This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json) Hash identifier: HofR9ffPgdvYIHAsPhMr2kfgFcIQ3/ozTol5YC1PmxI= Subject key identifier: 5D:6B:22:78:AE:E0:8E:D8:BD:C6:96:31:75:E3:2B:AC:CB:8A:B5:19 Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58 Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158 Certificate serial: 019B33E8D7C029B7306DBAB46BF1FFDC4C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft Manifest number: 041C Signing time: Fri 19 Dec 2025 00:00:56 +0000 Manifest this update: Fri 19 Dec 2025 00:00:56 +0000 Manifest next update: Sat 20 Dec 2025 00:00:56 +0000 Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: CgZk53wmZXpdoItgqMJmJm8u4gcAE0X3T/4LVSf1kfo=) 2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:d7:c0:29:b7:30:6d:ba:b4:6b:f1:ff:dc:4c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158 Validity Not Before: Dec 19 00:00:56 2025 GMT Not After : Dec 20 00:00:56 2025 GMT Subject: CN=5d6b2278aee08ed8bdc6963175e32baccb8ab519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:10:58:6f:d6:03:81:37:f1:a4:4f:12:ee: 5a:91:71:3b:5f:91:e0:98:43:d3:85:bf:71:13:0d: e6:2c:49:70:64:d6:03:e7:df:bc:51:7e:0e:42:8b: 95:65:01:35:cc:39:0c:8e:ce:2c:f8:2a:52:fc:bd: 7d:11:40:9c:0a:5f:5a:48:cb:8d:fa:16:96:90:1f: 71:ed:51:3e:51:e3:ef:5d:93:35:1e:40:f2:77:3c: 3c:5e:d0:61:4b:8f:24:6d:d8:92:e4:ec:72:f9:64: 1c:55:72:71:3a:71:79:93:61:67:66:03:50:2d:51: 8a:a8:6a:0d:ea:2a:2b:ca:70:d0:3b:a9:42:27:ec: be:f6:5c:84:37:6f:83:2a:d4:10:81:ff:cf:50:23: e7:9c:42:35:82:a4:6b:18:a8:8b:da:67:0f:50:57: 66:0c:9e:f8:f8:65:86:82:41:a2:c0:8c:61:90:3a: cb:4f:12:af:3a:e3:b5:24:b0:40:87:eb:b1:2d:86: 77:8e:46:cf:37:d5:4d:3f:c4:ef:8b:f3:27:0c:e4: 8e:ab:eb:4c:58:bb:df:f8:d7:d2:98:c0:59:df:27: 54:c4:26:fb:b5:13:7a:d8:45:35:b4:c6:16:d6:55: ed:ae:20:2e:81:d9:5d:11:10:3a:89:44:29:42:2a: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6B:22:78:AE:E0:8E:D8:BD:C6:96:31:75:E3:2B:AC:CB:8A:B5:19 X509v3 Authority Key Identifier: keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3b:aa:8b:26:01:9b:72:78:55:45:ca:b6:89:97:61:26:67: 4f:95:f9:6e:93:ae:7d:5c:95:d9:31:d2:a4:40:02:4b:b1:b5: bf:9b:f8:4d:7d:4d:58:81:48:24:36:2a:14:aa:8d:1d:45:20: 67:03:45:09:7b:86:96:04:43:41:a6:ed:c8:c8:ce:65:35:d3: 55:ef:07:2d:47:9c:0a:b8:fe:ed:9f:6f:b4:bf:3e:60:d6:04: 46:8c:b3:b4:c9:3f:fe:ad:08:36:a1:40:5b:bb:49:a6:74:51: 61:12:0c:85:ad:18:10:9a:36:6e:29:b9:0b:6a:54:6a:98:0d: 31:4a:68:29:89:34:2a:81:38:8f:33:49:77:3d:23:9b:74:68: 87:15:c3:70:51:84:e4:60:16:c8:1a:98:f5:a4:85:34:f7:0a: 9d:25:77:91:1d:b5:36:01:a7:f9:c8:19:eb:77:5c:b1:b5:74: a0:58:e0:74:be:c7:1f:a4:1e:0e:d8:f1:bd:df:b4:73:bf:48: 82:a8:22:ba:ec:9f:8e:94:ae:c0:00:15:68:69:4b:49:f9:aa: fe:3e:3d:dc:33:3a:75:60:47:90:68:80:55:59:85:16:a8:c7: 31:b3:c4:c5:a6:48:fa:0c:e0:c4:d6:e2:0e:1b:7c:ff:52:76: 8f:81:0d:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6NfAKbcwbbq0a/H/3Ew9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQzY2U4MTlhMDgxNTA1MDBhOGY0YTJkZjc5ZWI3MDE0 NWQxNTgwHhcNMjUxMjE5MDAwMDU2WhcNMjUxMjIwMDAwMDU2WjAzMTEwLwYDVQQD Eyg1ZDZiMjI3OGFlZTA4ZWQ4YmRjNjk2MzE3NWUzMmJhY2NiOGFiNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWkQWG/WA4E38aRPEu5akXE7X5Hg mEPThb9xEw3mLElwZNYD59+8UX4OQouVZQE1zDkMjs4s+CpS/L19EUCcCl9aSMuN +haWkB9x7VE+UePvXZM1HkDydzw8XtBhS48kbdiS5Oxy+WQcVXJxOnF5k2FnZgNQ LVGKqGoN6iorynDQO6lCJ+y+9lyEN2+DKtQQgf/PUCPnnEI1gqRrGKiL2mcPUFdm DJ74+GWGgkGiwIxhkDrLTxKvOuO1JLBAh+uxLYZ3jkbPN9VNP8Tvi/MnDOSOq+tM WLvf+NfSmMBZ3ydUxCb7tRN62EU1tMYW1lXtriAugdldERA6iUQpQipV3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1rIniu4I7YvcaWMXXjK6zLirUZMB8GA1UdIwQY MBaAFDpdPOgZoIFQUAqPSi33nrcBRdFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMt YWJhZWM4MmJkOGJiLzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMtYWJhZWM4MmJkOGJi LzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjuqiyYB m3J4VUXKtomXYSZnT5X5bpOufVyV2THSpEACS7G1v5v4TX1NWIFIJDYqFKqNHUUg ZwNFCXuGlgRDQabtyMjOZTXTVe8HLUecCrj+7Z9vtL8+YNYERoyztMk//q0INqFA W7tJpnRRYRIMha0YEJo2bim5C2pUapgNMUpoKYk0KoE4jzNJdz0jm3RohxXDcFGE 5GAWyBqY9aSFNPcKnSV3kR21NgGn+cgZ63dcsbV0oFjgdL7HH6QeDtjxvd+0c79I gqgiuuyfjpSuwAAVaGlLSfmq/j493DM6dWBHkGiAVVmFFqjHMbPExaZI+gzgxNbi Dht8/1J2j4ENNg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:04 2025 by rpki-client