This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json) Hash identifier: gex583sye5NEYMABqO2I3teeoPp9/DlZUyxRj88oMq4= Subject key identifier: D9:F6:74:73:C8:79:EE:A6:A4:22:D9:53:19:24:6C:4A:03:8B:87:2B Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00 Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200 Certificate serial: 019B69C48BF61F38DAD54EB24EC874774010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft Manifest number: 02C2 Signing time: Mon 29 Dec 2025 11:00:47 +0000 Manifest this update: Mon 29 Dec 2025 11:00:47 +0000 Manifest next update: Tue 30 Dec 2025 11:00:47 +0000 Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: TjyZpdbnBcfNDhBTPiHamRtMoqgPfMKgd8Sr6pB4kWM=) 2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:8b:f6:1f:38:da:d5:4e:b2:4e:c8:74:77:40:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200 Validity Not Before: Dec 29 11:00:47 2025 GMT Not After : Dec 30 11:00:47 2025 GMT Subject: CN=d9f67473c879eea6a422d95319246c4a038b872b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:68:63:b9:c9:6d:db:98:d7:f3:24:18:47: ff:7e:c2:f7:d7:ef:27:6a:a3:dc:a7:ae:eb:57:df: cf:79:f1:07:0d:f7:4e:19:0b:19:0b:cb:43:cf:65: c1:c6:dc:5f:0f:b0:05:06:c9:03:3d:9a:7b:8a:b1: 26:3d:b9:52:de:db:e1:9f:a2:74:ce:8b:65:ba:8d: 63:ca:23:d5:3d:27:3c:f7:01:4f:fe:d9:76:a1:e2: cd:ff:c7:94:8f:97:0e:bb:b0:f5:b4:c8:bc:94:53: 00:02:6d:a4:f0:50:dc:fa:2a:92:76:05:44:ad:7d: c1:5c:74:a1:4d:16:15:f8:59:7e:46:48:1e:da:8f: c5:62:b6:1f:92:2f:1e:c5:34:52:60:36:98:7f:c3: 13:ce:0e:aa:78:8e:c9:1d:76:af:c5:f3:40:2e:d9: 88:8c:cb:ee:da:0f:53:64:a1:bf:ef:cd:12:f9:8c: d6:25:b7:97:3f:2c:e8:ee:1e:ea:b7:2b:c6:ae:64: ba:fe:7f:85:e4:4d:10:f3:c7:eb:f3:bb:0b:37:bb: 46:1e:07:82:4e:de:2e:35:c5:cb:80:07:2e:fa:50: 90:4b:7a:da:fa:68:d6:7e:4a:24:f3:98:7b:03:5a: 02:ca:03:4e:ba:9e:f5:62:fa:63:c0:1f:69:ab:27: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F6:74:73:C8:79:EE:A6:A4:22:D9:53:19:24:6C:4A:03:8B:87:2B X509v3 Authority Key Identifier: keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9f:ef:54:e2:09:e0:65:8a:86:76:6e:5f:1a:98:3f:67:73: e9:8f:85:36:9d:e1:7f:52:dd:59:e9:f7:10:ff:34:88:d0:4c: ac:e3:a9:a7:9f:07:09:99:a8:b6:a2:ac:61:59:3e:88:14:3e: 05:73:2c:9e:d6:11:12:69:42:6c:83:c4:da:51:78:b2:69:0e: e5:a3:38:d2:69:eb:0a:2d:dc:bf:ac:96:a4:27:35:fe:7e:4d: e6:13:a6:33:f6:3e:9d:e4:3c:fc:06:89:36:af:f6:6e:1a:de: 12:34:5a:71:d9:95:5d:25:98:60:e7:22:9b:ca:c8:dc:da:66: e2:b9:c3:28:22:86:71:53:3e:dd:8a:04:fd:7a:64:e2:51:ff: 3b:b1:5c:48:e8:78:36:7b:0c:88:35:00:76:88:5f:a4:cd:10: 33:c3:a8:dc:42:b6:18:6e:bb:1d:6e:16:ff:80:44:12:82:a6: 3a:f8:ef:fb:eb:cd:9b:47:0f:5c:39:0b:f7:46:ed:dc:11:a5: 3b:31:78:7c:d2:5a:3d:c9:2f:09:90:b9:5f:71:4a:eb:39:98: b1:ea:d0:bd:cf:66:25:1d:e1:42:79:eb:a0:aa:2d:10:8c:08: 70:19:f5:c5:57:2f:fe:4f:f0:33:71:9d:43:8f:1a:94:71:b0: c1:4b:96:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxIv2Hzja1U6yTsh0d0AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmFhODBiMzEwYTRhZWVkMmMyMzNjZmU3ODJjNGYzNzlh NjYyMDAwHhcNMjUxMjI5MTEwMDQ3WhcNMjUxMjMwMTEwMDQ3WjAzMTEwLwYDVQQD EyhkOWY2NzQ3M2M4NzllZWE2YTQyMmQ5NTMxOTI0NmM0YTAzOGI4NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48JoY7nJbduY1/MkGEf/fsL31+8n aqPcp67rV9/PefEHDfdOGQsZC8tDz2XBxtxfD7AFBskDPZp7irEmPblS3tvhn6J0 zotluo1jyiPVPSc89wFP/tl2oeLN/8eUj5cOu7D1tMi8lFMAAm2k8FDc+iqSdgVE rX3BXHShTRYV+Fl+Rkge2o/FYrYfki8exTRSYDaYf8MTzg6qeI7JHXavxfNALtmI jMvu2g9TZKG/780S+YzWJbeXPyzo7h7qtyvGrmS6/n+F5E0Q88fr87sLN7tGHgeC Tt4uNcXLgAcu+lCQS3ra+mjWfkok85h7A1oCygNOup71YvpjwB9pqyc1rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn2dHPIee6mpCLZUxkkbEoDi4crMB8GA1UdIwQY MBaAFKC6qAsxCkru0sIzz+eCxPN5pmIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQt MDJkNTQ4MTJjYzZlLzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQtMDJkNTQ4MTJjYzZl LzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ/vVOIJ 4GWKhnZuXxqYP2dz6Y+FNp3hf1LdWen3EP80iNBMrOOpp58HCZmotqKsYVk+iBQ+ BXMsntYREmlCbIPE2lF4smkO5aM40mnrCi3cv6yWpCc1/n5N5hOmM/Y+neQ8/AaJ Nq/2bhreEjRacdmVXSWYYOcim8rI3Npm4rnDKCKGcVM+3YoE/Xpk4lH/O7FcSOh4 NnsMiDUAdohfpM0QM8Oo3EK2GG67HW4W/4BEEoKmOvjv++vNm0cPXDkL90bt3BGl OzF4fNJaPckvCZC5X3FK6zmYserQvc9mJR3hQnnroKotEIwIcBn1xVcv/k/wM3Gd Q48alHGwwUuWqw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:45:45 2025 by rpki-client