This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft File: Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json) Hash identifier: GWh6EDveKVuj1WiykIoIkjaQ2WMQCW+AgEOjMTFntHY= Subject key identifier: EF:D9:D5:67:D5:58:01:6A:82:89:0F:00:10:38:53:F2:38:03:C2:86 Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Certificate serial: 019B262DE5CB02078703C0DE4846644761EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft Manifest number: 123A Signing time: Tue 16 Dec 2025 08:01:40 +0000 Manifest this update: Tue 16 Dec 2025 08:01:40 +0000 Manifest next update: Wed 17 Dec 2025 08:01:40 +0000 Files and hashes: 1: 5-ifbkzxAVenbOTh7xnTmSmBRII.roa (hash: FOnnytfJcY5VsaO7IU74ZEnL9Ku9T/H6aGG9jNy1XD4=) 2: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (hash: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=) 3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: pXUeM5zZ/r1gn5OHVSyaVdi/SLm66jI2ypVw1hKudnQ=) 4: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (hash: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=) 5: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (hash: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=) 6: x_EubJIedCZLAcQtdIa25nYyDrk.roa (hash: PgJOT+273yMa8SLFUPwyR3K64DEc4yPVquyOKHNI560=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:e5:cb:02:07:87:03:c0:de:48:46:64:47:61:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Validity Not Before: Dec 16 08:01:40 2025 GMT Not After : Dec 17 08:01:40 2025 GMT Subject: CN=efd9d567d558016a82890f00103853f23803c286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:b5:fc:f1:a4:f4:46:35:e2:9f:b7:b1:94: f8:09:d9:8d:46:f3:ed:de:40:b8:4c:6b:d5:61:6f: a8:24:cc:bd:9a:95:24:c4:51:ee:7b:9b:10:a7:ee: ba:b6:7e:c5:6e:89:c1:36:99:db:4b:57:ca:8a:f7: 12:cc:f4:a1:0a:6a:73:6e:90:4b:c6:92:85:93:0e: 2c:ec:c3:15:d3:61:8c:ca:d3:48:38:e7:78:be:66: 27:8a:d0:25:03:84:b8:ce:17:f7:81:56:1f:f9:9b: a1:62:4c:f9:ae:10:0a:09:56:07:dc:8c:23:94:4a: 03:63:7e:40:f4:e2:01:25:53:00:e6:f1:0c:2a:1c: 2c:f8:82:77:02:f0:10:38:26:26:0a:9c:31:fa:aa: a4:e9:0f:74:21:a2:63:9a:c1:f5:6d:ef:e4:f5:de: d7:5c:6b:52:82:bc:57:cd:42:3e:50:5d:1e:86:cd: 16:d1:08:d2:90:6d:91:31:c0:bc:a1:d1:7c:8b:9f: 1c:0c:ce:5b:f4:a9:db:b2:12:6b:6c:88:b8:ea:b9: a2:a0:bf:1a:fe:77:16:95:64:bc:3f:02:a5:ef:85: 3a:ca:25:20:01:3b:72:f4:69:b0:67:16:e7:d1:2c: 07:43:c9:9b:f2:a6:60:08:29:37:b9:4c:57:19:e0: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:D5:67:D5:58:01:6A:82:89:0F:00:10:38:53:F2:38:03:C2:86 X509v3 Authority Key Identifier: keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ad:fc:d0:aa:50:39:aa:9c:74:51:2a:ed:93:fa:95:be:c4: 99:df:e4:84:c0:1c:1a:79:72:8f:92:98:76:61:1b:32:87:f3: 8a:42:5b:dc:c5:8b:b1:1c:f1:08:fe:ce:b6:d6:5e:04:d0:5a: 81:d1:34:51:2b:1c:54:4b:eb:bb:17:ae:01:10:9a:85:4e:25: 95:0c:d6:20:f5:0e:00:87:28:f7:1d:b1:df:0a:8c:69:e3:03: 3b:3d:77:a3:e8:31:3d:fd:4a:8f:cd:9d:3e:b7:96:21:b6:04: ed:14:a5:ab:2a:42:02:ac:5d:bd:c5:e7:01:c6:14:71:68:1a: fc:e1:55:e6:4c:1d:b1:b5:28:fa:ae:cd:72:01:61:28:92:c8: b7:ad:2d:3b:46:f3:c2:76:b5:b1:0f:6c:01:15:1c:60:d7:2f: 56:33:60:2c:f4:5a:93:4d:eb:d6:92:8a:93:1c:2a:e5:ef:f8: 40:f9:b7:54:91:4f:ea:ad:0a:cc:ff:b5:35:80:67:25:3c:1c: f8:39:c7:64:b0:b8:d5:09:66:c0:e5:b0:54:1c:df:a8:2e:a7: 14:d8:3a:df:96:98:44:e7:93:ab:cd:f2:f4:77:f6:1d:dc:2a: e6:aa:71:ec:47:53:e8:8a:7a:f2:f9:74:14:7d:3e:d4:fa:90: 1e:0e:ea:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLeXLAgeHA8DeSEZkR2HqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw ODIxZmQwHhcNMjUxMjE2MDgwMTQwWhcNMjUxMjE3MDgwMTQwWjAzMTEwLwYDVQQD EyhlZmQ5ZDU2N2Q1NTgwMTZhODI4OTBmMDAxMDM4NTNmMjM4MDNjMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYW1/PGk9EY14p+3sZT4CdmNRvPt 3kC4TGvVYW+oJMy9mpUkxFHue5sQp+66tn7FbonBNpnbS1fKivcSzPShCmpzbpBL xpKFkw4s7MMV02GMytNIOOd4vmYnitAlA4S4zhf3gVYf+ZuhYkz5rhAKCVYH3Iwj lEoDY35A9OIBJVMA5vEMKhws+IJ3AvAQOCYmCpwx+qqk6Q90IaJjmsH1be/k9d7X XGtSgrxXzUI+UF0ehs0W0QjSkG2RMcC8odF8i58cDM5b9KnbshJrbIi46rmioL8a /ncWlWS8PwKl74U6yiUgATty9GmwZxbn0SwHQ8mb8qZgCCk3uUxXGeBYJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/Z1WfVWAFqgokPABA4U/I4A8KGMB8GA1UdIwQY MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt ODM1NTk5MjYwZmY2LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2 LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhK380KpQ OaqcdFEq7ZP6lb7Emd/khMAcGnlyj5KYdmEbMofzikJb3MWLsRzxCP7OttZeBNBa gdE0USscVEvruxeuARCahU4llQzWIPUOAIco9x2x3wqMaeMDOz13o+gxPf1Kj82d PreWIbYE7RSlqypCAqxdvcXnAcYUcWga/OFV5kwdsbUo+q7NcgFhKJLIt60tO0bz wna1sQ9sARUcYNcvVjNgLPRak03r1pKKkxwq5e/4QPm3VJFP6q0KzP+1NYBnJTwc +DnHZLC41QlmwOWwVBzfqC6nFNg635aYROeTq83y9Hf2Hdwq5qpx7EdT6Ip68vl0 FH0+1PqQHg7qhQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:49:14 2025 by rpki-client