This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json) Hash identifier: BBQElhi/mqx+WyZW0Tt2qBs15f17E7Rl3JJO346zA5w= Subject key identifier: 4E:23:65:81:E6:4D:77:C2:5B:C0:F3:83:9C:1D:16:3C:6F:85:9E:3D Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04 Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004 Certificate serial: 019AF1D23C58CB248DF33D7EB015159CF0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft Manifest number: 102C Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: Hhy7I69yi8wlIYvlDegK4URVYSa/VEPrVrXjK6zpCh4=) 2: m7fQ-cMMDdeyLl0RJP3A0VDHgVE.roa (hash: rB/+iXy3MWnMmudzmSTexHxDroAo7zhjaO5iq26LcWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3c:58:cb:24:8d:f3:3d:7e:b0:15:15:9c:f0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=4e236581e64d77c25bc0f3839c1d163c6f859e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:2a:2c:18:9e:d3:1e:a1:6a:14:f3:70:09: 1a:38:96:3d:36:09:f8:cc:32:7d:42:8d:50:a2:39: 8b:9b:e5:15:62:de:e4:b3:59:11:a0:e8:e4:8f:cd: 91:3f:ed:b7:c1:0a:e9:2e:ea:c5:fb:70:b4:04:b5: 9c:9b:00:32:22:eb:bd:cc:71:6a:0d:93:bb:b3:10: b9:bd:ba:43:8f:1e:4e:4d:2d:b5:6e:43:c7:20:19: 10:c9:16:f5:d6:b2:59:b1:63:9d:58:39:fa:5d:e5: 8b:4c:d3:1d:5d:51:d0:0e:40:d3:58:12:0e:0a:8e: f1:de:a8:5c:8d:50:95:0d:a0:e9:7b:89:39:cd:eb: 5e:9a:66:08:2e:6e:64:49:1a:e8:ff:e1:23:b3:a5: 12:dc:db:c6:36:bb:c5:69:b9:82:57:81:74:38:56: 67:8d:80:5d:73:7c:52:a9:86:76:30:4d:58:bc:f4: c9:90:f8:50:b0:9f:76:ee:fb:0c:f0:cc:e4:da:4a: 7d:8b:4b:fb:7c:19:3b:06:c7:de:36:1a:9b:20:6e: 7e:4b:12:b7:c4:dd:7c:5c:44:eb:d7:c1:e5:87:32: fa:d4:23:dc:78:e1:7b:1a:c1:07:cd:58:ef:69:42: e0:56:a7:17:65:b0:0e:e6:d2:2b:86:b3:b2:11:d1: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:23:65:81:E6:4D:77:C2:5B:C0:F3:83:9C:1D:16:3C:6F:85:9E:3D X509v3 Authority Key Identifier: keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:60:dc:4c:f4:6a:24:62:c2:fa:87:bf:03:01:e6:9d:f9:eb: 6a:cc:d4:d6:73:e0:1d:c4:76:28:76:ec:cf:b3:e8:24:90:72: 06:e8:a2:98:15:c2:f4:f2:fc:6f:8e:80:7d:e5:1b:6e:f7:8c: 2d:c2:73:3e:84:57:63:5b:d9:e3:de:93:5d:49:18:cb:ce:40: 46:67:ff:13:ab:20:af:1f:9d:3d:1f:fa:6f:ca:c2:1e:57:f3: e2:f5:9e:18:de:bb:81:b8:a5:c8:31:62:14:f2:1f:1c:ea:6e: 71:6f:b4:bd:4d:a5:b4:e9:1f:0b:e9:fc:35:b1:97:38:86:d3: 15:58:d6:9f:f6:ff:ed:64:b7:06:b9:ce:6b:67:6a:b3:b1:66: eb:5a:1b:8e:a3:94:71:a0:4f:a8:07:ea:f2:94:ea:2e:d1:be: ac:75:a6:16:3b:ab:6d:49:45:42:af:86:57:d7:81:17:46:be: 23:9a:d6:e0:2a:ca:08:d6:26:4e:91:db:54:82:93:ff:c0:38: 52:58:fb:b1:c3:2c:e3:27:74:4a:76:ba:d2:e6:3e:ee:fa:94: 2f:cf:fe:32:5b:1d:a1:ca:33:c2:5c:1e:fa:ab:b4:31:99:10: 1a:33:5c:a5:99:2b:e0:7a:8c:47:ae:d9:3d:2c:aa:49:79:ea: 94:0b:eb:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jxYyySN8z1+sBUVnPCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOGM2OWRhOTRjODVlZGQ0OGQ5YzFmZDhlMzMyYWUzYmVl NjYwMDQwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg0ZTIzNjU4MWU2NGQ3N2MyNWJjMGYzODM5YzFkMTYzYzZmODU5ZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGAqLBie0x6hahTzcAkaOJY9Ngn4 zDJ9Qo1QojmLm+UVYt7ks1kRoOjkj82RP+23wQrpLurF+3C0BLWcmwAyIuu9zHFq DZO7sxC5vbpDjx5OTS21bkPHIBkQyRb11rJZsWOdWDn6XeWLTNMdXVHQDkDTWBIO Co7x3qhcjVCVDaDpe4k5zetemmYILm5kSRro/+Ejs6US3NvGNrvFabmCV4F0OFZn jYBdc3xSqYZ2ME1YvPTJkPhQsJ927vsM8Mzk2kp9i0v7fBk7BsfeNhqbIG5+SxK3 xN18XETr18HlhzL61CPceOF7GsEHzVjvaULgVqcXZbAO5tIrhrOyEdHLwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4jZYHmTXfCW8Dzg5wdFjxvhZ49MB8GA1UdIwQY MBaAFPKMadqUyF7dSNnB/Y4zKuO+5mAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEt YTkwMmIwMDk2Yjk5LzEvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEtYTkwMmIwMDk2Yjk5 LzEvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWDcTPRq JGLC+oe/AwHmnfnraszU1nPgHcR2KHbsz7PoJJByBuiimBXC9PL8b46AfeUbbveM LcJzPoRXY1vZ496TXUkYy85ARmf/E6sgrx+dPR/6b8rCHlfz4vWeGN67gbilyDFi FPIfHOpucW+0vU2ltOkfC+n8NbGXOIbTFVjWn/b/7WS3BrnOa2dqs7Fm61objqOU caBPqAfq8pTqLtG+rHWmFjurbUlFQq+GV9eBF0a+I5rW4CrKCNYmTpHbVIKT/8A4 Ulj7scMs4yd0Sna60uY+7vqUL8/+Mlsdocozwlwe+qu0MZkQGjNcpZkr4HqMR67Z PSyqSXnqlAvrCA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:33 2025 by rpki-client