This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json) Hash identifier: q2/p5N5TeqkAI1NedqPRgIbpIrU8Zi8Ml4SWCUlqbQY= Subject key identifier: 14:27:B0:B5:56:A1:EF:FD:B8:5B:0C:7F:E4:A7:3E:56:B6:A3:BC:67 Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15 Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015 Certificate serial: 019AF1D1E930E57E2EAD2FC6493D5467B133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft Manifest number: 06E5 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: 0irbjzh3FrDia+G6VCMBYkl29lhJC3TW1KFraUne3cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e9:30:e5:7e:2e:ad:2f:c6:49:3d:54:67:b1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=1427b0b556a1effdb85b0c7fe4a73e56b6a3bc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dd:8b:ae:76:34:ba:54:e7:af:47:0a:3c:7b: 38:e1:35:86:3c:0d:8f:74:f5:db:1b:f3:95:c9:d2: f3:86:30:b7:39:69:f9:05:53:d4:09:18:87:2a:6a: eb:13:0d:7f:ca:0a:88:3c:59:4d:a9:16:9f:d3:98: 0f:dc:b1:13:47:91:7e:7f:80:98:13:10:4d:ac:f4: 27:17:2b:23:c3:6d:2a:27:37:57:40:b2:49:81:3e: e6:d8:86:b1:a5:11:42:de:8c:3d:85:90:79:63:c7: b7:f5:1d:e5:03:d4:e4:76:90:1e:dc:be:0b:5f:bc: 9f:60:e7:46:df:88:b8:ab:26:b1:4d:9b:47:fc:c1: 10:c9:d8:5a:e4:f9:f8:86:20:70:9b:fa:1b:b2:3d: 6d:a5:80:6f:25:6a:72:6c:ac:d6:e3:da:57:2b:d6: 0c:9d:35:12:8c:7e:d8:95:f2:c0:26:65:56:80:ed: 68:bb:66:9d:29:de:0f:45:68:d1:f5:61:ad:1d:9b: e6:33:1d:a0:39:b9:91:2a:af:61:8b:56:96:7c:27: 42:8b:46:4c:df:e0:c1:d3:1e:70:0a:14:8d:ca:8d: 8b:d0:a7:44:a4:bf:ff:8e:2b:6f:38:4e:22:43:e4: 05:a1:00:52:ad:ee:8e:48:d5:a6:83:5d:c5:57:24: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:27:B0:B5:56:A1:EF:FD:B8:5B:0C:7F:E4:A7:3E:56:B6:A3:BC:67 X509v3 Authority Key Identifier: keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:dc:81:18:37:09:c8:83:6d:9d:37:2a:b5:db:84:a8:52:ce: 23:8e:93:ff:ea:7c:d6:cf:3b:4b:2e:16:84:22:13:36:16:d2: 86:7a:97:4e:dd:f0:bb:07:61:16:97:fe:c1:8e:35:ac:3b:dd: 98:0e:c2:fe:46:e1:a7:5f:43:12:3f:ef:8f:0a:5b:42:c8:1c: 83:37:94:fe:36:00:7f:8d:a7:8e:0a:75:f9:77:5f:12:9d:58: 4c:e7:4c:1c:97:22:77:b1:a4:3d:fe:8e:dd:a3:40:43:51:af: cf:06:b3:6d:bd:e6:f9:8a:85:92:d7:06:04:6d:ce:11:74:e9: 8f:b8:f8:86:3d:66:26:f0:9d:5a:ae:b6:40:3d:f0:49:29:93: 87:20:8b:48:03:5c:ed:49:2c:10:6c:44:3b:83:94:26:25:e5: 98:d8:85:d2:72:20:3d:5a:28:e0:5d:d5:54:07:a2:23:37:49: 1f:af:66:56:91:01:a6:05:6d:83:e3:a6:3f:88:cd:18:1d:33: 47:d7:29:30:97:51:74:1c:96:a2:01:d9:30:10:a8:82:f4:01: 10:13:64:e2:f6:ff:bb:8b:aa:ba:53:9f:88:22:ce:e2:80:f2: ba:c7:35:76:95:74:a8:e0:ed:40:41:2f:42:af:ea:c3:b5:25: da:7b:14:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ekw5X4urS/GST1UZ7EzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzU2ZWMxMzBkOThhZjJkMGQyOTQ1OWYyMGZhNzliZDYz NTkwMTUwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EygxNDI3YjBiNTU2YTFlZmZkYjg1YjBjN2ZlNGE3M2U1NmI2YTNiYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt2LrnY0ulTnr0cKPHs44TWGPA2P dPXbG/OVydLzhjC3OWn5BVPUCRiHKmrrEw1/ygqIPFlNqRaf05gP3LETR5F+f4CY ExBNrPQnFysjw20qJzdXQLJJgT7m2IaxpRFC3ow9hZB5Y8e39R3lA9TkdpAe3L4L X7yfYOdG34i4qyaxTZtH/MEQydha5Pn4hiBwm/obsj1tpYBvJWpybKzW49pXK9YM nTUSjH7YlfLAJmVWgO1ou2adKd4PRWjR9WGtHZvmMx2gObmRKq9hi1aWfCdCi0ZM 3+DB0x5wChSNyo2L0KdEpL//jitvOE4iQ+QFoQBSre6OSNWmg13FVyQIJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQnsLVWoe/9uFsMf+SnPla2o7xnMB8GA1UdIwQY MBaAFKPFbsEw2Yry0NKUWfIPp5vWNZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjkt YjNlOWJlNzQyODk0LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjktYjNlOWJlNzQyODk0 LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStyBGDcJ yINtnTcqtduEqFLOI46T/+p81s87Sy4WhCITNhbShnqXTt3wuwdhFpf+wY41rDvd mA7C/kbhp19DEj/vjwpbQsgcgzeU/jYAf42njgp1+XdfEp1YTOdMHJcid7GkPf6O 3aNAQ1Gvzwazbb3m+YqFktcGBG3OEXTpj7j4hj1mJvCdWq62QD3wSSmThyCLSANc 7UksEGxEO4OUJiXlmNiF0nIgPVoo4F3VVAeiIzdJH69mVpEBpgVtg+OmP4jNGB0z R9cpMJdRdByWogHZMBCogvQBEBNk4vb/u4uqulOfiCLO4oDyusc1dpV0qODtQEEv Qq/qw7Ul2nsUjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:33 2025 by rpki-client