This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json) Hash identifier: iUq7Keqf10PkzM2oTav4Pw5zx5jXB9LN0d7/7VgHSJc= Subject key identifier: 4F:7E:D1:D0:E2:DB:B8:A1:2C:0B:78:CC:5C:A6:9E:CE:05:88:0B:69 Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf Certificate serial: 019B3CB4CA4B825D2DC659A30586BABD5686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft Manifest number: 0E1F Signing time: Sat 20 Dec 2025 17:00:39 +0000 Manifest this update: Sat 20 Dec 2025 17:00:39 +0000 Manifest next update: Sun 21 Dec 2025 17:00:39 +0000 Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: 7V1KcEUpXL0xO++eEDNGfuJuzl/w3hlyRz26rAVU54w=) 2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:ca:4b:82:5d:2d:c6:59:a3:05:86:ba:bd:56:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf Validity Not Before: Dec 20 17:00:39 2025 GMT Not After : Dec 21 17:00:39 2025 GMT Subject: CN=4f7ed1d0e2dbb8a12c0b78cc5ca69ece05880b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:c1:05:32:0e:21:be:79:11:d4:f3:3f:3e: fc:39:f1:d7:d0:49:1a:11:d8:13:e9:32:4d:bb:b2: b3:e6:cb:34:6d:60:97:d7:26:73:63:f4:ef:ab:1d: 38:68:c7:9b:fe:e8:94:57:01:39:42:c7:dd:d2:47: 80:96:6d:c1:32:5f:9e:95:1d:b9:4b:00:59:94:89: 00:28:4b:ef:dc:18:80:1c:fa:7f:e1:b5:45:dd:1f: 85:b0:eb:74:5c:bc:81:a4:42:2e:fb:82:88:f9:44: 90:59:af:76:86:be:74:25:2c:34:7d:82:fa:a5:7c: 18:07:47:a8:32:c7:93:42:22:91:f1:a5:b1:9d:57: a8:c9:b4:a1:00:92:64:5c:2e:e2:dd:e5:be:d4:3f: 20:ed:53:0a:87:c0:a7:0f:29:33:32:4c:b1:52:ba: 24:14:fb:67:6d:d1:17:d6:28:0a:d1:0d:7f:86:60: 48:3a:14:01:b6:2c:0a:85:87:15:28:3c:85:18:5f: 3a:9a:22:d3:03:df:46:8d:b9:9a:1f:60:ec:3f:a9: 52:b4:03:8c:8b:dd:a5:9c:54:c1:e2:c3:dc:bf:47: 9d:2c:10:70:ff:4b:0e:d3:91:c7:33:f7:9f:87:5d: 14:81:ec:58:11:05:d6:6e:fc:78:15:f3:8d:1e:89: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7E:D1:D0:E2:DB:B8:A1:2C:0B:78:CC:5C:A6:9E:CE:05:88:0B:69 X509v3 Authority Key Identifier: keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:66:d9:90:1d:ed:f2:73:ef:90:e8:b3:5c:ef:4d:04:e2:45: 9a:5c:ea:c1:b5:0c:ad:c0:b1:27:f0:79:94:2e:ed:41:42:2f: 7a:34:3e:c4:f0:20:a2:fa:6b:03:27:79:9e:7e:2b:c3:00:db: d6:4b:be:15:b9:81:ac:87:de:7f:61:b6:70:3d:cb:26:43:46: ed:48:6c:43:c6:1e:9e:46:90:aa:a9:9a:3c:3a:d3:42:ca:ce: 34:c9:cd:4d:ef:f8:0a:e6:89:f4:31:60:cd:46:84:4d:43:51: 54:fa:17:8d:f6:b5:90:71:63:17:cc:f5:cf:fd:e1:50:50:9e: 93:53:95:c5:59:c1:c8:7c:3c:e9:22:c3:4c:ca:fe:75:e8:4c: 23:60:5a:5d:65:b2:7c:c9:49:03:1f:91:20:5a:e0:96:f0:28: 3c:b6:72:ba:da:43:b1:7b:90:bd:6d:d4:dc:d6:2b:cd:a1:38: 5e:30:f5:0e:66:4d:68:26:74:2d:7a:e2:d9:9a:55:7d:3b:d7: e6:58:d9:2a:cc:ca:f4:9a:0f:80:53:99:ac:7a:ef:cf:c3:68: 42:91:5c:44:ff:3e:76:be:eb:14:bd:42:d9:60:7f:9e:60:61: 40:9f:e0:a4:57:cc:a7:71:55:74:ae:14:7b:5d:d8:7c:48:3b: 6f:eb:24:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMpLgl0txlmjBYa6vVaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk ODQ3Y2YwHhcNMjUxMjIwMTcwMDM5WhcNMjUxMjIxMTcwMDM5WjAzMTEwLwYDVQQD Eyg0ZjdlZDFkMGUyZGJiOGExMmMwYjc4Y2M1Y2E2OWVjZTA1ODgwYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLDBBTIOIb55EdTzPz78OfHX0Eka EdgT6TJNu7Kz5ss0bWCX1yZzY/Tvqx04aMeb/uiUVwE5Qsfd0keAlm3BMl+elR25 SwBZlIkAKEvv3BiAHPp/4bVF3R+FsOt0XLyBpEIu+4KI+USQWa92hr50JSw0fYL6 pXwYB0eoMseTQiKR8aWxnVeoybShAJJkXC7i3eW+1D8g7VMKh8CnDykzMkyxUrok FPtnbdEX1igK0Q1/hmBIOhQBtiwKhYcVKDyFGF86miLTA99GjbmaH2DsP6lStAOM i92lnFTB4sPcv0edLBBw/0sO05HHM/efh10UgexYEQXWbvx4FfONHon86wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9+0dDi27ihLAt4zFymns4FiAtpMB8GA1UdIwQY MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt YzRkOWJlMTM3ZWVhLzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2bZkB3t 8nPvkOizXO9NBOJFmlzqwbUMrcCxJ/B5lC7tQUIvejQ+xPAgovprAyd5nn4rwwDb 1ku+FbmBrIfef2G2cD3LJkNG7UhsQ8YenkaQqqmaPDrTQsrONMnNTe/4CuaJ9DFg zUaETUNRVPoXjfa1kHFjF8z1z/3hUFCek1OVxVnByHw86SLDTMr+dehMI2BaXWWy fMlJAx+RIFrglvAoPLZyutpDsXuQvW3U3NYrzaE4XjD1DmZNaCZ0LXri2ZpVfTvX 5ljZKszK9JoPgFOZrHrvz8NoQpFcRP8+dr7rFL1C2WB/nmBhQJ/gpFfMp3FVdK4U e13YfEg7b+skIA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:18:36 2025 by rpki-client