This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json) Hash identifier: ROOyGkrz0DdLhMOQt4gZ8uEw/pudigudQ7puJmdULpA= Subject key identifier: E0:F7:66:4C:5C:B6:9F:3C:49:65:D4:AC:94:D0:20:6D:4F:96:05:D3 Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed Certificate serial: 019AF31BFE91AD1D8C03E0E57B3B8CA67315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft Manifest number: 0B3B Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: Bj8l/jNyXq++RpP9hfu+pzh57M5soI/pRRY2aUi/Le4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fe:91:ad:1d:8c:03:e0:e5:7b:3b:8c:a6:73:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=e0f7664c5cb69f3c4965d4ac94d0206d4f9605d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:95:a5:c1:55:92:b9:94:b1:5c:e3:91:dd: cc:bd:97:2e:64:31:70:fa:76:ee:c4:9a:88:f1:3a: 67:31:0e:db:81:c7:aa:0a:48:b8:ef:f4:f2:09:1f: 87:8a:27:79:42:a1:db:99:47:e6:cb:e2:10:5d:43: 7f:75:f2:31:34:fb:ba:41:26:07:aa:f0:c5:3f:4d: d3:9f:13:1d:ed:28:56:1a:fc:33:fa:73:17:ab:82: 91:42:23:25:ad:8a:b5:13:1c:a7:db:b3:b2:78:cc: 00:bc:c7:34:a9:65:f4:1a:03:4f:98:b6:71:51:8b: a3:92:99:7f:3d:6f:ef:f3:2f:44:8f:9f:ab:e5:ea: e9:65:83:a9:c2:ed:33:eb:ba:f1:a6:e3:ce:65:61: 13:f7:3a:54:0b:44:6d:84:9f:9f:1e:ca:07:48:78: 28:dc:0a:d0:f5:4d:03:9d:2b:04:5d:43:18:46:fc: 1d:af:af:7f:92:2b:5b:ac:8e:77:18:12:3f:e4:07: ab:e8:49:76:af:94:02:2a:10:c2:3c:4f:b4:66:f3: dd:12:52:50:4a:8a:8d:63:12:67:3f:69:53:e0:49: a8:8d:f6:72:c8:a1:35:44:7c:a4:0f:93:9b:89:c2: bd:68:a9:ed:33:eb:95:bd:fd:b0:a2:0a:49:98:b9: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F7:66:4C:5C:B6:9F:3C:49:65:D4:AC:94:D0:20:6D:4F:96:05:D3 X509v3 Authority Key Identifier: keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2a:fe:95:2e:f9:dd:c7:3a:e8:52:33:e9:f7:de:4b:dc:6e: 28:a3:11:15:de:f6:cc:7e:44:c6:8b:fc:24:05:3f:e8:9d:96: 2b:2e:19:c9:f0:03:47:8c:8c:e2:24:da:60:ec:aa:ef:7d:57: ce:6a:bc:d8:16:fb:c2:44:b1:69:e7:94:b3:22:d7:80:a9:91: dc:63:67:60:91:ee:d5:78:a6:95:e9:62:72:73:f5:16:ea:3b: b4:f8:23:6f:9c:43:60:83:0d:5d:96:5d:3d:64:fc:e6:c6:23: 80:58:ed:7f:30:ae:d7:fe:58:15:df:2c:8f:b3:22:27:ba:54: f0:cf:77:7f:f2:c5:37:62:bf:f5:25:e4:72:f3:78:7d:9f:5f: bb:c4:73:0d:0b:7e:77:f7:c7:89:55:fd:78:21:c6:f7:2c:38: 82:04:90:9e:0d:87:9a:34:39:7c:c8:a5:32:5e:45:da:b8:56: 90:95:a8:44:31:69:ee:61:b1:04:de:f2:88:32:c1:04:4b:5e: 69:ff:70:ae:cf:8b:4f:44:f9:5b:d8:61:ba:ff:d1:c9:4c:46: d9:d5:f6:98:b2:53:8c:f4:ca:22:50:3e:6f:4a:5e:d2:86:7a: ed:3e:4d:50:8d:77:2c:6e:78:fc:02:47:a1:f5:d5:bd:e2:87: ea:e8:8b:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/6RrR2MA+DlezuMpnMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmQzYzk1YjYwOTI3YTVmNjhiOTk1ZTdiOTc5ZTY2ODAz YzEwZWQwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD EyhlMGY3NjY0YzVjYjY5ZjNjNDk2NWQ0YWM5NGQwMjA2ZDRmOTYwNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDuVpcFVkrmUsVzjkd3MvZcuZDFw +nbuxJqI8TpnMQ7bgceqCki47/TyCR+Hiid5QqHbmUfmy+IQXUN/dfIxNPu6QSYH qvDFP03TnxMd7ShWGvwz+nMXq4KRQiMlrYq1Exyn27OyeMwAvMc0qWX0GgNPmLZx UYujkpl/PW/v8y9Ej5+r5erpZYOpwu0z67rxpuPOZWET9zpUC0RthJ+fHsoHSHgo 3ArQ9U0DnSsEXUMYRvwdr69/kitbrI53GBI/5Aer6El2r5QCKhDCPE+0ZvPdElJQ SoqNYxJnP2lT4EmojfZyyKE1RHykD5ObicK9aKntM+uVvf2wogpJmLm13QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD3Zkxctp88SWXUrJTQIG1PlgXTMB8GA1UdIwQY MBaAFAv9PJW2CSel9ouZXnuXnmaAPBDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZWI4ZjktZjcyOC00ZDA1LWIyNGEt YTg1MTRhYTVkMDhkLzEvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mZWI4ZjktZjcyOC00ZDA1LWIyNGEtYTg1MTRhYTVkMDhk LzEvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICr+lS75 3cc66FIz6ffeS9xuKKMRFd72zH5Exov8JAU/6J2WKy4ZyfADR4yM4iTaYOyq731X zmq82Bb7wkSxaeeUsyLXgKmR3GNnYJHu1XimlelicnP1Fuo7tPgjb5xDYIMNXZZd PWT85sYjgFjtfzCu1/5YFd8sj7MiJ7pU8M93f/LFN2K/9SXkcvN4fZ9fu8RzDQt+ d/fHiVX9eCHG9yw4ggSQng2HmjQ5fMilMl5F2rhWkJWoRDFp7mGxBN7yiDLBBEte af9wrs+LT0T5W9hhuv/RyUxG2dX2mLJTjPTKIlA+b0pe0oZ67T5NUI13LG54/AJH ofXVveKH6uiL8A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:47:19 2025 by rpki-client