This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json) Hash identifier: EooZPKN20PaPNd3EbBpWkDcTVjSYIWPC4cEKSBbmOKw= Subject key identifier: 3C:D3:BB:84:C7:90:2A:B2:5E:36:92:2B:17:F9:0E:62:EF:48:3B:B0 Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Certificate serial: 019ABC2CCE479DC738B9694EEF0471ACD3AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft Manifest number: 1746 Signing time: Tue 25 Nov 2025 18:00:44 +0000 Manifest this update: Tue 25 Nov 2025 18:00:44 +0000 Manifest next update: Wed 26 Nov 2025 18:00:44 +0000 Files and hashes: 1: Jq_-6ch9suqaxJvUXK5CzXV34vI.roa (hash: a37/xNaBvQkWy3ZjkCxmZa6bwv4ViVqrO0N4ZcM7NRY=) 2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: wkqZLdEt2dy4ZsmmSOw7cEY0GdJwAhglw6o+VaNxcx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:2c:ce:47:9d:c7:38:b9:69:4e:ef:04:71:ac:d3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d Validity Not Before: Nov 25 18:00:44 2025 GMT Not After : Nov 26 18:00:44 2025 GMT Subject: CN=3cd3bb84c7902ab25e36922b17f90e62ef483bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c8:51:f2:b8:8f:5d:79:a0:52:5f:6e:d4:23: d4:60:e5:82:c3:32:b6:27:7e:f5:30:f4:57:8e:45: 89:b2:7a:7c:99:2a:54:bf:b9:98:b9:25:26:87:6c: 37:92:ab:e5:81:56:c6:98:bf:de:9e:72:60:30:1d: e6:a3:ef:69:2c:10:85:df:52:20:48:a2:54:dd:77: b5:eb:81:45:05:d9:be:46:9f:a2:65:23:e3:86:e5: 3b:90:2c:e3:50:23:df:ff:d3:30:c5:04:80:c5:4c: 0b:9e:d8:c8:7b:ee:98:c0:fe:cf:e5:59:c0:c0:0a: 76:ca:c0:e4:ff:d8:0d:33:ab:6b:96:95:ad:ea:ca: e8:d9:6c:72:75:5f:e2:98:fd:b0:20:22:52:8e:42: 62:6f:d3:8c:3f:b0:ee:5f:9f:5d:32:86:a3:a5:a9: 83:a0:b6:35:19:37:27:18:8b:1d:02:56:ae:c7:6d: 5d:52:a6:e8:80:5d:df:34:6a:e2:b2:78:e3:5c:88: 92:ad:43:ab:51:92:92:97:a4:06:95:95:44:07:f5: 8a:50:79:cb:16:87:8e:a5:0e:6e:8a:b6:7c:9d:f0: 00:b3:dc:b7:90:8a:26:f5:3e:c0:bc:9b:4b:4d:62: 1c:9d:0f:eb:79:4d:df:b3:3e:74:38:e9:bc:65:3a: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:BB:84:C7:90:2A:B2:5E:36:92:2B:17:F9:0E:62:EF:48:3B:B0 X509v3 Authority Key Identifier: keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fb:7a:f6:b3:81:22:d5:7e:41:7e:e0:39:1f:b9:d3:fb:20: c8:bd:ae:bb:83:66:85:af:72:51:43:bb:95:62:a0:f7:d5:87: f8:2a:ca:7c:2c:50:0c:25:78:22:c1:ed:42:c4:10:63:b7:63: 5d:cb:74:15:9c:b4:d1:5c:1a:2b:a6:cc:02:6a:72:8c:77:75: 1b:c7:5c:d2:d7:51:26:90:ab:58:6b:6f:27:d7:b1:42:85:c8: 0d:eb:c9:aa:f7:1d:f4:26:f8:30:11:74:a2:18:e3:48:56:d9: 15:46:dc:f6:c7:54:c6:35:49:5b:c8:7d:48:d1:24:01:4b:f1: 5b:b3:a9:60:50:6f:ad:08:64:22:a3:27:0d:7e:08:22:b0:76: c2:ae:6c:07:82:b8:38:90:d0:6c:91:0c:7b:bb:c8:61:59:05: 76:b8:5a:7f:44:6c:f5:0a:db:a5:88:85:4c:85:9a:51:6e:a5: 64:64:03:5f:50:6b:cf:d1:0a:41:11:ab:95:5f:52:1b:80:8e: 34:1f:12:36:45:e1:22:ba:50:ab:f0:10:5f:d6:24:98:c9:a7: f4:89:8c:2a:d7:0c:34:65:c7:7a:16:0f:da:db:12:8f:27:1c: a8:b8:63:75:05:3d:65:7c:67:5f:c7:74:38:aa:51:dc:43:fc: 41:b8:27:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq8LM5Hncc4uWlO7wRxrNOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy NGIyOGQwHhcNMjUxMTI1MTgwMDQ0WhcNMjUxMTI2MTgwMDQ0WjAzMTEwLwYDVQQD EygzY2QzYmI4NGM3OTAyYWIyNWUzNjkyMmIxN2Y5MGU2MmVmNDgzYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkchR8riPXXmgUl9u1CPUYOWCwzK2 J371MPRXjkWJsnp8mSpUv7mYuSUmh2w3kqvlgVbGmL/ennJgMB3mo+9pLBCF31Ig SKJU3Xe164FFBdm+Rp+iZSPjhuU7kCzjUCPf/9MwxQSAxUwLntjIe+6YwP7P5VnA wAp2ysDk/9gNM6trlpWt6sro2WxydV/imP2wICJSjkJib9OMP7DuX59dMoajpamD oLY1GTcnGIsdAlaux21dUqbogF3fNGrisnjjXIiSrUOrUZKSl6QGlZVEB/WKUHnL FoeOpQ5uirZ8nfAAs9y3kIom9T7AvJtLTWIcnQ/reU3fsz50OOm8ZTomOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzTu4THkCqyXjaSKxf5DmLvSDuwMB8GA1UdIwQY MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvt69rOB ItV+QX7gOR+50/sgyL2uu4Nmha9yUUO7lWKg99WH+CrKfCxQDCV4IsHtQsQQY7dj Xct0FZy00VwaK6bMAmpyjHd1G8dc0tdRJpCrWGtvJ9exQoXIDevJqvcd9Cb4MBF0 ohjjSFbZFUbc9sdUxjVJW8h9SNEkAUvxW7OpYFBvrQhkIqMnDX4IIrB2wq5sB4K4 OJDQbJEMe7vIYVkFdrhaf0Rs9QrbpYiFTIWaUW6lZGQDX1Brz9EKQRGrlV9SG4CO NB8SNkXhIrpQq/AQX9YkmMmn9ImMKtcMNGXHehYP2tsSjyccqLhjdQU9ZXxnX8d0 OKpR3EP8QbgnLg== -----END CERTIFICATE-----Generated at Wed Nov 26 03:15:31 2025 by rpki-client