This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json) Hash identifier: jjVLG9E0gkzyeZaV8LqyQmHC6X0fQdDwsUKrOxRUUGs= Subject key identifier: 6A:3A:74:29:55:D0:81:CF:B9:93:23:FD:80:01:4A:20:78:6C:9B:DE Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4 Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4 Certificate serial: 019AF68A5BB44C198E911D3C2F616908B09C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft Manifest number: 033E Signing time: Sun 07 Dec 2025 02:00:53 +0000 Manifest this update: Sun 07 Dec 2025 02:00:53 +0000 Manifest next update: Mon 08 Dec 2025 02:00:53 +0000 Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: lfpPqoiQkOH22gcC2SzHHN5Jkn1lyJqM1WTgPmQz/0Y=) 2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:5b:b4:4c:19:8e:91:1d:3c:2f:61:69:08:b0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4 Validity Not Before: Dec 7 02:00:53 2025 GMT Not After : Dec 8 02:00:53 2025 GMT Subject: CN=6a3a742955d081cfb99323fd80014a20786c9bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:90:3c:63:68:52:64:da:35:44:cb:93:9f: 4b:eb:14:e9:2b:0b:19:db:61:67:b3:17:7a:2d:16: 84:d4:7c:42:c7:62:1d:f7:c3:23:14:be:db:13:97: f9:75:88:5a:04:2d:e5:bf:4c:d9:67:0f:89:0e:8b: c1:f8:0d:2a:8a:31:55:23:a1:72:07:02:fb:fe:21: 22:c8:c8:dc:ef:ff:9f:86:4f:60:a3:5f:06:e5:01: d8:0f:d7:f1:0c:dc:cf:d7:cb:09:5f:4d:68:55:0b: 41:1b:f8:73:bb:66:4a:1a:a8:be:9f:80:4a:5c:14: 43:ca:0a:60:22:15:d8:54:ab:be:ce:5d:80:9a:60: 67:8c:00:9c:36:93:6c:2d:38:93:22:c3:36:22:34: cb:25:01:51:17:56:b3:63:96:64:96:80:8a:42:fe: 2d:c7:b9:ad:82:40:34:c1:5a:66:6d:e3:de:b3:b8: 2a:b9:d4:5b:a0:b5:3c:2a:b7:5c:8d:23:7c:e8:32: 63:9f:08:b1:e3:c9:7b:31:03:15:bc:0b:6d:fc:fc: 44:97:8c:2f:e6:91:ee:61:14:6a:44:72:d6:15:e4: 6d:81:4e:df:a2:ae:97:b8:05:82:e2:76:44:41:8e: d4:7f:ac:a1:79:15:4e:a4:61:f9:d7:fc:b7:10:32: 45:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3A:74:29:55:D0:81:CF:B9:93:23:FD:80:01:4A:20:78:6C:9B:DE X509v3 Authority Key Identifier: keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cc:71:f2:ff:f5:2b:ba:50:53:a7:ed:70:19:db:74:49:bc: e1:30:fa:f6:39:85:cc:f6:05:92:3b:ce:e0:d9:3d:3c:04:fc: e1:48:e3:23:3c:83:41:1e:0f:58:6e:a3:53:98:67:51:25:a2: ca:ca:c2:58:81:ab:ec:cc:57:4b:67:5f:ab:d8:1d:cb:5a:64: 57:97:22:a9:21:bb:a7:9c:10:0b:91:71:38:1b:e0:f5:0a:8d: 58:8e:d6:43:23:47:7b:5f:a0:d4:2a:3d:16:61:39:8f:43:a1: b0:06:65:6c:b5:08:55:d8:94:1c:30:82:8f:f3:ae:86:78:cc: fd:a1:99:46:29:d9:1c:aa:77:77:32:82:4e:eb:80:3d:86:f6: ea:a3:4d:06:9f:7e:96:58:78:5f:fd:a5:68:92:94:1f:d4:d8: 34:e6:c3:80:dd:b9:01:57:14:0c:d1:4e:91:3f:20:54:24:9e: 9c:dc:00:67:7a:11:00:c6:cc:80:d3:26:e0:e1:58:4b:3e:75: f3:ae:0f:a6:a3:dd:35:cd:09:11:4a:0b:4e:74:e7:b3:98:8c: 82:55:e6:d9:1c:13:a6:62:74:37:2f:74:09:fc:96:51:f7:7b: a6:a2:0b:00:56:d5:1a:ef:7d:99:d5:f4:5a:3c:db:dc:26:c9: 05:fa:39:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ilu0TBmOkR08L2FpCLCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTlhYzljZjkwNWExNmM1YWZhMGU1MDM1ZmZhN2EyMzUy ZTEzZjQwHhcNMjUxMjA3MDIwMDUzWhcNMjUxMjA4MDIwMDUzWjAzMTEwLwYDVQQD Eyg2YTNhNzQyOTU1ZDA4MWNmYjk5MzIzZmQ4MDAxNGEyMDc4NmM5YmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsByQPGNoUmTaNUTLk59L6xTpKwsZ 22Fnsxd6LRaE1HxCx2Id98MjFL7bE5f5dYhaBC3lv0zZZw+JDovB+A0qijFVI6Fy BwL7/iEiyMjc7/+fhk9go18G5QHYD9fxDNzP18sJX01oVQtBG/hzu2ZKGqi+n4BK XBRDygpgIhXYVKu+zl2AmmBnjACcNpNsLTiTIsM2IjTLJQFRF1azY5ZkloCKQv4t x7mtgkA0wVpmbePes7gqudRboLU8KrdcjSN86DJjnwix48l7MQMVvAtt/PxEl4wv 5pHuYRRqRHLWFeRtgU7foq6XuAWC4nZEQY7Uf6yheRVOpGH51/y3EDJFEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo6dClV0IHPuZMj/YABSiB4bJveMB8GA1UdIwQY MBaAFPDprJz5BaFsWvoOUDX/p6I1LhP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAt NmFjMTBiNGQyYmJjLzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAtNmFjMTBiNGQyYmJj LzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8xx8v/1 K7pQU6ftcBnbdEm84TD69jmFzPYFkjvO4Nk9PAT84UjjIzyDQR4PWG6jU5hnUSWi ysrCWIGr7MxXS2dfq9gdy1pkV5ciqSG7p5wQC5FxOBvg9QqNWI7WQyNHe1+g1Co9 FmE5j0OhsAZlbLUIVdiUHDCCj/OuhnjM/aGZRinZHKp3dzKCTuuAPYb26qNNBp9+ llh4X/2laJKUH9TYNObDgN25AVcUDNFOkT8gVCSenNwAZ3oRAMbMgNMm4OFYSz51 864PpqPdNc0JEUoLTnTns5iMglXm2RwTpmJ0Ny90CfyWUfd7pqILAFbVGu99mdX0 Wjzb3CbJBfo5Cw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:32 2025 by rpki-client