This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json) Hash identifier: wZEKRoz8yyRJzhSLh6GiRNKSLnqbTKrd95/zUNZF4X4= Subject key identifier: F2:2B:AE:06:79:BA:87:FE:FA:59:51:5F:7A:AC:F1:45:08:D2:7B:F5 Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4 Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4 Certificate serial: 019B3B352923703C35F3534176D89867AEEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft Manifest number: 03D7 Signing time: Sat 20 Dec 2025 10:01:38 +0000 Manifest this update: Sat 20 Dec 2025 10:01:38 +0000 Manifest next update: Sun 21 Dec 2025 10:01:38 +0000 Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: 9ey+UbL/6VPjIEE18/Kyr53ArNB/YVH+fxAMlzeDVz0=) 2: Xpmq2qI8X7GAALvPIhXOimJgH5Y.roa (hash: AgxExCu/sRjU92nC3fyyQWh5ZarDgbI5r/jd4t48QXE=) 3: qjyhGLzSjen3GpqWTeSFco9KSwQ.roa (hash: kp7IkbSOmQC+WxD6X5wnwhQy2Cc5wCQoIJuVSNYbr0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:29:23:70:3c:35:f3:53:41:76:d8:98:67:ae:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4 Validity Not Before: Dec 20 10:01:38 2025 GMT Not After : Dec 21 10:01:38 2025 GMT Subject: CN=f22bae0679ba87fefa59515f7aacf14508d27bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:9c:7d:3e:80:ed:c5:70:8a:8b:17:ef:7e: 5a:a4:16:26:f1:10:30:df:1a:57:ae:d9:96:19:61: 12:28:3c:de:9a:39:7b:06:e5:e1:8d:98:11:ca:94: 1a:38:ae:12:df:eb:b0:2d:79:96:ba:97:0f:3c:d5: e5:c1:72:35:2c:65:4a:18:99:e9:c2:6f:db:e0:7a: 90:b3:cb:13:19:eb:71:ce:5c:57:35:21:cd:db:ef: 19:5b:00:eb:73:34:b9:cb:2d:b6:fe:c3:1e:8a:3a: e6:c1:c8:12:d3:9f:5a:4b:06:97:e1:e6:2b:f5:5d: 44:05:8d:d3:b2:f0:a5:f2:5b:0a:f2:3a:90:8a:2e: a2:72:93:9d:a3:ad:35:d6:cf:61:0b:86:be:8f:e6: 1a:a0:3d:65:47:9d:46:90:b3:31:53:e2:bf:d6:52: c6:a5:cc:31:49:60:e4:01:6e:a8:5a:73:56:e1:cd: 9a:a4:81:1b:56:6c:ea:00:c7:54:ce:7f:03:de:38: 1e:d8:c6:1a:28:c6:88:c8:c3:86:ae:68:16:fd:49: 80:46:97:58:0c:8d:ff:06:ec:1b:65:6a:60:ac:68: a7:ed:f2:74:51:da:77:20:fd:c5:e4:f7:b8:5c:c2: f3:1b:10:60:9f:14:70:2f:d9:db:a5:e6:de:28:24: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:AE:06:79:BA:87:FE:FA:59:51:5F:7A:AC:F1:45:08:D2:7B:F5 X509v3 Authority Key Identifier: keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:aa:49:15:77:5c:91:fc:e9:16:a9:a0:8a:b3:95:7f:47:a7: bf:ad:ac:86:b9:f8:29:79:9c:20:3b:ee:bb:f6:f5:2d:c3:c6: 0d:ef:e5:7e:7b:71:97:e9:71:71:2e:68:4b:3c:70:61:3b:c2: 28:65:7c:6a:9a:1b:5e:0f:cb:d8:4a:f4:1d:1c:b6:13:8c:d7: 38:81:df:17:b7:3e:37:57:bb:8c:a2:7c:75:e2:5c:4a:cc:bf: 0c:be:3d:85:1c:c6:bc:0f:94:fa:a2:32:bb:a8:b8:0e:21:97: 7b:2d:c4:65:01:a5:4c:13:48:ed:c4:5e:14:2b:ea:1b:6c:62: a6:a6:7a:aa:d6:93:a7:07:e3:2b:44:68:92:32:21:23:24:1e: 7f:4d:3f:a2:ab:9f:16:69:fe:6b:37:60:ca:59:8e:7f:7c:f6: 42:12:3b:7f:ce:36:07:a5:3e:ea:8c:14:ef:c8:3e:3c:aa:45: c1:c8:88:7a:63:f4:3e:09:3c:dd:b2:02:1f:e0:11:cb:f3:77: 63:86:84:3e:59:7a:53:9a:74:0a:37:de:b1:be:16:63:ae:73: 18:c9:f4:ec:7f:74:df:32:dc:e6:da:c3:2b:44:39:8b:ce:53: 8e:e9:a8:7f:45:d1:56:1a:8d:99:df:ea:29:7c:63:b2:f6:cb: 04:74:d7:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NSkjcDw181NBdtiYZ67uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YmM3OTRjNWZiYWFjNjMyYTdmZmI0M2RiMTRmNzM5Y2Q1 M2IyYzQwHhcNMjUxMjIwMTAwMTM4WhcNMjUxMjIxMTAwMTM4WjAzMTEwLwYDVQQD EyhmMjJiYWUwNjc5YmE4N2ZlZmE1OTUxNWY3YWFjZjE0NTA4ZDI3YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dCcfT6A7cVwiosX735apBYm8RAw 3xpXrtmWGWESKDzemjl7BuXhjZgRypQaOK4S3+uwLXmWupcPPNXlwXI1LGVKGJnp wm/b4HqQs8sTGetxzlxXNSHN2+8ZWwDrczS5yy22/sMeijrmwcgS059aSwaX4eYr 9V1EBY3TsvCl8lsK8jqQii6icpOdo6011s9hC4a+j+YaoD1lR51GkLMxU+K/1lLG pcwxSWDkAW6oWnNW4c2apIEbVmzqAMdUzn8D3jge2MYaKMaIyMOGrmgW/UmARpdY DI3/BuwbZWpgrGin7fJ0Udp3IP3F5Pe4XMLzGxBgnxRwL9nbpebeKCSvgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIrrgZ5uof++llRX3qs8UUI0nv1MB8GA1UdIwQY MBaAFDi8eUxfuqxjKn/7Q9sU9znNU7LEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYt ZDk4NTM5NGUzYzEwLzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYtZDk4NTM5NGUzYzEw LzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlapJFXdc kfzpFqmgirOVf0env62shrn4KXmcIDvuu/b1LcPGDe/lfntxl+lxcS5oSzxwYTvC KGV8apobXg/L2Er0HRy2E4zXOIHfF7c+N1e7jKJ8deJcSsy/DL49hRzGvA+U+qIy u6i4DiGXey3EZQGlTBNI7cReFCvqG2xipqZ6qtaTpwfjK0RokjIhIyQef00/oquf Fmn+azdgylmOf3z2QhI7f842B6U+6owU78g+PKpFwciIemP0Pgk83bICH+ARy/N3 Y4aEPll6U5p0Cjfesb4WY65zGMn07H903zLc5trDK0Q5i85Tjumof0XRVhqNmd/q KXxjsvbLBHTX7A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:21 2025 by rpki-client