This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json) Hash identifier: H890QcQNLw7TYmXx8KvmnIS5n4t8bTZmeW3aUr8HeAU= Subject key identifier: E8:FD:70:9C:89:FA:59:F8:8E:47:C4:C1:0F:A0:0F:C9:B3:90:62:C7 Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e Certificate serial: 019B330D06BC26092C45A42A80FA8C848787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft Manifest number: 117E Signing time: Thu 18 Dec 2025 20:00:50 +0000 Manifest this update: Thu 18 Dec 2025 20:00:50 +0000 Manifest next update: Fri 19 Dec 2025 20:00:50 +0000 Files and hashes: 1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: ghlnTPgsFD1TI6iaqZqMpscneQMY7byIRLN8o4cbAEg=) 2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:06:bc:26:09:2c:45:a4:2a:80:fa:8c:84:87:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e Validity Not Before: Dec 18 20:00:50 2025 GMT Not After : Dec 19 20:00:50 2025 GMT Subject: CN=e8fd709c89fa59f88e47c4c10fa00fc9b39062c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:c2:be:a0:a9:03:1e:31:3b:2c:41:a2:04: b5:a3:a3:17:e1:f4:3b:dc:7d:f2:bc:12:b3:af:7f: af:6a:6a:0f:90:50:6f:89:0e:08:db:19:66:be:dc: 2b:6c:56:5c:8b:77:50:36:0d:c1:d4:2f:4f:5a:42: e9:5b:36:61:68:d3:f8:b8:77:6c:85:30:78:07:57: 85:25:f0:4a:3a:ea:a2:7d:50:3a:ee:39:c9:10:44: 77:3c:ee:40:02:f8:00:2d:9d:aa:0d:06:e7:15:91: 4e:a5:af:6a:0c:53:19:bd:e2:3f:ad:2b:61:29:c2: 1a:b1:14:62:d0:8d:b0:7e:b2:1f:de:8e:a6:2b:74: 6a:8b:8b:db:e4:83:79:09:21:0f:f6:62:df:ef:05: ab:8f:31:c7:e8:7f:9e:d0:ab:80:ba:fe:92:dd:15: 1e:0a:ae:32:f2:06:05:91:68:d3:22:bb:9c:f6:0a: a6:60:48:b9:e5:af:f0:b2:5c:e4:4f:96:79:15:85: 38:df:f0:72:2a:73:77:80:af:e9:c9:84:8d:29:0a: 02:fa:67:39:3f:16:a2:ee:c7:b1:83:89:65:a9:1d: 22:c9:54:e2:86:86:5b:1c:61:18:68:b2:a0:d2:6a: e9:c8:d2:6f:ba:7f:15:00:b9:6e:b0:00:d9:90:34: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:70:9C:89:FA:59:F8:8E:47:C4:C1:0F:A0:0F:C9:B3:90:62:C7 X509v3 Authority Key Identifier: keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b9:a2:bb:5a:0d:db:f4:f4:31:86:0f:42:a2:e7:4c:ea:95: fe:46:51:a5:17:ea:c4:a4:f8:c6:3e:fe:2f:59:6d:8d:36:76: b5:4c:27:83:ea:de:69:a0:13:90:10:a0:71:8e:62:4e:d9:a1: 3f:83:c1:76:06:c6:cc:68:ce:06:d1:dc:6e:98:9e:92:1d:12: 32:52:4f:5a:1b:c6:28:a3:61:f8:aa:ce:8e:61:f6:97:7b:79: f3:3c:e7:61:c6:91:e8:21:ff:d8:0e:5e:13:75:a7:20:1a:16: 24:f4:4b:6d:bf:af:b4:0c:14:18:59:ef:99:87:30:24:88:d8: 92:49:67:46:d7:d6:da:bf:bb:39:a1:26:16:b7:fd:3b:35:e4: 4f:2a:b6:d3:5a:86:ec:c6:db:dd:9e:df:12:e4:52:77:44:72: 9f:e1:eb:c6:7f:74:93:1b:fb:be:38:b9:ee:b2:0d:d8:f9:4c: 46:08:20:42:37:7f:3e:4d:5f:7c:76:58:b3:de:3f:d7:f9:fa: 25:78:73:c0:a1:0f:cc:97:df:fc:45:7b:f6:17:37:1d:5f:9d: e7:2a:89:cb:a0:52:42:97:2c:66:d7:25:1e:2b:15:4a:c6:9b: 9a:db:fc:19:9e:71:3b:fa:fb:81:a6:fa:9a:1e:44:b3:e2:d8: 55:ec:f7:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDQa8JgksRaQqgPqMhIeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTEwMjc5YmUxMzhjNDJjZGVmNjI3MThmMGY2YWZhY2Fl MTgxOWUwHhcNMjUxMjE4MjAwMDUwWhcNMjUxMjE5MjAwMDUwWjAzMTEwLwYDVQQD EyhlOGZkNzA5Yzg5ZmE1OWY4OGU0N2M0YzEwZmEwMGZjOWIzOTA2MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYnCvqCpAx4xOyxBogS1o6MX4fQ7 3H3yvBKzr3+vamoPkFBviQ4I2xlmvtwrbFZci3dQNg3B1C9PWkLpWzZhaNP4uHds hTB4B1eFJfBKOuqifVA67jnJEER3PO5AAvgALZ2qDQbnFZFOpa9qDFMZveI/rSth KcIasRRi0I2wfrIf3o6mK3Rqi4vb5IN5CSEP9mLf7wWrjzHH6H+e0KuAuv6S3RUe Cq4y8gYFkWjTIruc9gqmYEi55a/wslzkT5Z5FYU43/ByKnN3gK/pyYSNKQoC+mc5 Pxai7sexg4llqR0iyVTihoZbHGEYaLKg0mrpyNJvun8VALlusADZkDRp/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOj9cJyJ+ln4jkfEwQ+gD8mzkGLHMB8GA1UdIwQY MBaAFKJRAnm+E4xCze9icY8PavrK4YGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUt ODZhZjUyZmI0ZWViLzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUtODZhZjUyZmI0ZWVi LzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7miu1oN 2/T0MYYPQqLnTOqV/kZRpRfqxKT4xj7+L1ltjTZ2tUwng+reaaATkBCgcY5iTtmh P4PBdgbGzGjOBtHcbpiekh0SMlJPWhvGKKNh+KrOjmH2l3t58zznYcaR6CH/2A5e E3WnIBoWJPRLbb+vtAwUGFnvmYcwJIjYkklnRtfW2r+7OaEmFrf9OzXkTyq201qG 7Mbb3Z7fEuRSd0Ryn+Hrxn90kxv7vji57rIN2PlMRgggQjd/Pk1ffHZYs94/1/n6 JXhzwKEPzJff/EV79hc3HV+d5yqJy6BSQpcsZtclHisVSsabmtv8GZ5xO/r7gab6 mh5Es+LYVez3Qw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:53:40 2025 by rpki-client