This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json) Hash identifier: caqc2MtuaXjPIavNGoUPmC39HwWlrD731DzE2uvZtLw= Subject key identifier: 49:73:C1:0E:B4:93:37:68:D5:08:40:1C:8B:12:92:2F:82:B0:80:F3 Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Certificate serial: 019B7CA695D3284975FFFCFF018F94CC043B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft Manifest number: 0D36 Signing time: Fri 02 Jan 2026 03:00:50 +0000 Manifest this update: Fri 02 Jan 2026 03:00:50 +0000 Manifest next update: Sat 03 Jan 2026 03:00:50 +0000 Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: x7+d4wvisdgniKAk9k+a20R3iJuJYBpP6jCVRorE/bo=) 2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=) 3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=) 4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:a6:95:d3:28:49:75:ff:fc:ff:01:8f:94:cc:04:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Validity Not Before: Jan 2 03:00:50 2026 GMT Not After : Jan 3 03:00:50 2026 GMT Subject: CN=4973c10eb4933768d508401c8b12922f82b080f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:80:e3:83:5c:f5:ed:fd:66:ad:b3:d1:29: 6b:93:9f:f5:f7:69:a8:f8:61:de:88:40:db:86:6a: 75:d0:83:5b:87:c8:70:f3:f4:0c:dc:9e:e3:79:a9: 86:f2:99:26:0c:c1:12:6f:fe:25:2e:cc:d3:15:b6: a5:1c:3d:92:c2:2e:de:ae:f6:78:31:88:b8:f6:1b: 13:e2:89:0e:0e:c7:74:10:65:5a:a7:44:54:37:c9: 60:e6:9c:42:f0:bb:3b:d5:12:85:d4:5a:f0:ff:40: de:bd:5d:c4:5d:24:24:6c:55:c9:fa:af:41:d0:0e: 09:ef:5d:1c:69:39:ee:ab:51:e1:2c:88:fd:10:0a: 29:6d:58:b1:b3:17:c9:d3:c8:09:42:a1:f5:4c:c9: 5c:b4:6c:ea:ee:ac:5b:ad:50:b6:3b:62:7e:ff:40: 6c:91:1e:db:9e:1f:28:5e:30:8d:4e:0a:8f:ed:d3: 78:69:f4:88:49:1e:9e:02:0c:b6:e7:0c:3b:86:db: 7a:d1:95:ec:76:c5:49:36:71:ed:4f:5c:df:df:81: ee:f1:39:6e:52:a2:11:ac:3b:ed:da:ba:8a:85:63: 13:53:fc:c4:1e:53:1c:32:01:07:d6:61:b8:42:06: 62:07:e9:44:cb:7e:f5:68:3a:54:d8:4f:ec:bf:30: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:C1:0E:B4:93:37:68:D5:08:40:1C:8B:12:92:2F:82:B0:80:F3 X509v3 Authority Key Identifier: keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2d:da:f4:6e:ee:6e:e1:47:87:55:f4:ce:ee:23:0f:db:88: 8a:40:67:e9:b5:da:6d:94:bd:50:44:d3:b6:ce:fc:f1:c2:38: 99:7c:59:27:ba:13:72:f5:02:90:bd:c0:60:11:31:a0:0a:c6: 43:8a:fa:2c:47:60:b0:9d:f0:cd:48:4c:6a:30:06:e4:bb:ff: f5:25:68:56:e1:74:fa:3e:76:8d:d1:15:1f:63:3e:33:c1:c8: 88:34:68:96:ec:4b:71:1e:07:64:f9:17:29:f7:e3:8b:21:08: 44:7e:fa:24:d5:f3:fe:81:e0:a4:e9:b4:0e:d1:e6:0d:27:ff: da:e3:34:17:82:ca:b5:9c:f9:3d:d7:a6:d2:08:da:f3:fb:7d: e3:d0:4a:de:da:2c:10:63:13:dc:b5:26:aa:d2:22:d9:09:47: 09:6a:4f:ad:9e:e5:3e:3e:a7:87:c3:bb:e7:c8:46:a9:b9:3d: a3:5b:b7:cc:2d:14:80:14:84:63:4a:a6:7b:a4:c2:ea:32:10: 4c:1c:05:5d:4f:da:6c:df:a9:ea:94:1b:67:f4:1f:79:52:fd: 3c:7c:39:50:c9:2d:19:ed:f6:48:49:fe:6c:18:6d:ff:2b:ed: fe:8f:50:b2:b0:57:3e:6a:50:61:15:bf:7b:d5:48:79:4a:66: ea:02:31:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8ppXTKEl1//z/AY+UzAQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm N2JmMmEwHhcNMjYwMTAyMDMwMDUwWhcNMjYwMTAzMDMwMDUwWjAzMTEwLwYDVQQD Eyg0OTczYzEwZWI0OTMzNzY4ZDUwODQwMWM4YjEyOTIyZjgyYjA4MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGiA44Nc9e39Zq2z0Slrk5/192mo +GHeiEDbhmp10INbh8hw8/QM3J7jeamG8pkmDMESb/4lLszTFbalHD2Swi7ervZ4 MYi49hsT4okODsd0EGVap0RUN8lg5pxC8Ls71RKF1Frw/0DevV3EXSQkbFXJ+q9B 0A4J710caTnuq1HhLIj9EAopbVixsxfJ08gJQqH1TMlctGzq7qxbrVC2O2J+/0Bs kR7bnh8oXjCNTgqP7dN4afSISR6eAgy25ww7htt60ZXsdsVJNnHtT1zf34Hu8Tlu UqIRrDvt2rqKhWMTU/zEHlMcMgEH1mG4QgZiB+lEy371aDpU2E/svzA8GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElzwQ60kzdo1QhAHIsSki+CsIDzMB8GA1UdIwQY MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt YzY2MzJjYzAxNGIwLzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS3a9G7u buFHh1X0zu4jD9uIikBn6bXabZS9UETTts788cI4mXxZJ7oTcvUCkL3AYBExoArG Q4r6LEdgsJ3wzUhMajAG5Lv/9SVoVuF0+j52jdEVH2M+M8HIiDRoluxLcR4HZPkX KffjiyEIRH76JNXz/oHgpOm0DtHmDSf/2uM0F4LKtZz5Pdem0gja8/t949BK3tos EGMT3LUmqtIi2QlHCWpPrZ7lPj6nh8O758hGqbk9o1u3zC0UgBSEY0qme6TC6jIQ TBwFXU/abN+p6pQbZ/QfeVL9PHw5UMktGe32SEn+bBht/yvt/o9QsrBXPmpQYRW/ e9VIeUpm6gIxDw== -----END CERTIFICATE-----Generated at Fri Jan 2 13:06:14 2026 by rpki-client