This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json) Hash identifier: DOjz8cCBfBmzt79o+dVGOdsv7N2Y3rZ+wracN3JB1q8= Subject key identifier: 2A:50:C4:92:16:DC:C4:B1:F9:80:E7:A7:DE:27:C1:9E:BB:24:82:37 Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61 Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61 Certificate serial: 019AF50AC38ACB78DABDEB9A2018AAF960D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft Manifest number: 06E9 Signing time: Sat 06 Dec 2025 19:01:54 +0000 Manifest this update: Sat 06 Dec 2025 19:01:54 +0000 Manifest next update: Sun 07 Dec 2025 19:01:54 +0000 Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: TXb11UulYM/Lq7nsxqvPO/qspNd/s0fJo0EUO0W2lAE=) 2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c3:8a:cb:78:da:bd:eb:9a:20:18:aa:f9:60:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61 Validity Not Before: Dec 6 19:01:54 2025 GMT Not After : Dec 7 19:01:54 2025 GMT Subject: CN=2a50c49216dcc4b1f980e7a7de27c19ebb248237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:cb:12:0e:00:87:6d:e6:f4:95:38:b4:2b: 79:63:02:c9:7e:ac:41:21:b9:6f:23:3e:52:f3:ad: 0d:a9:a5:15:01:58:37:d2:72:28:57:69:34:11:d8: e3:9e:eb:a4:c9:7c:0d:1a:6d:2a:5a:c7:69:d1:59: 0f:d8:c7:2c:79:3f:89:d7:d8:3a:39:df:70:15:05: 9b:54:08:3c:b8:3b:74:b3:37:7f:5b:2a:a5:bc:1e: 31:e2:d3:6a:6a:79:77:47:3b:49:89:45:28:d7:1b: 7f:2b:a6:67:e0:84:df:01:6a:c5:11:c5:1e:ac:36: fa:08:0e:07:07:2e:f0:91:d8:54:1f:bd:fb:db:3d: a3:cf:d5:30:9f:90:e6:72:5d:aa:fb:f2:4d:c4:9b: b5:3b:40:1f:65:7d:ab:cb:f0:88:85:66:06:a2:a9: 6a:7b:a7:be:22:c7:3b:cb:1b:13:f7:af:0c:36:fc: 77:7d:6c:52:85:33:c5:31:15:6c:8e:a4:ee:59:43: da:eb:17:d4:52:fb:cf:ca:cd:15:0c:50:c6:ed:10: 66:77:2b:1a:4b:ac:41:46:5f:87:72:cf:9f:80:6a: b8:5a:52:0e:e8:42:ec:58:57:13:96:3c:c3:5b:60: ea:2f:7d:0b:2f:30:6f:7a:3b:db:0a:5b:50:3a:23: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:50:C4:92:16:DC:C4:B1:F9:80:E7:A7:DE:27:C1:9E:BB:24:82:37 X509v3 Authority Key Identifier: keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2e:24:91:e3:31:db:8f:ce:6a:1c:72:e3:8d:21:1b:d0:c7: 3d:cb:4e:68:aa:b6:03:2d:a0:6e:39:c2:dc:db:85:c3:a9:d5: a6:68:e3:46:fd:ae:2e:af:b6:08:7b:5f:cb:ff:ec:19:6f:e4: f0:f6:2f:5e:fd:a2:d3:d2:59:77:19:b7:c8:22:0f:61:b0:19: dd:b8:90:18:10:ed:f5:d2:fa:c4:d9:36:54:b8:16:30:81:ea: 84:52:cd:eb:5a:df:7d:cc:bc:0b:5c:fd:4b:53:e6:3b:84:53: 00:7a:37:74:ba:74:c3:05:a8:63:0a:2a:94:ca:7a:e7:37:76: 50:29:23:40:93:84:ad:a3:e3:a1:8b:a0:5d:fe:8f:8d:55:7e: 64:97:50:72:9d:ff:63:7c:f5:37:05:fa:b1:db:6e:a3:64:e2: d0:51:37:a8:18:f0:1f:32:4c:f8:95:28:26:28:5b:3a:b4:1e: 23:de:bb:da:14:3f:2d:2e:eb:8b:c7:b5:b0:ca:13:63:e0:a2: 56:3b:39:21:c8:87:10:f4:ce:d4:c9:64:9c:98:9e:72:d7:00: dd:e6:b9:bd:6e:98:c6:16:a5:a3:2d:6b:6d:94:8a:8e:84:75: ad:09:96:bb:07:ca:12:00:b0:4e:f3:77:24:39:32:24:73:6f: 29:a4:40:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CsOKy3javeuaIBiq+WDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1 MTFhNjEwHhcNMjUxMjA2MTkwMTU0WhcNMjUxMjA3MTkwMTU0WjAzMTEwLwYDVQQD EygyYTUwYzQ5MjE2ZGNjNGIxZjk4MGU3YTdkZTI3YzE5ZWJiMjQ4MjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SzLEg4Ah23m9JU4tCt5YwLJfqxB IblvIz5S860NqaUVAVg30nIoV2k0EdjjnuukyXwNGm0qWsdp0VkP2McseT+J19g6 Od9wFQWbVAg8uDt0szd/WyqlvB4x4tNqanl3RztJiUUo1xt/K6Zn4ITfAWrFEcUe rDb6CA4HBy7wkdhUH7372z2jz9Uwn5Dmcl2q+/JNxJu1O0AfZX2ry/CIhWYGoqlq e6e+Isc7yxsT968MNvx3fWxShTPFMRVsjqTuWUPa6xfUUvvPys0VDFDG7RBmdysa S6xBRl+Hcs+fgGq4WlIO6ELsWFcTljzDW2DqL30LLzBvejvbCltQOiOCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpQxJIW3MSx+YDnp94nwZ67JII3MB8GA1UdIwQY MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt YTYzMzEyNWI3ZTIzLzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvi4kkeMx 24/Oahxy440hG9DHPctOaKq2Ay2gbjnC3NuFw6nVpmjjRv2uLq+2CHtfy//sGW/k 8PYvXv2i09JZdxm3yCIPYbAZ3biQGBDt9dL6xNk2VLgWMIHqhFLN61rffcy8C1z9 S1PmO4RTAHo3dLp0wwWoYwoqlMp65zd2UCkjQJOEraPjoYugXf6PjVV+ZJdQcp3/ Y3z1NwX6sdtuo2Ti0FE3qBjwHzJM+JUoJihbOrQeI9672hQ/LS7ri8e1sMoTY+Ci Vjs5IciHEPTO1MlknJiectcA3ea5vW6Yxhaloy1rbZSKjoR1rQmWuwfKEgCwTvN3 JDkyJHNvKaRAcw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:25 2025 by rpki-client