This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json) Hash identifier: je425BeUoa+FlQoU89dpeFXesvhurojNAUejcy+R2G0= Subject key identifier: A4:FA:51:BE:96:D8:E6:B2:78:1F:A4:F2:3A:FF:9F:7A:B2:7D:D3:E7 Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79 Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79 Certificate serial: 019B4DE13B194D10BC03F10E4D7296998799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft Manifest number: 1315 Signing time: Wed 24 Dec 2025 01:02:44 +0000 Manifest this update: Wed 24 Dec 2025 01:02:44 +0000 Manifest next update: Thu 25 Dec 2025 01:02:44 +0000 Files and hashes: 1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: 0v3PF4iWG1LJ990d8tmUjKdXsuVQ64jODOqFne53vak=) 2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:3b:19:4d:10:bc:03:f1:0e:4d:72:96:99:87:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79 Validity Not Before: Dec 24 01:02:44 2025 GMT Not After : Dec 25 01:02:44 2025 GMT Subject: CN=a4fa51be96d8e6b2781fa4f23aff9f7ab27dd3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:6d:0b:39:d4:9e:78:6a:c6:be:ea:f9:02: 1d:ff:34:b1:ce:90:d5:c4:06:63:66:35:2b:0e:96: 79:a2:79:00:3e:f2:3f:e8:6d:97:4b:b4:60:79:53: f7:e3:3f:91:72:0d:4a:03:5b:c9:a4:8e:e7:90:b2: 5b:1c:45:d7:85:39:5b:bc:93:30:dd:c4:1b:73:32: bd:67:07:5d:0b:f7:1f:6a:51:1a:12:d4:b6:b3:98: 9f:4d:ab:79:b6:38:6e:ce:96:8a:a2:98:5a:8f:91: 62:c5:2a:91:e3:4d:cc:b5:cb:68:f1:8b:d7:2e:ec: ea:79:bf:ef:07:20:71:8a:46:23:09:17:07:25:36: f8:ea:80:ec:dc:7c:f1:d3:90:a8:0a:33:d6:b7:d5: 96:00:28:38:eb:6d:25:67:81:ae:94:e9:1b:f4:81: 86:1d:48:9c:3c:51:40:59:c8:c9:e0:37:d6:4c:44: 72:fb:17:79:fc:2d:c6:4e:b8:71:c0:2e:ed:b6:e0: a3:5a:87:36:d1:9e:d3:6d:4a:c7:ea:de:a0:1a:cd: 3e:4b:70:e6:d7:60:c7:ed:c0:a4:12:5d:e8:05:a2: c0:c7:22:6d:5e:15:51:a0:24:3e:bd:21:2e:91:3c: 8f:db:bc:2b:21:50:6f:03:b8:82:a2:e8:e9:36:17: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FA:51:BE:96:D8:E6:B2:78:1F:A4:F2:3A:FF:9F:7A:B2:7D:D3:E7 X509v3 Authority Key Identifier: keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5c:63:09:4c:c7:f4:97:21:8e:d2:28:d1:64:ef:5b:0b:dc: 19:d3:63:a9:52:a6:e2:84:25:e2:86:1b:1d:c7:55:87:92:eb: eb:af:8f:05:f1:5a:f4:ba:ab:03:8c:9b:d4:98:0c:63:50:bc: 88:6c:1b:0c:85:10:70:f8:c9:18:bd:50:62:5b:c6:60:16:83: c4:27:ab:f2:b6:cd:48:2a:a8:bf:6c:34:8e:cc:f6:60:5a:a4: 79:3c:cd:19:0c:36:1f:30:09:43:85:51:90:e4:14:1e:0c:c4: d1:3f:2c:3e:96:56:fc:c5:23:1e:94:c4:ad:e9:cd:29:41:54: 9e:9f:27:be:25:04:a7:82:e9:f1:27:ad:81:45:f6:83:70:c2: db:74:ec:77:00:7d:ab:16:45:38:f5:22:67:e2:a1:59:7a:33: 42:f7:15:9f:b7:66:ca:10:2f:c8:9a:4e:8c:e5:3a:f2:d8:a7: e5:8f:c6:0d:40:d2:78:83:d5:1e:3c:b2:38:b8:b8:34:9a:03: f7:ba:a1:27:64:e9:73:66:f2:f5:07:8f:d8:5a:45:e5:28:2a: 5e:94:c5:6c:41:b3:0a:77:76:59:2f:ce:6b:fd:46:48:d7:df: 07:2f:f6:d7:37:c0:80:1c:a9:dc:fd:ab:20:be:b5:57:ae:80: f6:5d:30:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4TsZTRC8A/EOTXKWmYeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhY2Q0ZTJjMDRjMzllZGIyNDJhNjcwNTFiOGI1ODEyNjM0 MzZlNzkwHhcNMjUxMjI0MDEwMjQ0WhcNMjUxMjI1MDEwMjQ0WjAzMTEwLwYDVQQD EyhhNGZhNTFiZTk2ZDhlNmIyNzgxZmE0ZjIzYWZmOWY3YWIyN2RkM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcRtCznUnnhqxr7q+QId/zSxzpDV xAZjZjUrDpZ5onkAPvI/6G2XS7RgeVP34z+Rcg1KA1vJpI7nkLJbHEXXhTlbvJMw 3cQbczK9ZwddC/cfalEaEtS2s5ifTat5tjhuzpaKophaj5FixSqR403Mtcto8YvX Luzqeb/vByBxikYjCRcHJTb46oDs3Hzx05CoCjPWt9WWACg4620lZ4GulOkb9IGG HUicPFFAWcjJ4DfWTERy+xd5/C3GTrhxwC7ttuCjWoc20Z7TbUrH6t6gGs0+S3Dm 12DH7cCkEl3oBaLAxyJtXhVRoCQ+vSEukTyP27wrIVBvA7iCoujpNhfxBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT6Ub6W2OayeB+k8jr/n3qyfdPnMB8GA1UdIwQY MBaAFArNTiwEw57bJCpnBRuLWBJjQ255MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3MxT0xBVERudHNrS21jRkc0dFlFbU5EYm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yNmQ2ZjYtMTFlZS00YTg2LWJmYjkt ZGRjMjc2YWNiOTEwLzEvQ3MxT0xBVERudHNrS21jRkc0dFlFbU5EYm5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8yNmQ2ZjYtMTFlZS00YTg2LWJmYjktZGRjMjc2YWNiOTEw LzEvQ3MxT0xBVERudHNrS21jRkc0dFlFbU5EYm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlxjCUzH 9JchjtIo0WTvWwvcGdNjqVKm4oQl4oYbHcdVh5Lr66+PBfFa9LqrA4yb1JgMY1C8 iGwbDIUQcPjJGL1QYlvGYBaDxCer8rbNSCqov2w0jsz2YFqkeTzNGQw2HzAJQ4VR kOQUHgzE0T8sPpZW/MUjHpTErenNKUFUnp8nviUEp4Lp8SetgUX2g3DC23TsdwB9 qxZFOPUiZ+KhWXozQvcVn7dmyhAvyJpOjOU68tin5Y/GDUDSeIPVHjyyOLi4NJoD 97qhJ2Tpc2by9QeP2FpF5SgqXpTFbEGzCnd2WS/Oa/1GSNffBy/21zfAgByp3P2r IL61V66A9l0wCA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:59 2025 by rpki-client