This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json) Hash identifier: HybgSykO6bcm1OiAs1GjdDgODtG6uKzBPjajLAjVGgo= Subject key identifier: 10:3A:5D:B9:DE:E9:32:D7:B6:94:42:B0:3E:A7:43:9D:B2:E1:93:94 Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a Certificate serial: 019AF12EB4340BFCBF05C2CEB905E0BB8687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft Manifest number: 0FE3 Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: pwOp6imarGP85bHel5bhaxSXhRdpv/Lz1bDWsXHPSxs=) 2: tWrNNpvQLnIYXShcXDmxPXzlROA.roa (hash: rl7K0aTuna5/yne12oTJUAQ6OhB1j3YlRj4Y9PjqK84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b4:34:0b:fc:bf:05:c2:ce:b9:05:e0:bb:86:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=103a5db9dee932d7b69442b03ea7439db2e19394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:d7:56:5e:3e:a3:58:52:ee:7d:86:48:0c: a6:a9:82:a2:32:28:23:d3:9c:c4:ed:30:06:55:a5: de:0f:ad:a1:49:61:25:6f:c8:a2:9d:56:5a:06:c0: b6:5f:99:9c:44:fe:da:85:74:f1:95:e5:97:c4:e4: c6:89:5a:1f:9e:5d:e8:0f:a9:03:aa:01:95:d6:84: 18:78:cf:15:21:95:24:5d:f4:ca:a2:0e:69:d9:8c: 1e:e5:69:b5:9f:3e:d8:eb:d2:0c:4f:60:27:98:85: 91:ff:5b:41:14:67:fb:7f:9e:a4:b5:87:04:d6:ec: 8d:12:dc:28:89:37:c6:8e:05:42:41:21:14:0c:aa: 99:1c:fa:3a:2c:bc:55:b8:3d:77:cf:26:c4:10:7d: 67:26:fd:64:15:3a:92:ff:21:ff:7e:4b:80:f5:5d: 84:a8:e1:14:5f:2c:a2:3f:c8:8a:1e:91:b1:44:7d: b8:a6:74:25:d4:4a:ae:b5:9a:ac:af:e9:c1:de:93: c2:34:5a:b2:1f:fa:50:81:b2:cf:4d:ec:01:f9:0d: 51:b8:76:0e:ec:51:95:95:bc:7c:a9:5c:00:83:c4: 2d:b1:59:0f:9c:60:1b:f3:e0:f5:69:8e:61:6c:00: 81:de:c1:46:d0:5c:e5:73:b0:9a:95:6d:e5:55:b8: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3A:5D:B9:DE:E9:32:D7:B6:94:42:B0:3E:A7:43:9D:B2:E1:93:94 X509v3 Authority Key Identifier: keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:02:c6:a9:7e:7e:82:51:0a:9a:ca:a1:3b:79:2b:0b:b8:4c: e9:a3:1d:9c:4e:e2:8a:88:c0:32:a2:2a:ce:af:19:88:a2:9e: c5:ac:b0:12:22:7a:90:1f:c8:72:f7:f3:24:5e:89:b7:7b:28: 07:b0:38:3b:f5:73:9b:42:9e:95:24:33:39:c9:61:58:3f:67: 36:dd:77:c4:7c:bd:9d:c0:9a:f2:93:ec:9b:4a:b5:ef:b6:79: 85:d3:58:d7:37:59:0c:3e:6d:51:0f:9c:16:51:fb:e8:56:4b: 15:88:6f:e8:5d:d2:b7:b6:8c:62:04:7c:ba:b7:9c:10:39:20: d3:a4:22:c9:5c:1b:60:a4:a2:37:a1:bb:0a:cc:de:31:32:2f: e7:c5:bb:c6:73:90:7f:a4:dc:f1:87:f5:b2:ff:24:09:e4:55: f7:bd:47:23:77:52:bb:04:35:be:5a:22:0f:b9:73:13:a4:45: c4:51:53:ca:dc:ea:fa:31:90:9f:0b:2c:e5:c3:d6:e7:a1:d8: 2e:34:3b:44:20:59:9a:75:80:4e:49:f5:2c:a9:60:73:b5:04: f4:40:93:26:33:48:d5:84:42:75:89:3e:36:0d:65:bc:d5:77: 68:35:e2:4e:24:0f:8b:67:33:8e:9e:6b:13:e8:82:bd:60:85: 04:01:dd:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrQ0C/y/BcLOuQXgu4aHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmYxNzZhZjhkYmEzMGZlZjMyNTM2NWVmMzQwNDgxMmNl MmQ4NGEwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EygxMDNhNWRiOWRlZTkzMmQ3YjY5NDQyYjAzZWE3NDM5ZGIyZTE5Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOTXVl4+o1hS7n2GSAymqYKiMigj 05zE7TAGVaXeD62hSWElb8iinVZaBsC2X5mcRP7ahXTxleWXxOTGiVofnl3oD6kD qgGV1oQYeM8VIZUkXfTKog5p2Ywe5Wm1nz7Y69IMT2AnmIWR/1tBFGf7f56ktYcE 1uyNEtwoiTfGjgVCQSEUDKqZHPo6LLxVuD13zybEEH1nJv1kFTqS/yH/fkuA9V2E qOEUXyyiP8iKHpGxRH24pnQl1EqutZqsr+nB3pPCNFqyH/pQgbLPTewB+Q1RuHYO 7FGVlbx8qVwAg8QtsVkPnGAb8+D1aY5hbACB3sFG0Fzlc7CalW3lVbj7GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA6Xbne6TLXtpRCsD6nQ52y4ZOUMB8GA1UdIwQY MBaAFNG/F2r426MP7zJTZe80BIEs4thKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMt ZmQ1NTkyNDJkNDcxLzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMtZmQ1NTkyNDJkNDcx LzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlALGqX5+ glEKmsqhO3krC7hM6aMdnE7iiojAMqIqzq8ZiKKexaywEiJ6kB/IcvfzJF6Jt3so B7A4O/Vzm0KelSQzOclhWD9nNt13xHy9ncCa8pPsm0q177Z5hdNY1zdZDD5tUQ+c FlH76FZLFYhv6F3St7aMYgR8urecEDkg06QiyVwbYKSiN6G7CszeMTIv58W7xnOQ f6Tc8Yf1sv8kCeRV971HI3dSuwQ1vloiD7lzE6RFxFFTytzq+jGQnwss5cPW56HY LjQ7RCBZmnWATkn1LKlgc7UE9ECTJjNI1YRCdYk+Ng1lvNV3aDXiTiQPi2czjp5r E+iCvWCFBAHdDg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:27 2025 by rpki-client