This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json) Hash identifier: GAa38s6GSYPDapsZpub+4RKq+h83pBY7q+O01kqrBFI= Subject key identifier: 4B:F5:D7:02:E0:3E:FB:C9:47:BA:D5:2C:BA:79:45:F7:8A:F7:52:08 Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Certificate serial: 019AF31CDE17B130564B0488B2B3DE4EFD09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft Manifest number: 0CEE Signing time: Sat 06 Dec 2025 10:02:26 +0000 Manifest this update: Sat 06 Dec 2025 10:02:26 +0000 Manifest next update: Sun 07 Dec 2025 10:02:26 +0000 Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=) 2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=) 3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: vC2DI+yQMZ3uGxKgfdtVJho9alBOAb30UwAQxaTEQUU=) 4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:de:17:b1:30:56:4b:04:88:b2:b3:de:4e:fd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Validity Not Before: Dec 6 10:02:26 2025 GMT Not After : Dec 7 10:02:26 2025 GMT Subject: CN=4bf5d702e03efbc947bad52cba7945f78af75208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:81:d6:ec:01:b7:ce:68:9f:31:1a:0d:18: ac:de:4b:64:5b:d9:74:6e:f3:c8:92:c6:48:96:c9: 53:f9:be:2f:4e:77:df:26:a1:88:07:fa:e2:f3:8c: ac:61:67:84:6b:29:5e:15:63:6c:86:9f:a4:fd:3d: e2:9d:be:f3:db:cb:cb:58:a5:39:3e:96:7f:de:12: 25:2b:13:b5:b6:ed:6c:d2:0c:ca:fa:e4:13:60:2e: 02:63:ff:d5:6d:e6:91:03:8f:49:1e:5a:55:e0:36: 93:32:f3:de:88:25:66:8f:c9:7e:21:2e:18:f2:c1: af:52:1f:f9:58:2f:77:90:37:22:85:1d:bd:a7:50: aa:04:e8:d6:cb:da:68:18:9d:88:8a:f8:dc:79:92: 59:49:db:4e:02:18:0a:bc:c4:eb:7b:00:d2:44:37: 78:8b:57:1c:d7:75:aa:b6:ee:15:9d:7a:ef:96:df: 76:cf:2e:27:fd:5f:6c:2a:62:e4:b0:8f:77:ff:46: ee:2c:65:4a:e1:ba:2e:79:25:ce:ba:b4:7c:97:29: 52:21:94:95:fb:72:fb:88:37:ec:ac:31:19:1f:51: 25:b5:d7:03:aa:32:fd:f2:8d:a9:13:4c:37:fb:73: 94:de:65:9e:49:27:50:60:55:d3:62:b2:ec:0f:82: 1f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F5:D7:02:E0:3E:FB:C9:47:BA:D5:2C:BA:79:45:F7:8A:F7:52:08 X509v3 Authority Key Identifier: keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:af:5e:ad:f2:f0:c8:5f:8f:e3:86:a4:e3:8f:be:21:f0:4c: 96:e5:8d:2c:47:ff:0e:b5:85:dd:ec:6e:a3:ce:b4:0c:5a:84: e1:60:31:a8:02:f8:d9:57:08:ca:4c:e7:1b:50:21:fe:9b:06: 53:45:3d:68:e8:af:56:88:e2:d2:01:7f:de:08:95:11:12:f0: 7d:8a:73:19:fc:cf:1a:bb:f6:c5:95:ef:d7:a4:ee:2a:31:8d: eb:62:dd:17:4f:7b:8b:54:66:8d:c0:64:0c:5c:b0:5a:32:1c: 87:81:7f:ef:69:d4:f6:6b:43:78:0f:5f:38:7b:c9:09:ee:2e: 1a:ff:66:a9:98:f8:61:17:12:e9:4e:4b:d8:74:3b:b1:4d:0c: f7:cd:1b:99:46:97:c3:74:61:aa:39:2b:c6:e0:74:5e:2c:ca: ba:b4:0e:60:70:7b:84:ac:41:7d:88:48:20:f5:b8:e8:73:70: 90:d6:55:d1:5b:92:8b:b1:6b:32:17:58:bf:de:ce:5a:e4:2e: b8:a4:c1:5b:6e:ab:78:2b:cd:84:cb:36:d8:48:48:70:2f:22: d1:26:a4:39:79:a5:f2:70:e7:a0:0f:0a:10:3d:7d:c6:ae:98: 04:40:bf:e4:6a:35:c0:1e:ca:db:e2:c0:f4:f7:cc:24:af:9d: 19:74:74:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHN4XsTBWSwSIsrPeTv0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm N2JmMmEwHhcNMjUxMjA2MTAwMjI2WhcNMjUxMjA3MTAwMjI2WjAzMTEwLwYDVQQD Eyg0YmY1ZDcwMmUwM2VmYmM5NDdiYWQ1MmNiYTc5NDVmNzhhZjc1MjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzWB1uwBt85onzEaDRis3ktkW9l0 bvPIksZIlslT+b4vTnffJqGIB/ri84ysYWeEayleFWNshp+k/T3inb7z28vLWKU5 PpZ/3hIlKxO1tu1s0gzK+uQTYC4CY//VbeaRA49JHlpV4DaTMvPeiCVmj8l+IS4Y 8sGvUh/5WC93kDcihR29p1CqBOjWy9poGJ2IivjceZJZSdtOAhgKvMTrewDSRDd4 i1cc13Wqtu4VnXrvlt92zy4n/V9sKmLksI93/0buLGVK4boueSXOurR8lylSIZSV +3L7iDfsrDEZH1EltdcDqjL98o2pE0w3+3OU3mWeSSdQYFXTYrLsD4IfAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv11wLgPvvJR7rVLLp5RfeK91IIMB8GA1UdIwQY MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt YzY2MzJjYzAxNGIwLzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO69erfLw yF+P44ak44++IfBMluWNLEf/DrWF3exuo860DFqE4WAxqAL42VcIykznG1Ah/psG U0U9aOivVoji0gF/3giVERLwfYpzGfzPGrv2xZXv16TuKjGN62LdF097i1RmjcBk DFywWjIch4F/72nU9mtDeA9fOHvJCe4uGv9mqZj4YRcS6U5L2HQ7sU0M980bmUaX w3RhqjkrxuB0XizKurQOYHB7hKxBfYhIIPW46HNwkNZV0VuSi7FrMhdYv97OWuQu uKTBW26reCvNhMs22EhIcC8i0SakOXml8nDnoA8KED19xq6YBEC/5Go1wB7K2+LA 9PfMJK+dGXR0tQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:49:14 2025 by rpki-client