This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json) Hash identifier: Dzyjxj1JYMXE/iMAym5Vp+G0UTz3w3jLU4tn/nURkTY= Subject key identifier: 31:36:BF:B2:E0:28:F5:DB:55:58:CD:17:BE:C7:51:11:82:0C:9A:84 Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d Certificate serial: 019AF3F7A03D70B68EBB1C568952E1FF6DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 14:01:23 +0000 Manifest this update: Sat 06 Dec 2025 14:01:23 +0000 Manifest next update: Sun 07 Dec 2025 14:01:23 +0000 Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=) 2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=) 3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: UPdeekm6CUKFt9iSQiZuyg+sz4Q8BVAR8n1Vocn2zbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a0:3d:70:b6:8e:bb:1c:56:89:52:e1:ff:6d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d Validity Not Before: Dec 6 14:01:23 2025 GMT Not After : Dec 7 14:01:23 2025 GMT Subject: CN=3136bfb2e028f5db5558cd17bec75111820c9a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:43:1b:88:8b:68:4c:f4:1e:aa:a5:4b:c2:28: 29:c0:68:03:f5:ba:48:25:0f:b3:ae:55:fd:37:a9: d3:3c:0c:15:f7:7d:40:7b:6c:0c:5b:98:2c:19:4b: 6b:43:1f:e4:49:fa:51:eb:b5:4b:ad:11:9b:cb:2d: e5:6f:f5:9b:8a:0c:15:8c:a9:07:29:4d:72:df:37: b1:06:9a:81:44:eb:12:b6:73:42:c1:3e:4f:34:bb: 61:7b:52:06:60:09:d4:9d:3e:6e:48:e1:71:8b:5e: 7c:b6:cd:10:0a:34:d4:7b:50:22:00:55:49:36:76: 7b:ec:ed:33:dc:54:fc:60:08:82:17:e6:12:15:e6: bb:dc:c3:45:8f:f3:71:1c:4f:42:fa:22:7e:4c:c2: 36:95:0b:c8:ea:77:3c:da:8d:f6:9a:a6:a0:17:30: 93:b1:65:38:f1:04:fd:f4:48:94:0d:5f:5a:60:40: fb:e5:f7:dc:2f:54:3a:79:ac:5b:d3:b6:1b:b2:0e: e1:df:bf:2d:1a:11:cb:59:37:5c:87:fc:ef:7c:47: 04:d0:87:b4:0b:db:b9:0a:ff:26:db:6d:31:64:32: 3b:ae:1b:26:02:7f:05:ac:49:46:bc:88:10:55:aa: c5:d4:98:a0:11:ca:cc:ce:8e:2f:6b:d0:0b:c0:17: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:36:BF:B2:E0:28:F5:DB:55:58:CD:17:BE:C7:51:11:82:0C:9A:84 X509v3 Authority Key Identifier: keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:96:ec:02:e5:88:6b:6e:61:31:4c:88:a1:98:78:74:6e:bd: cd:fb:4e:c2:d6:71:8f:d5:16:d6:4d:3b:c2:a5:81:3c:b0:65: e0:6f:4c:be:c2:9a:2c:72:27:bc:b1:b1:9a:79:46:be:ac:c3: 42:b4:28:03:7e:e6:7a:28:42:b3:ff:aa:39:27:ab:62:80:80: 6b:5c:b9:97:b1:eb:4f:a3:6b:53:9a:cb:56:ca:a8:5f:50:3a: 18:6a:53:a9:17:43:08:2b:6d:29:32:34:40:90:2e:67:6f:b7: 83:ac:36:38:2d:12:37:81:29:22:d0:65:00:6e:c4:b6:77:16: ce:1f:99:81:a5:83:fe:9b:a3:2c:88:c7:8a:db:5b:79:f8:5f: 3b:4d:6f:a7:a4:0a:f2:d8:05:17:e9:04:89:76:2a:7c:b3:40: a8:3a:e6:05:37:dd:62:71:bc:88:be:1e:19:9f:90:8f:a8:16: 2e:c5:b7:95:4e:18:ec:68:58:a5:61:b5:1f:74:d7:d8:3d:cb: 87:c8:c7:25:eb:0c:4e:df:01:bb:6c:32:e7:2b:47:32:40:84: 65:19:7e:a1:ab:e1:29:ef:a8:33:44:8d:1a:8a:6a:5d:91:f1: 97:26:b2:dd:58:54:92:9c:c4:8f:bc:67:53:1a:4d:0f:7e:8f: 33:97:06:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96A9cLaOuxxWiVLh/238MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmIxNzE4OTYzZGRkOTEyOGI3NmZkM2Q4MjEzYTE1NjVl Zjg1NmQwHhcNMjUxMjA2MTQwMTIzWhcNMjUxMjA3MTQwMTIzWjAzMTEwLwYDVQQD EygzMTM2YmZiMmUwMjhmNWRiNTU1OGNkMTdiZWM3NTExMTgyMGM5YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEMbiItoTPQeqqVLwigpwGgD9bpI JQ+zrlX9N6nTPAwV931Ae2wMW5gsGUtrQx/kSfpR67VLrRGbyy3lb/WbigwVjKkH KU1y3zexBpqBROsStnNCwT5PNLthe1IGYAnUnT5uSOFxi158ts0QCjTUe1AiAFVJ NnZ77O0z3FT8YAiCF+YSFea73MNFj/NxHE9C+iJ+TMI2lQvI6nc82o32mqagFzCT sWU48QT99EiUDV9aYED75ffcL1Q6eaxb07Ybsg7h378tGhHLWTdch/zvfEcE0Ie0 C9u5Cv8m220xZDI7rhsmAn8FrElGvIgQVarF1JigEcrMzo4va9ALwBet8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDE2v7LgKPXbVVjNF77HURGCDJqEMB8GA1UdIwQY MBaAFKC7FxiWPd2RKLdv09ghOhVl74VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jNDIxMGUtOTBkZS00ZWNhLTgyMDYt NTUzN2Q4NWQyYmQwLzEvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jNDIxMGUtOTBkZS00ZWNhLTgyMDYtNTUzN2Q4NWQyYmQw LzEvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJbsAuWI a25hMUyIoZh4dG69zftOwtZxj9UW1k07wqWBPLBl4G9MvsKaLHInvLGxmnlGvqzD QrQoA37meihCs/+qOSerYoCAa1y5l7HrT6NrU5rLVsqoX1A6GGpTqRdDCCttKTI0 QJAuZ2+3g6w2OC0SN4EpItBlAG7EtncWzh+ZgaWD/pujLIjHittbefhfO01vp6QK 8tgFF+kEiXYqfLNAqDrmBTfdYnG8iL4eGZ+Qj6gWLsW3lU4Y7GhYpWG1H3TX2D3L h8jHJesMTt8Bu2wy5ytHMkCEZRl+oavhKe+oM0SNGopqXZHxlyay3VhUkpzEj7xn UxpND36PM5cGJg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:25:10 2025 by rpki-client