This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json) Hash identifier: YoeoB0V5uAw63XLlwrgWYi52MeSdYfaED4mbiXZbO3E= Subject key identifier: 10:33:B8:6F:7E:C0:16:F0:C1:A1:A8:F3:B8:D5:65:EE:8C:21:C7:E3 Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf Certificate serial: 019AF163ED83F66A949AE4CBE8BC76EA26C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft Manifest number: 0DF8 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: dqXTrkDrfEMN98wZvUWrwwTHNmmsSvKwgn0LhV5ocb8=) 2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ed:83:f6:6a:94:9a:e4:cb:e8:bc:76:ea:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=1033b86f7ec016f0c1a1a8f3b8d565ee8c21c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7d:99:35:ec:d1:91:3c:40:2f:5a:bd:9a:ba: 09:66:ed:d3:7f:6f:25:eb:a1:0d:53:12:4b:3a:d9: e8:3a:26:fe:e9:86:1c:7e:58:a5:1e:bc:b4:57:0c: 74:40:d9:28:4c:94:8b:fa:71:0c:1c:88:c7:11:51: c9:ba:8c:8f:c3:ab:f5:2c:1a:40:cf:6d:e2:2e:7c: 5c:85:64:e0:d7:a4:cd:6f:a6:60:18:8f:53:29:58: 63:ee:08:ba:48:db:74:b1:7a:b3:8f:b8:4d:28:6e: a1:37:99:dc:30:ac:c8:19:d3:ae:f9:e3:fe:e3:9a: c2:ca:f2:d8:8b:21:87:90:02:c7:c0:3c:7e:63:b5: 33:20:8c:5f:fd:7d:5b:27:55:8e:c5:69:15:b3:d8: 5b:88:91:1c:ac:f5:cc:1c:eb:99:32:1c:d6:e3:5d: c3:b4:46:68:11:59:be:0d:4a:33:e8:12:49:f2:0f: 44:fe:e3:fe:67:fb:0c:bc:bd:ba:35:85:5e:92:5a: c5:51:a2:92:7a:ae:69:d1:fb:83:a1:64:44:32:be: 60:a0:52:10:1b:8f:7f:e8:07:f0:25:fe:8f:38:a6: 69:c9:5f:72:e7:66:c6:51:fb:85:78:fe:28:b9:1a: 5f:49:c3:9a:22:7d:e4:c1:0b:cc:2d:52:0d:eb:90: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:B8:6F:7E:C0:16:F0:C1:A1:A8:F3:B8:D5:65:EE:8C:21:C7:E3 X509v3 Authority Key Identifier: keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:15:e2:20:c6:93:5e:98:37:0a:a2:7c:c4:16:26:59:1f:72: 6f:c3:b2:96:0b:d0:c4:44:10:f4:64:f7:e8:5c:61:5f:9d:bc: ed:f7:c2:03:96:c9:3a:70:35:23:2d:4f:61:6f:1c:8a:14:32: cf:d0:a3:2f:5c:7d:c9:68:37:97:01:54:47:0c:6b:fc:74:aa: 61:6e:4f:2d:26:82:41:17:55:48:20:d1:a5:4d:36:94:ac:46: c6:e0:7b:ae:56:28:3f:6e:31:e3:de:80:4e:91:c2:5f:1f:ee: 1b:a6:1e:2b:28:dd:75:96:44:77:2f:45:a4:84:74:d0:00:c4: 7f:20:36:15:96:73:d4:1f:5d:9a:39:6a:0a:ea:f2:44:8d:10: bf:e2:6b:bd:04:1c:a2:dd:9b:05:1b:b7:ec:eb:ec:10:16:44: c1:6e:ed:8a:a1:6b:bc:f4:94:4a:77:81:32:7d:23:dd:59:f4: 00:e0:b3:75:40:3e:70:5c:a3:7d:fd:b7:e5:8d:d3:d4:94:9e: d5:64:7d:df:c0:d7:38:d8:38:eb:b5:ec:9b:3d:cb:cd:f9:ad: 30:3b:88:a5:5c:00:9b:a4:cc:94:d9:48:20:ba:e1:39:97:06: 0c:85:1a:1e:a4:ca:98:59:e9:fc:e9:cb:6f:18:b6:c3:9d:03: c9:f4:87:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+2D9mqUmuTL6Lx26ibAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk ODQ3Y2YwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygxMDMzYjg2ZjdlYzAxNmYwYzFhMWE4ZjNiOGQ1NjVlZThjMjFjN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n2ZNezRkTxAL1q9mroJZu3Tf28l 66ENUxJLOtnoOib+6YYcflilHry0Vwx0QNkoTJSL+nEMHIjHEVHJuoyPw6v1LBpA z23iLnxchWTg16TNb6ZgGI9TKVhj7gi6SNt0sXqzj7hNKG6hN5ncMKzIGdOu+eP+ 45rCyvLYiyGHkALHwDx+Y7UzIIxf/X1bJ1WOxWkVs9hbiJEcrPXMHOuZMhzW413D tEZoEVm+DUoz6BJJ8g9E/uP+Z/sMvL26NYVeklrFUaKSeq5p0fuDoWREMr5goFIQ G49/6AfwJf6POKZpyV9y52bGUfuFeP4ouRpfScOaIn3kwQvMLVIN65B55wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAzuG9+wBbwwaGo87jVZe6MIcfjMB8GA1UdIwQY MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt YzRkOWJlMTM3ZWVhLzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxXiIMaT Xpg3CqJ8xBYmWR9yb8OylgvQxEQQ9GT36FxhX5287ffCA5bJOnA1Iy1PYW8cihQy z9CjL1x9yWg3lwFURwxr/HSqYW5PLSaCQRdVSCDRpU02lKxGxuB7rlYoP24x496A TpHCXx/uG6YeKyjddZZEdy9FpIR00ADEfyA2FZZz1B9dmjlqCuryRI0Qv+JrvQQc ot2bBRu37OvsEBZEwW7tiqFrvPSUSneBMn0j3Vn0AOCzdUA+cFyjff235Y3T1JSe 1WR938DXONg467Xsmz3LzfmtMDuIpVwAm6TMlNlIILrhOZcGDIUaHqTKmFnp/OnL bxi2w50DyfSHlw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:16 2025 by rpki-client