This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json) Hash identifier: PHejBDw8Ebq+KOAdC0k0L7kNhyOpmlXNThXdZTwqTOI= Subject key identifier: 78:F2:CC:DD:01:C6:90:73:7A:41:FF:46:BC:95:2C:10:1F:FE:79:41 Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c Certificate serial: 019AF1D187711E999B60E671732565122C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: 1-9Z39awtCUNqeCcuYwIOQubEoEY.roa (hash: AJvelHrJ42adBWeCqNbgdbqaGB/A4YMI32J/x3+LlBI=) 2: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: zfy17ezwlEw/Y1Zg5okmMO9u6UY8Oalw2S01IStmYqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:87:71:1e:99:9b:60:e6:71:73:25:65:12:2c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=78f2ccdd01c690737a41ff46bc952c101ffe7941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:b6:ff:be:b1:46:d9:15:cc:0b:bd:8e:15: 9e:b4:6a:3a:64:41:51:5d:0f:47:f2:17:b9:a3:66: fe:0b:2c:7d:dd:90:c4:b2:4c:e3:c4:3f:3c:bb:35: fe:d1:02:6f:db:36:0c:25:de:65:8f:62:50:13:e3: 79:a0:4c:a6:dd:d9:6f:f9:41:32:be:6f:78:a4:47: ad:b1:86:26:6f:b3:c5:e8:40:cc:f7:16:94:cb:fc: 23:e7:ee:56:cd:2b:32:05:87:f0:cd:39:48:2a:cb: 6a:e6:03:5d:39:da:96:a8:fa:5b:a9:c7:aa:10:69: e9:79:39:39:b9:39:f0:91:20:40:86:db:e3:46:a0: dc:71:8e:a9:b8:34:62:a9:43:02:1f:f5:5f:17:57: fa:8e:79:4e:b9:8f:25:39:39:23:28:6a:55:3c:bf: c6:85:2f:59:7c:33:19:55:b6:2e:3b:51:b3:4f:40: 40:8d:6c:e7:e1:e8:de:05:6c:12:af:e9:75:7f:d0: e1:1c:b4:31:3a:b5:a7:1f:02:b1:f9:7e:26:0d:3e: 55:af:e7:e2:3f:30:13:06:70:59:e4:07:b8:60:18: 7d:6f:23:ca:27:97:3c:04:32:8c:89:c1:0f:9a:6a: 9e:b4:ea:6a:dc:19:df:8d:c9:9b:1a:9d:91:cd:4e: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F2:CC:DD:01:C6:90:73:7A:41:FF:46:BC:95:2C:10:1F:FE:79:41 X509v3 Authority Key Identifier: keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:38:db:42:84:c9:07:12:f1:e1:cf:50:f2:a9:94:fa:32:21: 27:5b:05:24:7f:e5:77:15:52:51:53:6b:29:84:a2:cb:42:cd: f2:4d:de:20:d3:dc:23:da:ce:28:d3:0a:24:bb:74:51:55:25: bb:e9:8c:18:0e:07:26:45:29:70:f6:7c:bf:6d:34:66:1d:26: c3:41:f4:92:fc:d6:7e:8d:78:d6:9b:cb:e9:3f:da:60:22:4c: 32:b9:48:62:5d:19:81:ad:83:b5:da:c9:73:20:84:8b:0a:bf: 33:56:db:3e:e9:aa:c0:54:d2:1f:2c:f7:a2:8c:81:67:92:e3: 96:c7:61:54:ab:e7:bc:b0:14:7d:45:a7:88:e9:f7:b2:18:7c: 2b:71:61:fd:f8:50:95:51:32:e6:0d:0f:45:79:1c:b7:38:1d: 4c:09:67:bd:83:05:44:e9:17:e1:05:48:0f:31:12:5a:d1:e0: 57:c3:b6:3d:6e:48:b8:e9:be:11:27:05:f5:3c:01:db:09:b1: ac:0b:8d:82:51:66:db:1a:8f:4f:6b:17:2b:09:b1:82:76:ea: 54:57:1f:0f:88:fb:04:b5:6d:6a:af:11:d8:e7:59:a7:5d:6a: 9a:99:6c:e3:36:cb:5a:c8:f7:5c:1c:dc:fe:80:b0:cd:59:41: 3c:d7:42:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YdxHpmbYOZxcyVlEiwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzk2M2QxYTExZDAwZDM4NGFkZWRmOWJiODZlNTM4NDlh OWIxOGMwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD Eyg3OGYyY2NkZDAxYzY5MDczN2E0MWZmNDZiYzk1MmMxMDFmZmU3OTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Um2/76xRtkVzAu9jhWetGo6ZEFR XQ9H8he5o2b+Cyx93ZDEskzjxD88uzX+0QJv2zYMJd5lj2JQE+N5oEym3dlv+UEy vm94pEetsYYmb7PF6EDM9xaUy/wj5+5WzSsyBYfwzTlIKstq5gNdOdqWqPpbqceq EGnpeTk5uTnwkSBAhtvjRqDccY6puDRiqUMCH/VfF1f6jnlOuY8lOTkjKGpVPL/G hS9ZfDMZVbYuO1GzT0BAjWzn4ejeBWwSr+l1f9DhHLQxOrWnHwKx+X4mDT5Vr+fi PzATBnBZ5Ae4YBh9byPKJ5c8BDKMicEPmmqetOpq3BnfjcmbGp2RzU4wqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjyzN0BxpBzekH/RryVLBAf/nlBMB8GA1UdIwQY MBaAFKPJY9GhHQDThK3t+buG5ThJqbGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mYzUyYTAtZTBmNy00ODBiLWJhN2Qt MTA0MmVhOGUzYmZiLzEvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mYzUyYTAtZTBmNy00ODBiLWJhN2QtMTA0MmVhOGUzYmZi LzEvbzhsajBhRWRBTk9FcmUzNXU0YmxPRW1wc1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODjbQoTJ BxLx4c9Q8qmU+jIhJ1sFJH/ldxVSUVNrKYSiy0LN8k3eINPcI9rOKNMKJLt0UVUl u+mMGA4HJkUpcPZ8v200Zh0mw0H0kvzWfo141pvL6T/aYCJMMrlIYl0Zga2DtdrJ cyCEiwq/M1bbPumqwFTSHyz3ooyBZ5LjlsdhVKvnvLAUfUWniOn3shh8K3Fh/fhQ lVEy5g0PRXkctzgdTAlnvYMFROkX4QVIDzESWtHgV8O2PW5IuOm+EScF9TwB2wmx rAuNglFm2xqPT2sXKwmxgnbqVFcfD4j7BLVtaq8R2OdZp11qmpls4zbLWsj3XBzc /oCwzVlBPNdCkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:34 2025 by rpki-client