This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json) Hash identifier: BHYT2l4e5/bl2O1XRJP1wA59+HnTLD+yXxgU6LMoJic= Subject key identifier: 0C:4E:39:28:09:F9:54:62:C8:6F:74:11:EC:00:8D:BF:F9:B0:12:C8 Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Certificate serial: 019AF35209B8C0DDFBE7BD1C7BF7AB8C67CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft Manifest number: 07DB Signing time: Sat 06 Dec 2025 11:00:31 +0000 Manifest this update: Sat 06 Dec 2025 11:00:31 +0000 Manifest next update: Sun 07 Dec 2025 11:00:31 +0000 Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=) 2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: z89XlLKrugjjrpHIQIPhYv+5PQHwKRG/IwxuZycEYfo=) 3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=) 4: nyUaCxI_mhIRPBfXAC2R7UepWOc.roa (hash: BNMy6MFZBy5AjuJVKDOH+Jxe3AlYQ8RZeSw5teIhi8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:09:b8:c0:dd:fb:e7:bd:1c:7b:f7:ab:8c:67:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Validity Not Before: Dec 6 11:00:31 2025 GMT Not After : Dec 7 11:00:31 2025 GMT Subject: CN=0c4e392809f95462c86f7411ec008dbff9b012c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:02:77:07:ec:23:67:31:0b:f8:3e:8c:3c: fe:b0:8e:4f:d2:7b:ac:d3:f9:c3:26:a7:be:5a:22: fd:8e:f7:04:02:e9:1e:23:57:6c:c0:82:e0:69:b2: 5e:4c:e4:16:d2:32:af:f6:e8:26:4f:b5:3e:bb:5a: 6c:17:27:e5:83:76:60:88:65:76:6c:3a:15:a5:95: 00:76:c3:e5:b4:e1:af:68:d3:a9:c4:c2:82:a8:94: 90:ee:91:ce:09:26:dc:06:5c:f3:88:97:d5:07:3e: 12:c1:84:53:61:5a:97:87:20:1e:97:e7:77:39:20: c4:ca:c1:f6:bc:09:bd:f6:8b:a7:3a:cf:82:4b:95: 22:58:8b:42:d6:be:9b:9b:26:21:40:90:84:56:92: 1c:e2:9b:0f:28:3e:2a:dc:63:5a:09:5c:90:ba:87: d3:b2:5c:b1:43:f3:ed:75:ac:c0:5d:35:d8:3a:7e: 39:c5:2f:7e:66:1f:3c:7b:8d:50:00:62:e4:3d:93: 0b:78:f4:55:7c:f8:34:08:bd:6f:90:f4:86:75:f0: b2:ae:3c:83:cd:37:93:31:b8:18:9f:78:09:6a:45: f2:fd:fa:e8:c2:d6:ce:12:b7:30:70:43:43:cd:15: 6a:b2:11:52:74:2f:47:19:71:41:8f:86:8f:7f:47: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:39:28:09:F9:54:62:C8:6F:74:11:EC:00:8D:BF:F9:B0:12:C8 X509v3 Authority Key Identifier: keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:90:09:a9:12:63:b0:75:70:91:16:58:4c:98:5d:6c:86:e1: 58:60:a9:69:23:53:d4:67:59:b5:fc:b0:48:eb:e3:a7:30:af: f3:73:92:80:1c:51:1b:8e:e9:6c:d8:58:57:92:e8:ba:4b:a0: 6f:00:3a:43:d7:8e:f5:a1:ed:7e:ca:b9:1a:81:fc:29:c5:15: e9:1e:90:b6:e1:6d:fa:ac:79:da:d1:a4:c2:83:22:91:33:48: b3:93:1e:8b:43:ba:03:c1:5e:8f:84:0b:de:b4:02:ca:8e:f3: 79:82:1d:61:64:27:96:01:5d:a4:75:f9:4d:68:c0:82:f6:be: c8:a6:5b:2a:16:db:6f:02:90:14:44:e1:03:65:35:8f:ce:c3: f7:63:b2:d1:50:1c:1f:cb:cb:fa:d0:69:9b:3c:5d:67:ff:1a: d4:17:4d:08:64:66:8f:fc:32:f0:68:96:11:b8:c6:9e:71:58: fb:0e:2d:7a:ea:79:95:b6:bd:f6:47:a1:bc:50:1d:d6:c9:12: cf:52:8c:6d:0b:18:49:05:09:a6:ce:0d:49:8a:4f:7b:be:cc: 61:e9:09:eb:98:13:ec:30:39:80:9d:7f:0e:30:a3:93:a1:5a: 73:8e:31:50:50:43:24:df:49:03:dc:98:b3:25:44:e1:56:ed: 04:e0:b3:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgm4wN37570ce/erjGfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5 N2RlMzcwHhcNMjUxMjA2MTEwMDMxWhcNMjUxMjA3MTEwMDMxWjAzMTEwLwYDVQQD EygwYzRlMzkyODA5Zjk1NDYyYzg2Zjc0MTFlYzAwOGRiZmY5YjAxMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4cCdwfsI2cxC/g+jDz+sI5P0nus 0/nDJqe+WiL9jvcEAukeI1dswILgabJeTOQW0jKv9ugmT7U+u1psFyflg3ZgiGV2 bDoVpZUAdsPltOGvaNOpxMKCqJSQ7pHOCSbcBlzziJfVBz4SwYRTYVqXhyAel+d3 OSDEysH2vAm99ounOs+CS5UiWItC1r6bmyYhQJCEVpIc4psPKD4q3GNaCVyQuofT slyxQ/PtdazAXTXYOn45xS9+Zh88e41QAGLkPZMLePRVfPg0CL1vkPSGdfCyrjyD zTeTMbgYn3gJakXy/frowtbOErcwcENDzRVqshFSdC9HGXFBj4aPf0eo5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxOOSgJ+VRiyG90EewAjb/5sBLIMB8GA1UdIwQY MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt MmNlYThlMTUzNjMyLzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpAJqRJj sHVwkRZYTJhdbIbhWGCpaSNT1GdZtfywSOvjpzCv83OSgBxRG47pbNhYV5Loukug bwA6Q9eO9aHtfsq5GoH8KcUV6R6QtuFt+qx52tGkwoMikTNIs5Mei0O6A8Fej4QL 3rQCyo7zeYIdYWQnlgFdpHX5TWjAgva+yKZbKhbbbwKQFEThA2U1j87D92Oy0VAc H8vL+tBpmzxdZ/8a1BdNCGRmj/wy8GiWEbjGnnFY+w4teup5lba99kehvFAd1skS z1KMbQsYSQUJps4NSYpPe77MYekJ65gT7DA5gJ1/DjCjk6Fac44xUFBDJN9JA9yY syVE4VbtBOCzRg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:23 2025 by rpki-client