This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json) Hash identifier: xXIgXiyE7m34bLFUr7LgR97KmbaOCo8j9ZJhE8g5pGk= Subject key identifier: B3:0F:58:AC:2A:23:15:C8:AF:B1:61:6C:8B:A7:FA:75:48:28:CB:6A Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c Certificate serial: 019B3D59E9C749C8A0474AF40F7434A661AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:01:01 +0000 Manifest this update: Sat 20 Dec 2025 20:01:01 +0000 Manifest next update: Sun 21 Dec 2025 20:01:01 +0000 Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: FLgsrPgdAcnIOwoSSQ3gkq2Rm5sZkPscHUcMsB7gSvo=) 2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e9:c7:49:c8:a0:47:4a:f4:0f:74:34:a6:61:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c Validity Not Before: Dec 20 20:01:01 2025 GMT Not After : Dec 21 20:01:01 2025 GMT Subject: CN=b30f58ac2a2315c8afb1616c8ba7fa754828cb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:e1:d2:fe:b5:65:9e:2d:85:04:20:55:4d: a3:85:52:68:67:a6:21:2c:83:ba:25:26:86:73:e6: 90:26:21:a2:37:88:0d:14:cd:8b:45:f0:c0:a2:0b: f2:e5:a3:54:40:26:f5:b6:c8:46:47:8d:d3:81:a6: ab:29:19:62:af:ce:75:2d:22:e2:f4:c5:e7:65:0b: 6a:e8:3c:5b:55:15:27:75:e5:f9:1f:f1:9f:79:1e: 0d:97:15:fd:3d:66:65:9c:d0:c7:a0:6f:62:8a:90: a5:91:74:3c:c0:a0:1c:7b:1a:49:bd:f3:ab:96:aa: 4f:4a:e8:db:73:d4:bb:b0:02:a2:49:4e:99:27:f9: c1:2a:50:da:05:39:de:67:4d:a6:74:df:66:14:d4: f2:14:29:c4:37:19:83:9b:4d:7a:b0:be:d8:56:86: 58:92:24:12:76:b7:f5:a1:92:02:5e:35:95:8f:f3: 10:e8:e2:0f:c5:9f:c5:ff:87:33:ab:d8:3a:aa:49: 0a:08:6d:27:ad:ca:cc:77:fb:85:4a:13:45:48:db: 5c:2c:72:53:73:79:06:4c:67:9d:d4:d1:2b:24:f3: d5:fe:d4:3c:30:72:b5:a0:69:4a:0f:e1:6b:f3:f0: 60:68:d0:81:bf:20:35:87:9b:4b:2e:2b:e0:ee:38: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0F:58:AC:2A:23:15:C8:AF:B1:61:6C:8B:A7:FA:75:48:28:CB:6A X509v3 Authority Key Identifier: keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f0:56:48:16:9e:82:5b:71:35:dd:40:18:a8:2f:21:11:af: 10:fc:51:32:db:13:7e:28:09:39:30:96:84:de:09:94:6d:24: 8f:9d:a1:d5:9f:e2:1b:94:60:f6:a5:28:ac:57:08:b1:2d:c3: e3:67:ee:dc:43:9e:4e:55:0c:5a:00:d1:aa:3b:b2:d3:7e:31: 05:96:81:a6:9a:e9:17:c1:85:74:06:3e:5f:fa:dc:26:bd:5c: be:1d:62:df:b2:26:dd:1f:81:d3:fa:34:b9:b5:63:c8:cf:1a: 97:9b:81:85:11:e0:ac:71:76:b4:17:70:7e:dd:52:59:55:b0: 5d:a9:ca:c9:53:eb:25:52:93:fa:a7:32:00:17:5f:93:aa:9a: df:76:6f:67:39:19:e3:61:ba:be:54:16:c1:26:c1:73:92:f6: 00:fb:6e:a1:2a:6e:ec:ff:28:7f:c6:73:5f:6d:bd:3b:95:e3: 59:99:45:1d:c2:10:57:52:8f:37:4f:eb:fd:c4:1b:30:43:e7: bc:3e:97:89:a0:8e:e3:69:9d:25:74:dd:bf:52:d6:65:e6:47: 92:4a:1b:e1:3b:12:b5:08:1e:ca:8a:1a:2a:84:57:ac:0b:9b: 35:62:be:8e:fa:31:32:d3:b9:2e:3e:39:88:f9:b0:b0:4d:f3: 76:00:fd:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WenHScigR0r0D3Q0pmGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNTM5ZTUwMWRmZjM3Y2RjOTJjYmVlMGNkZGI5MmVkMmU4 MWMxM2MwHhcNMjUxMjIwMjAwMTAxWhcNMjUxMjIxMjAwMTAxWjAzMTEwLwYDVQQD EyhiMzBmNThhYzJhMjMxNWM4YWZiMTYxNmM4YmE3ZmE3NTQ4MjhjYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkHh0v61ZZ4thQQgVU2jhVJoZ6Yh LIO6JSaGc+aQJiGiN4gNFM2LRfDAogvy5aNUQCb1tshGR43TgaarKRlir851LSLi 9MXnZQtq6DxbVRUndeX5H/GfeR4NlxX9PWZlnNDHoG9iipClkXQ8wKAcexpJvfOr lqpPSujbc9S7sAKiSU6ZJ/nBKlDaBTneZ02mdN9mFNTyFCnENxmDm016sL7YVoZY kiQSdrf1oZICXjWVj/MQ6OIPxZ/F/4czq9g6qkkKCG0nrcrMd/uFShNFSNtcLHJT c3kGTGed1NErJPPV/tQ8MHK1oGlKD+Fr8/BgaNCBvyA1h5tLLivg7jjMDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMPWKwqIxXIr7FhbIun+nVIKMtqMB8GA1UdIwQY MBaAFDpTnlAd/zfNySy+4M3bku0ugcE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTIt MDI3YzBkNjQyNGUzLzEvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTItMDI3YzBkNjQyNGUz LzEvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/BWSBae gltxNd1AGKgvIRGvEPxRMtsTfigJOTCWhN4JlG0kj52h1Z/iG5Rg9qUorFcIsS3D 42fu3EOeTlUMWgDRqjuy034xBZaBpprpF8GFdAY+X/rcJr1cvh1i37Im3R+B0/o0 ubVjyM8al5uBhRHgrHF2tBdwft1SWVWwXanKyVPrJVKT+qcyABdfk6qa33ZvZzkZ 42G6vlQWwSbBc5L2APtuoSpu7P8of8ZzX229O5XjWZlFHcIQV1KPN0/r/cQbMEPn vD6XiaCO42mdJXTdv1LWZeZHkkob4TsStQgeyooaKoRXrAubNWK+jvoxMtO5Lj45 iPmwsE3zdgD9CQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:06 2025 by rpki-client