This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json) Hash identifier: 85dJhZtGutFMZz3gkdrEX3W70VQBJV99oRb1YDKZmZY= Subject key identifier: 0F:B1:81:58:CE:6A:FC:BA:28:A4:28:CF:E1:BC:F2:6E:8B:D6:47:86 Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8 Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8 Certificate serial: 019AF12E7B3E0E5D3DD86FC2FDCBB83FCC96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft Manifest number: 1013 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=) 2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: gR8UIho0tP/SLzMsvu9JS7AkJynYIggaTqdtHHPK9do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7b:3e:0e:5d:3d:d8:6f:c2:fd:cb:b8:3f:cc:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=0fb18158ce6afcba28a428cfe1bcf26e8bd64786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:52:82:ff:bf:be:40:52:af:53:3d:94:91: 3d:22:07:1b:ea:4c:a1:33:4b:6b:a4:53:29:81:1a: 02:fa:4c:ed:62:de:5d:a4:e2:84:c9:33:73:34:48: a8:a5:69:53:c0:6a:c8:99:3a:da:97:fd:b4:92:f9: a5:10:eb:1f:c8:0b:e6:ea:7c:ba:66:75:23:47:5a: a8:5d:b7:89:cf:c0:1d:dd:6d:4e:0a:07:5f:8a:0f: d2:a3:09:92:ff:40:9c:78:0c:44:e6:af:62:9d:dd: 93:8d:4b:16:ea:7e:cd:dd:68:37:d8:bd:05:df:10: d0:82:40:f4:60:ed:04:ac:cb:92:bd:db:68:5c:fe: a2:9e:cb:c6:c3:c3:82:7b:be:c3:25:30:5e:c6:1d: 31:89:44:40:1e:de:5e:54:3a:ab:3b:e2:cb:b0:95: 07:8a:4c:db:56:6b:c8:7c:be:fd:c9:9c:09:9a:ca: 9a:44:15:d7:0d:0c:66:ea:df:61:bc:99:61:a5:bf: f9:e1:a6:e6:b9:d8:9c:96:05:f8:4c:36:9e:f2:7f: 94:7c:b9:a6:83:bb:85:5e:5e:c4:e7:d6:ff:ec:03: 9e:49:6b:5f:d9:e0:51:b5:c1:7b:84:17:1c:1b:f4: e8:71:c6:76:b7:7f:c5:d9:bd:a5:03:f4:6b:c3:9e: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B1:81:58:CE:6A:FC:BA:28:A4:28:CF:E1:BC:F2:6E:8B:D6:47:86 X509v3 Authority Key Identifier: keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:dc:fd:42:fb:63:0c:e7:64:3e:90:05:75:ac:19:d5:16:ae: fc:7b:6d:80:cd:fd:0f:7c:ee:ba:3e:81:b6:f9:e6:a2:de:f7: b3:e3:fe:b5:82:70:d1:29:77:c5:05:12:06:e0:e7:e9:93:ee: 8e:c1:96:60:22:cf:58:71:19:b6:8b:87:48:60:f8:3e:47:88: 0f:7b:9d:b9:95:71:1c:81:42:f6:f4:f3:2f:dd:cf:04:ff:6d: 02:d6:37:cd:9a:68:e3:5d:7f:a4:4c:2e:e5:c0:d6:97:52:25: 35:48:c3:ad:97:61:5e:f1:29:69:88:11:df:af:87:ff:32:f9: 52:ed:6e:0a:73:0c:0b:e7:dd:58:51:66:d5:55:84:07:7b:f2: c1:7f:b7:5c:8c:19:4f:8b:3c:ba:d6:10:e9:a1:58:8b:f7:39: 52:17:ff:c4:5c:06:83:22:b6:0c:51:66:0a:67:ba:e4:25:41: eb:b2:52:59:bf:f3:db:a2:20:c4:d9:d1:29:40:39:1c:69:3f: ba:15:f4:e6:d7:d7:0e:a0:94:ef:78:fa:ab:3d:37:69:6c:7c: dc:2d:eb:91:4d:fd:6f:ac:60:1c:39:06:38:d7:2e:b8:c7:ae: bf:01:c7:ef:53:89:b3:ff:fd:7a:3c:19:1b:73:d1:cd:29:fb: de:4b:ae:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLns+Dl092G/C/cu4P8yWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzcxYzg2NDU5ZGU3NGJiZDM1YTNjY2JmZDhhZTVkOWNi NGQyZDgwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD EygwZmIxODE1OGNlNmFmY2JhMjhhNDI4Y2ZlMWJjZjI2ZThiZDY0Nzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt9Sgv+/vkBSr1M9lJE9Igcb6kyh M0trpFMpgRoC+kztYt5dpOKEyTNzNEiopWlTwGrImTral/20kvmlEOsfyAvm6ny6 ZnUjR1qoXbeJz8Ad3W1OCgdfig/SowmS/0CceAxE5q9ind2TjUsW6n7N3Wg32L0F 3xDQgkD0YO0ErMuSvdtoXP6insvGw8OCe77DJTBexh0xiURAHt5eVDqrO+LLsJUH ikzbVmvIfL79yZwJmsqaRBXXDQxm6t9hvJlhpb/54abmudiclgX4TDae8n+UfLmm g7uFXl7E59b/7AOeSWtf2eBRtcF7hBccG/ToccZ2t3/F2b2lA/Rrw54JZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+xgVjOavy6KKQoz+G88m6L1keGMB8GA1UdIwQY MBaAFKPHHIZFnedLvTWjzL/Yrl2ctNLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTkt MDkxNGFkMjRhM2U0LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTktMDkxNGFkMjRhM2U0 LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdz9Qvtj DOdkPpAFdawZ1Rau/HttgM39D3zuuj6Btvnmot73s+P+tYJw0Sl3xQUSBuDn6ZPu jsGWYCLPWHEZtouHSGD4PkeID3uduZVxHIFC9vTzL93PBP9tAtY3zZpo411/pEwu 5cDWl1IlNUjDrZdhXvEpaYgR36+H/zL5Uu1uCnMMC+fdWFFm1VWEB3vywX+3XIwZ T4s8utYQ6aFYi/c5Uhf/xFwGgyK2DFFmCme65CVB67JSWb/z26IgxNnRKUA5HGk/ uhX05tfXDqCU73j6qz03aWx83C3rkU39b6xgHDkGONcuuMeuvwHH71OJs//9ejwZ G3PRzSn73kuueQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:06 2025 by rpki-client