This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json) Hash identifier: Z6D/pKIlphtmixEV3UQEj2IPAEji0OKbCW8XkN7Tx/Y= Subject key identifier: 5C:F8:6B:4D:B3:D3:EC:B1:50:63:0C:73:6E:29:26:B0:C7:F1:E8:36 Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Certificate serial: 019B38D89C97AC3F6EEC94B4487C96296352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft Manifest number: 07FF Signing time: Fri 19 Dec 2025 23:01:18 +0000 Manifest this update: Fri 19 Dec 2025 23:01:18 +0000 Manifest next update: Sat 20 Dec 2025 23:01:18 +0000 Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=) 2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 3dHK0in3sbsffKN1+3S6VEdGXSp5C/v1IkRt0uEn4lU=) 3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=) 4: nyUaCxI_mhIRPBfXAC2R7UepWOc.roa (hash: BNMy6MFZBy5AjuJVKDOH+Jxe3AlYQ8RZeSw5teIhi8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:9c:97:ac:3f:6e:ec:94:b4:48:7c:96:29:63:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Validity Not Before: Dec 19 23:01:18 2025 GMT Not After : Dec 20 23:01:18 2025 GMT Subject: CN=5cf86b4db3d3ecb150630c736e2926b0c7f1e836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:43:3a:29:c7:57:5d:13:11:51:61:e3:f6: b2:32:89:93:66:cc:9d:17:81:88:65:f7:d8:c0:96: 52:bd:7c:34:df:86:aa:bf:08:81:44:9b:6c:6a:83: 0a:7c:cb:7b:9d:08:6e:af:b0:cd:46:9b:2a:48:38: ee:18:97:3c:2a:36:30:15:ac:8d:22:6b:51:87:6d: ec:09:54:f6:de:73:cc:38:19:91:f7:4d:f8:c6:7b: c5:c7:54:56:c7:43:94:62:08:d6:92:91:0a:96:6d: f8:33:8a:c6:13:9b:8a:e7:66:6f:ab:ee:a5:d7:80: fd:95:2f:8a:8c:13:62:53:4b:87:c5:d6:6a:19:37: d7:09:a4:8f:d1:96:32:c9:61:bc:ce:c7:89:e5:6e: 1c:dd:f6:32:90:99:79:84:c0:02:fb:00:f2:f0:07: b1:8e:e2:5a:5c:f3:e5:03:3f:a3:36:82:25:89:74: 4e:5e:92:57:10:a2:99:56:d5:c6:41:02:2c:89:cc: 20:78:84:a0:5a:b6:fd:cd:2b:14:9a:14:14:a9:de: d4:b9:9a:2b:54:58:ff:78:0d:96:94:99:3a:63:e6: ca:36:86:1d:f5:a3:43:34:99:41:ab:3e:fa:2e:89: 14:d4:ef:ba:bd:c3:56:35:9c:df:de:7b:4c:8e:e5: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F8:6B:4D:B3:D3:EC:B1:50:63:0C:73:6E:29:26:B0:C7:F1:E8:36 X509v3 Authority Key Identifier: keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ac:cd:45:88:e6:d7:a3:51:30:ca:73:28:f0:0e:ca:89:d7: 5c:ec:10:89:7c:7e:39:3c:fc:f2:88:8f:4a:01:41:7d:e5:04: 66:82:5e:d1:dc:9c:90:72:fd:5a:9d:04:8d:bc:47:53:f0:68: 7c:17:59:67:5f:8f:e4:4f:f2:62:17:c8:1b:42:13:bb:14:6c: 12:46:0d:32:c7:78:94:2b:0f:c5:30:80:ca:74:f3:89:9c:2f: 6a:25:42:98:3c:b6:f5:84:e0:da:ef:35:7f:39:66:5d:63:48: ac:68:4a:96:d4:83:75:49:d0:82:7d:91:94:33:14:3a:e1:f9: 26:d3:3e:7e:50:38:11:16:1f:8f:78:96:45:9b:d1:1f:c1:8a: f2:c5:15:f1:0b:86:ea:6e:8d:34:94:d8:3a:88:fa:be:5d:ef: c3:ba:0a:43:bc:c3:ee:4c:27:a7:9b:34:2d:20:27:60:e0:0b: d2:0c:e3:f5:b7:b1:a2:ad:11:f5:8d:1b:49:ce:3c:20:ae:57: fa:16:3b:9e:25:26:e0:10:4d:4e:1e:a6:a3:62:8e:ab:cc:a8: be:dc:ee:e0:d6:3c:26:bf:99:53:60:9f:87:65:a8:1f:b7:b7: 94:74:c0:b9:6c:ce:63:e1:88:4a:c1:fa:a8:03:39:b9:30:f1: 68:57:e9:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42JyXrD9u7JS0SHyWKWNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5 N2RlMzcwHhcNMjUxMjE5MjMwMTE4WhcNMjUxMjIwMjMwMTE4WjAzMTEwLwYDVQQD Eyg1Y2Y4NmI0ZGIzZDNlY2IxNTA2MzBjNzM2ZTI5MjZiMGM3ZjFlODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDdDOinHV10TEVFh4/ayMomTZsyd F4GIZffYwJZSvXw034aqvwiBRJtsaoMKfMt7nQhur7DNRpsqSDjuGJc8KjYwFayN ImtRh23sCVT23nPMOBmR9034xnvFx1RWx0OUYgjWkpEKlm34M4rGE5uK52Zvq+6l 14D9lS+KjBNiU0uHxdZqGTfXCaSP0ZYyyWG8zseJ5W4c3fYykJl5hMAC+wDy8Aex juJaXPPlAz+jNoIliXROXpJXEKKZVtXGQQIsicwgeISgWrb9zSsUmhQUqd7UuZor VFj/eA2WlJk6Y+bKNoYd9aNDNJlBqz76LokU1O+6vcNWNZzf3ntMjuVtiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz4a02z0+yxUGMMc24pJrDH8eg2MB8GA1UdIwQY MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt MmNlYThlMTUzNjMyLzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqzNRYjm 16NRMMpzKPAOyonXXOwQiXx+OTz88oiPSgFBfeUEZoJe0dyckHL9Wp0EjbxHU/Bo fBdZZ1+P5E/yYhfIG0ITuxRsEkYNMsd4lCsPxTCAynTziZwvaiVCmDy29YTg2u81 fzlmXWNIrGhKltSDdUnQgn2RlDMUOuH5JtM+flA4ERYfj3iWRZvRH8GK8sUV8QuG 6m6NNJTYOoj6vl3vw7oKQ7zD7kwnp5s0LSAnYOAL0gzj9bexoq0R9Y0bSc48IK5X +hY7niUm4BBNTh6mo2KOq8yovtzu4NY8Jr+ZU2Cfh2WoH7e3lHTAuWzOY+GISsH6 qAM5uTDxaFfpfg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:55:14 2025 by rpki-client