This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json) Hash identifier: QOWPTFGZ8xDqW2inQVaKUEDtfPHvRO3DGwTs0gn5OH8= Subject key identifier: E6:AC:74:CB:26:3C:28:82:38:01:70:2B:84:48:5B:1F:25:1C:6E:A8 Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Certificate serial: 019AF2ADA335DFC63860FF6E3D0E3A31A26C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 08:00:57 +0000 Manifest this update: Sat 06 Dec 2025 08:00:57 +0000 Manifest next update: Sun 07 Dec 2025 08:00:57 +0000 Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=) 2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: Rf7g/nYvizsPXIRW+ahEHDqjsiMWueXLZF2as68MMtY=) 3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=) 4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a3:35:df:c6:38:60:ff:6e:3d:0e:3a:31:a2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Validity Not Before: Dec 6 08:00:57 2025 GMT Not After : Dec 7 08:00:57 2025 GMT Subject: CN=e6ac74cb263c28823801702b84485b1f251c6ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:23:e1:90:ce:03:1f:ac:4e:0e:e7:fe:8a:1f: ad:2e:6a:bf:af:22:54:5a:73:40:33:75:76:ba:c8: 5b:d1:29:36:ac:31:a7:93:5b:59:7c:49:89:72:c0: ba:5c:7f:7a:23:95:4c:cb:ac:3e:ca:d4:45:9e:e9: cc:4e:7a:b1:36:fd:cc:9e:48:75:d8:92:bf:fe:3e: 47:ec:74:eb:ed:41:f5:b2:40:4f:10:ac:2a:66:e3: 5a:d5:27:9e:10:49:b5:d5:6a:26:50:56:4d:26:3f: 3b:11:0d:17:eb:d7:6b:38:18:3f:7c:85:1c:40:3a: 1b:81:25:be:15:14:e9:c6:50:be:02:e3:c3:e7:0c: 23:49:94:60:42:d9:60:0d:cb:ff:3b:29:c1:06:8c: c5:7c:04:d7:99:c6:d9:b9:42:3e:1c:cc:51:b1:a1: 24:e4:30:34:15:3f:68:46:18:f7:16:2a:f7:02:95: 27:8f:57:70:5b:b8:57:82:ca:20:29:04:aa:00:3e: 24:94:e4:c6:51:80:47:b4:a2:23:da:ba:a9:3e:61: 3d:b5:82:cf:e2:43:5b:6f:c5:cc:35:b0:e6:78:30: d7:f8:d5:67:d0:65:f1:72:45:0c:2c:93:89:cd:9d: 1b:c2:8a:32:16:2f:69:31:53:1a:7e:80:65:3e:ff: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AC:74:CB:26:3C:28:82:38:01:70:2B:84:48:5B:1F:25:1C:6E:A8 X509v3 Authority Key Identifier: keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ac:cc:0a:16:51:83:dc:b2:75:64:87:49:75:9d:52:45:0e: ae:92:17:9d:36:a9:43:8d:fa:72:43:c4:94:fd:63:ee:01:e5: 2e:57:2d:79:08:be:54:fd:5e:e8:d4:05:e8:02:f2:8a:e3:84: ed:37:75:ed:29:67:86:a4:89:f1:0c:ed:0a:b0:7a:fc:dd:30: 4f:24:68:52:9f:c9:aa:72:c9:03:21:77:8c:92:19:7f:19:a7: 0c:3d:ff:35:0f:8c:18:ce:91:97:83:32:57:14:8f:2e:93:28: 1f:07:a8:88:d0:5e:84:a3:f7:5e:48:db:42:86:de:a7:5d:20: 0f:c4:23:62:12:ee:9d:82:62:70:c8:cf:5a:6a:df:14:62:ce: a1:98:18:bb:ea:b1:e8:e5:e2:f0:52:b3:4f:ec:7d:ad:a0:7e: a0:71:b1:74:d1:9e:bf:71:c0:02:66:f3:2c:b2:5e:8b:69:e2: 6f:13:58:c4:55:f9:3f:d8:11:8c:0e:12:9c:29:16:7b:11:d4: c9:55:d6:11:27:31:39:d9:0b:a5:01:87:d6:b0:1b:cb:d1:51: ef:e5:03:e3:76:e6:58:88:7e:ac:4f:6e:59:de:91:7e:1a:56: d7:5f:a7:16:06:3b:77:fd:3f:b2:2d:dd:08:d7:ad:c6:00:f9: d6:17:7b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraM138Y4YP9uPQ46MaJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi YjZkODAwHhcNMjUxMjA2MDgwMDU3WhcNMjUxMjA3MDgwMDU3WjAzMTEwLwYDVQQD EyhlNmFjNzRjYjI2M2MyODgyMzgwMTcwMmI4NDQ4NWIxZjI1MWM2ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SPhkM4DH6xODuf+ih+tLmq/ryJU WnNAM3V2ushb0Sk2rDGnk1tZfEmJcsC6XH96I5VMy6w+ytRFnunMTnqxNv3Mnkh1 2JK//j5H7HTr7UH1skBPEKwqZuNa1SeeEEm11WomUFZNJj87EQ0X69drOBg/fIUc QDobgSW+FRTpxlC+AuPD5wwjSZRgQtlgDcv/OynBBozFfATXmcbZuUI+HMxRsaEk 5DA0FT9oRhj3Fir3ApUnj1dwW7hXgsogKQSqAD4klOTGUYBHtKIj2rqpPmE9tYLP 4kNbb8XMNbDmeDDX+NVn0GXxckUMLJOJzZ0bwooyFi9pMVMafoBlPv9NKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOasdMsmPCiCOAFwK4RIWx8lHG6oMB8GA1UdIwQY MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1 LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKzMChZR g9yydWSHSXWdUkUOrpIXnTapQ436ckPElP1j7gHlLlcteQi+VP1e6NQF6ALyiuOE 7Td17SlnhqSJ8QztCrB6/N0wTyRoUp/JqnLJAyF3jJIZfxmnDD3/NQ+MGM6Rl4My VxSPLpMoHweoiNBehKP3XkjbQobep10gD8QjYhLunYJicMjPWmrfFGLOoZgYu+qx 6OXi8FKzT+x9raB+oHGxdNGev3HAAmbzLLJei2nibxNYxFX5P9gRjA4SnCkWexHU yVXWEScxOdkLpQGH1rAby9FR7+UD43bmWIh+rE9uWd6RfhpW11+nFgY7d/0/si3d CNetxgD51hd70g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:52 2025 by rpki-client