This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json) Hash identifier: mwWcBW4ODEV9qusFCBBKrHYPjSWKk/qj/cGUsBRLuT4= Subject key identifier: D1:69:2C:AB:AF:65:6E:DF:DD:D0:06:C0:16:2D:A5:39:96:FE:3F:C0 Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab Certificate serial: 019AF2769211F1FE63FF414C29845ED51DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft Manifest number: 0F2C Signing time: Sat 06 Dec 2025 07:00:48 +0000 Manifest this update: Sat 06 Dec 2025 07:00:48 +0000 Manifest next update: Sun 07 Dec 2025 07:00:48 +0000 Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=) 2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: 9509we1L7hJefEaCirBzsDGcojTnUVU6eRYuxwqRGug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:92:11:f1:fe:63:ff:41:4c:29:84:5e:d5:1d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab Validity Not Before: Dec 6 07:00:48 2025 GMT Not After : Dec 7 07:00:48 2025 GMT Subject: CN=d1692cabaf656edfddd006c0162da53996fe3fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:b6:30:64:fe:c9:0d:1f:29:28:19:96:24: 85:3c:b5:8e:ab:5e:d6:f9:df:18:de:0b:20:d1:54: 34:94:6b:09:40:4b:17:88:cb:a0:1a:a0:35:a7:83: e5:82:f0:be:fe:54:0a:f9:fb:ec:b6:f4:38:31:19: 21:59:7c:ec:e3:16:3e:df:48:36:da:ce:ed:20:5e: c2:5f:55:92:0a:1f:83:9a:cf:70:b0:a5:35:f5:bc: 60:9c:78:9b:8f:b6:5a:80:a1:47:79:0e:91:e4:64: 9c:3f:fd:48:6b:c3:99:77:a1:22:e1:23:40:6e:5b: 97:f4:ac:d1:2b:c6:df:34:19:24:3b:a6:06:92:6e: bc:48:cd:87:a4:ff:1f:65:58:13:01:e9:a9:a5:2c: 87:f3:e8:f6:db:c1:b3:cf:08:d7:25:88:46:83:0f: 81:bd:77:e8:0f:ac:4a:17:34:33:14:46:2e:f0:b8: 50:39:ad:a6:68:4f:c3:a7:59:e2:4c:c0:e5:78:3c: 44:95:f3:24:21:79:1b:ec:ac:c1:80:15:99:5f:64: e6:3e:ce:03:1c:94:05:68:14:a3:53:1e:44:d8:f2: 38:b2:76:ec:83:cf:34:13:8b:73:65:24:ff:a6:f7: a3:9a:a6:0e:f7:88:7a:7d:a9:83:37:22:9b:44:d6: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:69:2C:AB:AF:65:6E:DF:DD:D0:06:C0:16:2D:A5:39:96:FE:3F:C0 X509v3 Authority Key Identifier: keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:af:e4:f1:53:5d:05:10:a8:89:40:6f:27:88:11:75:84:78: b6:10:c1:f1:8e:1a:25:82:ce:d0:37:84:a1:18:fa:c9:ac:ad: 16:66:ad:6b:09:ee:6c:ab:6c:a7:f1:0c:bb:12:92:77:ac:96: 06:58:ab:75:35:6e:4a:61:bf:5e:4a:a3:2a:18:13:fa:35:eb: 26:e2:6c:5c:97:ed:61:3c:04:6f:25:3f:9e:f6:97:25:25:1a: ba:16:3b:f8:b7:58:cb:97:34:41:a0:3e:73:67:9c:de:b2:75: 0c:21:25:51:d3:95:5c:34:9c:61:be:22:8e:01:f8:b5:37:d1: 05:80:34:76:6a:f0:69:91:bd:2a:a5:82:83:83:f8:0d:fb:13: 71:57:c8:c3:84:32:57:b4:2e:d2:6c:de:95:aa:f7:d8:6e:3a: e2:19:e4:75:9e:9c:ee:29:8a:87:c6:42:43:a2:ed:fb:25:de: 24:cb:48:72:c9:c5:c5:6b:48:7c:08:48:77:81:86:2d:4e:c3: 76:d7:99:e5:a4:19:66:70:16:2b:3c:61:cf:74:20:11:7c:8b: 19:9f:99:dd:0e:c2:8a:17:8b:dc:95:c7:61:be:5c:55:6c:e4: 03:21:16:3d:a1:18:c1:bd:18:07:2b:83:e3:9c:f7:f8:d2:e3: 91:fb:cc:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpIR8f5j/0FMKYRe1R2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZTI1YmNjNTUzMGI2ZjQ2ZjNkMTFjYjgxMTNmMjE5YTQ2 ZGZkYWIwHhcNMjUxMjA2MDcwMDQ4WhcNMjUxMjA3MDcwMDQ4WjAzMTEwLwYDVQQD EyhkMTY5MmNhYmFmNjU2ZWRmZGRkMDA2YzAxNjJkYTUzOTk2ZmUzZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcq2MGT+yQ0fKSgZliSFPLWOq17W +d8Y3gsg0VQ0lGsJQEsXiMugGqA1p4PlgvC+/lQK+fvstvQ4MRkhWXzs4xY+30g2 2s7tIF7CX1WSCh+Dms9wsKU19bxgnHibj7ZagKFHeQ6R5GScP/1Ia8OZd6Ei4SNA bluX9KzRK8bfNBkkO6YGkm68SM2HpP8fZVgTAemppSyH8+j228GzzwjXJYhGgw+B vXfoD6xKFzQzFEYu8LhQOa2maE/Dp1niTMDleDxElfMkIXkb7KzBgBWZX2TmPs4D HJQFaBSjUx5E2PI4snbsg880E4tzZST/pvejmqYO94h6famDNyKbRNY0twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFpLKuvZW7f3dAGwBYtpTmW/j/AMB8GA1UdIwQY MBaAFLDiW8xVMLb0bz0Ry4ET8hmkbf2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUt MWFhZGFiYTgwMDcyLzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUtMWFhZGFiYTgwMDcy LzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQq/k8VNd BRCoiUBvJ4gRdYR4thDB8Y4aJYLO0DeEoRj6yaytFmatawnubKtsp/EMuxKSd6yW BlirdTVuSmG/XkqjKhgT+jXrJuJsXJftYTwEbyU/nvaXJSUauhY7+LdYy5c0QaA+ c2ec3rJ1DCElUdOVXDScYb4ijgH4tTfRBYA0dmrwaZG9KqWCg4P4DfsTcVfIw4Qy V7Qu0mzelar32G464hnkdZ6c7imKh8ZCQ6Lt+yXeJMtIcsnFxWtIfAhId4GGLU7D dteZ5aQZZnAWKzxhz3QgEXyLGZ+Z3Q7CiheL3JXHYb5cVWzkAyEWPaEYwb0YByuD 45z3+NLjkfvMVg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:32 2025 by rpki-client