This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json) Hash identifier: k1cIFq3mLXhWH+dW3kFe2rrwj0d9LF2BwLgRKUrYsVo= Subject key identifier: 53:AC:24:94:6C:4F:E2:38:99:B8:62:94:08:A5:28:47:5C:41:46:76 Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4 Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4 Certificate serial: 019AF3C0C2341E32F204AE5F82C58CF7BCFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft Manifest number: 03B2 Signing time: Sat 06 Dec 2025 13:01:27 +0000 Manifest this update: Sat 06 Dec 2025 13:01:27 +0000 Manifest next update: Sun 07 Dec 2025 13:01:27 +0000 Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: p5v3MHM5K9NzbOAZ/kdukyMLYZaLC+JrpLcie+yYjh4=) 2: Xpmq2qI8X7GAALvPIhXOimJgH5Y.roa (hash: AgxExCu/sRjU92nC3fyyQWh5ZarDgbI5r/jd4t48QXE=) 3: qjyhGLzSjen3GpqWTeSFco9KSwQ.roa (hash: kp7IkbSOmQC+WxD6X5wnwhQy2Cc5wCQoIJuVSNYbr0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:c2:34:1e:32:f2:04:ae:5f:82:c5:8c:f7:bc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4 Validity Not Before: Dec 6 13:01:27 2025 GMT Not After : Dec 7 13:01:27 2025 GMT Subject: CN=53ac24946c4fe23899b8629408a528475c414676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:7e:c4:e2:7b:df:c3:bb:16:b4:b2:f1:23: 1b:0c:eb:45:55:78:f5:a0:d6:4d:a2:5a:9a:4e:44: 87:87:7b:c7:44:da:6b:8a:66:12:96:f2:f3:9c:60: fd:33:b0:29:e9:b9:c9:df:b0:b0:88:9a:cb:dd:b6: b3:0d:bd:f6:e2:0a:f3:8a:94:06:61:d2:11:bb:11: f8:df:a2:6f:5f:41:d4:fe:23:d4:6e:ce:35:6f:84: a7:1f:a2:f0:ca:b7:b6:76:9c:fb:8e:3a:f1:af:de: b5:18:ac:28:16:74:45:ae:13:e2:35:c7:91:15:87: c6:7f:51:35:39:5d:61:5d:64:4c:87:f9:61:a3:c5: ef:64:37:22:d0:61:06:dd:48:b1:ae:2d:14:57:03: 5a:15:ff:8b:ff:6b:20:fd:9d:13:83:24:b5:8c:79: 63:ed:be:ad:ef:ce:25:b6:bb:af:7e:0f:24:62:7b: 0b:97:0e:75:de:d0:ad:72:cd:dc:6b:b8:88:85:29: a3:92:ce:cb:98:71:01:43:7b:73:11:3b:ef:b8:84: 0f:d8:22:1b:32:b0:f3:7c:66:17:b6:06:2a:dd:b5: 38:b5:66:82:c2:3e:e2:fa:88:e6:42:bf:33:f7:67: da:b0:3c:bc:ad:e9:7a:b7:18:62:de:aa:59:f4:64: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AC:24:94:6C:4F:E2:38:99:B8:62:94:08:A5:28:47:5C:41:46:76 X509v3 Authority Key Identifier: keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:06:fc:05:dd:99:a4:f5:6b:98:7c:f0:bf:b7:f1:18:5e:11: 63:33:93:a6:cd:f7:b5:e8:f0:a2:d2:7b:ac:c9:74:cc:b7:6a: ac:27:8d:aa:b0:53:5e:21:45:31:20:00:fd:53:91:0d:aa:39: 83:87:0d:81:63:62:d8:9f:59:81:b3:a4:d8:0c:08:e9:c9:23: 54:a0:5c:c9:96:d4:a3:d7:1f:c6:33:51:ee:cc:03:09:ab:09: 29:a9:e1:2f:dd:eb:e4:61:4c:43:80:ae:08:ee:3b:dc:65:bd: 19:11:ca:90:d8:d2:00:56:d4:1b:7d:44:3e:65:a4:19:c6:59: e8:cd:6d:03:79:0e:75:ae:b6:ab:63:e5:77:10:11:3e:a1:6c: 70:82:6f:5b:97:2a:eb:f0:56:f6:73:e1:77:fa:ab:69:05:17: 30:24:80:a3:0c:95:9c:e8:ff:83:1d:48:39:1c:61:67:07:c6: 6a:d0:b1:12:b0:d3:c4:41:1e:71:b3:e5:d7:bf:bf:61:8c:46: 4b:31:6a:d1:3c:12:f4:3b:74:c3:f3:b8:28:94:b7:7a:d6:ac: c1:12:ed:3b:ad:2d:92:10:17:f7:29:ab:b1:d0:4a:b6:27:87: 5d:0a:55:0f:05:68:ae:cd:ed:6f:e7:ad:83:80:1d:9f:a9:47: e1:df:18:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwMI0HjLyBK5fgsWM97z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YmM3OTRjNWZiYWFjNjMyYTdmZmI0M2RiMTRmNzM5Y2Q1 M2IyYzQwHhcNMjUxMjA2MTMwMTI3WhcNMjUxMjA3MTMwMTI3WjAzMTEwLwYDVQQD Eyg1M2FjMjQ5NDZjNGZlMjM4OTliODYyOTQwOGE1Mjg0NzVjNDE0Njc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0d+xOJ738O7FrSy8SMbDOtFVXj1 oNZNolqaTkSHh3vHRNprimYSlvLznGD9M7Ap6bnJ37CwiJrL3bazDb324grzipQG YdIRuxH436JvX0HU/iPUbs41b4SnH6Lwyre2dpz7jjrxr961GKwoFnRFrhPiNceR FYfGf1E1OV1hXWRMh/lho8XvZDci0GEG3Uixri0UVwNaFf+L/2sg/Z0TgyS1jHlj 7b6t784ltruvfg8kYnsLlw513tCtcs3ca7iIhSmjks7LmHEBQ3tzETvvuIQP2CIb MrDzfGYXtgYq3bU4tWaCwj7i+ojmQr8z92fasDy8rel6txhi3qpZ9GS87wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOsJJRsT+I4mbhilAilKEdcQUZ2MB8GA1UdIwQY MBaAFDi8eUxfuqxjKn/7Q9sU9znNU7LEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYt ZDk4NTM5NGUzYzEwLzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYtZDk4NTM5NGUzYzEw LzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQb8Bd2Z pPVrmHzwv7fxGF4RYzOTps33tejwotJ7rMl0zLdqrCeNqrBTXiFFMSAA/VORDao5 g4cNgWNi2J9ZgbOk2AwI6ckjVKBcyZbUo9cfxjNR7swDCasJKanhL93r5GFMQ4Cu CO473GW9GRHKkNjSAFbUG31EPmWkGcZZ6M1tA3kOda62q2PldxARPqFscIJvW5cq 6/BW9nPhd/qraQUXMCSAowyVnOj/gx1IORxhZwfGatCxErDTxEEecbPl17+/YYxG SzFq0TwS9Dt0w/O4KJS3etaswRLtO60tkhAX9ymrsdBKtieHXQpVDwVors3tb+et g4Adn6lH4d8YtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:15 2025 by rpki-client