This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json) Hash identifier: 3sZKkhKIW5JnYSBTpUbs4xId5psCK9Srun4fb2Z6FLQ= Subject key identifier: 17:C0:89:73:B9:D3:B9:62:DA:FD:82:73:49:5D:AD:48:21:1C:0C:27 Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Certificate serial: 019B2AAEE5FF1C10498B972D44C1D3302603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 05:01:03 +0000 Manifest this update: Wed 17 Dec 2025 05:01:03 +0000 Manifest next update: Thu 18 Dec 2025 05:01:03 +0000 Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=) 2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: Ts7qVbgyHnHIyYOUInsPPCkOgsxdTTe2SaD0hRaCZ9Y=) 3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=) 4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:e5:ff:1c:10:49:8b:97:2d:44:c1:d3:30:26:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Validity Not Before: Dec 17 05:01:03 2025 GMT Not After : Dec 18 05:01:03 2025 GMT Subject: CN=17c08973b9d3b962dafd8273495dad48211c0c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:fa:b9:8e:e8:20:36:8d:5a:4e:9d:40:ac: f4:93:5a:09:40:1a:f4:89:25:bf:93:25:85:92:22: 52:e2:c8:b4:28:6d:9e:28:36:32:2c:4c:f6:5d:d2: 99:ff:3c:6d:06:f7:58:3b:d3:8b:22:8c:25:63:e5: 98:cd:74:e0:8d:b9:e4:81:37:91:bd:c0:11:6c:06: 36:95:cc:b8:17:2b:8c:f6:53:82:18:8d:a8:73:6e: d3:aa:75:71:89:6c:36:e7:fa:9c:65:fa:f4:75:fa: 23:94:17:ee:16:af:6d:2a:a5:c9:04:71:af:31:a2: 7c:46:81:10:76:28:ad:d0:3b:ef:ba:e0:f7:3f:5a: 5c:48:b2:2b:ee:e3:ba:cd:9c:60:38:82:99:d2:ba: a3:c2:a8:90:ea:e5:03:97:fc:b0:45:6b:ef:bd:05: 1f:05:76:b8:a3:e3:33:40:33:1d:f7:03:66:7a:6f: 55:49:19:2c:7e:b6:f3:d2:ba:1e:ec:9a:66:3c:4a: 63:d4:d3:d2:2c:56:7b:a5:c1:53:b3:ee:ff:f4:15: f1:67:7f:4b:3c:79:e5:04:95:08:83:d7:7c:39:b8: 4b:7e:52:93:6a:d8:af:b9:ff:19:c6:c9:b4:e6:48: b5:ab:01:1b:8b:e5:2a:e0:a9:b9:3a:21:36:c2:0a: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C0:89:73:B9:D3:B9:62:DA:FD:82:73:49:5D:AD:48:21:1C:0C:27 X509v3 Authority Key Identifier: keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e4:6b:98:6c:34:cf:08:c2:51:33:89:ff:8a:16:8d:ff:6f: 2f:85:02:88:79:37:15:4f:47:c5:65:ac:8f:9e:27:e2:91:af: 34:f5:24:2e:68:9e:c1:d8:ea:71:c3:1e:83:92:0a:25:ab:a9: 72:6f:54:b8:28:f6:e1:ee:a9:32:47:45:d7:fb:b9:1d:65:95: 0b:b8:a9:67:ab:c4:a0:f2:0c:a7:28:8c:57:da:6a:62:2c:e2: 6f:99:a1:c7:14:26:86:32:73:b2:42:66:fd:12:9c:0b:bd:d6: bc:63:c6:cd:a8:94:63:cb:8f:c4:f4:d3:b1:c4:b1:0b:55:55: a7:e6:d2:18:8a:8e:be:6f:0d:45:db:f9:66:d8:35:67:08:af: fe:c6:81:59:3f:68:9a:a5:cf:9c:7c:88:5a:64:83:4e:5d:e3: 3f:d8:3f:7b:f1:50:5f:8f:f3:3e:7b:b2:92:0e:5a:d4:f1:f7: 2f:55:21:8b:2f:f2:53:45:8b:85:93:28:ee:f1:5c:ac:d9:0d: be:10:9f:4a:71:8b:10:7e:52:cf:07:5a:2e:9b:d3:51:86:80: d3:df:c8:ac:85:e6:f0:31:91:cc:27:10:cf:78:2d:5f:f7:1d: 65:ef:5d:2d:ee:83:d7:43:49:f0:76:15:3f:a5:64:b9:15:42: e8:13:1a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqruX/HBBJi5ctRMHTMCYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi YjZkODAwHhcNMjUxMjE3MDUwMTAzWhcNMjUxMjE4MDUwMTAzWjAzMTEwLwYDVQQD EygxN2MwODk3M2I5ZDNiOTYyZGFmZDgyNzM0OTVkYWQ0ODIxMWMwYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtv6uY7oIDaNWk6dQKz0k1oJQBr0 iSW/kyWFkiJS4si0KG2eKDYyLEz2XdKZ/zxtBvdYO9OLIowlY+WYzXTgjbnkgTeR vcARbAY2lcy4FyuM9lOCGI2oc27TqnVxiWw25/qcZfr0dfojlBfuFq9tKqXJBHGv MaJ8RoEQdiit0DvvuuD3P1pcSLIr7uO6zZxgOIKZ0rqjwqiQ6uUDl/ywRWvvvQUf BXa4o+MzQDMd9wNmem9VSRksfrbz0roe7JpmPEpj1NPSLFZ7pcFTs+7/9BXxZ39L PHnlBJUIg9d8ObhLflKTativuf8Zxsm05ki1qwEbi+Uq4Km5OiE2wgojfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfAiXO507li2v2Cc0ldrUghHAwnMB8GA1UdIwQY MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1 LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceRrmGw0 zwjCUTOJ/4oWjf9vL4UCiHk3FU9HxWWsj54n4pGvNPUkLmiewdjqccMeg5IKJaup cm9UuCj24e6pMkdF1/u5HWWVC7ipZ6vEoPIMpyiMV9pqYizib5mhxxQmhjJzskJm /RKcC73WvGPGzaiUY8uPxPTTscSxC1VVp+bSGIqOvm8NRdv5Ztg1Zwiv/saBWT9o mqXPnHyIWmSDTl3jP9g/e/FQX4/zPnuykg5a1PH3L1Uhiy/yU0WLhZMo7vFcrNkN vhCfSnGLEH5SzwdaLpvTUYaA09/IrIXm8DGRzCcQz3gtX/cdZe9dLe6D10NJ8HYV P6VkuRVC6BMavA== -----END CERTIFICATE-----Generated at Wed Dec 17 07:39:42 2025 by rpki-client