This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json) Hash identifier: qjykTrPQwS+1+pzqMdb8Ikf9oElVPB9GUzjOpW8Xcy8= Subject key identifier: DB:1C:96:C3:F1:D2:10:46:38:50:06:2F:C3:29:8C:A5:A2:51:21:B5 Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02 Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602 Certificate serial: 019B1803F7F06177BE8B5E993C96AE255FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft Manifest number: 05E5 Signing time: Sat 13 Dec 2025 14:01:11 +0000 Manifest this update: Sat 13 Dec 2025 14:01:11 +0000 Manifest next update: Sun 14 Dec 2025 14:01:11 +0000 Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: 5Nk3/4GlY82lQilsmVdzDkRSkMNX4+tyMvO3OBGzoCo=) 2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:03:f7:f0:61:77:be:8b:5e:99:3c:96:ae:25:5f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602 Validity Not Before: Dec 13 14:01:11 2025 GMT Not After : Dec 14 14:01:11 2025 GMT Subject: CN=db1c96c3f1d210463850062fc3298ca5a25121b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:fe:bd:aa:5c:02:0f:9e:82:d0:5f:20:7c: 4d:6a:79:ed:b5:92:c4:aa:01:4e:ec:7f:f0:ce:cd: f4:77:49:0b:90:1d:b9:d2:9f:60:89:6c:f4:04:2f: 6b:8e:e1:db:ce:35:d2:d5:23:aa:54:b2:30:29:62: 85:7c:2f:b9:50:4a:23:23:6f:af:4b:93:ef:71:d4: 72:a4:6f:1c:d4:2f:ad:a4:b0:53:e8:f9:98:f5:d7: 6b:bc:b1:02:dd:24:39:b0:83:ae:b3:6a:80:ce:1a: 83:1e:53:85:c2:2e:d3:9d:a4:16:78:32:2b:52:04: 10:3a:c1:d8:a3:36:19:89:35:ca:9e:ae:b6:58:9f: e0:6d:04:e7:7b:e6:3b:df:d1:e0:e1:89:b3:44:fa: 1d:d9:a5:42:4b:95:48:72:9d:4c:96:d3:e1:06:65: 57:da:21:43:7d:ad:ea:3e:42:81:f0:a6:a1:b0:d3: 5a:ff:f6:ef:03:e7:b5:57:47:23:a8:f8:14:9d:e5: a3:c0:34:04:be:33:70:9c:c5:24:9e:53:da:ca:14: 38:3b:2b:d2:17:09:16:0b:c4:77:1c:24:1e:55:8e: e1:03:49:ea:3d:d2:d7:7d:24:ab:53:69:12:bb:43: b1:b8:0f:e7:c0:f6:97:84:5f:28:58:80:ca:fd:dc: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1C:96:C3:F1:D2:10:46:38:50:06:2F:C3:29:8C:A5:A2:51:21:B5 X509v3 Authority Key Identifier: keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:d8:8b:3a:49:32:62:5c:3c:3c:5c:ba:33:15:8a:62:de: e7:fe:2d:f5:01:0f:03:62:e8:24:ad:95:19:c2:88:c9:a8:ec: 53:6f:d9:f0:39:2a:4f:06:24:04:1a:41:7f:62:14:5f:99:25: f8:c0:ef:bc:44:cc:b8:71:e7:58:8f:c1:f2:97:bb:ac:32:a6: 38:61:95:b5:ad:96:35:1f:2b:3d:18:43:4b:cc:7d:4f:9a:8d: 0b:3f:1e:0a:e4:5d:dd:3f:97:83:51:e5:76:25:06:69:94:09: 1d:5d:41:e2:a6:ff:e4:7a:79:1c:69:5a:2f:76:93:ae:59:6e: 80:d6:77:8d:df:08:92:32:74:78:cf:30:85:68:8b:26:da:b4: 47:c4:f2:48:e3:4b:d2:e3:31:14:24:f0:64:1e:9e:b9:fe:af: a4:38:77:53:71:93:12:82:1c:b9:be:d1:b8:7e:8b:03:fd:80: 3f:88:08:30:ff:8e:0d:cd:4c:80:09:19:9c:40:61:c9:c0:29: c6:ae:1c:5f:0d:93:c4:4f:19:c0:04:3e:a3:b0:01:a2:90:18: aa:aa:b9:a8:8c:64:82:f0:a1:2b:18:2d:0d:a2:7d:8c:69:fb: 69:06:21:a3:b2:03:5c:a5:72:eb:51:71:48:b6:6d:0f:63:e9: 4b:63:9d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYA/fwYXe+i16ZPJauJV+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0 ZGE2MDIwHhcNMjUxMjEzMTQwMTExWhcNMjUxMjE0MTQwMTExWjAzMTEwLwYDVQQD EyhkYjFjOTZjM2YxZDIxMDQ2Mzg1MDA2MmZjMzI5OGNhNWEyNTEyMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusz+vapcAg+egtBfIHxNannttZLE qgFO7H/wzs30d0kLkB250p9giWz0BC9rjuHbzjXS1SOqVLIwKWKFfC+5UEojI2+v S5PvcdRypG8c1C+tpLBT6PmY9ddrvLEC3SQ5sIOus2qAzhqDHlOFwi7TnaQWeDIr UgQQOsHYozYZiTXKnq62WJ/gbQTne+Y739Hg4YmzRPod2aVCS5VIcp1MltPhBmVX 2iFDfa3qPkKB8KahsNNa//bvA+e1V0cjqPgUneWjwDQEvjNwnMUknlPayhQ4OyvS FwkWC8R3HCQeVY7hA0nqPdLXfSSrU2kSu0OxuA/nwPaXhF8oWIDK/dzc8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsclsPx0hBGOFAGL8MpjKWiUSG1MB8GA1UdIwQY MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt ZWMyZmJhZmU0ZDkxLzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjktZWMyZmJhZmU0ZDkx LzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaLYizpJ MmJcPDxcujMVimLe5/4t9QEPA2LoJK2VGcKIyajsU2/Z8DkqTwYkBBpBf2IUX5kl +MDvvETMuHHnWI/B8pe7rDKmOGGVta2WNR8rPRhDS8x9T5qNCz8eCuRd3T+Xg1Hl diUGaZQJHV1B4qb/5Hp5HGlaL3aTrllugNZ3jd8IkjJ0eM8whWiLJtq0R8TySONL 0uMxFCTwZB6euf6vpDh3U3GTEoIcub7RuH6LA/2AP4gIMP+ODc1MgAkZnEBhycAp xq4cXw2TxE8ZwAQ+o7ABopAYqqq5qIxkgvChKxgtDaJ9jGn7aQYho7IDXKVy61Fx SLZtD2PpS2OdhA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:57 2025 by rpki-client