This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json) Hash identifier: 4aVnNzUN4GNB2E0mzgoWJd19q4P8tmraocdr92/tvwQ= Subject key identifier: 98:CE:D9:9D:20:2C:01:75:76:8A:76:C4:06:84:A2:2E:23:69:39:56 Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e Certificate serial: 019AF0881DE06D4375593682F1AD08AD7334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft Manifest number: 16F8 Signing time: Fri 05 Dec 2025 22:00:43 +0000 Manifest this update: Fri 05 Dec 2025 22:00:43 +0000 Manifest next update: Sat 06 Dec 2025 22:00:43 +0000 Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=) 2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=) 3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: O6plkCXk1I2i6crY33mXorUO0qfhZS1OazTMcxRm4bU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1d:e0:6d:43:75:59:36:82:f1:ad:08:ad:73:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e Validity Not Before: Dec 5 22:00:43 2025 GMT Not After : Dec 6 22:00:43 2025 GMT Subject: CN=98ced99d202c0175768a76c40684a22e23693956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:bb:22:85:2e:39:25:14:86:aa:96:cd:bb: 16:86:2c:5b:3d:b4:d3:b4:7d:6a:21:88:7a:d7:b3: 6e:24:a0:73:c6:bd:0e:4c:c9:a4:e0:78:42:67:d8: 97:5d:7f:5d:17:b7:db:fa:92:29:45:2b:76:e5:18: f6:4c:28:d9:d0:4b:9a:96:66:9b:e7:65:b6:a3:57: 87:04:81:a1:f2:da:70:04:3b:9a:ed:1f:28:81:1a: 1e:a5:41:e5:eb:ee:23:19:75:e9:46:69:10:bf:5f: a9:8a:84:04:56:43:a4:04:72:17:b3:cf:17:9c:59: d4:22:cb:4e:30:42:d3:4d:49:38:1d:6e:05:b3:1e: 3c:58:14:41:7f:19:64:05:81:37:cf:da:66:11:3c: 5c:f7:fd:5d:62:3d:7e:64:c5:79:87:73:ff:07:d8: 57:5e:92:e9:dc:20:2b:32:5b:d9:5a:cd:bc:4a:e9: 81:e5:da:44:4c:c0:25:27:51:da:ef:69:08:a0:53: 15:fe:57:b5:1b:b7:45:92:72:fe:7a:aa:8b:63:f9: 67:81:fa:9a:16:2f:cc:c4:49:2e:9c:f5:f9:c6:5b: 0e:1f:77:3e:28:01:21:ff:17:66:d9:32:f8:4f:70: 25:ba:28:57:d0:d0:94:20:8a:21:dd:5e:e3:98:bb: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CE:D9:9D:20:2C:01:75:76:8A:76:C4:06:84:A2:2E:23:69:39:56 X509v3 Authority Key Identifier: keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f0:28:af:a0:51:b0:59:de:5b:4d:e5:d8:c3:07:90:96:2f: 49:e9:90:44:97:18:ff:a6:7b:6e:3f:69:59:2f:71:5f:9e:47: de:70:99:b0:85:2a:ce:10:cd:7d:e6:15:08:e1:63:24:78:3c: eb:59:59:fc:49:54:65:d3:37:f9:f0:a5:ef:bb:bd:4f:b8:10: 51:c5:28:05:a9:89:7e:2a:66:e0:af:ec:f1:a6:6a:aa:e4:10: 4f:51:93:b8:ae:42:e5:89:e2:25:4b:fd:78:16:fe:86:c7:ca: f9:b4:58:79:49:c1:0f:7f:db:6f:c9:0f:d9:49:8e:80:07:fa: cd:df:ee:e1:88:e8:47:f8:0d:88:44:1e:fe:50:63:06:30:ca: b7:ff:8f:ed:7a:e3:98:ca:8c:db:f6:02:48:6a:a0:1d:6c:af: f1:04:0e:6c:be:f5:2b:41:ae:0d:92:c0:00:86:5d:af:ed:92: ba:6c:df:23:5e:98:fa:b9:00:2f:89:df:78:3e:e5:6e:74:48: 96:96:b4:e0:e1:8b:07:0b:4e:22:fd:d6:b7:54:51:e8:fa:d1: 02:c0:5c:3a:78:a3:c7:02:5d:2a:b6:8d:aa:94:06:8b:b4:9f: 88:8c:cd:30:23:bd:5f:ac:03:64:ae:ea:54:6d:d8:0b:40:9f: 8f:80:9d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiB3gbUN1WTaC8a0IrXM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzAzMTU4YWVkODExNjFkNGY1N2MxNzQyZDQ2MDgzNDE3 M2E3OWUwHhcNMjUxMjA1MjIwMDQzWhcNMjUxMjA2MjIwMDQzWjAzMTEwLwYDVQQD Eyg5OGNlZDk5ZDIwMmMwMTc1NzY4YTc2YzQwNjg0YTIyZTIzNjkzOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhO7IoUuOSUUhqqWzbsWhixbPbTT tH1qIYh617NuJKBzxr0OTMmk4HhCZ9iXXX9dF7fb+pIpRSt25Rj2TCjZ0Eualmab 52W2o1eHBIGh8tpwBDua7R8ogRoepUHl6+4jGXXpRmkQv1+pioQEVkOkBHIXs88X nFnUIstOMELTTUk4HW4Fsx48WBRBfxlkBYE3z9pmETxc9/1dYj1+ZMV5h3P/B9hX XpLp3CArMlvZWs28SumB5dpETMAlJ1Ha72kIoFMV/le1G7dFknL+eqqLY/lngfqa Fi/MxEkunPX5xlsOH3c+KAEh/xdm2TL4T3AluihX0NCUIIoh3V7jmLsjuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjO2Z0gLAF1dop2xAaEoi4jaTlWMB8GA1UdIwQY MBaAFKPAMViu2BFh1PV8F0LUYINBc6eeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2Yjgt NGMxMGUzMzYwNTc3LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2YjgtNGMxMGUzMzYwNTc3 LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfAor6BR sFneW03l2MMHkJYvSemQRJcY/6Z7bj9pWS9xX55H3nCZsIUqzhDNfeYVCOFjJHg8 61lZ/ElUZdM3+fCl77u9T7gQUcUoBamJfipm4K/s8aZqquQQT1GTuK5C5YniJUv9 eBb+hsfK+bRYeUnBD3/bb8kP2UmOgAf6zd/u4YjoR/gNiEQe/lBjBjDKt/+P7Xrj mMqM2/YCSGqgHWyv8QQObL71K0GuDZLAAIZdr+2SumzfI16Y+rkAL4nfeD7lbnRI lpa04OGLBwtOIv3Wt1RR6PrRAsBcOnijxwJdKraNqpQGi7SfiIzNMCO9X6wDZK7q VG3YC0Cfj4Cd/g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:20 2025 by rpki-client