This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json) Hash identifier: RPXlIKmgY2y+55FAILW0y2BwUxQr9r7AWIzW6E2g28Y= Subject key identifier: F1:F0:CC:2E:06:7A:F7:04:D4:FC:EC:5D:2E:AF:29:B7:D3:4C:90:51 Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Certificate serial: 019AFB430426FA19836E62C80496622D7977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft Manifest number: 0228 Signing time: Mon 08 Dec 2025 00:01:04 +0000 Manifest this update: Mon 08 Dec 2025 00:01:04 +0000 Manifest next update: Tue 09 Dec 2025 00:01:04 +0000 Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: HGaQ1gfKFfWC1uI7cCmrGhh6rBNGZZtpWytY5q7DEaE=) 2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:04:26:fa:19:83:6e:62:c8:04:96:62:2d:79:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Validity Not Before: Dec 8 00:01:04 2025 GMT Not After : Dec 9 00:01:04 2025 GMT Subject: CN=f1f0cc2e067af704d4fcec5d2eaf29b7d34c9051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:00:ea:3c:46:c7:e2:c0:50:dd:0f:3f:ce: 91:00:10:b5:bb:ba:57:00:21:41:86:89:44:40:eb: 1d:c0:cd:a1:4c:03:49:c8:32:84:43:e5:e3:3d:a2: ad:ea:c2:e3:ad:6b:33:cd:15:fe:88:9b:42:65:cb: c6:1c:9f:a2:85:35:4c:90:a7:c8:59:57:ef:67:97: 8d:f7:7a:7b:de:3d:a8:cc:a8:8e:37:f9:9c:56:8b: 13:c1:35:fe:e6:f9:c7:af:69:0e:be:c0:a4:81:40: e9:87:b5:4c:60:ab:d5:ef:50:90:96:49:36:a9:1e: ea:5b:f9:a5:70:4a:93:bd:99:cd:00:61:6a:b7:f5: 48:9a:08:5e:ac:1c:24:ca:b4:de:cd:9f:2c:3d:f8: e2:da:7f:be:aa:d7:9a:a0:84:6f:ea:5d:df:c5:a8: 55:d5:97:63:dd:de:2e:c6:65:b6:8b:d4:f7:b7:50: a6:ec:59:f1:79:41:ab:0c:76:b3:81:3b:e7:ff:fb: 85:17:f3:88:6e:54:16:55:c2:bb:57:2b:8d:78:a8: 63:71:37:d0:d8:ad:83:c6:be:dd:d4:6d:3d:2a:a8: 4f:f0:2f:e1:95:ce:06:3c:20:21:7e:bb:c0:b5:9c: 04:10:09:4e:1e:28:34:c4:50:6a:c6:20:2b:5a:6f: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F0:CC:2E:06:7A:F7:04:D4:FC:EC:5D:2E:AF:29:B7:D3:4C:90:51 X509v3 Authority Key Identifier: keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:29:e1:d3:4a:f4:d5:de:90:47:d1:27:9e:96:2c:89:8b:55: 2c:7c:ac:ee:71:55:ab:8d:bf:8d:fe:07:44:ad:0e:34:5b:92: 6b:79:bd:a4:45:0e:48:b0:37:e6:b7:9b:68:4c:4b:ce:32:9d: 96:52:b3:19:48:66:4c:06:aa:b0:2e:b8:14:76:cf:82:98:ec: 2c:3c:e0:35:34:53:8c:39:e0:22:89:fb:f9:91:2c:1d:3f:da: 7e:7e:92:97:ef:37:91:57:73:6e:f1:15:5f:26:07:bb:5c:f5: d1:7b:79:43:ad:26:1e:d7:23:00:83:64:5c:09:f8:da:73:83: d8:a1:8c:2c:d3:83:e9:e6:d4:a3:08:e7:23:e7:f7:e4:35:4a: e3:15:67:2e:28:37:73:c2:f1:32:12:c4:4c:1f:9a:8a:46:92: 91:3b:45:2b:fb:4d:6f:0f:62:f1:00:5f:5d:c6:2d:4f:35:4c: fd:6e:e7:03:b2:c5:40:d5:a9:47:b4:40:84:70:37:48:55:68: 84:4e:32:b8:24:bf:c5:1b:07:cf:e1:af:8e:0e:e5:b2:24:d9: 6f:56:5a:f4:e5:ec:37:a2:e4:89:06:32:3c:cd:35:e1:c1:77: c3:13:ad:2d:c1:33:04:f8:1e:ef:d5:3b:3b:3d:60:8a:39:e8: 6f:b0:0c:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QwQm+hmDbmLIBJZiLXl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGYwZTBhOGUwMGYxYTZkOGMxYzI2NmUzZjQzNmQ0NmU3 MWU4NzcwHhcNMjUxMjA4MDAwMTA0WhcNMjUxMjA5MDAwMTA0WjAzMTEwLwYDVQQD EyhmMWYwY2MyZTA2N2FmNzA0ZDRmY2VjNWQyZWFmMjliN2QzNGM5MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmMA6jxGx+LAUN0PP86RABC1u7pX ACFBholEQOsdwM2hTANJyDKEQ+XjPaKt6sLjrWszzRX+iJtCZcvGHJ+ihTVMkKfI WVfvZ5eN93p73j2ozKiON/mcVosTwTX+5vnHr2kOvsCkgUDph7VMYKvV71CQlkk2 qR7qW/mlcEqTvZnNAGFqt/VImgherBwkyrTezZ8sPfji2n++qteaoIRv6l3fxahV 1Zdj3d4uxmW2i9T3t1Cm7FnxeUGrDHazgTvn//uFF/OIblQWVcK7VyuNeKhjcTfQ 2K2Dxr7d1G09KqhP8C/hlc4GPCAhfrvAtZwEEAlOHig0xFBqxiArWm9CMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHwzC4GevcE1PzsXS6vKbfTTJBRMB8GA1UdIwQY MBaAFNAPDgqOAPGm2MHCZuP0NtRuceh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAt NjVhYjBkMzUxZjI3LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAtNjVhYjBkMzUxZjI3 LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVynh00r0 1d6QR9EnnpYsiYtVLHys7nFVq42/jf4HRK0ONFuSa3m9pEUOSLA35rebaExLzjKd llKzGUhmTAaqsC64FHbPgpjsLDzgNTRTjDngIon7+ZEsHT/afn6Sl+83kVdzbvEV XyYHu1z10Xt5Q60mHtcjAINkXAn42nOD2KGMLNOD6ebUowjnI+f35DVK4xVnLig3 c8LxMhLETB+aikaSkTtFK/tNbw9i8QBfXcYtTzVM/W7nA7LFQNWpR7RAhHA3SFVo hE4yuCS/xRsHz+Gvjg7lsiTZb1Za9OXsN6LkiQYyPM014cF3wxOtLcEzBPge79U7 Oz1gijnob7AMzA== -----END CERTIFICATE-----Generated at Mon Dec 8 10:23:26 2025 by rpki-client