This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json) Hash identifier: XlgbxekrkYKUXGvyYql0YmtGKCQKycQMdqhGLSjdVow= Subject key identifier: 30:2E:2D:34:A4:18:73:94:40:9C:14:24:EF:B3:5C:1C:A7:21:FC:8F Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Certificate serial: 019BD9597FD880911240175415A33945284A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft Manifest number: 0853 Signing time: Tue 20 Jan 2026 03:01:19 +0000 Manifest this update: Tue 20 Jan 2026 03:01:19 +0000 Manifest next update: Wed 21 Jan 2026 03:01:19 +0000 Files and hashes: 1: JoUKfEu67T1yJyCyuLRPbJCk_UQ.roa (hash: /JFcfYSQ61PUPBzY8BJBcJYoayzrujrEpWXJsY4TO/o=) 2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: F4dk0WP5GOTm6pVmvUdSoJUCdgtdm/VuCg4zr2iwVLA=) 3: fAdGKU3RCPGTAL7Z9M94nbsFYr0.roa (hash: Cz41cqiHLsC/77+bonU9HHMAIveN7Vt8tWuObbUVYSw=) 4: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:59:7f:d8:80:91:12:40:17:54:15:a3:39:45:28:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Validity Not Before: Jan 20 03:01:19 2026 GMT Not After : Jan 21 03:01:19 2026 GMT Subject: CN=302e2d34a4187394409c1424efb35c1ca721fc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fe:dd:d8:ae:cc:dc:0a:84:9a:3d:9c:d1:8d: 74:bf:79:83:35:31:cf:36:1f:43:38:1f:6f:37:1e: 46:88:85:04:ef:7a:c9:6a:39:9f:58:f3:2d:93:e7: 62:07:bb:7e:79:e9:64:b3:24:a8:23:98:70:92:36: d8:c1:82:85:4f:40:de:a0:59:0b:ef:a8:03:70:93: 9c:bb:77:dc:ab:ee:fd:b1:f3:1a:85:80:18:21:0e: ea:2a:b1:e0:f4:7a:fc:af:5a:6c:b9:75:6e:dd:76: 87:1d:ab:e4:69:f4:34:41:73:d9:94:26:db:50:df: 71:d8:1d:cd:d1:89:91:d3:57:95:37:79:8b:dc:9b: a2:cf:23:14:39:9f:f0:51:dc:7b:00:e0:e2:f9:ad: 2a:45:3b:c4:e5:34:ac:ce:9e:98:d9:dd:e0:18:42: 43:8e:ea:a9:32:94:b9:d7:f6:d7:42:36:d8:4d:89: 40:2f:bd:6b:f2:bb:1e:c9:89:2f:89:27:3e:49:10: 80:d3:d0:56:d1:f9:90:91:62:48:e1:1c:d8:58:88: 6d:d5:c8:b1:82:3a:0b:a6:f2:67:55:cd:54:25:4d: 17:05:f9:d8:8b:91:b0:80:b3:c5:0d:0e:dd:95:a5: 0e:a3:29:44:4b:0e:cd:38:df:e4:43:d4:e9:97:64: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2E:2D:34:A4:18:73:94:40:9C:14:24:EF:B3:5C:1C:A7:21:FC:8F X509v3 Authority Key Identifier: keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:65:57:82:49:33:4e:75:bf:31:46:a2:04:10:80:6f:df:a7: e1:8f:23:0b:01:3e:a4:15:a1:bf:c0:d7:0e:ea:17:2b:55:dc: fd:67:56:3f:82:93:fd:5b:90:df:56:c4:b9:ea:38:bd:3d:13: 62:96:24:a5:00:ce:62:ce:67:56:91:00:35:d7:ba:d6:99:93: f6:00:5a:f3:b5:60:3f:91:1a:e0:5c:bb:bb:e4:48:ac:2f:f3: 65:21:0c:2f:6b:25:b4:90:8b:99:20:2b:67:cc:89:eb:d6:c6: 9b:0c:91:f2:ff:fa:71:a8:72:5d:eb:10:f2:bb:46:2d:87:d7: be:bd:f6:66:29:ec:42:4d:2a:69:7c:ca:2a:9a:f6:57:58:6d: 9e:06:96:21:0e:36:b3:d5:de:8e:44:54:2b:8f:a6:9d:3a:ba: 4a:5c:2f:b0:12:94:64:a5:42:ee:c0:b9:d0:6e:76:58:bb:39: a2:7e:c0:09:63:00:63:f2:b3:54:16:a1:2a:7b:a3:15:61:47: 4a:72:02:40:54:f5:49:2d:ac:3f:c4:4d:46:7b:a6:ae:be:f9: db:4c:43:db:fa:95:96:80:bf:c4:38:7a:2b:33:fc:c2:44:15: 03:5a:5c:a6:0c:c1:fe:7e:18:26:b0:5b:01:c7:0e:7a:5c:f3: 6d:9c:e5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWX/YgJESQBdUFaM5RShKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5 N2RlMzcwHhcNMjYwMTIwMDMwMTE5WhcNMjYwMTIxMDMwMTE5WjAzMTEwLwYDVQQD EygzMDJlMmQzNGE0MTg3Mzk0NDA5YzE0MjRlZmIzNWMxY2E3MjFmYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/7d2K7M3AqEmj2c0Y10v3mDNTHP Nh9DOB9vNx5GiIUE73rJajmfWPMtk+diB7t+eelksySoI5hwkjbYwYKFT0DeoFkL 76gDcJOcu3fcq+79sfMahYAYIQ7qKrHg9Hr8r1psuXVu3XaHHavkafQ0QXPZlCbb UN9x2B3N0YmR01eVN3mL3JuizyMUOZ/wUdx7AODi+a0qRTvE5TSszp6Y2d3gGEJD juqpMpS51/bXQjbYTYlAL71r8rseyYkviSc+SRCA09BW0fmQkWJI4RzYWIht1cix gjoLpvJnVc1UJU0XBfnYi5GwgLPFDQ7dlaUOoylESw7NON/kQ9Tpl2RtWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAuLTSkGHOUQJwUJO+zXBynIfyPMB8GA1UdIwQY MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt MmNlYThlMTUzNjMyLzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWVXgkkz TnW/MUaiBBCAb9+n4Y8jCwE+pBWhv8DXDuoXK1Xc/WdWP4KT/VuQ31bEueo4vT0T YpYkpQDOYs5nVpEANde61pmT9gBa87VgP5Ea4Fy7u+RIrC/zZSEML2sltJCLmSAr Z8yJ69bGmwyR8v/6cahyXesQ8rtGLYfXvr32ZinsQk0qaXzKKpr2V1htngaWIQ42 s9XejkRUK4+mnTq6SlwvsBKUZKVC7sC50G52WLs5on7ACWMAY/KzVBahKnujFWFH SnICQFT1SS2sP8RNRnumrr7520xD2/qVloC/xDh6KzP8wkQVA1pcpgzB/n4YJrBb AccOelzzbZzl1A== -----END CERTIFICATE-----Generated at Tue Jan 20 07:37:10 2026 by rpki-client