This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json) Hash identifier: wJoXqYMb00fcK2n+4kEbgqKusH49xvyROZZ5RCmuWgA= Subject key identifier: AF:4C:1B:2F:3E:50:77:F7:4E:6F:D7:6D:65:8B:39:2A:F3:B5:7F:43 Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Certificate serial: 019AF42E8C0A2E3360C1B1BFA1DF04CF3DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:01:22 +0000 Manifest this update: Sat 06 Dec 2025 15:01:22 +0000 Manifest next update: Sun 07 Dec 2025 15:01:22 +0000 Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=) 2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: BigXivlj7+xqceDStfaL1LmWDISYxFvn69XFW9Xe+4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:8c:0a:2e:33:60:c1:b1:bf:a1:df:04:cf:3d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Validity Not Before: Dec 6 15:01:22 2025 GMT Not After : Dec 7 15:01:22 2025 GMT Subject: CN=af4c1b2f3e5077f74e6fd76d658b392af3b57f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:45:56:53:77:40:9a:98:74:9d:65:0c:8b: 77:f9:2a:4d:b9:19:ca:1b:c7:fb:ce:9d:bd:02:ee: 08:9a:3a:e1:30:59:57:63:95:42:27:ec:b3:aa:60: c7:09:85:fc:c9:f6:63:7e:5b:e6:c1:28:5b:7b:7a: ca:6e:fe:28:e8:28:b5:18:01:82:36:e6:ad:c1:fc: 2a:c0:0a:b2:95:ec:b5:c4:f3:71:e8:6c:41:0b:0b: 2c:21:ba:72:8c:6c:c6:25:de:36:5e:43:d5:22:ac: 65:b2:08:db:fd:c9:07:61:be:d3:64:cc:49:2e:12: 57:96:a4:eb:f0:c9:28:7c:7a:28:c4:a6:97:18:aa: b4:ab:84:3c:c8:bb:08:52:f4:c5:26:5a:58:af:ed: e2:2e:10:c6:fd:74:07:f1:07:b4:94:3b:7d:08:5f: 4d:05:72:22:cc:fe:93:ed:bb:68:38:08:5a:cd:9e: a5:07:29:d3:27:ad:6b:34:47:f6:17:cf:bb:49:46: b6:b1:68:cf:30:1a:dd:8c:f7:d7:b8:be:5b:ef:80: 42:16:e4:e0:73:88:f8:d1:dc:70:c9:ae:7d:8a:86: 7d:08:6f:ef:e2:1c:91:60:cd:be:1e:65:5c:6f:1b: 5f:7d:01:57:ff:01:4f:76:2d:98:9f:45:de:47:d7: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4C:1B:2F:3E:50:77:F7:4E:6F:D7:6D:65:8B:39:2A:F3:B5:7F:43 X509v3 Authority Key Identifier: keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:01:2e:ab:64:5f:ba:bc:62:65:0b:70:19:af:47:98:4e:cc: 72:84:e8:55:73:e4:d8:7b:8c:28:a6:20:4d:45:19:61:78:86: 66:64:6e:4a:76:c2:78:92:ec:70:62:a1:87:a5:a4:e9:66:23: 1d:a4:1f:a6:7a:e4:2c:d1:61:12:40:f3:7f:a2:e8:c0:2c:94: 4b:fe:b9:ec:ff:47:6a:ae:89:52:c4:ad:3c:14:fc:07:19:47: 78:d6:c0:c1:93:77:64:ba:9e:b8:85:92:37:11:c7:d0:bd:c4: 69:bd:9b:50:e7:1a:39:53:36:b6:60:03:da:ed:19:21:75:90: ac:c0:48:fe:29:c4:e9:45:42:52:be:2f:fb:cb:46:a2:63:52: ea:15:7f:14:54:ee:e4:28:d0:e6:9f:e4:bb:56:e4:5c:df:f9: b1:d5:76:c5:cb:56:3e:53:74:e2:b8:86:ed:cb:a6:8c:3d:bb: a4:64:45:05:7e:cb:7d:b9:fc:01:a6:64:a7:6b:f2:ab:14:a9: e8:89:13:6a:54:d8:e2:54:58:d6:c8:cc:09:90:92:b4:16:b2: 20:59:7d:1d:ec:3f:55:f0:96:5b:57:8c:c0:86:a4:ef:4d:e4: 2d:71:54:22:f0:be:eb:49:92:9a:3a:ff:be:f5:19:67:04:65: 6d:29:2f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LowKLjNgwbG/od8Ezz29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy NGIyOGQwHhcNMjUxMjA2MTUwMTIyWhcNMjUxMjA3MTUwMTIyWjAzMTEwLwYDVQQD EyhhZjRjMWIyZjNlNTA3N2Y3NGU2ZmQ3NmQ2NThiMzkyYWYzYjU3ZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArepFVlN3QJqYdJ1lDIt3+SpNuRnK G8f7zp29Au4ImjrhMFlXY5VCJ+yzqmDHCYX8yfZjflvmwShbe3rKbv4o6Ci1GAGC NuatwfwqwAqyley1xPNx6GxBCwssIbpyjGzGJd42XkPVIqxlsgjb/ckHYb7TZMxJ LhJXlqTr8MkofHooxKaXGKq0q4Q8yLsIUvTFJlpYr+3iLhDG/XQH8Qe0lDt9CF9N BXIizP6T7btoOAhazZ6lBynTJ61rNEf2F8+7SUa2sWjPMBrdjPfXuL5b74BCFuTg c4j40dxwya59ioZ9CG/v4hyRYM2+HmVcbxtffQFX/wFPdi2Yn0XeR9cUrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9MGy8+UHf3Tm/XbWWLOSrztX9DMB8GA1UdIwQY MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQEuq2Rf urxiZQtwGa9HmE7McoToVXPk2HuMKKYgTUUZYXiGZmRuSnbCeJLscGKhh6Wk6WYj HaQfpnrkLNFhEkDzf6LowCyUS/657P9Haq6JUsStPBT8BxlHeNbAwZN3ZLqeuIWS NxHH0L3Eab2bUOcaOVM2tmAD2u0ZIXWQrMBI/inE6UVCUr4v+8tGomNS6hV/FFTu 5CjQ5p/ku1bkXN/5sdV2xctWPlN04riG7cumjD27pGRFBX7Lfbn8AaZkp2vyqxSp 6IkTalTY4lRY1sjMCZCStBayIFl9Hew/VfCWW1eMwIak703kLXFUIvC+60mSmjr/ vvUZZwRlbSkv1A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:51 2025 by rpki-client