:2c: 26:88:5b:60:7a:4c:05:03:72:54:5f:f1:60:84:be:24:57:2f: 0a:1f:87:ff:4a:90:0c:33:c5:68:f5:90:1c:2b:f9:7c:91:ad: a2:cd:e3:1f:0e:26:39:a0:0d:98:7c:a3:ae:76:08:ea:70:19: d7:cf:5f:51:02:8d:a2:d3:a1:3e:84:ac:98:70:12:38:ae:fe: dd:a4:fb:b7:d4:cf:e8:f5:78:94:2a:c2:97:aa:f0:cd:90:26: ca:cf:89:d0:8d:a6:43:d6:1f:ce:70:8a:53:7e:ff:84:52:7d: 02:19:66:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQmNfBoMHwT0RM1f6WaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy NGIyOGQwHhcNMjYwMTI1MTgwMTA0WhcNMjYwMTI2MTgwMTA0WjAzMTEwLwYDVQQD Eyg4MmIyODUxODE5ODI3YjhhMjAyNmIxMTMyYmEzZjMwNjgwZmNiNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg+S6LC0Jkui0kiZlDcq6K2eTuvd ENAkYXRtDb0bc03FY/Kq7/4wDY7WGx723geYHfygJRFuXZoxd7bRI2R+9OJ7UYTZ NaLlYOST1j1OV3Zh6xuRrIoCRyl7t3GwvZW4LDl2benPJdqqWaLMRk2Eo/rQ8Mf+ zlJOJnpJbxbjotTwsaCuK7er+GzkflHZglN3XRK2f48Gc3FMePzkkLYZsTH0iExm vJqfRIBLmOBjlG9UFArGNPja6K3cDJWJ68dALe0w54rxaeo7zEsZlXh97m2J3HaB 6Hou5dxopbw2qcdjR5oO7m3Oq8qL3isp0emApb6gpW3y8I4HYQfHanTf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKyhRgZgnuKICaxEyuj8waA/LbmMB8GA1UdIwQY MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3k+zV1w 26VZernkXmEZIftAVmgEyJTBDX9CW6h4bkpoVtgM6TT8f511XiffOhsszp20JnRS 9hKEIdv1qA65YCkuQLTwc/Dp5jJe0uhzyzrlQilBU9YPlYdWldFHnraxwBMBSTzv m3CskCNoYWjcSftSYB5mkoIgsREMP0WP+PjpcSoOV51Sdlw0jcDcU1EsJohbYHpM BQNyVF/xYIS+JFcvCh+H/0qQDDPFaPWQHCv5fJGtos3jHw4mOaANmHyjrnYI6nAZ 189fUQKNotOhPoSsmHASOK7+3aT7t9TP6PV4lCrCl6rwzZAmys+J0I2mQ9YfznCK U37/hFJ9AhlmBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:22:17 2026 by rpki-client