This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft File: oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json) Hash identifier: kWp8dDJ3s5EEBrWkB97+CPLQmr9MvMl6oOSRbjRiO1w= Subject key identifier: 5B:2A:7B:F3:41:E2:8F:99:7D:21:4A:A5:CB:CE:4A:E3:4C:49:FA:BE Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 Certificate issuer: /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90 Certificate serial: 019B5A1A9B7F1F5FC6DD99A9B96C7A9B4121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft Manifest number: 07B3 Signing time: Fri 26 Dec 2025 10:00:51 +0000 Manifest this update: Fri 26 Dec 2025 10:00:51 +0000 Manifest next update: Sat 27 Dec 2025 10:00:51 +0000 Files and hashes: 1: MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa (hash: FrFfJHN2MqG7rUNbBMB2RUeLHgQ0eftZ7IS2VaSzx58=) 2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: DGq1PsexbGzWrPqdvRjZYYahjehx27ERF4syFxW97RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:9b:7f:1f:5f:c6:dd:99:a9:b9:6c:7a:9b:41:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90 Validity Not Before: Dec 26 10:00:51 2025 GMT Not After : Dec 27 10:00:51 2025 GMT Subject: CN=5b2a7bf341e28f997d214aa5cbce4ae34c49fabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:5b:26:15:b1:6d:f5:95:64:c3:09:4c:4f: 44:10:c7:0e:6f:0d:6e:ba:9e:e5:7f:89:ea:30:7c: d2:80:17:31:1d:72:fc:19:53:71:ec:5c:ed:31:2a: 30:7d:f2:3c:38:ad:77:60:c8:b7:ba:75:d2:30:f3: 75:72:2d:eb:9a:1c:25:2c:0f:b3:22:ac:6d:af:61: dd:1f:a2:c1:f6:51:1c:c3:03:6b:ce:b2:62:4f:3a: 57:4b:6f:dc:42:66:07:ca:a1:2a:2e:2a:79:db:75: ae:9a:45:6c:34:41:97:ea:30:e0:1d:e9:93:47:7f: e5:df:d1:e0:97:05:b5:40:e3:11:8f:be:83:21:07: 85:33:d9:9b:94:38:45:d2:ca:24:bb:1e:36:26:d2: c0:98:5c:80:73:34:c8:28:2d:59:06:14:cc:c3:0e: d2:44:76:41:bf:e6:79:8e:9f:37:a7:83:54:ae:e9: be:8c:ff:5f:b5:2a:b0:1a:d6:d7:8a:50:df:7a:73: 5e:bd:84:e1:bc:d6:a1:2e:0c:15:22:30:5c:51:62: f7:03:13:f4:21:4b:7c:c4:96:63:9d:66:dc:94:ac: d6:d4:8b:a0:b7:02:3d:c6:c5:93:9e:e8:43:67:ee: 95:92:4f:a4:fe:d9:2e:99:43:2e:63:0d:cd:46:df: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2A:7B:F3:41:E2:8F:99:7D:21:4A:A5:CB:CE:4A:E3:4C:49:FA:BE X509v3 Authority Key Identifier: keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d6:54:42:2a:5e:3b:61:9a:f2:80:e8:95:b1:73:74:b5:11: e1:5d:02:86:d0:5b:93:b9:f9:3f:1c:a5:a5:20:d4:f4:d1:3f: 50:a6:da:6c:64:2a:e3:1f:0e:fe:cb:91:03:fc:3f:9f:49:d0: 1f:95:39:6f:a8:2c:7c:92:b6:72:92:9e:2c:6e:7e:2e:64:bd: 82:4d:3f:f9:bd:b0:09:4b:67:30:1f:16:52:03:86:bd:1b:e8: 6b:6a:79:71:b1:56:9b:29:27:fa:47:94:d8:68:26:13:6e:9c: ac:10:f4:89:ba:67:e3:e0:a4:0a:3a:96:18:e6:55:08:41:e8: 72:25:d0:b3:f2:74:fd:36:d5:9b:ed:e0:24:b7:1a:50:7f:ce: a8:32:f3:8b:9d:60:22:c8:99:0b:ef:08:c3:d1:d1:78:d0:54: 1e:38:a4:eb:e4:31:0f:18:49:4e:5b:d3:4d:73:03:91:93:1e: 05:ca:e8:e7:8c:19:89:00:3f:db:5f:37:6e:09:5a:56:47:60: 45:9b:94:7f:b9:08:37:cc:e2:bb:85:df:3a:14:7d:92:1c:e6: d0:9b:76:e3:c2:28:6d:06:ee:fe:1e:7f:2d:57:ce:2a:73:54: 84:5b:c3:53:f4:3b:15:53:20:38:20:8c:3e:7c:c8:ca:35:bf: 26:24:03:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpt/H1/G3ZmpuWx6m0EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYjZhNWIxYTE0Yzg2ZDRjZmI0NmM0ZTg2ZWNkNDA2Njgw NGNjOTAwHhcNMjUxMjI2MTAwMDUxWhcNMjUxMjI3MTAwMDUxWjAzMTEwLwYDVQQD Eyg1YjJhN2JmMzQxZTI4Zjk5N2QyMTRhYTVjYmNlNGFlMzRjNDlmYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri5bJhWxbfWVZMMJTE9EEMcObw1u up7lf4nqMHzSgBcxHXL8GVNx7FztMSowffI8OK13YMi3unXSMPN1ci3rmhwlLA+z Iqxtr2HdH6LB9lEcwwNrzrJiTzpXS2/cQmYHyqEqLip523WumkVsNEGX6jDgHemT R3/l39HglwW1QOMRj76DIQeFM9mblDhF0sokux42JtLAmFyAczTIKC1ZBhTMww7S RHZBv+Z5jp83p4NUrum+jP9ftSqwGtbXilDfenNevYThvNahLgwVIjBcUWL3AxP0 IUt8xJZjnWbclKzW1IugtwI9xsWTnuhDZ+6Vkk+k/tkumUMuYw3NRt8QAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsqe/NB4o+ZfSFKpcvOSuNMSfq+MB8GA1UdIwQY MBaAFKC2pbGhTIbUz7RsTobs1AZoBMyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEt ODU4NGJlZjBiN2Q1LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEtODU4NGJlZjBiN2Q1 LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENZUQipe O2Ga8oDolbFzdLUR4V0ChtBbk7n5PxylpSDU9NE/UKbabGQq4x8O/suRA/w/n0nQ H5U5b6gsfJK2cpKeLG5+LmS9gk0/+b2wCUtnMB8WUgOGvRvoa2p5cbFWmykn+keU 2GgmE26crBD0ibpn4+CkCjqWGOZVCEHociXQs/J0/TbVm+3gJLcaUH/OqDLzi51g IsiZC+8Iw9HReNBUHjik6+QxDxhJTlvTTXMDkZMeBcro54wZiQA/2183bglaVkdg RZuUf7kIN8ziu4XfOhR9khzm0Jt248IobQbu/h5/LVfOKnNUhFvDU/Q7FVMgOCCM PnzIyjW/JiQD8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:52 2025 by rpki-client