This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json) Hash identifier: yVlW3EBK1tIuRMY/KuWUlQjXxo2GlyNWsV7q/kE+D5E= Subject key identifier: 5B:36:F8:69:5C:A7:80:74:F5:71:8F:13:DA:A9:B7:41:03:7C:0C:9F Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24 Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624 Certificate serial: 019AF3522334F9A5E0AAB0DD0A161FE465B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft Manifest number: 1488 Signing time: Sat 06 Dec 2025 11:00:37 +0000 Manifest this update: Sat 06 Dec 2025 11:00:37 +0000 Manifest next update: Sun 07 Dec 2025 11:00:37 +0000 Files and hashes: 1: 5jNjIfZHCFKLrjsIx_m00VoOlb4.roa (hash: dt8T70nhuJEI4o3TKiSfnq7kGTmTe/iNZKgWHVnpVF8=) 2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: jzw89OHQw2piO7PbjcA09M8gz5Ruu5/8lab6QQc5Egg=) 3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:23:34:f9:a5:e0:aa:b0:dd:0a:16:1f:e4:65:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624 Validity Not Before: Dec 6 11:00:37 2025 GMT Not After : Dec 7 11:00:37 2025 GMT Subject: CN=5b36f8695ca78074f5718f13daa9b741037c0c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0a:50:d7:91:05:b4:6e:93:05:52:a3:fb:cd: 91:68:61:74:ab:fc:8f:bb:26:ec:60:a8:bf:0f:20: 57:04:c0:33:8c:e9:e4:c2:d1:59:cf:d1:bd:9f:4e: 7a:ac:ae:80:83:37:df:bd:de:fd:f2:8e:2f:e6:2a: 7c:87:59:ea:4b:43:73:39:7a:cc:53:66:69:c9:0f: cf:b8:c6:9a:c1:84:6e:c3:71:1c:57:1b:59:95:dc: 81:f7:b3:0d:03:04:2a:f6:da:77:5a:29:3d:a5:dd: 4e:80:2d:71:db:77:f7:5c:ed:e2:44:fc:5e:7f:12: 17:ee:02:0a:1a:d5:40:38:7d:c0:33:36:f0:3d:38: 1e:59:af:98:10:0a:7d:66:ec:18:0a:fd:70:ea:f2: fe:17:41:37:0c:e2:f4:7f:43:7c:20:72:e2:7c:0c: 66:32:55:3b:c4:6c:dc:7e:d6:5a:47:e8:31:d1:66: ad:7b:df:e5:4a:84:a5:0f:57:16:25:7a:c8:95:33: e1:36:0b:76:22:d5:83:ba:a8:e7:d0:86:e8:0b:32: 44:ed:a9:b4:e9:e0:c9:43:5f:83:3a:d4:b1:79:34: f9:44:ea:b0:e9:9e:78:15:28:cc:4c:ec:e3:5d:2e: 28:ab:e9:7c:cf:02:ba:c4:ff:26:0c:9b:77:aa:87: b9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:36:F8:69:5C:A7:80:74:F5:71:8F:13:DA:A9:B7:41:03:7C:0C:9F X509v3 Authority Key Identifier: keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9c:f0:5e:24:1e:e9:10:ee:0c:08:39:86:5d:dc:ad:f6:f1: 07:c2:2c:e2:84:b9:54:70:22:6a:bf:d6:92:8f:9b:31:47:0a: 56:3e:a4:16:0e:f2:4c:63:ea:20:21:0f:70:36:e0:78:df:c5: 04:8e:23:5f:eb:d7:57:ff:34:c2:f4:95:e5:36:fb:ac:2e:e6: 57:87:34:8b:bb:48:8f:ca:b1:a8:5e:da:c4:6c:03:26:d7:90: ec:b9:58:71:1c:0c:7c:ce:c0:4a:ed:fa:76:a0:75:ab:46:fd: 41:05:d6:5b:9a:5f:10:a1:4b:f0:16:70:4b:1c:92:88:ad:a3: b5:87:54:50:43:68:e9:8a:14:0e:34:89:35:23:c8:8e:e2:f5: a5:99:51:c1:2b:fa:77:f8:42:84:cd:f2:3f:cb:15:03:a6:90: d7:b4:dd:60:9e:6e:0a:51:c9:e6:d5:12:c1:77:8a:12:33:7a: 10:30:68:4d:96:1a:d4:dd:19:d7:3d:f3:47:a9:a4:f3:9a:61: f7:bd:24:6d:6c:12:63:eb:3b:29:98:0f:ab:3c:80:7c:17:cb: d0:52:77:64:ad:db:a7:a4:8e:26:31:dc:10:6d:6b:af:f5:b4: 9b:a9:65:b0:17:4f:b7:7f:3f:b1:c8:bd:6c:5f:1f:2f:30:38: ff:ef:53:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUiM0+aXgqrDdChYf5GWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWRjMmJhNTk0MmUwNGZkZDhiYTk5NTE2YTFiOTNiMWU0 Zjk2MjQwHhcNMjUxMjA2MTEwMDM3WhcNMjUxMjA3MTEwMDM3WjAzMTEwLwYDVQQD Eyg1YjM2Zjg2OTVjYTc4MDc0ZjU3MThmMTNkYWE5Yjc0MTAzN2MwYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ApQ15EFtG6TBVKj+82RaGF0q/yP uybsYKi/DyBXBMAzjOnkwtFZz9G9n056rK6Agzffvd798o4v5ip8h1nqS0NzOXrM U2ZpyQ/PuMaawYRuw3EcVxtZldyB97MNAwQq9tp3Wik9pd1OgC1x23f3XO3iRPxe fxIX7gIKGtVAOH3AMzbwPTgeWa+YEAp9ZuwYCv1w6vL+F0E3DOL0f0N8IHLifAxm MlU7xGzcftZaR+gx0Wate9/lSoSlD1cWJXrIlTPhNgt2ItWDuqjn0IboCzJE7am0 6eDJQ1+DOtSxeTT5ROqw6Z54FSjMTOzjXS4oq+l8zwK6xP8mDJt3qoe5gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs2+Glcp4B09XGPE9qpt0EDfAyfMB8GA1UdIwQY MBaAFDpdwrpZQuBP3YuplRahuTseT5YkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGIt OWMxNWZiZDVlZTVlLzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGItOWMxNWZiZDVlZTVl LzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpzwXiQe 6RDuDAg5hl3crfbxB8Is4oS5VHAiar/Wko+bMUcKVj6kFg7yTGPqICEPcDbgeN/F BI4jX+vXV/80wvSV5Tb7rC7mV4c0i7tIj8qxqF7axGwDJteQ7LlYcRwMfM7ASu36 dqB1q0b9QQXWW5pfEKFL8BZwSxySiK2jtYdUUENo6YoUDjSJNSPIjuL1pZlRwSv6 d/hChM3yP8sVA6aQ17TdYJ5uClHJ5tUSwXeKEjN6EDBoTZYa1N0Z1z3zR6mk85ph 970kbWwSY+s7KZgPqzyAfBfL0FJ3ZK3bp6SOJjHcEG1rr/W0m6llsBdPt38/sci9 bF8fLzA4/+9T1A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:32 2025 by rpki-client