This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json) Hash identifier: w2ojXZ+1M0h56OLUd6nja9gR6oJUWSpStaoAcrqwD6k= Subject key identifier: 8E:0C:06:61:58:5A:80:94:DE:B7:A7:C4:71:56:83:F8:9A:E1:02:19 Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Certificate serial: 019B32D74F79EC82153B9A545A1B1E2B9DEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 19:02:09 +0000 Manifest this update: Thu 18 Dec 2025 19:02:09 +0000 Manifest next update: Fri 19 Dec 2025 19:02:09 +0000 Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=) 2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: RTwfK8UNJfX29jHxDMT4lqv7VMfqt0bBp+XS9bkE/OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:4f:79:ec:82:15:3b:9a:54:5a:1b:1e:2b:9d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Validity Not Before: Dec 18 19:02:09 2025 GMT Not After : Dec 19 19:02:09 2025 GMT Subject: CN=8e0c0661585a8094deb7a7c4715683f89ae10219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:3e:ad:22:d2:9a:18:66:f6:8c:ef:5b:d2: 12:d0:3d:3f:e7:28:b1:20:e0:b3:c2:4e:3a:ca:2b: d2:ed:04:5a:bd:64:58:45:5b:1e:3a:56:c6:e9:73: 86:08:a3:44:cc:8d:ff:c0:b3:59:8f:3f:1d:d4:4e: 06:e4:69:98:33:8e:e2:3c:92:36:08:d7:21:1c:9f: 67:a3:f9:4b:5e:be:79:88:3d:95:1b:33:f1:0e:39: 3b:cd:e2:76:39:e2:a3:4a:55:9f:d4:9b:9f:26:ab: 0d:ba:02:be:97:80:58:ae:0e:2b:2b:64:b9:43:f9: 46:f2:ff:d1:4c:8e:7f:58:e1:a9:9e:3c:78:cf:8b: df:3a:86:a7:c7:e9:30:7f:2f:bd:df:f6:33:3e:31: f0:9e:17:7b:f9:49:d5:5c:65:c9:55:3a:a6:c5:7b: f1:45:f4:bb:8e:4f:39:76:93:9b:df:40:8b:69:d7: a2:7f:4d:f1:d6:dd:9e:7f:fb:16:9c:2b:c9:ed:75: ab:e1:56:10:19:13:e0:cb:ab:47:1a:a1:45:e5:25: ef:90:52:a2:a3:8f:e8:91:ef:ed:29:e5:8f:42:a6: da:60:e7:be:56:c5:78:66:a7:d7:1f:db:0b:a2:9c: 86:5e:12:d2:8c:24:4c:7b:df:e6:0f:0c:cd:ef:84: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0C:06:61:58:5A:80:94:DE:B7:A7:C4:71:56:83:F8:9A:E1:02:19 X509v3 Authority Key Identifier: keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:28:32:68:2b:8a:3f:9f:7d:c6:42:5b:8d:c3:b1:52:f3:d4: 32:03:c9:88:a5:70:d9:86:23:c1:70:9e:26:0a:e0:be:ac:31: 45:66:31:1c:10:58:3e:7d:cb:5f:12:7b:4b:f6:39:57:1a:67: 0b:29:5a:e3:b8:96:a5:8a:45:ed:76:0d:98:15:07:4e:6b:81: 92:99:94:9a:d4:dd:50:7a:a8:e3:b3:f0:d5:e2:73:42:a2:00: f2:21:36:53:c0:ef:61:52:42:e0:0d:38:08:88:ef:db:77:ac: d0:af:c8:2e:e8:bc:93:85:90:64:4f:3c:7e:45:8b:37:84:0b: fd:57:30:b0:2d:61:e9:c9:1a:5a:ac:62:bb:28:85:7b:97:0f: b7:48:b3:64:a0:62:1f:03:2b:e9:fe:df:99:3b:8b:41:22:40: c8:48:e1:90:ba:82:a5:25:82:27:14:4b:e1:f2:43:bf:97:51: 2e:ee:f4:19:ac:90:c3:e5:a4:5e:e8:ec:72:97:0b:11:93:21: cc:2a:a4:c5:b0:a0:8d:8a:29:08:14:ff:0e:9b:b8:de:d8:23: e3:88:b0:b4:47:9a:32:5e:37:b9:45:f9:f9:9d:0b:56:40:a8: 66:fc:a1:0b:cc:2f:8c:11:ac:0e:f2:68:54:d6:89:41:dc:a6: 64:6c:3f:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy10957IIVO5pUWhseK53sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjViZDM5Yjc0ZjIzZDc2ODNkMTIzOGVhOWFjYTNjNjZh NjMxYTMwHhcNMjUxMjE4MTkwMjA5WhcNMjUxMjE5MTkwMjA5WjAzMTEwLwYDVQQD Eyg4ZTBjMDY2MTU4NWE4MDk0ZGViN2E3YzQ3MTU2ODNmODlhZTEwMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdM+rSLSmhhm9ozvW9IS0D0/5yix IOCzwk46yivS7QRavWRYRVseOlbG6XOGCKNEzI3/wLNZjz8d1E4G5GmYM47iPJI2 CNchHJ9no/lLXr55iD2VGzPxDjk7zeJ2OeKjSlWf1JufJqsNugK+l4BYrg4rK2S5 Q/lG8v/RTI5/WOGpnjx4z4vfOoanx+kwfy+93/YzPjHwnhd7+UnVXGXJVTqmxXvx RfS7jk85dpOb30CLadeif03x1t2ef/sWnCvJ7XWr4VYQGRPgy6tHGqFF5SXvkFKi o4/oke/tKeWPQqbaYOe+VsV4ZqfXH9sLopyGXhLSjCRMe9/mDwzN74RRPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4MBmFYWoCU3renxHFWg/ia4QIZMB8GA1UdIwQY MBaAFDi1vTm3TyPXaD0SOOqayjxmpjGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDct ZTNjZmU2Y2VjMGFjLzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDctZTNjZmU2Y2VjMGFj LzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSgyaCuK P599xkJbjcOxUvPUMgPJiKVw2YYjwXCeJgrgvqwxRWYxHBBYPn3LXxJ7S/Y5Vxpn Cyla47iWpYpF7XYNmBUHTmuBkpmUmtTdUHqo47Pw1eJzQqIA8iE2U8DvYVJC4A04 CIjv23es0K/ILui8k4WQZE88fkWLN4QL/VcwsC1h6ckaWqxiuyiFe5cPt0izZKBi HwMr6f7fmTuLQSJAyEjhkLqCpSWCJxRL4fJDv5dRLu70GayQw+WkXujscpcLEZMh zCqkxbCgjYopCBT/Dpu43tgj44iwtEeaMl43uUX5+Z0LVkCoZvyhC8wvjBGsDvJo VNaJQdymZGw/Gg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:08:03 2025 by rpki-client