This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json) Hash identifier: 7Eri4Gx1CSKek4faPKKY50b6xvWCpKrQyYLbfaYLyTE= Subject key identifier: 9D:45:8E:39:00:1E:BA:48:EA:22:2B:20:D4:33:C8:7A:86:F9:7E:A2 Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Certificate serial: 019B785C5D685BC3F075698CDC5F0DFFABA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft Manifest number: 17AA Signing time: Thu 01 Jan 2026 07:01:17 +0000 Manifest this update: Thu 01 Jan 2026 07:01:17 +0000 Manifest next update: Fri 02 Jan 2026 07:01:17 +0000 Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=) 2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: gqNt2amY8tn2JyMzFjEUBsC6vrf+ON8ptu08gvGxbI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:5d:68:5b:c3:f0:75:69:8c:dc:5f:0d:ff:ab:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Validity Not Before: Jan 1 07:01:17 2026 GMT Not After : Jan 2 07:01:17 2026 GMT Subject: CN=9d458e39001eba48ea222b20d433c87a86f97ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:54:db:73:c1:51:b4:62:f3:14:4c:38:82: 23:73:fe:96:3f:0c:94:d1:2b:89:23:22:4c:70:f7: 19:00:c4:9b:60:3c:ee:6a:f0:42:a0:1f:26:44:19: 89:fb:b2:6c:13:6c:1e:7f:7f:75:9e:d0:ca:c7:ad: 48:2c:f7:a1:ed:fc:f4:f3:db:b0:13:fc:c3:e7:0d: 27:a3:a9:de:ad:12:8e:cf:d0:57:c1:20:8f:82:57: f7:68:f5:34:bd:fc:70:5a:05:b2:fa:e3:e4:45:fd: ec:d5:d5:00:08:6a:9f:47:d6:45:a8:aa:f4:01:57: 8d:69:a6:dc:96:27:ea:cf:66:73:30:e4:f2:2d:57: e6:fe:d2:b3:a2:95:98:24:8e:14:1a:4d:f9:73:d4: c4:2b:2e:a7:05:fc:6e:13:e9:b5:e3:9b:22:4c:f1: e1:70:05:6e:00:7e:6d:bf:b4:a0:be:8b:06:e3:1e: 01:0c:59:cd:54:6b:d8:b0:fe:31:8f:09:5b:08:16: 73:a5:4a:dd:53:22:b1:30:0b:12:56:3b:92:8e:25: 3a:fd:e8:4b:3a:57:75:ab:85:9b:d2:e1:92:31:72: 79:d6:50:cc:5a:03:a9:11:f6:88:d0:cb:f1:fe:69: b6:91:37:76:fd:c4:cb:86:9c:53:fd:c3:42:a0:45: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:8E:39:00:1E:BA:48:EA:22:2B:20:D4:33:C8:7A:86:F9:7E:A2 X509v3 Authority Key Identifier: keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:07:5f:42:f7:96:90:d8:5d:c2:23:d5:eb:05:cf:a8:73:d6: ab:05:2b:90:5c:a0:88:2b:95:d5:db:dd:0e:dc:7a:86:d3:c1: 9e:4c:f5:3f:91:aa:46:4c:fa:91:96:6b:8b:b7:34:75:d9:b5: f9:f4:31:b5:cd:77:19:7d:9a:76:f9:e5:e8:13:85:25:50:03: f0:c6:6e:47:1c:0b:4d:fe:8f:ac:82:41:45:b8:df:49:b4:cf: ae:16:9b:06:0c:d4:65:a5:b0:4c:7a:ed:b7:81:5a:72:43:93: 05:9a:30:e9:aa:9a:f4:15:f8:61:be:c2:84:9f:86:9a:44:6b: 46:91:1a:75:9a:9a:e1:ea:b6:15:a7:3c:33:98:46:de:e6:65: 00:44:f8:29:66:24:db:28:48:4a:e2:c0:be:2d:8e:7b:62:cb: 7b:5b:62:7d:f8:63:40:40:7b:19:d2:0a:ab:c0:b1:5a:39:11: 89:e1:ec:68:54:6c:68:f7:05:9f:3d:9e:8e:13:7a:33:5b:a9: f0:08:46:2a:71:fd:53:23:54:7c:63:ff:d8:01:45:fa:f5:83: 55:0f:3b:e6:9e:0a:08:a6:e1:0c:38:34:28:11:f8:d3:3f:f0: f4:7d:02:ae:2d:37:ea:c4:e3:15:ab:3a:a7:2b:26:1e:ea:a2: 14:bc:39:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XF1oW8PwdWmM3F8N/6unMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjViZDM5Yjc0ZjIzZDc2ODNkMTIzOGVhOWFjYTNjNjZh NjMxYTMwHhcNMjYwMTAxMDcwMTE3WhcNMjYwMTAyMDcwMTE3WjAzMTEwLwYDVQQD Eyg5ZDQ1OGUzOTAwMWViYTQ4ZWEyMjJiMjBkNDMzYzg3YTg2Zjk3ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jZU23PBUbRi8xRMOIIjc/6WPwyU 0SuJIyJMcPcZAMSbYDzuavBCoB8mRBmJ+7JsE2wef391ntDKx61ILPeh7fz089uw E/zD5w0no6nerRKOz9BXwSCPglf3aPU0vfxwWgWy+uPkRf3s1dUACGqfR9ZFqKr0 AVeNaabclifqz2ZzMOTyLVfm/tKzopWYJI4UGk35c9TEKy6nBfxuE+m145siTPHh cAVuAH5tv7SgvosG4x4BDFnNVGvYsP4xjwlbCBZzpUrdUyKxMAsSVjuSjiU6/ehL Old1q4Wb0uGSMXJ51lDMWgOpEfaI0Mvx/mm2kTd2/cTLhpxT/cNCoEWWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1FjjkAHrpI6iIrINQzyHqG+X6iMB8GA1UdIwQY MBaAFDi1vTm3TyPXaD0SOOqayjxmpjGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDct ZTNjZmU2Y2VjMGFjLzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDctZTNjZmU2Y2VjMGFj LzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAdfQveW kNhdwiPV6wXPqHPWqwUrkFygiCuV1dvdDtx6htPBnkz1P5GqRkz6kZZri7c0ddm1 +fQxtc13GX2advnl6BOFJVAD8MZuRxwLTf6PrIJBRbjfSbTPrhabBgzUZaWwTHrt t4FackOTBZow6aqa9BX4Yb7ChJ+GmkRrRpEadZqa4eq2Fac8M5hG3uZlAET4KWYk 2yhISuLAvi2Oe2LLe1tiffhjQEB7GdIKq8CxWjkRieHsaFRsaPcFnz2ejhN6M1up 8AhGKnH9UyNUfGP/2AFF+vWDVQ875p4KCKbhDDg0KBH40z/w9H0Cri036sTjFas6 pysmHuqiFLw5GA== -----END CERTIFICATE-----Generated at Thu Jan 1 09:05:27 2026 by rpki-client