This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json) Hash identifier: KATALzzZOV+CjChPm+gfqxvG7TGh2ZvEL0iWMpArhAY= Subject key identifier: C9:B2:00:79:40:0E:3C:C7:96:F1:C9:8C:EA:8A:EC:CE:21:76:E5:64 Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9 Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9 Certificate serial: 019AF50A160D9C343D4F523FAFDBDDCE57C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft Manifest number: 12A1 Signing time: Sat 06 Dec 2025 19:01:10 +0000 Manifest this update: Sat 06 Dec 2025 19:01:10 +0000 Manifest next update: Sun 07 Dec 2025 19:01:10 +0000 Files and hashes: 1: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: xFGsQqyi9y0e8+UekjfZ8iACBvCcieDBuHPHzePgTzs=) 2: lx4r-_of66D7nj4_JxEX4B7iGSo.roa (hash: nBmUpTvMg37xBiu7Iw7rIz0CmSBaScYekCzZq9oCvAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:16:0d:9c:34:3d:4f:52:3f:af:db:dd:ce:57:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9 Validity Not Before: Dec 6 19:01:10 2025 GMT Not After : Dec 7 19:01:10 2025 GMT Subject: CN=c9b20079400e3cc796f1c98cea8aecce2176e564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:8b:78:d1:b6:68:c2:42:b3:7f:30:8a:78: 99:07:d2:24:f1:a3:90:29:5e:4e:5f:d5:e1:d0:b9: 9f:46:1d:f2:bf:26:d9:e6:76:07:1a:c8:3c:ea:6f: 7f:67:c0:a1:30:cf:e0:4c:50:b4:bc:56:63:df:26: bf:55:2f:a3:0c:68:e4:05:11:ff:0a:f5:fb:1f:d3: 9e:56:78:ba:4f:37:22:f2:7c:36:4c:22:33:0e:f0: 75:b9:0a:02:cc:46:9b:1b:0c:d2:4e:49:6b:94:b8: 20:b4:7a:c7:de:c9:22:77:85:84:a1:94:a6:dc:09: e4:4a:87:f2:85:3d:ed:a9:b2:4b:20:f6:1d:8d:a3: cc:90:8e:25:c4:f8:2f:10:c0:33:33:ce:03:b0:0c: bf:23:e9:d7:ab:a3:b9:13:37:a7:d2:2c:78:17:f0: ba:35:28:4e:9f:6d:d1:49:75:11:85:2f:f0:c6:ab: 54:f0:73:73:15:46:e0:8f:8f:0d:09:ea:32:5b:ec: 74:5f:f8:a4:8b:b4:44:dd:61:81:9a:77:0a:3c:11: 3f:86:18:7c:49:e6:7f:ea:83:ab:52:91:92:56:3e: b8:46:63:72:c2:36:28:ba:bc:40:39:9c:a3:d1:1f: 0f:8a:3d:17:14:eb:f7:b4:19:29:e3:e3:5f:85:06: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:00:79:40:0E:3C:C7:96:F1:C9:8C:EA:8A:EC:CE:21:76:E5:64 X509v3 Authority Key Identifier: keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:be:84:89:6b:c5:e2:dc:ce:05:f9:8d:ab:eb:0e:df:ea:f3: 48:e8:5f:7d:eb:c2:bc:1b:a8:73:b3:b1:48:1c:0f:2a:d0:9b: a4:5f:05:44:45:a8:d7:ed:f7:59:b3:8b:4c:8a:5e:a5:15:12: 4c:3d:cb:91:12:3c:90:0e:a1:30:a0:4e:78:1b:5e:ac:d9:aa: 00:f1:f0:d4:64:0e:65:4c:89:d2:96:ca:e6:49:18:84:6d:06: 46:b1:b6:08:71:5b:aa:dd:71:10:98:d5:c0:41:c6:48:ce:34: 56:02:a9:db:d8:9f:d8:82:94:e2:fc:fc:93:cd:38:a1:19:0c: 3a:45:db:15:fb:92:fc:80:66:19:a8:99:96:1a:23:39:68:ce: 1c:44:25:13:17:6e:ae:4e:e3:e6:a5:29:a4:47:f4:cb:c3:31: cb:67:b6:3b:48:bb:2e:69:93:5e:3d:bb:9e:e8:3c:6b:93:b1: bc:cd:43:05:65:a4:a9:84:67:c4:3b:5c:75:7b:e2:ae:62:ce: d7:55:6c:10:39:53:0a:1e:23:b2:03:ea:18:81:75:a0:6d:2b: 26:0f:4d:bb:ca:bf:32:ca:57:6b:61:40:37:7f:f0:15:2b:eb: db:2d:eb:0e:23:74:10:6e:cd:0c:5e:d5:6d:d4:06:c6:f9:0b: 48:f5:93:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChYNnDQ9T1I/r9vdzlfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTJjMzM3MzFhZGNhNTdkY2MzM2IyZmI4MjMzZmMwMzhi MDk1ZTkwHhcNMjUxMjA2MTkwMTEwWhcNMjUxMjA3MTkwMTEwWjAzMTEwLwYDVQQD EyhjOWIyMDA3OTQwMGUzY2M3OTZmMWM5OGNlYThhZWNjZTIxNzZlNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdiLeNG2aMJCs38winiZB9Ik8aOQ KV5OX9Xh0LmfRh3yvybZ5nYHGsg86m9/Z8ChMM/gTFC0vFZj3ya/VS+jDGjkBRH/ CvX7H9OeVni6Tzci8nw2TCIzDvB1uQoCzEabGwzSTklrlLggtHrH3skid4WEoZSm 3AnkSofyhT3tqbJLIPYdjaPMkI4lxPgvEMAzM84DsAy/I+nXq6O5Ezen0ix4F/C6 NShOn23RSXURhS/wxqtU8HNzFUbgj48NCeoyW+x0X/iki7RE3WGBmncKPBE/hhh8 SeZ/6oOrUpGSVj64RmNywjYourxAOZyj0R8Pij0XFOv3tBkp4+NfhQZCiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmyAHlADjzHlvHJjOqK7M4hduVkMB8GA1UdIwQY MBaAFADiwzcxrcpX3MM7L7gjP8A4sJXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMt YzlhZDM3Zjk0Y2Q3LzEvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMtYzlhZDM3Zjk0Y2Q3 LzEvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr6EiWvF 4tzOBfmNq+sO3+rzSOhffevCvBuoc7OxSBwPKtCbpF8FREWo1+33WbOLTIpepRUS TD3LkRI8kA6hMKBOeBterNmqAPHw1GQOZUyJ0pbK5kkYhG0GRrG2CHFbqt1xEJjV wEHGSM40VgKp29if2IKU4vz8k804oRkMOkXbFfuS/IBmGaiZlhojOWjOHEQlExdu rk7j5qUppEf0y8Mxy2e2O0i7LmmTXj27nug8a5OxvM1DBWWkqYRnxDtcdXvirmLO 11VsEDlTCh4jsgPqGIF1oG0rJg9Nu8q/MspXa2FAN3/wFSvr2y3rDiN0EG7NDF7V bdQGxvkLSPWT6A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:44 2025 by rpki-client