This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json) Hash identifier: Z3/VXUEP4WwpJ/up7RsZQgT46Ns1NvLXCdEatMpR6AE= Subject key identifier: E2:43:E3:B7:77:10:CB:C9:DD:51:9F:65:3D:84:3A:E2:BC:9B:FD:05 Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7 Certificate serial: 019BF80883912B0C8C4E205E81E44AEA2F91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft Manifest number: 16D4 Signing time: Mon 26 Jan 2026 02:01:05 +0000 Manifest this update: Mon 26 Jan 2026 02:01:05 +0000 Manifest next update: Tue 27 Jan 2026 02:01:05 +0000 Files and hashes: 1: AfDUmyK_-yRdfu3oY0w-ZmuI_n8.roa (hash: LsPuKpZEctSg8i+4uevFKA+sYuA+iu39H7g8hC66rsA=) 2: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: 54sOlV6jjhUug3igzT/o+ivDaELdTqbIzOscfDOT9ss=) 3: REMby4Ya31OA35rY4teZSHIa0ew.roa (hash: XyeGvAoenWA3MJIYVq931n9fMFmepWjFnS5c3uEtCFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:83:91:2b:0c:8c:4e:20:5e:81:e4:4a:ea:2f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7 Validity Not Before: Jan 26 02:01:05 2026 GMT Not After : Jan 27 02:01:05 2026 GMT Subject: CN=e243e3b77710cbc9dd519f653d843ae2bc9bfd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f0:49:9a:ea:9c:64:95:24:d9:c6:bf:a5:9e: 97:f0:b5:27:48:b9:ab:89:c3:d6:24:71:90:07:07: d5:c4:0a:6d:14:0a:9d:07:9a:55:7a:9e:11:90:f3: 8a:e8:2d:21:57:90:a7:85:9c:47:34:c4:2a:d9:30: bf:45:17:2f:0e:0c:55:92:12:b2:62:dd:55:19:f5: f1:4e:92:9f:dd:d1:bb:f8:60:d5:e2:cc:78:36:32: a6:ca:51:bd:fa:62:d1:7b:af:6c:17:e8:dc:de:61: 08:20:2b:4b:6c:06:2a:b7:0c:39:35:58:3a:2a:3e: cb:f9:4b:04:47:f7:58:2b:22:fb:a0:1c:19:04:e8: 04:18:23:7b:54:ba:63:eb:a4:26:ed:e5:3d:c3:f0: ef:9b:2f:a3:04:ee:ba:d9:65:91:74:99:b1:29:dc: 5c:2b:73:be:55:2c:47:31:c4:6d:ed:e0:91:31:e0: 0f:84:2f:10:1a:17:ad:1a:98:4c:1b:c2:be:8a:3b: 15:7d:bb:39:70:5f:b1:80:ce:f0:0f:58:55:e8:ab: 75:a4:11:94:b0:c9:49:83:d0:ea:c3:9e:8d:73:5d: 70:af:50:61:46:7c:40:34:ec:6c:42:77:38:f2:29: fe:cb:28:0d:a3:d2:55:09:4e:26:59:2a:a8:47:cc: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:43:E3:B7:77:10:CB:C9:DD:51:9F:65:3D:84:3A:E2:BC:9B:FD:05 X509v3 Authority Key Identifier: keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:8d:7c:4d:a0:e3:0a:ee:cd:1e:21:47:b3:bb:b5:87:fb: 85:79:b2:64:f4:20:2f:c8:56:af:67:8d:82:31:c4:c7:cb:cc: 0b:40:2f:b8:d0:c7:6c:3b:ba:44:2f:35:de:d8:77:45:cc:dd: f1:6f:ae:10:99:e3:df:b3:9f:07:55:29:e0:b4:b9:a0:54:a2: 7a:d1:2b:74:98:bb:28:03:a5:db:24:18:b0:c4:94:95:8d:e9: 3e:dd:6f:a8:f3:66:8e:cc:34:59:99:74:ab:f6:8e:03:9d:f3: 98:bf:37:82:7b:49:6d:e7:69:38:1c:8a:84:f6:5e:fc:b4:4c: 79:7d:d9:1a:14:85:0f:a5:43:bb:0e:81:80:ff:cc:53:c9:ef: 48:1a:21:54:f2:65:59:d6:35:9d:49:ff:40:ef:0d:97:49:c1: 01:11:14:cf:b9:f6:7f:df:70:97:91:cf:10:93:85:f8:95:e2: 87:0f:7d:84:89:0c:27:7a:91:8d:6b:9d:8e:6d:f2:ae:c1:17: de:24:6e:60:d9:9b:fe:46:fd:7e:7e:46:42:23:13:ca:0b:1a: cc:a7:d4:d0:a7:d4:ba:5b:83:cf:65:c4:08:df:cd:28:a6:b7: e5:69:40:85:42:04:d7:e2:50:8e:02:ed:d2:f0:47:83:dd:c7: 1d:94:0c:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CIORKwyMTiBegeRK6i+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NzI4ZTliZDM3Mzk5ZGY5ZmZhZTU4N2JkMDY4ODRiMzUw YTY1YjcwHhcNMjYwMTI2MDIwMTA1WhcNMjYwMTI3MDIwMTA1WjAzMTEwLwYDVQQD EyhlMjQzZTNiNzc3MTBjYmM5ZGQ1MTlmNjUzZDg0M2FlMmJjOWJmZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vBJmuqcZJUk2ca/pZ6X8LUnSLmr icPWJHGQBwfVxAptFAqdB5pVep4RkPOK6C0hV5CnhZxHNMQq2TC/RRcvDgxVkhKy Yt1VGfXxTpKf3dG7+GDV4sx4NjKmylG9+mLRe69sF+jc3mEIICtLbAYqtww5NVg6 Kj7L+UsER/dYKyL7oBwZBOgEGCN7VLpj66Qm7eU9w/Dvmy+jBO662WWRdJmxKdxc K3O+VSxHMcRt7eCRMeAPhC8QGhetGphMG8K+ijsVfbs5cF+xgM7wD1hV6Kt1pBGU sMlJg9Dqw56Nc11wr1BhRnxANOxsQnc48in+yygNo9JVCU4mWSqoR8wxkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJD47d3EMvJ3VGfZT2EOuK8m/0FMB8GA1UdIwQY MBaAFDhyjpvTc5nfn/rlh70GiEs1CmW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzIt ZjhjZmEzM2Q2ODRlLzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzItZjhjZmEzM2Q2ODRl LzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnCNfE2g 4wruzR4hR7O7tYf7hXmyZPQgL8hWr2eNgjHEx8vMC0AvuNDHbDu6RC813th3Rczd 8W+uEJnj37OfB1Up4LS5oFSietErdJi7KAOl2yQYsMSUlY3pPt1vqPNmjsw0WZl0 q/aOA53zmL83gntJbedpOByKhPZe/LRMeX3ZGhSFD6VDuw6BgP/MU8nvSBohVPJl WdY1nUn/QO8Nl0nBAREUz7n2f99wl5HPEJOF+JXihw99hIkMJ3qRjWudjm3yrsEX 3iRuYNmb/kb9fn5GQiMTygsazKfU0KfUuluDz2XECN/NKKa35WlAhUIE1+JQjgLt 0vBHg93HHZQMYg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:58:02 2026 by rpki-client