This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json) Hash identifier: sL2pcdcbk9F+6YhQEBgKWk0mFzZH/MpD76MO0nl3qDc= Subject key identifier: B7:A8:CB:A4:3E:B7:14:A7:3E:73:DB:C6:63:04:79:70:0E:3D:3D:6C Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed Certificate serial: 019B6AD8EDAA5DF7AC521BB80BFB9B38B105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft Manifest number: 0BAC Signing time: Mon 29 Dec 2025 16:02:39 +0000 Manifest this update: Mon 29 Dec 2025 16:02:39 +0000 Manifest next update: Tue 30 Dec 2025 16:02:39 +0000 Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: DFmXWI4puJ/N/23odjI37UEZm0lJOP959qb2xGS97+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:ed:aa:5d:f7:ac:52:1b:b8:0b:fb:9b:38:b1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed Validity Not Before: Dec 29 16:02:39 2025 GMT Not After : Dec 30 16:02:39 2025 GMT Subject: CN=b7a8cba43eb714a73e73dbc6630479700e3d3d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:9e:72:be:fd:a8:3a:ab:d1:6d:63:a8:f0: fc:da:df:91:7e:77:ad:05:66:3b:2d:05:6e:e5:0d: 9b:9c:74:63:fd:50:d3:f2:20:d4:67:07:c1:8f:0c: 47:a3:90:fb:a8:67:10:82:2e:60:5a:9a:d7:6f:b2: 8f:86:93:e6:8b:03:0a:7c:37:dc:30:c1:bc:b0:16: 4f:da:8f:21:25:ae:3c:51:ba:86:5d:dd:54:0c:ee: d6:33:05:5d:02:eb:68:ba:c5:b6:1b:bc:01:95:ab: c7:ff:44:4f:2c:4d:7a:1f:21:08:7b:19:8c:3f:93: 22:c7:d3:d7:ee:c5:8a:b1:ab:db:1d:af:7e:22:e4: e7:32:32:fb:15:73:fb:13:2e:d0:e3:71:08:22:2f: 6a:b9:f5:73:72:dd:2d:8b:cb:09:4f:be:08:49:ed: a1:6e:42:27:02:7c:97:1d:72:0c:c6:86:00:51:3c: 88:fc:62:bc:1a:35:20:10:02:61:67:f2:c2:e2:03: 24:99:d5:cf:8d:08:b6:a3:77:49:a9:8e:21:e6:93: 80:2f:01:de:f6:74:9b:59:b9:89:fc:91:9e:01:94: d0:05:d5:5a:8a:0d:27:8e:db:8f:16:e1:dd:c6:ae: 62:cd:74:c6:98:49:4a:de:17:e5:70:66:59:8e:e2: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A8:CB:A4:3E:B7:14:A7:3E:73:DB:C6:63:04:79:70:0E:3D:3D:6C X509v3 Authority Key Identifier: keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4b:fa:84:41:d6:d5:86:58:f4:dd:4b:51:40:20:32:fa:af: cd:e7:88:a6:fe:92:f2:fa:a4:f1:c0:42:ae:27:34:51:43:44: 35:1d:e8:8f:c9:d1:23:13:6c:92:a9:5e:25:67:26:71:c8:b7: ee:fc:6c:31:5e:c9:b9:5e:5e:a8:07:ce:9b:d6:c2:66:3d:c9: fb:1f:55:00:37:00:f5:39:ad:dd:fa:17:46:d6:65:9e:34:92: 2d:19:09:82:38:a7:22:40:a6:8d:69:4a:0c:f9:32:e9:28:0b: 32:0c:57:39:62:72:2b:d2:9f:a4:03:3b:86:f9:99:c1:83:75: 44:f4:34:9d:78:dc:5e:ca:f4:dd:35:76:f8:83:f2:45:83:cc: 6e:db:43:a8:0f:38:1b:95:4b:38:14:96:67:b4:54:1b:0f:02: af:89:e5:ca:37:8d:43:8e:a8:9d:df:5a:83:2e:8d:f1:25:73: 6d:8e:02:07:57:85:ee:01:12:91:76:6c:75:a4:98:d5:3d:ae: f2:ac:50:ec:7c:58:e1:69:c8:e4:a4:b5:25:2d:f5:83:7f:dd: db:83:bf:c7:1c:c5:25:3a:e2:57:28:54:80:eb:45:1d:c7:8c: 01:46:b7:71:f4:14:c0:f9:6c:0e:26:80:88:44:fc:69:b4:46: 7d:94:52:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2O2qXfesUhu4C/ubOLEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyODk3YjMzNTM4MmY4MjI0ZjVkODkwZTMxYjM4NjMyMWM2 YmIzZWQwHhcNMjUxMjI5MTYwMjM5WhcNMjUxMjMwMTYwMjM5WjAzMTEwLwYDVQQD EyhiN2E4Y2JhNDNlYjcxNGE3M2U3M2RiYzY2MzA0Nzk3MDBlM2QzZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmqecr79qDqr0W1jqPD82t+Rfnet BWY7LQVu5Q2bnHRj/VDT8iDUZwfBjwxHo5D7qGcQgi5gWprXb7KPhpPmiwMKfDfc MMG8sBZP2o8hJa48UbqGXd1UDO7WMwVdAutousW2G7wBlavH/0RPLE16HyEIexmM P5Mix9PX7sWKsavbHa9+IuTnMjL7FXP7Ey7Q43EIIi9qufVzct0ti8sJT74ISe2h bkInAnyXHXIMxoYAUTyI/GK8GjUgEAJhZ/LC4gMkmdXPjQi2o3dJqY4h5pOALwHe 9nSbWbmJ/JGeAZTQBdVaig0njtuPFuHdxq5izXTGmElK3hflcGZZjuIfYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeoy6Q+txSnPnPbxmMEeXAOPT1sMB8GA1UdIwQY MBaAFNKJezNTgvgiT12JDjGzhjIca7PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTct NWI1MzMyYWYxODUxLzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTctNWI1MzMyYWYxODUx LzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEv6hEHW 1YZY9N1LUUAgMvqvzeeIpv6S8vqk8cBCric0UUNENR3oj8nRIxNskqleJWcmcci3 7vxsMV7JuV5eqAfOm9bCZj3J+x9VADcA9Tmt3foXRtZlnjSSLRkJgjinIkCmjWlK DPky6SgLMgxXOWJyK9KfpAM7hvmZwYN1RPQ0nXjcXsr03TV2+IPyRYPMbttDqA84 G5VLOBSWZ7RUGw8Cr4nlyjeNQ46ond9agy6N8SVzbY4CB1eF7gESkXZsdaSY1T2u 8qxQ7HxY4WnI5KS1JS31g3/d24O/xxzFJTriVyhUgOtFHceMAUa3cfQUwPlsDiaA iET8abRGfZRSRQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:40:37 2025 by rpki-client