This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json) Hash identifier: TslV1pkaGGyna3U8zfiuGJw/hxWpvWkDegoxez/L1mE= Subject key identifier: 26:58:1E:F9:D8:9D:77:18:A4:41:7F:AF:FE:6F:50:FF:6C:E6:E1:77 Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00 Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200 Certificate serial: 019AFBB0F43B5F5B005F8C706421886C5A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft Manifest number: 0289 Signing time: Mon 08 Dec 2025 02:01:09 +0000 Manifest this update: Mon 08 Dec 2025 02:01:09 +0000 Manifest next update: Tue 09 Dec 2025 02:01:09 +0000 Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: YWQg9WzTleM7t5qd2MZ/S9NUrng556gMObvrEcUHLnA=) 2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:f4:3b:5f:5b:00:5f:8c:70:64:21:88:6c:5a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200 Validity Not Before: Dec 8 02:01:09 2025 GMT Not After : Dec 9 02:01:09 2025 GMT Subject: CN=26581ef9d89d7718a4417faffe6f50ff6ce6e177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:3a:1a:31:63:5d:03:5d:9e:27:20:ce:97: 3c:84:05:ad:81:8c:4c:b2:75:a1:a9:c8:18:08:50: f9:4a:1d:0d:79:34:0c:c3:b6:52:bd:0d:4a:9b:10: 24:6a:33:20:2e:dd:c0:9a:d1:31:5f:6a:67:f7:9b: e8:b2:a5:2e:45:a0:09:b8:90:cc:6d:76:b7:9c:47: a0:eb:8e:d4:0b:b1:81:5f:7f:1e:67:5a:48:3b:39: 70:46:56:5d:36:74:24:be:37:06:03:36:31:09:b2: e0:38:aa:16:85:14:fd:5e:b5:be:d4:ab:6a:c6:69: a9:70:f3:a1:d0:b1:52:71:17:23:f7:74:fd:5a:6d: 40:a7:22:33:1e:2e:96:5f:2a:be:96:47:58:7d:4f: e5:01:87:16:9f:53:1f:77:0e:35:db:8e:9a:d5:a3: 0e:9e:d7:44:2b:5a:d3:a8:0d:2e:19:86:a5:a3:a0: a9:7b:ea:9b:17:bf:8b:ae:b0:9a:7f:c7:75:fd:80: 90:93:26:73:e4:3b:02:3f:e0:19:08:88:2a:31:2c: ff:02:0a:6a:bf:40:12:40:9f:89:1f:01:92:ec:3c: 88:ef:b8:ba:ae:53:50:6f:6e:60:d6:bd:3d:aa:10: 7e:66:2b:b3:34:c5:c4:e9:b3:fa:83:cd:f0:77:3d: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:58:1E:F9:D8:9D:77:18:A4:41:7F:AF:FE:6F:50:FF:6C:E6:E1:77 X509v3 Authority Key Identifier: keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:23:02:51:14:1d:6b:25:85:a6:5d:1f:7a:92:76:88:5f:55: b6:c2:8b:02:cf:9b:67:5c:c4:38:f5:71:92:24:73:15:ed:b1: 55:32:b7:6a:5e:ce:02:36:66:a2:a5:c6:cc:7f:06:76:0a:05: 7d:60:fd:5a:36:8a:f1:48:c6:d1:8a:70:bc:45:9f:6c:f6:bc: 24:4c:6e:2e:b8:a2:ec:78:4f:39:51:ca:a7:6c:11:18:d6:85: 48:e4:26:d6:02:ee:3c:08:34:04:0c:e2:e6:17:45:e7:1f:2d: 5a:d4:57:cd:55:d1:6c:6a:7d:f3:80:f5:4f:79:ba:d1:ff:0b: 62:4d:e4:6b:32:91:75:3e:22:4d:16:1a:3c:7d:56:be:49:bb: 46:2b:0c:6e:4a:04:0d:65:c6:3d:8d:b9:a4:4a:69:ec:cf:4a: 72:94:37:7f:20:ba:24:64:a4:79:97:39:fc:d7:56:7a:60:3c: 39:fc:b2:19:af:10:6b:62:d4:89:a8:ce:b9:f1:b4:b3:f4:d6: 7e:fd:80:b1:e3:07:18:39:87:d6:21:a6:1b:12:2c:04:fd:71: ae:6d:d2:a8:27:d7:b7:c6:eb:da:b0:0e:ed:0a:12:1f:08:39: 9a:5a:1c:5a:52:b6:d8:fa:f3:72:68:5a:57:c2:cc:81:89:e0: 86:a3:e0:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sPQ7X1sAX4xwZCGIbFpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmFhODBiMzEwYTRhZWVkMmMyMzNjZmU3ODJjNGYzNzlh NjYyMDAwHhcNMjUxMjA4MDIwMTA5WhcNMjUxMjA5MDIwMTA5WjAzMTEwLwYDVQQD EygyNjU4MWVmOWQ4OWQ3NzE4YTQ0MTdmYWZmZTZmNTBmZjZjZTZlMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx06GjFjXQNdnicgzpc8hAWtgYxM snWhqcgYCFD5Sh0NeTQMw7ZSvQ1KmxAkajMgLt3AmtExX2pn95vosqUuRaAJuJDM bXa3nEeg647UC7GBX38eZ1pIOzlwRlZdNnQkvjcGAzYxCbLgOKoWhRT9XrW+1Ktq xmmpcPOh0LFScRcj93T9Wm1ApyIzHi6WXyq+lkdYfU/lAYcWn1Mfdw41246a1aMO ntdEK1rTqA0uGYalo6Cpe+qbF7+LrrCaf8d1/YCQkyZz5DsCP+AZCIgqMSz/Agpq v0ASQJ+JHwGS7DyI77i6rlNQb25g1r09qhB+ZiuzNMXE6bP6g83wdz18TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZYHvnYnXcYpEF/r/5vUP9s5uF3MB8GA1UdIwQY MBaAFKC6qAsxCkru0sIzz+eCxPN5pmIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQt MDJkNTQ4MTJjYzZlLzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQtMDJkNTQ4MTJjYzZl LzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyMCURQd ayWFpl0fepJ2iF9VtsKLAs+bZ1zEOPVxkiRzFe2xVTK3al7OAjZmoqXGzH8GdgoF fWD9WjaK8UjG0YpwvEWfbPa8JExuLrii7HhPOVHKp2wRGNaFSOQm1gLuPAg0BAzi 5hdF5x8tWtRXzVXRbGp984D1T3m60f8LYk3kazKRdT4iTRYaPH1Wvkm7RisMbkoE DWXGPY25pEpp7M9KcpQ3fyC6JGSkeZc5/NdWemA8OfyyGa8Qa2LUiajOufG0s/TW fv2AseMHGDmH1iGmGxIsBP1xrm3SqCfXt8br2rAO7QoSHwg5mlocWlK22Przcmha V8LMgYnghqPgjQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:12 2025 by rpki-client