This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json) Hash identifier: K8bh/b8zdmiSxA4+JimXodQzvHkdiqbjp1gSmlNcY3Q= Subject key identifier: 84:76:04:4C:B6:D7:03:3D:4D:97:C1:53:5B:19:7F:19:F2:95:42:1E Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b Certificate serial: 019AF2771BF5428D813810001F159DC03E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft Manifest number: 07B2 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=) 2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: 7xm3wRzmBK/qaSmNObhGjlEV/ZhYaV6f+2BGN/sHfZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1b:f5:42:8d:81:38:10:00:1f:15:9d:c0:3e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3802c7987004ae78190e691e370de509ff59127b Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=8476044cb6d7033d4d97c1535b197f19f295421e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:1e:66:2e:45:50:05:de:5a:25:54:57:47: f3:fa:85:41:37:f4:80:aa:83:45:12:63:a2:d8:8c: bf:35:62:d4:f5:94:a4:ac:22:30:75:9c:ee:d8:aa: 73:28:ab:2d:17:41:4f:c2:b5:9f:ad:23:69:33:2a: 9e:b4:59:71:91:0a:ec:38:0d:1d:8f:a7:76:f9:07: 8b:8e:6b:85:b8:f8:a4:76:57:80:a9:09:c1:25:d4: 3a:30:1c:02:61:f8:ee:94:ed:3a:17:64:f7:c6:9e: ed:2a:4b:dd:3e:65:c0:3a:29:39:df:ac:17:bf:69: ca:3c:fe:24:bf:c4:f0:96:8f:a7:59:29:5b:ab:48: 0f:05:e1:e6:79:a2:0e:3b:4f:96:33:bd:ff:a4:34: aa:44:11:41:7d:c3:4e:f3:c5:80:9e:69:ba:20:b4: c9:8f:7c:97:d9:fd:5c:bb:ca:1d:78:a7:28:48:9b: 6c:0d:c5:74:f1:ff:8a:e3:ed:f9:9d:0f:5f:45:bd: 6c:30:e6:96:8f:8f:91:d7:c7:6a:26:fb:df:95:b1: 78:38:0f:03:a6:2d:f5:23:60:5c:e1:8b:86:eb:b4: 4a:23:97:1e:49:c5:06:f2:b7:bf:b3:59:a7:6f:fc: a0:e3:7a:0e:f6:b7:eb:14:a7:b1:e1:74:4c:19:b6: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:76:04:4C:B6:D7:03:3D:4D:97:C1:53:5B:19:7F:19:F2:95:42:1E X509v3 Authority Key Identifier: keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2a:ba:18:c8:78:a6:70:03:80:51:7a:e3:15:6a:d0:43:d6: d2:a1:d7:23:cf:07:3a:ed:13:fb:b9:d4:35:d4:cf:95:bc:47: 48:cb:1f:8b:98:d5:6b:67:66:22:04:9e:4a:01:ef:2b:ae:20: 52:f5:8f:34:6e:30:77:e0:ea:64:f4:db:00:14:38:06:2b:d6: 73:31:a9:49:e4:bc:a1:3d:01:e1:ef:4e:2f:e2:5c:c0:3a:39: 87:eb:e5:96:7f:1e:45:4d:f5:9e:9e:2e:2e:cb:1e:cc:3c:3d: 3b:4e:2d:f0:36:b9:d2:15:e6:5f:9a:c6:d6:3a:b2:d3:2d:f1: e3:83:5d:e2:5b:88:ba:2a:94:ee:53:2f:31:7e:12:56:bc:5c: 91:7f:2b:62:f6:f9:a4:ce:8e:f5:0d:01:dc:03:7b:8d:39:34: 14:89:4e:a1:1e:b0:92:c5:2e:82:ba:76:1b:a8:ac:f4:0d:b6: 81:2e:5e:76:ae:e5:fc:0d:cd:5e:16:5c:6b:7d:e3:31:d5:3a: 05:a7:ec:d4:f7:de:ad:22:59:f7:10:f1:0a:57:bb:5c:e8:af: f8:35:54:fc:2c:04:9c:3b:e2:0a:a8:34:63:b2:95:0c:5e:15: 88:da:db:0e:7e:1d:89:12:5c:2e:24:d9:a1:14:86:50:46:cd: cf:01:61:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxv1Qo2BOBAAHxWdwD5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1 OTEyN2IwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD Eyg4NDc2MDQ0Y2I2ZDcwMzNkNGQ5N2MxNTM1YjE5N2YxOWYyOTU0MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/0eZi5FUAXeWiVUV0fz+oVBN/SA qoNFEmOi2Iy/NWLU9ZSkrCIwdZzu2KpzKKstF0FPwrWfrSNpMyqetFlxkQrsOA0d j6d2+QeLjmuFuPikdleAqQnBJdQ6MBwCYfjulO06F2T3xp7tKkvdPmXAOik536wX v2nKPP4kv8Twlo+nWSlbq0gPBeHmeaIOO0+WM73/pDSqRBFBfcNO88WAnmm6ILTJ j3yX2f1cu8odeKcoSJtsDcV08f+K4+35nQ9fRb1sMOaWj4+R18dqJvvflbF4OA8D pi31I2Bc4YuG67RKI5ceScUG8re/s1mnb/yg43oO9rfrFKex4XRMGbaGfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR2BEy21wM9TZfBU1sZfxnylUIeMB8GA1UdIwQY MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiq6GMh4 pnADgFF64xVq0EPW0qHXI88HOu0T+7nUNdTPlbxHSMsfi5jVa2dmIgSeSgHvK64g UvWPNG4wd+DqZPTbABQ4BivWczGpSeS8oT0B4e9OL+JcwDo5h+vlln8eRU31np4u LssezDw9O04t8Da50hXmX5rG1jqy0y3x44Nd4luIuiqU7lMvMX4SVrxckX8rYvb5 pM6O9Q0B3AN7jTk0FIlOoR6wksUugrp2G6is9A22gS5edq7l/A3NXhZca33jMdU6 Bafs1PferSJZ9xDxCle7XOiv+DVU/CwEnDviCqg0Y7KVDF4ViNrbDn4diRJcLiTZ oRSGUEbNzwFhjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:12 2025 by rpki-client