This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json) Hash identifier: vtfpzm3folNm6H5Ci/ADJeuMxPPpyUp5pxVyWZ/wUFI= Subject key identifier: 55:09:11:1C:3C:D7:FA:F1:23:AD:45:2B:60:0B:DE:CA:79:39:60:F5 Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Certificate serial: 019B3F7F063FDFA078E1A4407894A064CA1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 06:00:47 +0000 Manifest this update: Sun 21 Dec 2025 06:00:47 +0000 Manifest next update: Mon 22 Dec 2025 06:00:47 +0000 Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=) 2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: MzrhLrFVgZYcwAlxEwXLTnBlBshVX5sTw/BUgThbevM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:06:3f:df:a0:78:e1:a4:40:78:94:a0:64:ca:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Validity Not Before: Dec 21 06:00:47 2025 GMT Not After : Dec 22 06:00:47 2025 GMT Subject: CN=5509111c3cd7faf123ad452b600bdeca793960f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:a6:e6:d2:5a:f3:c8:c0:a0:db:74:64:e5: a6:02:22:e0:ba:85:3a:7c:76:65:d6:ae:df:17:d0: 63:9a:4a:c9:cd:e5:ad:96:cb:9d:7a:1f:b6:3b:8d: ff:04:53:43:64:c8:c6:ad:13:39:04:fb:89:b5:e9: 78:c1:f0:f8:1e:b1:07:85:31:c0:22:ea:ee:67:72: 56:09:27:eb:f0:c6:f7:d5:18:0e:92:ab:a0:a8:be: 6a:f1:93:c0:35:1c:45:fe:99:41:98:27:b2:8b:cb: 07:d5:79:a0:82:a9:5f:c7:15:81:6d:93:0d:0f:27: 10:2e:9c:20:20:13:3b:a9:e0:34:a8:22:f1:bc:e6: ce:61:24:a3:f2:2e:e3:3c:0c:36:80:39:62:23:dc: dc:3e:04:96:7e:d6:ca:41:91:8c:f5:08:ce:41:6e: ef:1b:3e:80:f7:94:e8:77:1c:98:b0:64:9e:81:c0: ab:4f:2b:16:f5:c2:80:c8:6f:2a:b9:de:db:51:81: 88:ba:57:eb:ae:59:ff:fb:3b:b7:cc:28:d2:d2:f3: f8:0f:54:b7:69:21:2e:86:ff:29:b6:fa:e9:19:4b: 86:38:46:a6:a4:47:34:30:82:ea:d3:69:1b:47:32: 1e:ad:ae:29:d4:0a:f5:16:ae:4f:d3:1d:1d:3e:02: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:09:11:1C:3C:D7:FA:F1:23:AD:45:2B:60:0B:DE:CA:79:39:60:F5 X509v3 Authority Key Identifier: keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:bd:38:90:8c:41:f6:31:99:f2:70:46:36:a7:0a:22:d0:69: 75:a9:88:76:10:db:37:cd:3e:47:7f:f0:eb:7d:00:88:cb:6b: d0:ad:3f:74:8d:bf:05:ce:71:e9:64:90:b9:d3:1b:95:24:53: 0e:65:29:48:f3:eb:ff:f0:d1:7d:50:52:89:ff:f3:3c:9a:c6: ea:37:93:93:82:de:1e:81:1b:80:c5:10:01:7d:8a:06:f4:81: 85:b9:b6:56:61:5d:83:1b:c0:a6:a8:81:2a:44:4e:bf:2f:8e: 3f:17:61:d5:ee:bd:73:61:0e:51:15:34:1f:57:d7:3e:59:5d: 76:6b:de:d9:0c:6c:07:29:23:12:4c:f4:ee:85:91:50:a6:d2: 32:04:f8:c7:28:8d:e8:d9:5b:89:10:4a:b7:7b:c8:06:3b:a3: 23:9e:48:ec:c1:c2:f8:c7:14:25:aa:21:fe:98:f6:38:5f:b7: 07:a9:c7:9f:94:8e:2d:bf:f8:b0:d7:03:29:b4:b1:e8:af:7b: 35:60:13:7d:a3:04:b0:a6:d7:3c:54:01:11:98:a5:6a:18:e3: a1:14:b0:a6:63:54:51:d0:3b:75:7b:24:1c:2d:d0:9f:d5:b3: e7:c9:4e:df:7e:97:af:00:e8:46:59:86:1d:e3:5f:3a:7c:82: 24:d3:54:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fwY/36B44aRAeJSgZMofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy NGIyOGQwHhcNMjUxMjIxMDYwMDQ3WhcNMjUxMjIyMDYwMDQ3WjAzMTEwLwYDVQQD Eyg1NTA5MTExYzNjZDdmYWYxMjNhZDQ1MmI2MDBiZGVjYTc5Mzk2MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUSm5tJa88jAoNt0ZOWmAiLguoU6 fHZl1q7fF9BjmkrJzeWtlsudeh+2O43/BFNDZMjGrRM5BPuJtel4wfD4HrEHhTHA IuruZ3JWCSfr8Mb31RgOkqugqL5q8ZPANRxF/plBmCeyi8sH1XmggqlfxxWBbZMN DycQLpwgIBM7qeA0qCLxvObOYSSj8i7jPAw2gDliI9zcPgSWftbKQZGM9QjOQW7v Gz6A95TodxyYsGSegcCrTysW9cKAyG8qud7bUYGIulfrrln/+zu3zCjS0vP4D1S3 aSEuhv8ptvrpGUuGOEampEc0MILq02kbRzIera4p1Ar1Fq5P0x0dPgIpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUJERw81/rxI61FK2AL3sp5OWD1MB8GA1UdIwQY MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmb04kIxB 9jGZ8nBGNqcKItBpdamIdhDbN80+R3/w630AiMtr0K0/dI2/Bc5x6WSQudMblSRT DmUpSPPr//DRfVBSif/zPJrG6jeTk4LeHoEbgMUQAX2KBvSBhbm2VmFdgxvApqiB KkROvy+OPxdh1e69c2EOURU0H1fXPllddmve2QxsBykjEkz07oWRUKbSMgT4xyiN 6NlbiRBKt3vIBjujI55I7MHC+McUJaoh/pj2OF+3B6nHn5SOLb/4sNcDKbSx6K97 NWATfaMEsKbXPFQBEZilahjjoRSwpmNUUdA7dXskHC3Qn9Wz58lO336XrwDoRlmG HeNfOnyCJNNUpw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:08:38 2025 by rpki-client