This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json) Hash identifier: dcMtWTdYw5T8LY+M2LGgFHNLLI66OxdUqSCI13xAiaE= Subject key identifier: 33:29:70:F1:6F:34:C9:41:09:15:6B:A0:1E:23:10:FC:02:77:A0:21 Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58 Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158 Certificate serial: 019AF23F7174EDDADEB1D7F402E7E7892B4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft Manifest number: 03FA Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: FOJ7o+ReNq+5gZKsDFohM/1pkAbOQJIKrdgigEQtYN0=) 2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:71:74:ed:da:de:b1:d7:f4:02:e7:e7:89:2b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158 Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=332970f16f34c94109156ba01e2310fc0277a021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:59:60:6a:87:0d:0d:54:ba:13:f0:7a:da:7d: ed:5f:6f:60:59:c1:32:8d:57:1f:8b:3d:33:5b:70: 1e:b9:8d:fb:4c:40:ae:ad:ef:2b:77:1e:e2:44:75: ff:78:46:6f:93:c6:30:92:a9:3d:b9:59:34:3d:a1: 51:1a:a5:55:52:42:33:5b:b4:da:8f:6b:1d:f5:15: 6e:e4:a0:65:13:eb:93:34:f8:c7:be:09:1c:a6:42: 1f:1a:e0:ae:a4:d8:00:42:95:00:cb:e3:37:6e:a1: c1:27:2b:59:0f:da:19:f8:bd:e8:6d:9e:67:34:72: 60:8a:70:81:e5:1d:a8:ed:98:aa:be:33:81:dc:a5: 9d:8c:e7:c9:3f:d2:97:c0:fc:2e:9e:d7:38:eb:e3: db:14:76:dc:48:d7:51:05:61:cf:0a:6b:2e:a4:f7: a1:da:65:c5:e5:e0:94:73:ff:75:49:f4:ca:1c:69: be:36:4f:be:68:b7:8c:e3:df:09:6d:3e:7d:2d:02: 23:2e:7c:ad:07:85:3a:8c:26:d1:73:81:9e:c5:04: e4:ed:1f:8f:26:79:f7:f8:a2:63:39:c5:96:6e:b7: 24:5f:84:fc:68:6f:6a:10:eb:5d:1e:fa:2e:ce:5f: 45:bb:b7:af:17:28:d6:bc:6e:c5:2a:c0:7a:0d:9c: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:29:70:F1:6F:34:C9:41:09:15:6B:A0:1E:23:10:FC:02:77:A0:21 X509v3 Authority Key Identifier: keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e8:62:2d:1f:0c:9b:13:be:62:70:76:61:28:d1:5b:d0:f7: 4c:9f:30:b7:50:61:3d:c2:dc:0c:c3:02:a8:94:4e:a7:4a:17: d7:79:81:62:00:99:26:49:5f:7f:9b:4f:7f:40:a7:f5:22:1b: 1b:de:f3:9b:4c:44:d2:1d:cf:66:d9:72:0f:39:d1:31:85:da: 1f:ed:b3:2a:5d:71:c3:ff:cb:e8:68:09:cc:36:3f:11:3c:5f: 1a:57:df:83:59:30:0b:12:73:47:0f:fb:51:01:96:d5:33:61: eb:1f:6f:31:d7:c5:60:81:4d:1d:0f:f9:32:cd:b5:ca:47:ae: f3:c8:49:b7:e3:0c:e0:1d:c7:0e:f0:7c:6f:4b:75:cd:e0:59: 45:0e:42:8b:a7:22:db:b5:52:2c:65:8e:3a:4a:04:c3:2d:2c: f6:2f:85:f3:eb:41:1b:24:3f:dd:af:f2:c8:7c:99:d1:3b:7f: b6:30:ec:b4:b9:23:2d:95:90:67:ff:ab:34:53:b3:7d:99:9b: 1b:26:c4:60:4a:dc:d0:28:6d:07:af:50:a5:f0:a8:d7:99:83: d1:d4:8c:12:48:07:36:11:86:f1:5b:99:fb:39:3c:5d:bc:10: eb:f7:53:7f:c7:67:85:0a:3b:85:d5:e4:82:e1:c9:61:34:05: a0:da:3a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3F07dresdf0AufniStPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQzY2U4MTlhMDgxNTA1MDBhOGY0YTJkZjc5ZWI3MDE0 NWQxNTgwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EygzMzI5NzBmMTZmMzRjOTQxMDkxNTZiYTAxZTIzMTBmYzAyNzdhMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FlgaocNDVS6E/B62n3tX29gWcEy jVcfiz0zW3AeuY37TECure8rdx7iRHX/eEZvk8Ywkqk9uVk0PaFRGqVVUkIzW7Ta j2sd9RVu5KBlE+uTNPjHvgkcpkIfGuCupNgAQpUAy+M3bqHBJytZD9oZ+L3obZ5n NHJginCB5R2o7ZiqvjOB3KWdjOfJP9KXwPwuntc46+PbFHbcSNdRBWHPCmsupPeh 2mXF5eCUc/91SfTKHGm+Nk++aLeM498JbT59LQIjLnytB4U6jCbRc4GexQTk7R+P Jnn3+KJjOcWWbrckX4T8aG9qEOtdHvouzl9Fu7evFyjWvG7FKsB6DZy9yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMpcPFvNMlBCRVroB4jEPwCd6AhMB8GA1UdIwQY MBaAFDpdPOgZoIFQUAqPSi33nrcBRdFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMt YWJhZWM4MmJkOGJiLzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kOGZkY2YtOTU0Zi00ZTcyLThlMmMtYWJhZWM4MmJkOGJi LzEvT2wwODZCbWdnVkJRQ285S0xmZWV0d0ZGMFZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuhiLR8M mxO+YnB2YSjRW9D3TJ8wt1BhPcLcDMMCqJROp0oX13mBYgCZJklff5tPf0Cn9SIb G97zm0xE0h3PZtlyDznRMYXaH+2zKl1xw//L6GgJzDY/ETxfGlffg1kwCxJzRw/7 UQGW1TNh6x9vMdfFYIFNHQ/5Ms21ykeu88hJt+MM4B3HDvB8b0t1zeBZRQ5Ci6ci 27VSLGWOOkoEwy0s9i+F8+tBGyQ/3a/yyHyZ0Tt/tjDstLkjLZWQZ/+rNFOzfZmb GybEYErc0ChtB69QpfCo15mD0dSMEkgHNhGG8VuZ+zk8XbwQ6/dTf8dnhQo7hdXk guHJYTQFoNo6Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:24 2025 by rpki-client