This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json) Hash identifier: NJvqvPQqVYTXlsoz1GmQoKG4igR9fbOThkl2kAdvFHI= Subject key identifier: 41:39:65:E4:CF:EE:17:69:E9:D2:3B:41:EF:D7:80:C1:04:7E:B8:FC Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Certificate serial: 019B3457068BBF2B4F38E855B17F02D1EF37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 02:01:16 +0000 Manifest this update: Fri 19 Dec 2025 02:01:16 +0000 Manifest next update: Sat 20 Dec 2025 02:01:16 +0000 Files and hashes: 1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=) 2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: /rA7gW0pjxiX2G7fPeqCpvu+YXyCEzLH5StZnXwd4IA=) 3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=) 4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:57:06:8b:bf:2b:4f:38:e8:55:b1:7f:02:d1:ef:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Validity Not Before: Dec 19 02:01:16 2025 GMT Not After : Dec 20 02:01:16 2025 GMT Subject: CN=413965e4cfee1769e9d23b41efd780c1047eb8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:2c:01:9f:00:cf:e8:cb:7d:19:5d:74:d9: 4f:24:0d:39:87:0e:76:12:4f:b5:4b:28:48:74:6d: 3b:8b:87:32:12:24:c5:2a:73:60:c5:14:b9:21:96: 4a:a7:f1:3c:61:a8:90:40:f6:f0:b1:63:cb:58:ea: 13:63:47:e5:54:f1:80:10:13:ba:37:b0:8a:bf:24: 99:f4:e0:0d:df:8e:e0:da:b1:5a:55:0d:d5:e1:51: 97:b9:42:e0:13:84:5d:da:4f:05:6f:47:9c:9b:4a: a6:45:3e:ec:56:26:85:99:6e:aa:89:d7:ad:3f:82: 23:0c:c1:b6:87:ca:7a:93:a5:f4:c8:2b:0c:f4:d1: ed:ff:bb:fc:c7:b4:66:64:15:b5:63:a0:50:94:3b: c8:1e:f0:a1:f9:66:93:92:c6:89:33:ea:17:6a:ab: a0:8c:f9:2a:29:91:9e:cf:6d:21:51:15:ca:a0:3c: 64:7c:bf:f2:53:33:32:25:32:e5:df:f8:f1:13:6a: ad:3e:57:72:99:e9:85:2d:26:20:33:4d:f6:3d:7c: f7:bb:30:98:66:a3:5d:39:1e:2d:86:94:60:0a:c0: 07:67:9a:72:8e:4f:6f:7c:1f:26:fb:74:ea:27:8b: 49:f2:47:bb:e3:0b:33:9f:d8:99:2f:09:fa:75:71: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:39:65:E4:CF:EE:17:69:E9:D2:3B:41:EF:D7:80:C1:04:7E:B8:FC X509v3 Authority Key Identifier: keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:83:47:26:23:f8:a9:4c:39:36:eb:20:37:7e:4f:53:e2:e6: 43:0b:b5:dd:28:4c:1c:60:08:ab:2a:50:e8:b9:06:d5:a7:c3: 40:2b:3d:9b:54:f9:37:ef:97:2a:d0:9b:84:f7:1a:ca:5c:0f: 78:3e:40:bd:50:f1:03:c9:a3:24:e9:ca:3d:96:e7:cb:71:e4: ef:a9:e0:cb:b4:6f:c8:b8:f1:9f:fb:b9:fd:34:14:59:6d:59: e2:52:89:3b:23:ea:fd:75:09:3c:75:1d:d0:4f:00:88:54:2f: 1b:e9:56:a7:a7:db:f6:61:a6:f0:3a:0d:de:db:57:7d:f5:60: 02:c8:1f:d2:8b:31:cf:04:78:b0:58:b8:03:ed:a3:49:47:2e: 7e:94:25:42:39:57:65:97:30:1a:a0:e7:7f:26:89:06:7c:02: b4:43:0e:fe:5b:f7:83:66:62:52:53:82:64:ee:2b:6c:4c:dc: 7d:88:42:8e:2c:f7:02:65:e9:b8:d3:0d:16:6c:c0:24:3e:64: d3:9a:ff:4b:b1:01:3e:92:73:5c:4c:78:fc:b6:ea:1a:01:75: 99:ff:2a:6c:49:3f:78:fe:da:4b:d8:96:e9:b0:24:ea:ab:2f: 95:63:d3:8a:ed:47:c8:c8:df:17:8a:ea:ec:21:26:f1:68:95: 63:1c:3b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VwaLvytPOOhVsX8C0e83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi YjZkODAwHhcNMjUxMjE5MDIwMTE2WhcNMjUxMjIwMDIwMTE2WjAzMTEwLwYDVQQD Eyg0MTM5NjVlNGNmZWUxNzY5ZTlkMjNiNDFlZmQ3ODBjMTA0N2ViOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokosAZ8Az+jLfRlddNlPJA05hw52 Ek+1SyhIdG07i4cyEiTFKnNgxRS5IZZKp/E8YaiQQPbwsWPLWOoTY0flVPGAEBO6 N7CKvySZ9OAN347g2rFaVQ3V4VGXuULgE4Rd2k8Fb0ecm0qmRT7sViaFmW6qidet P4IjDMG2h8p6k6X0yCsM9NHt/7v8x7RmZBW1Y6BQlDvIHvCh+WaTksaJM+oXaqug jPkqKZGez20hURXKoDxkfL/yUzMyJTLl3/jxE2qtPldymemFLSYgM032PXz3uzCY ZqNdOR4thpRgCsAHZ5pyjk9vfB8m+3TqJ4tJ8ke74wszn9iZLwn6dXEl6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE5ZeTP7hdp6dI7Qe/XgMEEfrj8MB8GA1UdIwQY MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1 LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoNHJiP4 qUw5NusgN35PU+LmQwu13ShMHGAIqypQ6LkG1afDQCs9m1T5N++XKtCbhPcaylwP eD5AvVDxA8mjJOnKPZbny3Hk76ngy7RvyLjxn/u5/TQUWW1Z4lKJOyPq/XUJPHUd 0E8AiFQvG+lWp6fb9mGm8DoN3ttXffVgAsgf0osxzwR4sFi4A+2jSUcufpQlQjlX ZZcwGqDnfyaJBnwCtEMO/lv3g2ZiUlOCZO4rbEzcfYhCjiz3AmXpuNMNFmzAJD5k 05r/S7EBPpJzXEx4/LbqGgF1mf8qbEk/eP7aS9iW6bAk6qsvlWPTiu1HyMjfF4rq 7CEm8WiVYxw7FQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:26 2025 by rpki-client