This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json) Hash identifier: 0uDjIQLdl/zyw6Ggt6nzuLl3IoGeNkwOrIayOjt0EMY= Subject key identifier: 50:07:C8:5C:E1:F0:EA:49:66:DB:4A:A1:44:3C:30:B7:E7:1E:F4:92 Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1 Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1 Certificate serial: 019B175F9B2D105D42F1DA7C56027546FB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft Manifest number: 1709 Signing time: Sat 13 Dec 2025 11:01:40 +0000 Manifest this update: Sat 13 Dec 2025 11:01:40 +0000 Manifest next update: Sun 14 Dec 2025 11:01:40 +0000 Files and hashes: 1: APsUsrAn96ow-lwQ45SmC1gQegc.roa (hash: t3tVyfgAERiYm7/hAZrrvXacDVWFUchPqKdL2GXQLe4=) 2: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: 8IRMAc3bZQ804dgtt3PryUMBTXCYI4jiu47j0pKA+EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:9b:2d:10:5d:42:f1:da:7c:56:02:75:46:fb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1 Validity Not Before: Dec 13 11:01:40 2025 GMT Not After : Dec 14 11:01:40 2025 GMT Subject: CN=5007c85ce1f0ea4966db4aa1443c30b7e71ef492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:a9:22:29:9b:1b:65:38:9d:c7:75:a4:4e: 48:7b:ed:30:39:73:3a:2d:09:24:58:f4:fd:5a:29: 1a:f3:16:cd:01:57:41:24:ac:81:fa:6c:72:fa:45: d3:3a:22:67:5d:d3:fc:1e:a7:1a:d0:8a:15:e6:3a: f0:b3:ba:fa:66:14:d3:80:b2:f7:fe:1d:f6:be:df: db:22:d2:b5:81:cb:ca:4d:88:a2:4f:48:b9:2b:ba: f5:98:04:28:8b:d8:e8:c6:1b:f1:6b:0c:90:39:8a: 93:9c:7a:3e:62:20:f4:e2:c4:d4:69:c4:4a:14:5e: 99:1a:03:a3:b4:c2:f6:c7:cf:02:50:58:ab:84:22: e2:7e:ab:6e:67:59:15:24:c4:56:be:de:a2:03:dc: 6b:ce:12:8c:19:26:c7:a8:65:a7:25:27:11:3f:97: ad:c7:18:11:a1:09:a8:4f:d8:99:e1:df:20:70:87: 32:e2:e1:35:81:55:75:0f:89:c5:47:77:43:d7:de: d3:a0:7e:2e:4f:d7:6d:57:9f:7e:4c:45:b9:05:36: 8a:c6:9a:77:75:56:b9:b5:69:b8:79:ce:d1:92:56: 55:da:ac:47:d1:eb:a1:15:95:8f:e3:c2:48:42:00: 52:8d:b3:2e:38:79:4f:35:b0:ab:b2:bd:fe:2d:98: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:07:C8:5C:E1:F0:EA:49:66:DB:4A:A1:44:3C:30:B7:E7:1E:F4:92 X509v3 Authority Key Identifier: keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:42:eb:49:a4:bd:ba:e9:9b:9a:b1:1e:59:63:6b:38:99:fb: f3:8c:12:ec:d7:c7:4b:d2:6d:f2:dc:dc:d7:8e:ca:d6:ae:08: 72:ed:e9:9e:db:6b:d9:13:f3:56:e6:d6:94:13:d5:0b:37:25: a9:2d:d1:d6:51:42:50:c7:67:41:1d:3a:18:94:0f:36:dc:32: 91:ed:63:5d:3e:98:59:f8:59:9c:ce:39:cc:35:10:cd:f6:21: bb:d5:3a:54:d2:6b:0c:60:6d:17:9b:4c:f8:81:0b:87:49:2e: 8d:bb:9c:cf:db:49:0f:b1:5c:97:54:03:78:24:87:f8:5f:9e: 25:56:17:bf:44:91:3b:31:9b:59:75:46:6e:d3:12:e7:d6:5e: 49:a8:d0:25:05:3f:74:79:10:99:b0:b6:d3:6f:b6:43:ac:7d: a3:5a:d5:8a:20:82:75:76:64:ae:6f:f8:3c:f9:3b:95:4f:0e: b1:82:4f:fd:64:d0:0c:02:00:f4:2c:37:ec:e4:59:33:98:b1: 94:b3:8e:2f:f0:59:c6:13:52:ec:5d:20:ae:c7:c5:ba:3d:22: 89:ca:d4:0e:dc:e9:a7:bf:ca:1e:04:21:29:c3:40:f2:44:80: 92:1a:6f:29:ef:01:79:42:b7:00:f8:e4:b6:ac:32:7b:13:50: 48:43:c5:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXX5stEF1C8dp8VgJ1RvsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmMyMDQ5ZjIxOGI2ZmRhYmNhZDc1OTRjMjUyM2IyOGRh NDc3YzEwHhcNMjUxMjEzMTEwMTQwWhcNMjUxMjE0MTEwMTQwWjAzMTEwLwYDVQQD Eyg1MDA3Yzg1Y2UxZjBlYTQ5NjZkYjRhYTE0NDNjMzBiN2U3MWVmNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHWpIimbG2U4ncd1pE5Ie+0wOXM6 LQkkWPT9Wika8xbNAVdBJKyB+mxy+kXTOiJnXdP8Hqca0IoV5jrws7r6ZhTTgLL3 /h32vt/bItK1gcvKTYiiT0i5K7r1mAQoi9joxhvxawyQOYqTnHo+YiD04sTUacRK FF6ZGgOjtML2x88CUFirhCLifqtuZ1kVJMRWvt6iA9xrzhKMGSbHqGWnJScRP5et xxgRoQmoT9iZ4d8gcIcy4uE1gVV1D4nFR3dD197ToH4uT9dtV59+TEW5BTaKxpp3 dVa5tWm4ec7RklZV2qxH0euhFZWP48JIQgBSjbMuOHlPNbCrsr3+LZg7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAHyFzh8OpJZttKoUQ8MLfnHvSSMB8GA1UdIwQY MBaAFKC8IEnyGLb9q8rXWUwlI7KNpHfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDIt MTk5MTJhMGU0OTE4LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDItMTk5MTJhMGU0OTE4 LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiELrSaS9 uumbmrEeWWNrOJn784wS7NfHS9Jt8tzc147K1q4Icu3pnttr2RPzVubWlBPVCzcl qS3R1lFCUMdnQR06GJQPNtwyke1jXT6YWfhZnM45zDUQzfYhu9U6VNJrDGBtF5tM +IELh0kujbucz9tJD7Fcl1QDeCSH+F+eJVYXv0SROzGbWXVGbtMS59ZeSajQJQU/ dHkQmbC202+2Q6x9o1rViiCCdXZkrm/4PPk7lU8OsYJP/WTQDAIA9Cw37ORZM5ix lLOOL/BZxhNS7F0grsfFuj0iicrUDtzpp7/KHgQhKcNA8kSAkhpvKe8BeUK3APjk tqwyexNQSEPFSQ== -----END CERTIFICATE-----Generated at Sat Dec 13 16:56:04 2025 by rpki-client