This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json) Hash identifier: jLg4VHw4NTvkx8u4LZvtP9bH3Msh8YkyHErtOpNSIOg= Subject key identifier: 56:19:CB:15:65:9A:F6:50:65:59:64:8C:C0:1C:E7:62:BC:2C:00:26 Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d Certificate serial: 019B1A9780B3C63CB0C6F3B7F8528F75FCEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 02:01:34 +0000 Manifest this update: Sun 14 Dec 2025 02:01:34 +0000 Manifest next update: Mon 15 Dec 2025 02:01:34 +0000 Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=) 2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=) 3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: 5i/ugzBTdUBoLoa6GOgiPjkgu8JbsMJNjofku4DfcZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:80:b3:c6:3c:b0:c6:f3:b7:f8:52:8f:75:fc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d Validity Not Before: Dec 14 02:01:34 2025 GMT Not After : Dec 15 02:01:34 2025 GMT Subject: CN=5619cb15659af6506559648cc01ce762bc2c0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:34:15:67:c7:7d:fb:de:3e:fb:e8:59:65: 53:48:f2:ee:25:42:55:d1:e8:f9:44:d1:42:2c:ee: 46:2d:8e:35:e7:9a:b6:74:d5:82:39:86:61:73:bc: 6f:39:a6:81:af:76:80:67:b2:c9:30:94:a0:e5:c7: 59:99:47:16:e4:3e:39:35:c2:d4:25:e1:97:02:c9: fc:ef:18:2c:12:a2:e7:0c:c2:3a:1f:82:f4:47:27: b9:f1:66:4f:99:c1:66:de:81:18:b7:70:e3:87:27: f7:7e:60:99:66:dd:fa:22:98:1a:e4:62:1d:31:3c: e6:31:73:af:21:75:60:73:bd:4e:3d:13:80:f7:ea: c5:7e:5b:90:73:b8:f2:77:cb:d8:ae:61:20:e3:f0: 6b:52:ec:98:35:de:7d:37:0c:07:dd:7a:e1:0e:d8: 5d:3b:8d:77:a8:cd:c2:4a:0b:e3:ab:e1:70:0b:a3: af:7a:3e:1d:d9:07:bd:81:b9:26:85:08:21:61:aa: e9:49:72:78:d1:28:61:23:49:7f:dd:48:3b:7a:d4: 6d:a4:6b:16:df:cc:c0:f8:5b:22:43:54:31:32:d0: 7b:d5:de:c5:e7:7f:ba:49:dc:9b:df:9c:b5:2d:70: 2d:25:75:e7:81:18:85:c3:37:da:36:70:ce:5f:5b: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:19:CB:15:65:9A:F6:50:65:59:64:8C:C0:1C:E7:62:BC:2C:00:26 X509v3 Authority Key Identifier: keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:73:af:ae:8e:df:25:0b:71:bc:2f:cb:6a:ef:81:fd:9b:1a: e6:4e:61:2e:b2:ca:ee:1a:5c:25:0b:78:ef:61:cd:23:92:cc: f0:78:69:e2:1a:d5:b5:ec:d1:bc:e0:25:50:ce:53:6b:69:6f: 4e:36:42:53:72:8e:7f:c5:db:03:88:23:8d:a2:36:43:fe:90: 8f:2d:7b:e2:a4:c6:14:ed:9f:20:54:f9:78:11:d0:15:64:c6: ce:c7:5d:0c:a0:a5:44:67:71:f1:f2:0b:36:34:c3:a9:53:ee: dd:c7:89:08:27:14:5b:d2:e3:28:ad:7b:02:d4:19:f0:77:f2: a1:74:27:48:cf:90:4c:e0:c4:d2:2e:53:8b:ae:4e:e6:4e:0f: ff:59:0d:fa:31:67:b8:e3:9f:3f:ab:83:6c:4e:53:93:6e:37: c8:95:2e:33:b4:29:60:79:6a:fc:2d:b2:ee:87:b3:36:88:c1: 73:88:58:bd:1d:6f:77:69:4a:d3:0c:b4:4d:c3:ac:7d:13:1d: 52:4b:ed:56:a4:50:4b:cc:eb:e7:ac:61:f6:86:6a:f9:e0:bf: 5b:c9:f9:e4:9c:18:0d:55:a5:17:f8:c5:84:c8:57:ff:60:f0: f0:af:0e:fb:b3:1f:fc:4e:51:de:ea:d4:4f:59:d9:72:91:49: cb:ad:09:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal4CzxjywxvO3+FKPdfzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmIxNzE4OTYzZGRkOTEyOGI3NmZkM2Q4MjEzYTE1NjVl Zjg1NmQwHhcNMjUxMjE0MDIwMTM0WhcNMjUxMjE1MDIwMTM0WjAzMTEwLwYDVQQD Eyg1NjE5Y2IxNTY1OWFmNjUwNjU1OTY0OGNjMDFjZTc2MmJjMmMwMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaY0FWfHffvePvvoWWVTSPLuJUJV 0ej5RNFCLO5GLY4155q2dNWCOYZhc7xvOaaBr3aAZ7LJMJSg5cdZmUcW5D45NcLU JeGXAsn87xgsEqLnDMI6H4L0Rye58WZPmcFm3oEYt3Djhyf3fmCZZt36Ipga5GId MTzmMXOvIXVgc71OPROA9+rFfluQc7jyd8vYrmEg4/BrUuyYNd59NwwH3XrhDthd O413qM3CSgvjq+FwC6Ovej4d2Qe9gbkmhQghYarpSXJ40ShhI0l/3Ug7etRtpGsW 38zA+FsiQ1QxMtB71d7F53+6Sdyb35y1LXAtJXXngRiFwzfaNnDOX1u6gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYZyxVlmvZQZVlkjMAc52K8LAAmMB8GA1UdIwQY MBaAFKC7FxiWPd2RKLdv09ghOhVl74VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jNDIxMGUtOTBkZS00ZWNhLTgyMDYt NTUzN2Q4NWQyYmQwLzEvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jNDIxMGUtOTBkZS00ZWNhLTgyMDYtNTUzN2Q4NWQyYmQw LzEvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnOvro7f JQtxvC/Lau+B/Zsa5k5hLrLK7hpcJQt472HNI5LM8Hhp4hrVtezRvOAlUM5Ta2lv TjZCU3KOf8XbA4gjjaI2Q/6Qjy174qTGFO2fIFT5eBHQFWTGzsddDKClRGdx8fIL NjTDqVPu3ceJCCcUW9LjKK17AtQZ8HfyoXQnSM+QTODE0i5Ti65O5k4P/1kN+jFn uOOfP6uDbE5Tk243yJUuM7QpYHlq/C2y7oezNojBc4hYvR1vd2lK0wy0TcOsfRMd UkvtVqRQS8zr56xh9oZq+eC/W8n55JwYDVWlF/jFhMhX/2Dw8K8O+7Mf/E5R3urU T1nZcpFJy60J8A== -----END CERTIFICATE-----Generated at Sun Dec 14 05:34:51 2025 by rpki-client