This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json) Hash identifier: hqA/AxM5GaVEoyRlv3nNgfnlBSWtQy3PVR+3aFWlQV4= Subject key identifier: AB:18:D5:DE:3F:A7:08:2B:CA:06:4E:47:57:C2:71:86:70:15:D9:49 Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Certificate serial: 019BAEDCC0BA6A475B084AB7DFAD7F42CAE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 21:01:01 +0000 Manifest this update: Sun 11 Jan 2026 21:01:01 +0000 Manifest next update: Mon 12 Jan 2026 21:01:01 +0000 Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: VHduNc2YA+vFRcKAQ7bX11ph/MoS/7TCb/9vLy/9tOY=) 2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dc:c0:ba:6a:47:5b:08:4a:b7:df:ad:7f:42:ca:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Validity Not Before: Jan 11 21:01:01 2026 GMT Not After : Jan 12 21:01:01 2026 GMT Subject: CN=ab18d5de3fa7082bca064e4757c271867015d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:72:e1:fd:47:97:3e:7a:f7:19:c8:bf:c2: bc:3d:d1:59:e7:20:9c:f1:6f:ce:24:8c:66:34:09: f5:2c:ac:94:b2:bd:f6:23:e0:67:76:89:50:75:14: 4b:39:d4:cf:ee:84:57:f3:fd:2b:b2:da:38:19:ea: 28:bd:73:36:94:e7:2f:be:0b:9b:7b:1b:0e:41:93: c0:95:bc:10:5d:d8:c9:9a:08:e1:97:da:70:66:d4: c8:06:fb:6b:73:e8:25:5d:a5:e9:e4:12:4b:52:4b: 09:86:f4:c4:0c:eb:61:8a:98:08:0f:f2:cd:0e:55: db:ac:fb:c2:e3:fc:86:e5:66:c6:3f:43:a7:97:22: ac:43:5a:f7:a5:a2:9d:de:c4:3d:84:61:bc:db:20: 48:51:4b:27:52:98:88:04:11:37:92:9b:21:49:7e: 29:9c:a7:06:02:55:2c:4a:5f:fa:d0:14:3a:d2:3e: 4b:0d:e7:a3:0f:ca:ac:5d:6a:df:74:99:e4:ad:a7: aa:94:b5:99:4f:8e:a4:99:d5:20:7f:fa:b6:a8:c1: 5f:0e:bc:d6:43:df:4c:2a:57:e6:29:63:24:f9:1f: 87:60:c6:85:0f:c8:a8:cb:3d:0b:85:29:07:21:9d: 22:a8:75:0b:ec:41:e4:bc:ee:5c:a8:e3:9c:54:a2: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:18:D5:DE:3F:A7:08:2B:CA:06:4E:47:57:C2:71:86:70:15:D9:49 X509v3 Authority Key Identifier: keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e3:41:1d:b9:d7:68:39:69:73:1f:b0:35:1a:54:fa:43:e1: 4e:bc:36:97:8b:2d:53:91:24:32:0d:7c:d7:3e:c1:f4:72:65: 3d:d2:33:7c:b6:ae:f9:7c:ba:fb:33:ae:83:70:41:95:85:03: 3b:a8:8d:7b:4c:50:ab:71:3e:a8:c5:fb:b9:de:e2:f5:1b:6f: d6:c8:ee:a4:7a:66:aa:30:05:0b:1e:f7:01:56:5f:55:e1:d1: 97:5f:e3:29:27:d9:5a:46:89:d8:d8:23:66:eb:0a:d9:4e:2f: f6:1f:6b:44:6b:ee:e2:a0:d1:ca:59:ad:59:1a:3a:96:ca:cb: 22:41:f8:2f:4c:74:f8:ac:06:b2:39:3a:a1:7b:62:0c:b9:47: 7b:8e:ca:ea:c0:c1:63:9c:b4:4c:19:7e:c1:26:de:56:ef:5e: 4c:4a:7b:dc:4f:dd:fb:fc:3d:36:3b:de:20:2e:49:e8:80:8b: 48:2a:e4:86:5c:99:ab:c5:72:0d:81:8d:20:8d:ae:ba:03:78: de:a9:53:15:a9:3b:3f:4a:6c:fb:7b:ef:6a:b2:fa:d2:d4:aa: c7:68:b1:6f:80:88:fe:3f:0a:1a:b9:23:84:89:85:4e:62:6d: bb:c0:32:f3:39:f2:7e:c9:c9:8d:57:84:b8:49:a6:ae:db:ba: 37:6f:14:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3MC6akdbCEq3361/QsroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy NGIyOGQwHhcNMjYwMTExMjEwMTAxWhcNMjYwMTEyMjEwMTAxWjAzMTEwLwYDVQQD EyhhYjE4ZDVkZTNmYTcwODJiY2EwNjRlNDc1N2MyNzE4NjcwMTVkOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibRy4f1Hlz569xnIv8K8PdFZ5yCc 8W/OJIxmNAn1LKyUsr32I+BndolQdRRLOdTP7oRX8/0rsto4GeoovXM2lOcvvgub exsOQZPAlbwQXdjJmgjhl9pwZtTIBvtrc+glXaXp5BJLUksJhvTEDOthipgID/LN DlXbrPvC4/yG5WbGP0OnlyKsQ1r3paKd3sQ9hGG82yBIUUsnUpiIBBE3kpshSX4p nKcGAlUsSl/60BQ60j5LDeejD8qsXWrfdJnkraeqlLWZT46kmdUgf/q2qMFfDrzW Q99MKlfmKWMk+R+HYMaFD8ioyz0LhSkHIZ0iqHUL7EHkvO5cqOOcVKIfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsY1d4/pwgrygZOR1fCcYZwFdlJMB8GA1UdIwQY MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIONBHbnX aDlpcx+wNRpU+kPhTrw2l4stU5EkMg181z7B9HJlPdIzfLau+Xy6+zOug3BBlYUD O6iNe0xQq3E+qMX7ud7i9Rtv1sjupHpmqjAFCx73AVZfVeHRl1/jKSfZWkaJ2Ngj ZusK2U4v9h9rRGvu4qDRylmtWRo6lsrLIkH4L0x0+KwGsjk6oXtiDLlHe47K6sDB Y5y0TBl+wSbeVu9eTEp73E/d+/w9NjveIC5J6ICLSCrkhlyZq8VyDYGNII2uugN4 3qlTFak7P0ps+3vvarL60tSqx2ixb4CI/j8KGrkjhImFTmJtu8Ay8znyfsnJjVeE uEmmrtu6N28UXQ== -----END CERTIFICATE-----Generated at Mon Jan 12 03:50:42 2026 by rpki-client