This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json) Hash identifier: neMly/n0BfSCUX7pUth8wqoEAS7C8Bo1yspfCqx/A+Q= Subject key identifier: FC:AB:6A:9B:D1:A0:01:FD:64:8F:09:74:AB:5A:C9:30:B5:46:D4:EF Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Certificate serial: 019AF2772FD4C01B54A12DC6A0F5FBF2D218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft Manifest number: 172B Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=) 2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: VE3NOG1eel0Mn9zLvpjumCpUIX61ocK1+9o9lSGaeV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2f:d4:c0:1b:54:a1:2d:c6:a0:f5:fb:f2:d2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=fcab6a9bd1a001fd648f0974ab5ac930b546d4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:1a:72:8a:86:c5:7f:9d:a9:22:30:c4:b5: 98:ae:00:d6:9b:f8:91:fd:4c:28:39:87:37:e8:e3: 0c:ac:24:bf:ad:07:94:bd:25:b3:0b:8d:0e:f3:11: 17:36:1e:1c:f9:5f:14:98:67:9f:e8:66:a9:11:72: ae:98:b9:57:dd:7d:36:9e:af:9d:ae:b9:fb:f8:dd: 64:62:a3:e3:6a:ec:a8:c8:c6:3c:63:8c:b0:bf:cc: 65:0d:d9:be:ff:eb:76:32:fc:39:93:7c:b6:ca:7e: a3:29:fa:cf:61:36:d6:3c:c7:c8:a4:ce:a5:f3:b6: 58:88:7f:e6:e8:d7:91:d7:e9:ad:ba:fa:59:3c:28: 0d:ab:3c:f2:f2:80:32:3e:a6:a4:92:76:34:51:ee: 70:7d:22:23:c5:c6:78:b5:d2:aa:db:44:b2:a1:26: de:e8:94:d4:35:a8:ed:62:80:49:54:3c:90:04:a3: 43:35:15:19:81:fa:30:27:e4:e9:3c:2e:34:f4:7b: 4f:69:43:5c:7c:13:a9:c2:d8:ec:39:83:04:9d:93: 97:0b:e9:cd:f4:72:37:cb:02:f2:c6:06:f2:f9:e8: 89:4e:40:4f:e4:86:00:cf:57:49:32:d8:33:4d:c4: b5:b5:00:c5:9e:d8:60:26:b7:cd:61:61:79:ee:c0: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AB:6A:9B:D1:A0:01:FD:64:8F:09:74:AB:5A:C9:30:B5:46:D4:EF X509v3 Authority Key Identifier: keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:46:0d:71:9b:80:03:98:0f:18:e8:b8:c6:ed:c7:dc:fb:72: 82:33:fa:8a:a6:93:45:aa:01:41:f0:1c:fa:90:f3:a8:7e:82: 3d:7f:b8:04:6e:2b:17:75:c5:9a:1e:95:a6:9e:da:b6:83:c9: 92:c9:d1:c5:f5:70:96:05:2a:a8:ff:4d:42:05:89:40:80:9c: 8d:a2:39:af:a0:ed:78:54:57:80:7e:e4:99:69:fb:7b:d4:4e: cd:6e:62:ad:4a:2c:d2:06:66:5f:b8:ac:cb:9e:44:1a:5e:38: f2:fd:8b:ad:19:b7:45:f1:3d:43:52:6e:2b:24:4c:d6:8a:0f: 44:4e:64:d2:ee:b2:6a:82:3a:15:90:4f:59:22:4d:2f:3f:f3: 31:ce:c7:53:fd:52:b1:d9:6d:23:8f:5a:3e:2f:33:bf:60:39: 68:f9:47:0d:59:dd:ad:65:0d:02:a8:5c:85:e3:bc:53:92:a6: e9:cf:3d:7a:cf:36:88:b9:65:f1:16:2e:dd:f2:d9:da:fb:fc: d8:4e:80:c8:6f:27:45:8c:9e:4f:3a:08:52:e5:a4:e1:4b:93: b6:bd:74:77:c4:4d:9f:de:66:91:33:22:1c:bf:bf:5e:fd:47: 88:b8:94:fa:37:42:f6:e2:c0:f7:27:9d:42:cc:ef:f0:e1:f5: 5b:ca:e5:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy/UwBtUoS3GoPX78tIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZmEzY2FkY2E0ZTEzMWEwZmJlMWI5ZTQwZGJhMzgzODMz Y2Y0OGEwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EyhmY2FiNmE5YmQxYTAwMWZkNjQ4ZjA5NzRhYjVhYzkzMGI1NDZkNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmYacoqGxX+dqSIwxLWYrgDWm/iR /UwoOYc36OMMrCS/rQeUvSWzC40O8xEXNh4c+V8UmGef6GapEXKumLlX3X02nq+d rrn7+N1kYqPjauyoyMY8Y4ywv8xlDdm+/+t2Mvw5k3y2yn6jKfrPYTbWPMfIpM6l 87ZYiH/m6NeR1+mtuvpZPCgNqzzy8oAyPqakknY0Ue5wfSIjxcZ4tdKq20SyoSbe 6JTUNajtYoBJVDyQBKNDNRUZgfowJ+TpPC409HtPaUNcfBOpwtjsOYMEnZOXC+nN 9HI3ywLyxgby+eiJTkBP5IYAz1dJMtgzTcS1tQDFnthgJrfNYWF57sDI5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyrapvRoAH9ZI8JdKtayTC1RtTvMB8GA1UdIwQY MBaAFMf6PK3KThMaD74bnkDbo4ODPPSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYt ZjFkNDU2ODY5Zjk3LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYtZjFkNDU2ODY5Zjk3 LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkYNcZuA A5gPGOi4xu3H3PtygjP6iqaTRaoBQfAc+pDzqH6CPX+4BG4rF3XFmh6Vpp7atoPJ ksnRxfVwlgUqqP9NQgWJQICcjaI5r6DteFRXgH7kmWn7e9ROzW5irUos0gZmX7is y55EGl448v2LrRm3RfE9Q1JuKyRM1ooPRE5k0u6yaoI6FZBPWSJNLz/zMc7HU/1S sdltI49aPi8zv2A5aPlHDVndrWUNAqhcheO8U5Km6c89es82iLll8RYu3fLZ2vv8 2E6AyG8nRYyeTzoIUuWk4UuTtr10d8RNn95mkTMiHL+/Xv1HiLiU+jdC9uLA9yed Qszv8OH1W8rlNw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:12:13 2025 by rpki-client