This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json) Hash identifier: AuE5VE9qVYVNcA51lr/6ZzZiM65RCznWSN1FYPaQiUE= Subject key identifier: A9:97:B9:09:98:2F:1A:EE:F8:05:20:0E:98:14:AF:56:78:3F:0E:BE Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860 Certificate serial: 019BD658FB96F4A25C5F8518897561937C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft Manifest number: 0F74 Signing time: Mon 19 Jan 2026 13:01:54 +0000 Manifest this update: Mon 19 Jan 2026 13:01:54 +0000 Manifest next update: Tue 20 Jan 2026 13:01:54 +0000 Files and hashes: 1: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: tRa4jeZLf1EJ56hG41ewqJuuoPEn/4QeHqwhLuwgWOo=) 2: TEmzgEgKyQo96Gqk3OCXyu8JaO8.roa (hash: w2y72ko+lJjiVlRbZd4qD2G3W4qa+BLqf6Sn4G+/dow=) 3: XWcYfudW_fCjYcND3H407xe959o.roa (hash: hWyo7JRjc5zRnP54qNBVfiEpztNdLDDxrtX9abLg7Ps=) 4: ge5kxbikwrvAEUuIO3lNRkFxLmw.roa (hash: eEJ79T/++oL5XPtUGIItjARG2jFvNlWqvTqYFtL6EkY=) 5: rTgC7PLBMFHhdpl3fBHWaPGZP_Y.roa (hash: ng9lqabxlxHQ1G6hpIjPJfi43vHsrt3ed7Cyb0T70ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:58:fb:96:f4:a2:5c:5f:85:18:89:75:61:93:7c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860 Validity Not Before: Jan 19 13:01:54 2026 GMT Not After : Jan 20 13:01:54 2026 GMT Subject: CN=a997b909982f1aeef805200e9814af56783f0ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:1b:95:ea:9f:41:c4:e2:75:c1:32:a5:87: 68:52:ff:41:b3:28:2c:b0:d0:98:b6:f2:fa:8b:7e: cb:db:67:89:cb:52:d3:ea:52:89:2c:8a:3b:35:8b: 32:ab:50:5b:95:89:0c:6f:af:fb:6d:ac:c2:48:ef: 93:d9:b5:4d:31:0c:1a:31:2c:12:d4:2e:8a:35:c0: 48:eb:da:99:7b:fe:3f:ce:b2:d7:fb:d1:a4:99:0f: 8c:12:db:a4:c5:17:9d:3c:41:42:74:8e:56:a0:eb: 67:4c:82:fd:8e:72:12:6a:5e:31:a8:6a:8b:7f:5d: fc:11:7e:5f:b9:94:6e:e5:ac:50:a0:15:41:0c:ff: de:f8:df:be:33:d2:23:9a:9e:9a:46:57:44:dd:53: 6a:5d:ba:cf:31:c9:71:60:1f:33:29:10:4d:11:24: 1e:b4:4c:41:64:98:71:94:73:7f:62:ba:54:d6:0f: 60:0c:a5:7b:c2:96:59:c9:12:3e:d5:2a:bd:e9:8b: 67:f6:39:c3:d6:dd:67:0e:97:c1:09:c7:c2:76:b3: a3:c6:38:3f:7c:51:64:fb:79:57:ce:d2:e6:09:f8: e7:04:6c:ca:8a:eb:df:d6:25:28:47:79:33:67:90: 2a:d7:b0:f3:00:c5:f5:8a:89:2d:c7:7b:ed:49:85: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:97:B9:09:98:2F:1A:EE:F8:05:20:0E:98:14:AF:56:78:3F:0E:BE X509v3 Authority Key Identifier: keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:58:17:dc:93:4b:fd:11:1b:14:6d:d0:0d:e1:5d:76:ec:56: 04:50:17:32:ec:cd:7d:45:c5:36:2c:a0:29:7f:d2:4f:7d:0c: 70:af:0d:59:82:26:47:ec:94:af:47:d8:6a:71:da:ed:7d:4d: 84:d3:e5:07:04:ad:b9:45:0e:4d:83:84:cf:a0:42:6b:58:a3: d7:bf:9f:0f:88:78:23:70:8c:a1:01:6f:56:e0:2d:98:78:bf: 19:58:dd:1d:92:ba:0d:35:08:96:ca:66:43:24:73:f3:6d:b8: 70:ce:78:e2:50:f0:69:d6:cb:cf:97:ca:e5:59:c8:e2:8a:62: 6e:29:f1:37:64:24:80:6c:0d:fc:d8:63:40:7f:f8:4c:d2:71: ef:57:9e:ca:d4:9c:db:c1:77:1d:c7:d2:24:9f:b4:bc:49:a4: b9:b9:a9:1f:f8:4a:c9:85:68:33:28:20:b2:62:41:c1:e3:00: c8:05:97:48:b0:98:39:e6:21:26:95:da:88:be:1a:d3:20:87: 03:3a:57:1e:87:ef:a1:58:43:b6:79:e6:10:da:72:11:0d:f0: 30:86:1f:1e:68:9e:84:ea:49:6d:aa:1f:e0:1e:e4:aa:9f:cb: 31:2e:fe:ee:96:09:45:be:fe:4b:28:69:8d:82:54:85:9d:0c: 26:19:bf:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWWPuW9KJcX4UYiXVhk3yPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1 ZWQ4NjAwHhcNMjYwMTE5MTMwMTU0WhcNMjYwMTIwMTMwMTU0WjAzMTEwLwYDVQQD EyhhOTk3YjkwOTk4MmYxYWVlZjgwNTIwMGU5ODE0YWY1Njc4M2YwZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSEbleqfQcTidcEypYdoUv9Bsygs sNCYtvL6i37L22eJy1LT6lKJLIo7NYsyq1BblYkMb6/7bazCSO+T2bVNMQwaMSwS 1C6KNcBI69qZe/4/zrLX+9GkmQ+MEtukxRedPEFCdI5WoOtnTIL9jnISal4xqGqL f138EX5fuZRu5axQoBVBDP/e+N++M9Ijmp6aRldE3VNqXbrPMclxYB8zKRBNESQe tExBZJhxlHN/YrpU1g9gDKV7wpZZyRI+1Sq96Ytn9jnD1t1nDpfBCcfCdrOjxjg/ fFFk+3lXztLmCfjnBGzKiuvf1iUoR3kzZ5Aq17DzAMX1ioktx3vtSYXytQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmXuQmYLxru+AUgDpgUr1Z4Pw6+MB8GA1UdIwQY MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1gX3JNL /REbFG3QDeFdduxWBFAXMuzNfUXFNiygKX/ST30McK8NWYImR+yUr0fYanHa7X1N hNPlBwStuUUOTYOEz6BCa1ij17+fD4h4I3CMoQFvVuAtmHi/GVjdHZK6DTUIlspm QyRz8224cM544lDwadbLz5fK5VnI4opibinxN2QkgGwN/NhjQH/4TNJx71eeytSc 28F3HcfSJJ+0vEmkubmpH/hKyYVoMyggsmJBweMAyAWXSLCYOeYhJpXaiL4a0yCH AzpXHofvoVhDtnnmENpyEQ3wMIYfHmiehOpJbaof4B7kqp/LMS7+7pYJRb7+Syhp jYJUhZ0MJhm/3A== -----END CERTIFICATE-----Generated at Mon Jan 19 19:01:55 2026 by rpki-client