This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json) Hash identifier: o74b/+TFzgTEExgakt09BgpzQF5zyShwXSR1MGXaF3k= Subject key identifier: 34:2B:5D:47:59:62:58:B5:69:1A:37:E8:D0:E7:FE:73:9E:29:D3:76 Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Certificate serial: 019B3FED2A0C383EE2AE291EAA0C06CBDE44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 08:01:05 +0000 Manifest this update: Sun 21 Dec 2025 08:01:05 +0000 Manifest next update: Mon 22 Dec 2025 08:01:05 +0000 Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=) 2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: zMc82PAxtkvj6Aw3JckjcBrKIpL6VkOIn+u3XwiLAb8=) 3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=) 4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:2a:0c:38:3e:e2:ae:29:1e:aa:0c:06:cb:de:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Validity Not Before: Dec 21 08:01:05 2025 GMT Not After : Dec 22 08:01:05 2025 GMT Subject: CN=342b5d47596258b5691a37e8d0e7fe739e29d376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:92:df:95:df:0e:a1:01:28:9f:1a:d5:63: 1c:fd:d1:e2:c9:24:4d:ee:04:0d:8f:7c:45:4b:fd: 62:ad:54:9a:12:1e:54:6c:3f:a1:c2:f7:69:1c:7f: a2:82:dc:c1:ab:19:6b:9c:93:aa:e0:81:77:d7:9a: 41:fb:c1:30:64:7a:cf:9c:3a:03:cc:fd:09:2c:f9: 57:38:63:4f:a6:b1:72:d0:d6:fa:30:8c:e7:b7:b7: 10:13:25:62:4c:77:e6:0a:40:25:54:42:f7:25:db: 45:97:e9:b5:83:53:fd:ce:8d:ed:28:02:ca:18:8d: ff:4a:37:a0:60:a6:10:37:f5:f6:8a:5d:fb:ac:9f: 81:cd:7e:ab:8e:14:26:b6:3c:88:21:f1:dd:52:76: 99:c8:17:f1:ea:e3:3b:78:29:42:ee:db:49:85:57: 6f:a7:af:cf:af:49:4b:8d:6e:3d:4f:d4:31:0e:12: 65:79:d1:97:ab:98:01:df:7f:b7:66:d4:c1:bd:8e: 2e:0c:14:c2:5e:5d:c1:0c:8f:2a:5a:58:00:3f:33: 69:8f:3e:aa:ed:42:5e:be:78:b5:1f:1b:e2:eb:5a: f3:e0:a6:f6:0e:1d:eb:32:d6:06:69:4b:83:5d:dd: a9:96:21:c4:4c:31:43:09:16:4f:91:ee:10:59:d9: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:5D:47:59:62:58:B5:69:1A:37:E8:D0:E7:FE:73:9E:29:D3:76 X509v3 Authority Key Identifier: keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f0:1c:b0:1c:3c:e9:11:e2:05:74:ec:7c:a9:58:01:19:87: 76:73:5e:8d:0c:2c:9c:05:91:88:dc:12:5b:22:92:73:c2:95: ea:8b:c5:95:ef:83:85:b0:8d:de:ac:5f:8e:45:4f:51:26:1d: 76:da:55:04:33:68:1d:c6:94:16:15:6c:48:3d:a7:64:29:eb: 13:c6:8c:13:3f:03:a9:92:b0:98:80:46:9c:80:13:53:9a:f8: a2:4a:45:d5:92:b1:eb:87:af:1d:fc:90:32:fb:5e:bd:8a:f2: b2:a7:00:ec:64:6c:1f:ac:26:d6:f4:33:b4:dc:54:62:c5:3d: 14:bd:4c:f8:fa:26:bf:fd:ae:a1:fe:a4:05:02:7d:aa:a0:c2: 13:a6:e1:e4:c0:65:bb:1e:82:af:cf:ff:c7:99:14:95:54:59: 0e:ed:e0:8a:94:e4:76:68:64:81:9d:3a:fc:6b:e4:46:6c:37: dc:c9:3b:84:ed:24:e9:b8:7f:3c:28:cb:1f:f7:2c:6c:41:98: 39:8c:54:ca:25:2c:7c:97:ed:c8:d4:43:f4:c8:18:a2:f9:18: fa:52:35:e9:b9:8e:8d:04:de:34:67:4a:6a:3b:c9:e9:4a:06: d7:64:77:a1:d0:fd:16:db:27:00:60:fd:08:e2:09:9d:9d:e1: b0:15:bb:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7SoMOD7irikeqgwGy95EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi YjZkODAwHhcNMjUxMjIxMDgwMTA1WhcNMjUxMjIyMDgwMTA1WjAzMTEwLwYDVQQD EygzNDJiNWQ0NzU5NjI1OGI1NjkxYTM3ZThkMGU3ZmU3MzllMjlkMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxmS35XfDqEBKJ8a1WMc/dHiySRN 7gQNj3xFS/1irVSaEh5UbD+hwvdpHH+igtzBqxlrnJOq4IF315pB+8EwZHrPnDoD zP0JLPlXOGNPprFy0Nb6MIznt7cQEyViTHfmCkAlVEL3JdtFl+m1g1P9zo3tKALK GI3/SjegYKYQN/X2il37rJ+BzX6rjhQmtjyIIfHdUnaZyBfx6uM7eClC7ttJhVdv p6/Pr0lLjW49T9QxDhJledGXq5gB33+3ZtTBvY4uDBTCXl3BDI8qWlgAPzNpjz6q 7UJevni1Hxvi61rz4Kb2Dh3rMtYGaUuDXd2pliHETDFDCRZPke4QWdm2qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQrXUdZYli1aRo36NDn/nOeKdN2MB8GA1UdIwQY MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1 LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvAcsBw8 6RHiBXTsfKlYARmHdnNejQwsnAWRiNwSWyKSc8KV6ovFle+DhbCN3qxfjkVPUSYd dtpVBDNoHcaUFhVsSD2nZCnrE8aMEz8DqZKwmIBGnIATU5r4okpF1ZKx64evHfyQ MvtevYrysqcA7GRsH6wm1vQztNxUYsU9FL1M+Pomv/2uof6kBQJ9qqDCE6bh5MBl ux6Cr8//x5kUlVRZDu3gipTkdmhkgZ06/GvkRmw33Mk7hO0k6bh/PCjLH/csbEGY OYxUyiUsfJftyNRD9MgYovkY+lI16bmOjQTeNGdKajvJ6UoG12R3odD9FtsnAGD9 COIJnZ3hsBW77Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:52:03 2025 by rpki-client