This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json) Hash identifier: iAlOy5Owu6+pYNa35ko5f07AYYSYzd9Lbio5djiFpCc= Subject key identifier: 69:A8:BA:87:F7:38:76:B1:38:E4:FD:88:F3:FD:BE:BF:D0:E6:51:A1 Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b Certificate serial: 019B4392FF3E8EE7F918CA4829D425FC846B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft Manifest number: 07DC Signing time: Mon 22 Dec 2025 01:01:05 +0000 Manifest this update: Mon 22 Dec 2025 01:01:05 +0000 Manifest next update: Tue 23 Dec 2025 01:01:05 +0000 Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=) 2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: F9NKJr82FXUcC155TlSX6aE5gkTMwahZKZ2cu93NAv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:ff:3e:8e:e7:f9:18:ca:48:29:d4:25:fc:84:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3802c7987004ae78190e691e370de509ff59127b Validity Not Before: Dec 22 01:01:05 2025 GMT Not After : Dec 23 01:01:05 2025 GMT Subject: CN=69a8ba87f73876b138e4fd88f3fdbebfd0e651a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:b9:01:90:5d:9c:4d:09:1d:19:22:9e:ca: ac:35:ca:51:9c:75:a7:fe:39:38:fc:26:ac:e2:21: 26:ed:d3:cc:93:42:6d:8e:9f:2e:d9:d6:37:6f:fa: b6:6c:ff:9b:e9:ef:b1:fe:06:8e:ca:4f:41:83:1e: ea:90:5e:48:7f:41:4e:88:51:77:3e:75:59:78:ae: 65:e5:44:c8:9c:2e:34:21:13:e0:27:8f:f5:5e:7c: 51:fb:16:86:0d:fb:48:5e:68:21:28:44:be:65:f2: 29:79:de:84:60:1e:82:c3:01:f9:74:66:7e:20:88: 1a:3a:e5:13:3a:fe:5e:32:8c:71:0b:f9:61:f0:42: 13:c3:54:58:4e:62:9c:af:44:ab:9c:5c:97:3f:0c: 1d:b8:74:84:3c:0a:20:06:b8:79:e4:8f:77:8d:7e: 2f:dd:10:3d:06:9f:f7:49:ae:05:e1:f1:69:74:30: 5a:8f:ed:9c:26:7a:46:96:bd:f8:60:c8:88:32:1f: ea:1c:a7:e8:58:dd:09:d3:05:b2:16:24:80:18:3d: 5a:6a:6a:36:c9:99:58:63:61:f7:27:b7:64:0d:79: 5f:00:8c:0b:72:73:8a:08:5a:0b:eb:dc:4a:c0:90: f5:32:8c:46:4e:e6:a1:92:30:1e:ae:56:fd:fc:65: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:BA:87:F7:38:76:B1:38:E4:FD:88:F3:FD:BE:BF:D0:E6:51:A1 X509v3 Authority Key Identifier: keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:62:b1:ca:bd:c1:82:74:8f:91:fe:a4:0b:f6:2a:18:ae:be: 53:42:dd:40:95:63:dc:3c:2a:3f:88:2d:5f:ea:18:35:ee:83: 19:83:8c:35:9d:53:a6:ad:88:74:ba:97:5d:69:12:71:17:60: 49:23:3a:14:7b:b9:2c:0c:97:97:26:b6:4c:3d:74:d1:95:42: 96:32:a4:a1:39:b8:2d:3c:a6:e3:89:b7:61:96:2d:44:90:70: 60:ab:fc:34:a7:24:69:62:4e:78:2d:bd:ee:7f:ba:73:e2:74: c2:01:2f:e5:5a:61:55:7b:2a:5b:83:83:ce:12:04:89:04:9f: f6:13:38:df:f4:13:94:cb:38:41:04:f3:23:55:26:22:da:34: 2c:45:0f:f8:da:52:e5:b1:df:df:5c:ed:53:aa:4d:61:89:6f: 60:63:d9:80:fe:f3:d6:ca:19:9d:5e:cb:16:fa:a6:df:69:b1: 74:cc:a4:9b:32:53:9a:bb:b6:43:68:a1:19:2f:88:4f:b9:a3: d5:5b:08:e1:6c:cc:c4:57:16:4f:9b:85:64:28:0f:57:85:8b: d9:5e:71:f2:6e:e9:1e:3f:39:00:68:95:44:7f:a1:19:b1:55: d7:17:6f:b5:a9:87:63:7d:2b:a3:e1:b9:2b:5e:e9:a0:7e:a1: a5:05:40:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkv8+juf5GMpIKdQl/IRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1 OTEyN2IwHhcNMjUxMjIyMDEwMTA1WhcNMjUxMjIzMDEwMTA1WjAzMTEwLwYDVQQD Eyg2OWE4YmE4N2Y3Mzg3NmIxMzhlNGZkODhmM2ZkYmViZmQwZTY1MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAy5AZBdnE0JHRkinsqsNcpRnHWn /jk4/Cas4iEm7dPMk0Jtjp8u2dY3b/q2bP+b6e+x/gaOyk9Bgx7qkF5If0FOiFF3 PnVZeK5l5UTInC40IRPgJ4/1XnxR+xaGDftIXmghKES+ZfIped6EYB6CwwH5dGZ+ IIgaOuUTOv5eMoxxC/lh8EITw1RYTmKcr0SrnFyXPwwduHSEPAogBrh55I93jX4v 3RA9Bp/3Sa4F4fFpdDBaj+2cJnpGlr34YMiIMh/qHKfoWN0J0wWyFiSAGD1aamo2 yZlYY2H3J7dkDXlfAIwLcnOKCFoL69xKwJD1MoxGTuahkjAerlb9/GXgBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmouof3OHaxOOT9iPP9vr/Q5lGhMB8GA1UdIwQY MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGKxyr3B gnSPkf6kC/YqGK6+U0LdQJVj3DwqP4gtX+oYNe6DGYOMNZ1Tpq2IdLqXXWkScRdg SSM6FHu5LAyXlya2TD100ZVCljKkoTm4LTym44m3YZYtRJBwYKv8NKckaWJOeC29 7n+6c+J0wgEv5VphVXsqW4ODzhIEiQSf9hM43/QTlMs4QQTzI1UmIto0LEUP+NpS 5bHf31ztU6pNYYlvYGPZgP7z1soZnV7LFvqm32mxdMykmzJTmru2Q2ihGS+IT7mj 1VsI4WzMxFcWT5uFZCgPV4WL2V5x8m7pHj85AGiVRH+hGbFV1xdvtamHY30ro+G5 K17poH6hpQVAvg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:27:38 2025 by rpki-client