This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json) Hash identifier: 0sSojjo70BcvHjv+ye2BaoubwkL0CY/YGKY8IWkNEsE= Subject key identifier: 3F:10:B2:C1:54:41:A9:8D:B8:F4:D1:AC:C4:46:53:3A:E6:83:A5:21 Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c Certificate serial: 019AF12F1C882AA6DD6A2E21BB5E493901E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft Manifest number: 0F50 Signing time: Sat 06 Dec 2025 01:03:07 +0000 Manifest this update: Sat 06 Dec 2025 01:03:07 +0000 Manifest next update: Sun 07 Dec 2025 01:03:07 +0000 Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: cMVeyTK+QT5YsoWwvSv8ebrQklyplWoK9VY4Zjamebc=) 2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:1c:88:2a:a6:dd:6a:2e:21:bb:5e:49:39:01:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c Validity Not Before: Dec 6 01:03:07 2025 GMT Not After : Dec 7 01:03:07 2025 GMT Subject: CN=3f10b2c15441a98db8f4d1acc446533ae683a521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:b6:5f:f8:b2:e1:c7:a7:bf:b8:f1:7b:1e: 37:98:b3:9b:8f:70:d9:b5:c4:4c:9d:38:4b:48:08: d7:fc:5e:9d:85:b2:62:e3:9b:89:9a:26:f9:f3:ac: 2b:42:85:a5:03:b7:ba:58:dc:54:f8:e6:89:3a:e4: ec:29:43:a3:05:a5:73:28:da:15:f4:ee:9a:3c:9e: ce:b5:92:e5:8d:f3:36:c1:5e:a0:5b:b3:15:99:51: 13:7b:bd:eb:b1:4e:92:f4:e6:82:19:d8:62:6f:12: 10:eb:1c:37:9f:d9:75:5a:20:9c:e8:6a:04:2f:65: 89:b6:1b:29:d7:97:00:e9:6c:45:76:a7:53:96:8c: d5:f7:ef:98:c6:7a:f0:7a:35:6d:10:4f:45:0f:99: 1b:18:4f:3a:56:5a:e2:11:fd:19:3a:3f:bb:cb:66: f8:fb:06:3a:0e:52:66:3e:b2:42:a5:48:66:e3:a2: 0d:9e:f1:01:72:1f:5f:80:65:f9:bf:54:74:64:ce: 40:d1:32:9c:66:20:ce:64:78:21:99:cf:0a:e5:f3: 23:0d:70:d7:be:ed:52:cc:07:32:e9:43:b0:1f:35: ab:3a:6c:d9:e4:db:87:5c:15:16:91:61:31:74:47: ef:d9:d7:4c:6d:19:58:08:c1:68:94:2b:f3:06:2c: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:10:B2:C1:54:41:A9:8D:B8:F4:D1:AC:C4:46:53:3A:E6:83:A5:21 X509v3 Authority Key Identifier: keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:19:1d:4e:34:11:46:9e:34:07:6e:07:61:a5:2b:0f:ed:37: 55:42:01:bf:f1:1c:1b:5c:d5:f4:f2:09:01:94:ab:c2:ea:28: 2b:4f:bc:38:c6:3f:23:9d:8d:3c:aa:76:d2:2d:ae:83:e7:68: 95:7b:ea:77:6d:73:e7:e7:ab:2c:be:ee:e3:82:13:85:45:84: 66:5d:d2:97:18:91:3d:e1:cb:f4:4a:bb:02:e3:7c:3d:d3:a7: 87:0f:98:3d:08:25:87:3e:ad:8e:bb:61:89:61:d0:e2:02:36: 46:76:ab:93:92:ce:1e:73:ff:54:41:d2:b4:65:d5:f3:b9:77: ca:ec:3a:61:20:b6:ae:95:d4:ab:63:54:b9:32:a0:43:bb:89: 7f:7e:4e:7e:60:e1:f2:eb:fe:ec:aa:d8:92:6c:59:93:89:7a: 57:ab:1e:32:d1:36:cb:e7:67:a2:5f:1b:85:1a:12:74:08:10: 0b:6a:aa:3e:75:ed:68:ec:10:60:3c:ec:67:f2:f3:86:69:7a: ec:e6:76:29:dc:b0:5d:41:c9:2b:c5:11:df:b7:fb:25:a6:d0: c4:95:b7:f6:48:35:f4:46:09:78:42:39:17:bb:b2:18:84:98: e6:87:06:b0:13:5a:04:f6:f8:a5:53:8e:44:08:f7:fe:29:3d: d8:c8:5a:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLxyIKqbdai4hu15JOQHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODk3MWVhMWQyMmI1ZWNkYTFhOTc1OWYwNWMyNmM4YzU2 YTQ2OGMwHhcNMjUxMjA2MDEwMzA3WhcNMjUxMjA3MDEwMzA3WjAzMTEwLwYDVQQD EygzZjEwYjJjMTU0NDFhOThkYjhmNGQxYWNjNDQ2NTMzYWU2ODNhNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVm2X/iy4cenv7jxex43mLObj3DZ tcRMnThLSAjX/F6dhbJi45uJmib586wrQoWlA7e6WNxU+OaJOuTsKUOjBaVzKNoV 9O6aPJ7OtZLljfM2wV6gW7MVmVETe73rsU6S9OaCGdhibxIQ6xw3n9l1WiCc6GoE L2WJthsp15cA6WxFdqdTlozV9++YxnrwejVtEE9FD5kbGE86VlriEf0ZOj+7y2b4 +wY6DlJmPrJCpUhm46INnvEBch9fgGX5v1R0ZM5A0TKcZiDOZHghmc8K5fMjDXDX vu1SzAcy6UOwHzWrOmzZ5NuHXBUWkWExdEfv2ddMbRlYCMFolCvzBizJCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8QssFUQamNuPTRrMRGUzrmg6UhMB8GA1UdIwQY MBaAFNaJceodIrXs2hqXWfBcJsjFakaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEt YTQ3NTQwZmVkNGI5LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEtYTQ3NTQwZmVkNGI5 LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRkdTjQR Rp40B24HYaUrD+03VUIBv/EcG1zV9PIJAZSrwuooK0+8OMY/I52NPKp20i2ug+do lXvqd21z5+erLL7u44IThUWEZl3SlxiRPeHL9Eq7AuN8PdOnhw+YPQglhz6tjrth iWHQ4gI2Rnark5LOHnP/VEHStGXV87l3yuw6YSC2rpXUq2NUuTKgQ7uJf35OfmDh 8uv+7KrYkmxZk4l6V6seMtE2y+dnol8bhRoSdAgQC2qqPnXtaOwQYDzsZ/Lzhml6 7OZ2KdywXUHJK8UR37f7JabQxJW39kg19EYJeEI5F7uyGISY5ocGsBNaBPb4pVOO RAj3/ik92MhaoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:09 2025 by rpki-client