This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json) Hash identifier: ZnSOgigbAC9xXZxdtmhskgEwguJxskJDa4Uj15D8N08= Subject key identifier: BC:D3:34:D8:18:2A:D1:CC:2B:59:30:78:48:E5:A1:83:BC:A2:15:A7 Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Certificate serial: 019BF65118D5027CD24999D42AF6BE64319F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft Manifest number: 0862 Signing time: Sun 25 Jan 2026 18:01:08 +0000 Manifest this update: Sun 25 Jan 2026 18:01:08 +0000 Manifest next update: Mon 26 Jan 2026 18:01:08 +0000 Files and hashes: 1: JoUKfEu67T1yJyCyuLRPbJCk_UQ.roa (hash: /JFcfYSQ61PUPBzY8BJBcJYoayzrujrEpWXJsY4TO/o=) 2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: QabraAEgLwgSPm4Sc0WgId92Q36OKvAzliFBDriefwA=) 3: fAdGKU3RCPGTAL7Z9M94nbsFYr0.roa (hash: Cz41cqiHLsC/77+bonU9HHMAIveN7Vt8tWuObbUVYSw=) 4: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:18:d5:02:7c:d2:49:99:d4:2a:f6:be:64:31:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Validity Not Before: Jan 25 18:01:08 2026 GMT Not After : Jan 26 18:01:08 2026 GMT Subject: CN=bcd334d8182ad1cc2b59307848e5a183bca215a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:6c:8f:18:cd:3c:b1:d9:b8:8e:8e:e6:50: aa:4c:2d:ed:c7:a8:5e:8c:75:6e:4c:4f:c1:b9:1e: a0:72:0c:a8:c3:df:2a:d0:79:c7:bb:0c:e5:b3:51: b2:a9:d8:4e:aa:a6:3f:9d:25:c4:bb:d2:d2:4e:2c: 56:80:c6:b7:75:9f:3d:c2:60:52:b7:b3:b4:82:22: 2e:26:d5:6a:62:20:d1:ac:5b:16:cc:ed:92:31:dc: 8a:ac:7b:16:a0:85:03:36:98:3f:6f:09:7d:35:b7: 2b:c2:ff:6f:a0:81:55:be:95:b6:11:5f:38:b9:a3: 05:25:3d:77:67:02:2f:ac:d1:35:fb:21:e1:c7:85: 25:cb:86:c6:fe:ba:49:6b:24:33:f3:17:26:fa:64: d3:78:27:ef:88:db:0e:65:d1:e0:ab:e8:53:99:ce: 05:24:80:7c:2c:e0:68:54:84:bd:80:76:5e:88:ff: 28:f9:55:4c:a7:04:08:c2:0a:9e:6f:14:f3:8e:ff: 2d:54:28:47:18:7a:91:d3:05:25:ad:86:da:a7:9b: 47:a8:55:69:c9:16:69:39:78:45:96:84:b3:52:47: cc:61:b6:2e:e5:af:be:de:f6:bd:9d:94:08:22:f8: 7e:f1:96:8d:ec:66:77:1e:4c:7c:4c:ae:f9:c9:59: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D3:34:D8:18:2A:D1:CC:2B:59:30:78:48:E5:A1:83:BC:A2:15:A7 X509v3 Authority Key Identifier: keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:41:94:1c:95:0f:13:3b:45:48:34:65:fe:3d:56:a3:a8:c9: 6c:4c:e7:24:11:97:1e:ee:fa:f1:d3:df:fd:d1:d9:da:13:8b: 92:e9:ab:81:19:5d:22:14:94:61:6e:2b:9f:6b:24:7c:51:45: f0:43:56:63:62:09:c9:e8:82:4e:00:0b:5b:23:30:39:32:7b: c2:4f:fd:5f:34:d9:f9:f9:2e:94:88:98:81:ba:18:dd:61:1e: 38:a3:59:65:e0:d5:45:65:a9:6b:e3:45:da:6b:08:b3:e5:cf: 6c:6a:75:51:8d:5f:0f:22:da:76:06:52:8f:f4:44:02:14:2e: fd:9d:ad:fe:eb:d5:0d:ff:12:2c:39:91:92:6f:a5:0d:d8:f8: ed:9d:06:70:ac:28:fa:03:14:59:30:bd:2e:05:5d:60:51:ea: 0d:f3:ff:ea:1f:6c:43:48:ff:30:cb:0f:23:9c:43:e8:10:ad: 4c:e0:52:1b:e2:ab:3e:a6:83:c0:7f:fa:43:56:54:c6:54:d0: 66:91:59:26:b6:12:14:a0:f2:20:e1:92:09:bd:41:6c:d8:e6: 97:03:32:b5:52:50:73:d2:6b:00:6b:13:57:19:46:88:99:70: 8c:fd:9b:ea:7f:1a:0b:eb:fd:0f:88:eb:51:03:8f:c3:c9:62: ff:49:a2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URjVAnzSSZnUKva+ZDGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5 N2RlMzcwHhcNMjYwMTI1MTgwMTA4WhcNMjYwMTI2MTgwMTA4WjAzMTEwLwYDVQQD EyhiY2QzMzRkODE4MmFkMWNjMmI1OTMwNzg0OGU1YTE4M2JjYTIxNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPlsjxjNPLHZuI6O5lCqTC3tx6he jHVuTE/BuR6gcgyow98q0HnHuwzls1GyqdhOqqY/nSXEu9LSTixWgMa3dZ89wmBS t7O0giIuJtVqYiDRrFsWzO2SMdyKrHsWoIUDNpg/bwl9Nbcrwv9voIFVvpW2EV84 uaMFJT13ZwIvrNE1+yHhx4Uly4bG/rpJayQz8xcm+mTTeCfviNsOZdHgq+hTmc4F JIB8LOBoVIS9gHZeiP8o+VVMpwQIwgqebxTzjv8tVChHGHqR0wUlrYbap5tHqFVp yRZpOXhFloSzUkfMYbYu5a++3va9nZQIIvh+8ZaN7GZ3Hkx8TK75yVniYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzTNNgYKtHMK1kweEjloYO8ohWnMB8GA1UdIwQY MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt MmNlYThlMTUzNjMyLzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0GUHJUP EztFSDRl/j1Wo6jJbEznJBGXHu768dPf/dHZ2hOLkumrgRldIhSUYW4rn2skfFFF 8ENWY2IJyeiCTgALWyMwOTJ7wk/9XzTZ+fkulIiYgboY3WEeOKNZZeDVRWWpa+NF 2msIs+XPbGp1UY1fDyLadgZSj/REAhQu/Z2t/uvVDf8SLDmRkm+lDdj47Z0GcKwo +gMUWTC9LgVdYFHqDfP/6h9sQ0j/MMsPI5xD6BCtTOBSG+KrPqaDwH/6Q1ZUxlTQ ZpFZJrYSFKDyIOGSCb1BbNjmlwMytVJQc9JrAGsTVxlGiJlwjP2b6n8aC+v9D4jr UQOPw8li/0miXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:45 2026 by rpki-client