This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json) Hash identifier: 8y7dGgytqq83dvkb7aQQJoegIuYBStvX/+VjKmlZN5I= Subject key identifier: EB:AF:8F:31:B6:05:83:3F:AE:27:11:81:3D:8B:D1:F1:2B:49:4D:10 Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Certificate serial: 019AF12E1B7A9E05D54CD455B9AD7E285503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=) 2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: BEkqODTnFLtt9F1D/vQhPo7Yulta9Untb6XruLk/qFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1b:7a:9e:05:d5:4c:d4:55:b9:ad:7e:28:55:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=ebaf8f31b605833fae2711813d8bd1f12b494d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:74:62:6a:32:01:e0:5b:b2:e5:c9:8c:12: 33:e4:42:05:65:e5:ac:ca:09:07:2a:0e:b0:62:97: ab:5a:b1:51:54:ca:ef:e7:58:48:64:3c:4f:2c:ae: c5:cf:71:96:0c:a5:4b:45:09:39:a9:cf:02:18:90: 20:03:3e:b3:21:7f:37:70:61:51:48:91:b1:b5:a9: 04:26:28:b8:0f:17:8c:89:66:96:cf:5b:5e:73:fb: 53:05:74:aa:d5:7e:e4:d2:d2:25:3a:12:24:3d:91: 11:5c:26:ca:32:a1:90:5b:5f:f1:bb:c4:c6:67:16: 32:09:4f:6c:6c:c5:41:0a:f3:bb:c5:d6:df:1c:99: 6b:2f:1e:05:1a:8e:49:33:36:af:24:86:62:51:68: 4f:3f:87:af:5c:02:17:bd:57:37:96:2a:18:9d:09: 41:18:53:3a:c8:ca:24:c5:f5:cd:26:78:85:fe:15: 11:87:43:1d:22:b7:6f:ad:27:06:53:3d:00:5c:a9: 7d:bb:a2:d0:75:db:d1:56:39:23:46:53:06:fa:e0: a1:6c:1b:3d:5f:fe:4a:75:d9:9b:8e:fc:96:7b:2f: 7e:67:79:d1:21:ad:e2:52:4c:46:df:e3:49:84:3c: c3:a8:3b:45:14:10:ee:7e:a8:39:ef:9c:d9:a3:aa: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AF:8F:31:B6:05:83:3F:AE:27:11:81:3D:8B:D1:F1:2B:49:4D:10 X509v3 Authority Key Identifier: keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ee:a3:37:86:82:8b:00:e7:b2:43:00:a1:a5:94:a4:18:ff: a7:88:8b:99:ab:b8:43:3a:b2:21:f4:e5:65:d8:1d:22:d9:bf: 53:31:24:06:58:9c:70:47:c3:33:41:9f:3b:85:ea:0b:a8:05: 64:1a:bc:7c:8f:75:e7:0e:ac:e4:23:e7:d0:e5:d7:5f:af:4d: 5f:54:de:42:5e:c0:1c:f7:76:19:e4:cd:d9:c4:d8:57:d2:04: cd:df:da:42:5b:b3:5a:a1:96:6a:49:49:79:58:ea:45:5c:14: 3f:ef:f7:d6:1a:2d:2c:e3:78:c1:79:ae:e1:ad:44:a5:20:16: c6:77:82:e9:82:ca:0e:95:e3:38:4a:d4:14:39:46:fd:fb:2a: 48:9e:af:b6:49:24:b5:4d:1f:ad:5e:83:e6:b2:71:9e:52:43: 58:a9:54:bd:7f:01:ae:cb:18:d6:63:47:ee:e4:43:42:77:5d: 4e:5c:0d:c4:b3:c8:40:1d:44:eb:2f:17:9d:58:86:97:03:37: 8d:64:30:e7:01:4b:da:62:82:df:da:e6:3f:0c:3a:c2:92:3a: fc:61:a1:f9:01:39:25:bb:1c:83:f7:76:a2:25:c7:f5:bf:64: 86:46:ae:fe:56:69:d5:52:12:f3:2f:53:f4:33:37:d4:52:7e: 25:e8:cd:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLht6ngXVTNRVua1+KFUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjViZDM5Yjc0ZjIzZDc2ODNkMTIzOGVhOWFjYTNjNjZh NjMxYTMwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD EyhlYmFmOGYzMWI2MDU4MzNmYWUyNzExODEzZDhiZDFmMTJiNDk0ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr10YmoyAeBbsuXJjBIz5EIFZeWs ygkHKg6wYperWrFRVMrv51hIZDxPLK7Fz3GWDKVLRQk5qc8CGJAgAz6zIX83cGFR SJGxtakEJii4DxeMiWaWz1tec/tTBXSq1X7k0tIlOhIkPZERXCbKMqGQW1/xu8TG ZxYyCU9sbMVBCvO7xdbfHJlrLx4FGo5JMzavJIZiUWhPP4evXAIXvVc3lioYnQlB GFM6yMokxfXNJniF/hURh0MdIrdvrScGUz0AXKl9u6LQddvRVjkjRlMG+uChbBs9 X/5KddmbjvyWey9+Z3nRIa3iUkxG3+NJhDzDqDtFFBDufqg575zZo6oGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuvjzG2BYM/ricRgT2L0fErSU0QMB8GA1UdIwQY MBaAFDi1vTm3TyPXaD0SOOqayjxmpjGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDct ZTNjZmU2Y2VjMGFjLzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDctZTNjZmU2Y2VjMGFj LzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+6jN4aC iwDnskMAoaWUpBj/p4iLmau4QzqyIfTlZdgdItm/UzEkBliccEfDM0GfO4XqC6gF ZBq8fI915w6s5CPn0OXXX69NX1TeQl7AHPd2GeTN2cTYV9IEzd/aQluzWqGWaklJ eVjqRVwUP+/31hotLON4wXmu4a1EpSAWxneC6YLKDpXjOErUFDlG/fsqSJ6vtkkk tU0frV6D5rJxnlJDWKlUvX8BrssY1mNH7uRDQnddTlwNxLPIQB1E6y8XnViGlwM3 jWQw5wFL2mKC39rmPww6wpI6/GGh+QE5Jbscg/d2oiXH9b9khkau/lZp1VIS8y9T 9DM31FJ+JejNdg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:00 2025 by rpki-client