This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json) Hash identifier: Txw7G875DUHlxMdd9MD62mLewqebKFLopUL3T3/O1PI= Subject key identifier: AA:06:34:82:24:C4:67:21:7A:3D:BF:38:60:7D:96:F7:FF:DD:2F:8C Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab Certificate serial: 019AF3F7CBC3340B46566AC7F95B732C9633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft Manifest number: 0DEE Signing time: Sat 06 Dec 2025 14:01:34 +0000 Manifest this update: Sat 06 Dec 2025 14:01:34 +0000 Manifest next update: Sun 07 Dec 2025 14:01:34 +0000 Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: Q+AaesyLzXc7oVyVKq5tee2DyXYhkoM0oav/Y5YxoAw=) 2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:cb:c3:34:0b:46:56:6a:c7:f9:5b:73:2c:96:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab Validity Not Before: Dec 6 14:01:34 2025 GMT Not After : Dec 7 14:01:34 2025 GMT Subject: CN=aa06348224c467217a3dbf38607d96f7ffdd2f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:81:a1:3f:95:0c:7d:e3:d9:a1:26:7d:f5: 1a:b1:0e:d7:4e:87:61:3e:d9:d1:23:65:88:f5:55: be:55:14:7e:7c:c2:f1:5f:3a:89:54:e0:f7:ac:ab: b8:89:f5:a7:b0:9f:e5:a5:3e:97:da:cc:ba:1a:e4: c6:f4:a6:02:d5:20:34:2c:f3:dc:6e:e5:16:b3:76: 0e:d4:be:4c:31:2a:41:f4:d5:1b:23:38:16:b2:4d: ea:81:36:44:fa:8d:0b:75:62:d9:d7:33:1b:77:eb: 91:5e:2c:6a:c3:8d:87:90:2c:b7:34:3c:ca:eb:29: 51:fd:73:9f:67:df:79:69:74:7b:78:55:0b:aa:67: 91:c3:ac:01:17:22:8e:a7:6c:9b:2a:42:2c:81:ec: a2:cd:fd:1b:c2:60:35:c7:ba:8c:ab:cb:06:17:02: 73:f9:6e:e6:2f:d9:49:d6:31:b2:4e:af:66:24:39: cd:10:73:4a:6f:54:7b:f2:68:06:ca:59:c1:39:7d: 43:7d:56:9d:f4:b7:9e:d3:eb:ff:e6:91:8d:0a:73: 81:51:60:85:fb:00:d1:0b:5e:51:3f:85:5c:2c:42: 74:e3:3f:33:fc:8e:6c:09:cd:66:0b:4f:81:2d:60: b6:0a:cc:45:94:b6:02:c2:a9:30:98:ca:81:f8:8f: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:34:82:24:C4:67:21:7A:3D:BF:38:60:7D:96:F7:FF:DD:2F:8C X509v3 Authority Key Identifier: keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1c:a8:43:18:be:f9:de:b2:21:36:a1:11:ed:d7:d1:dc:8c: aa:21:aa:4e:70:d7:63:1f:38:e9:d1:2c:1d:7f:c2:9e:58:3b: 46:3e:fb:25:ac:da:e7:7d:43:75:3d:4c:61:91:c1:04:c1:74: 47:d8:f7:73:af:36:8f:a4:f8:1f:de:78:fb:3c:85:25:ee:3d: 2d:f1:0c:1f:2b:e8:01:2a:90:3e:ea:8c:35:b5:c3:4b:7b:ae: 33:b6:0e:a4:7b:e3:52:63:2a:5f:d3:41:d8:ca:4c:66:72:03: fe:9c:47:81:e9:16:03:d5:e8:8a:df:82:5e:76:6f:1d:09:2d: d1:cb:ba:b1:95:26:46:a9:7d:23:75:6a:e2:45:74:ad:3a:03: 80:00:79:26:bf:7e:b9:4d:4a:46:09:5e:e8:cc:de:0e:7c:59: e2:8c:54:e5:93:0f:bd:28:b2:48:19:fe:ca:f6:50:54:e6:dc: 53:ee:01:74:57:04:78:5e:b7:f0:05:e5:bc:0a:4c:24:ad:b9: c2:40:56:d9:17:1a:7f:5e:82:7d:d6:9b:d8:2f:2b:bb:13:43: 15:cc:d7:66:8d:be:1d:6d:d3:76:3c:bf:d9:70:b8:e7:7d:ee: 32:67:eb:e7:56:9c:f2:36:a0:23:f1:3e:f0:a5:f8:1e:09:70: 4b:e0:7e:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98vDNAtGVmrH+VtzLJYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZWYxMjkwY2YzOGI0ZjZlMDE4M2U3ZTRiZjg3YWM2N2Ex MmQ3YWIwHhcNMjUxMjA2MTQwMTM0WhcNMjUxMjA3MTQwMTM0WjAzMTEwLwYDVQQD EyhhYTA2MzQ4MjI0YzQ2NzIxN2EzZGJmMzg2MDdkOTZmN2ZmZGQyZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTSBoT+VDH3j2aEmffUasQ7XTodh PtnRI2WI9VW+VRR+fMLxXzqJVOD3rKu4ifWnsJ/lpT6X2sy6GuTG9KYC1SA0LPPc buUWs3YO1L5MMSpB9NUbIzgWsk3qgTZE+o0LdWLZ1zMbd+uRXixqw42HkCy3NDzK 6ylR/XOfZ995aXR7eFULqmeRw6wBFyKOp2ybKkIsgeyizf0bwmA1x7qMq8sGFwJz +W7mL9lJ1jGyTq9mJDnNEHNKb1R78mgGylnBOX1DfVad9Lee0+v/5pGNCnOBUWCF +wDRC15RP4VcLEJ04z8z/I5sCc1mC0+BLWC2CsxFlLYCwqkwmMqB+I+BwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoGNIIkxGchej2/OGB9lvf/3S+MMB8GA1UdIwQY MBaAFNjvEpDPOLT24Bg+fkv4esZ6EterMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmIt NDhlNmYyNjBmYmE1LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmItNDhlNmYyNjBmYmE1 LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxyoQxi+ +d6yITahEe3X0dyMqiGqTnDXYx846dEsHX/Cnlg7Rj77Jaza531DdT1MYZHBBMF0 R9j3c682j6T4H954+zyFJe49LfEMHyvoASqQPuqMNbXDS3uuM7YOpHvjUmMqX9NB 2MpMZnID/pxHgekWA9Xoit+CXnZvHQkt0cu6sZUmRql9I3Vq4kV0rToDgAB5Jr9+ uU1KRgle6MzeDnxZ4oxU5ZMPvSiySBn+yvZQVObcU+4BdFcEeF638AXlvApMJK25 wkBW2Rcaf16Cfdab2C8ruxNDFczXZo2+HW3Tdjy/2XC4533uMmfr51ac8jagI/E+ 8KX4HglwS+B+7g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:43 2025 by rpki-client