This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json) Hash identifier: 4jradziv3GlY6slGBHHlkbxZOQTZcnHalbN1pX5dy5Q= Subject key identifier: 49:16:1A:43:F8:B4:4D:6C:18:A5:A4:24:F1:EA:A3:5D:6B:4D:59:9E Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef Certificate serial: 019AF16445E2E55CA92FD9AA03213642FF1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft Manifest number: 0671 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=) 2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: cxvtJImaHAnks4QeUkGtbPoqgv4Xuy1Rh2yM+ttLvzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:45:e2:e5:5c:a9:2f:d9:aa:03:21:36:42:ff:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=49161a43f8b44d6c18a5a424f1eaa35d6b4d599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:c4:45:38:d7:0d:10:91:e0:c5:09:03:3f: 68:09:6f:ee:7b:e5:46:f3:42:71:44:b4:4b:03:75: 7f:ef:4d:70:43:45:72:ec:3e:d3:f8:94:d9:8f:71: 41:5b:73:8a:01:df:2d:c3:f2:13:1d:f4:7e:a7:c3: 82:af:f0:2f:18:66:8c:6a:3c:6d:d4:3f:03:5e:15: ca:f6:cb:3c:a7:c1:ad:82:b5:ee:a8:61:51:f3:d8: 7d:48:23:f7:19:d2:f5:28:fc:a3:11:a1:41:74:24: b5:50:8d:9d:ff:34:43:17:9f:cf:d3:4b:fd:80:e1: 29:4e:1b:a6:04:90:be:1b:4c:68:e0:c4:2f:36:d4: 97:e7:f7:16:e4:13:dc:c8:5e:04:0f:ae:55:d3:39: b8:91:50:1f:82:ef:40:34:86:44:08:6b:4d:8a:c6: b5:c0:7d:89:9c:ff:0e:2c:94:e2:6e:07:32:e5:01: 77:fd:16:b5:8c:48:25:e2:52:21:c7:9c:2c:5f:1b: 16:93:1c:5c:1f:66:fe:db:49:74:37:73:85:3a:ab: 3d:dd:94:0c:bb:c7:a5:6a:23:21:74:6b:6c:97:3f: c0:21:5f:70:50:e1:75:f7:4c:59:57:96:9f:b1:1b: b1:3a:4e:0f:5a:1a:7c:de:90:88:2e:ed:30:16:d1: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:16:1A:43:F8:B4:4D:6C:18:A5:A4:24:F1:EA:A3:5D:6B:4D:59:9E X509v3 Authority Key Identifier: keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:99:78:b4:eb:a4:58:d6:dd:61:3c:bb:c0:39:93:30:86:95: f6:95:d2:0d:78:21:18:8e:e5:9f:66:75:d9:8f:07:19:8d:b7: d8:08:23:42:6b:dd:22:d3:76:13:83:ae:76:d0:86:26:f5:78: 95:9d:10:10:6e:67:d2:bd:1a:0f:68:d5:e3:50:34:c4:8f:fb: 7b:2f:99:15:da:78:1f:17:ed:c2:b2:9c:66:4f:de:78:5b:6c: 45:78:e5:00:0a:18:46:76:a1:1f:6f:3e:97:42:40:bd:a1:fc: be:98:c1:ca:f3:1e:e7:86:a6:8a:63:74:53:cf:62:9b:2c:f9: 6e:0e:50:af:a4:9a:2f:33:7c:e1:8a:1b:dc:51:ea:e9:4c:ea: dc:f4:df:cb:04:81:2e:94:67:e3:a4:e4:d0:9b:d4:66:8c:f5: 1d:ef:69:df:90:d8:2c:1b:58:6d:3b:10:e7:fb:34:5a:47:7b: a0:21:23:6b:2d:51:a7:7e:7d:36:a4:bd:24:57:00:d7:1b:16: ae:3d:df:8d:57:80:64:a7:32:b4:93:a9:0a:d3:7d:24:71:cf: f1:35:c7:e5:1f:c2:43:4a:21:dc:0e:63:03:84:7c:3b:87:01: 44:1e:19:39:05:8a:f0:d8:79:2a:73:ee:6c:65:ae:fc:b2:9b: 89:e3:f2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEXi5VypL9mqAyE2Qv8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2 YTg1ZWYwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD Eyg0OTE2MWE0M2Y4YjQ0ZDZjMThhNWE0MjRmMWVhYTM1ZDZiNGQ1OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyDERTjXDRCR4MUJAz9oCW/ue+VG 80JxRLRLA3V/701wQ0Vy7D7T+JTZj3FBW3OKAd8tw/ITHfR+p8OCr/AvGGaMajxt 1D8DXhXK9ss8p8GtgrXuqGFR89h9SCP3GdL1KPyjEaFBdCS1UI2d/zRDF5/P00v9 gOEpThumBJC+G0xo4MQvNtSX5/cW5BPcyF4ED65V0zm4kVAfgu9ANIZECGtNisa1 wH2JnP8OLJTibgcy5QF3/Ra1jEgl4lIhx5wsXxsWkxxcH2b+20l0N3OFOqs93ZQM u8elaiMhdGtslz/AIV9wUOF190xZV5afsRuxOk4PWhp83pCILu0wFtEegQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkWGkP4tE1sGKWkJPHqo11rTVmeMB8GA1UdIwQY MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJl4tOuk WNbdYTy7wDmTMIaV9pXSDXghGI7ln2Z12Y8HGY232AgjQmvdItN2E4OudtCGJvV4 lZ0QEG5n0r0aD2jV41A0xI/7ey+ZFdp4HxftwrKcZk/eeFtsRXjlAAoYRnahH28+ l0JAvaH8vpjByvMe54amimN0U89imyz5bg5Qr6SaLzN84Yob3FHq6Uzq3PTfywSB LpRn46Tk0JvUZoz1He9p35DYLBtYbTsQ5/s0Wkd7oCEjay1Rp359NqS9JFcA1xsW rj3fjVeAZKcytJOpCtN9JHHP8TXH5R/CQ0oh3A5jA4R8O4cBRB4ZOQWK8Nh5KnPu bGWu/LKbiePyng== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:21 2025 by rpki-client