This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json) Hash identifier: QCVhbihUzwTOSYXKX6JVCArxETQz6am7PC5LTgo1JFk= Subject key identifier: 3E:32:3D:81:91:C1:E6:D9:AF:46:EB:8A:F0:AB:B7:DC:22:D2:6A:C3 Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Certificate serial: 019B3042F9185C5226DE42B97E7D7FD00DAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft Manifest number: 174B Signing time: Thu 18 Dec 2025 07:00:53 +0000 Manifest this update: Thu 18 Dec 2025 07:00:53 +0000 Manifest next update: Fri 19 Dec 2025 07:00:53 +0000 Files and hashes: 1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=) 2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: MyrKMqQpBrbd1lOBwJ4Uhx4PqPqLcUwIwX3O4fViqlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:f9:18:5c:52:26:de:42:b9:7e:7d:7f:d0:0d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Validity Not Before: Dec 18 07:00:53 2025 GMT Not After : Dec 19 07:00:53 2025 GMT Subject: CN=3e323d8191c1e6d9af46eb8af0abb7dc22d26ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:7d:eb:f2:20:31:04:18:c1:c4:8a:b9:ff: 78:7e:dc:77:07:3e:92:5a:49:cc:db:3f:2f:d7:71: 82:89:02:08:a3:ff:17:14:44:2a:e2:b8:5b:38:0c: c7:b6:b1:be:21:a8:bb:c2:39:6d:b3:c9:6f:6c:9e: 6b:3e:92:bb:4d:b5:f5:ca:e3:ba:44:0d:3c:85:9b: 6e:90:4d:a6:2a:5c:03:b4:b6:a2:e5:23:8f:e7:6f: 99:dc:d7:19:49:bd:2e:25:43:a4:30:60:84:c1:00: e7:6e:54:53:f8:d7:bd:7c:86:3d:de:c6:72:f2:36: 85:03:66:69:a9:99:c1:1a:a1:5d:10:90:9d:44:fc: 1d:91:48:ca:07:73:f0:b2:65:20:21:61:a9:79:99: 82:2b:bd:4d:12:80:af:75:15:f0:41:0f:38:93:c6: b6:62:8a:11:c4:06:7e:d9:de:a4:43:51:d3:98:65: d2:cb:9e:c3:02:63:37:ea:cf:39:a5:4d:d7:73:3b: 36:34:e2:9b:49:4d:f8:cc:0a:07:32:e7:da:5e:8e: 2d:ad:41:e6:41:33:0e:15:50:7b:a5:44:c9:d5:07: 2a:6f:4b:f8:2d:82:eb:63:cb:7d:e0:e2:a6:1c:b9: 14:53:9e:cc:cd:07:31:e5:63:77:91:9c:24:f2:e8: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:32:3D:81:91:C1:E6:D9:AF:46:EB:8A:F0:AB:B7:DC:22:D2:6A:C3 X509v3 Authority Key Identifier: keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:39:e9:95:10:89:43:ce:f1:ab:10:df:9c:0f:4a:b7:f3:26: d8:cc:fb:c0:a2:c1:d6:4d:84:a7:d5:8d:2c:c8:6f:c6:2c:6f: be:6d:b4:f9:3f:c7:d9:2c:12:9e:20:0f:5c:bf:ce:ec:65:55: ca:d7:bb:52:7f:96:95:84:81:1f:7e:99:43:bf:1b:33:b3:01: 73:2f:e5:fb:a0:94:44:ff:01:f2:45:e0:fc:36:10:fd:b6:a1: 26:f3:f3:cc:fa:1c:40:5d:a9:f4:7f:30:f4:ef:4b:c7:4e:57: de:d4:ef:61:e4:6f:a0:00:92:03:8c:27:6c:a7:a5:b5:60:8d: 4f:6d:9f:77:59:c2:f2:d5:1d:28:56:c5:ff:2a:3e:8f:21:6e: 81:26:db:47:8f:bb:40:50:c5:c6:66:b6:e5:6f:36:6e:11:31: ed:f7:f7:fe:68:a4:7d:f8:cc:dd:22:ee:18:e1:19:3f:a3:f9: 4d:19:16:0a:68:98:87:f9:e0:c6:a9:31:32:18:b1:87:cd:e2: f0:46:e8:7b:0b:5c:ef:ab:e8:6a:b6:83:55:33:39:e1:32:bb: ee:4c:ad:b8:cd:8c:15:68:ee:f7:ae:68:c6:7b:66:c8:53:30: 2a:df:73:9d:53:d5:c0:54:58:0d:0e:7c:f7:a9:ce:d9:6c:a2: d2:e2:a4:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQvkYXFIm3kK5fn1/0A2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZmEzY2FkY2E0ZTEzMWEwZmJlMWI5ZTQwZGJhMzgzODMz Y2Y0OGEwHhcNMjUxMjE4MDcwMDUzWhcNMjUxMjE5MDcwMDUzWjAzMTEwLwYDVQQD EygzZTMyM2Q4MTkxYzFlNmQ5YWY0NmViOGFmMGFiYjdkYzIyZDI2YWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml196/IgMQQYwcSKuf94ftx3Bz6S WknM2z8v13GCiQIIo/8XFEQq4rhbOAzHtrG+Iai7wjlts8lvbJ5rPpK7TbX1yuO6 RA08hZtukE2mKlwDtLai5SOP52+Z3NcZSb0uJUOkMGCEwQDnblRT+Ne9fIY93sZy 8jaFA2ZpqZnBGqFdEJCdRPwdkUjKB3PwsmUgIWGpeZmCK71NEoCvdRXwQQ84k8a2 YooRxAZ+2d6kQ1HTmGXSy57DAmM36s85pU3Xczs2NOKbSU34zAoHMufaXo4trUHm QTMOFVB7pUTJ1Qcqb0v4LYLrY8t94OKmHLkUU57MzQcx5WN3kZwk8uiZ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4yPYGRwebZr0brivCrt9wi0mrDMB8GA1UdIwQY MBaAFMf6PK3KThMaD74bnkDbo4ODPPSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYt ZjFkNDU2ODY5Zjk3LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYtZjFkNDU2ODY5Zjk3 LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoznplRCJ Q87xqxDfnA9Kt/Mm2Mz7wKLB1k2Ep9WNLMhvxixvvm20+T/H2SwSniAPXL/O7GVV yte7Un+WlYSBH36ZQ78bM7MBcy/l+6CURP8B8kXg/DYQ/bahJvPzzPocQF2p9H8w 9O9Lx05X3tTvYeRvoACSA4wnbKeltWCNT22fd1nC8tUdKFbF/yo+jyFugSbbR4+7 QFDFxma25W82bhEx7ff3/mikffjM3SLuGOEZP6P5TRkWCmiYh/ngxqkxMhixh83i 8Eboewtc76voaraDVTM54TK77kytuM2MFWju965oxntmyFMwKt9znVPVwFRYDQ58 96nO2Wyi0uKkCw== -----END CERTIFICATE-----Generated at Thu Dec 18 16:13:35 2025 by rpki-client