This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json) Hash identifier: IJoghLmV2DZCaY9KHm/uBgrFtCWt0i3KbaYwDLMwM0o= Subject key identifier: 99:31:CC:F7:02:19:E6:69:D8:51:C6:30:65:6F:B8:54:54:AA:BA:92 Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54 Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54 Certificate serial: 019AF1D1ABA42936F464F5F33FA4D0949FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft Manifest number: 1199 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=) 2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: pan70oSN3HI17Pm8WYcYeI242RB9J+0O4ckY6I2QO14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ab:a4:29:36:f4:64:f5:f3:3f:a4:d0:94:9f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=9931ccf70219e669d851c630656fb85454aaba92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:7d:34:56:5e:ab:ac:a6:66:82:a0:82:f8: 0f:d5:65:b8:ec:8c:0c:80:24:e2:5e:45:be:03:56: 85:2b:09:c5:ce:62:90:5c:0b:5c:17:08:d1:c6:eb: 89:d6:96:cb:aa:fb:56:07:cd:28:23:8c:f3:19:3c: 55:27:ee:8e:b1:61:86:f5:8d:8b:0e:56:d9:80:29: 57:7c:05:4c:17:46:d5:69:f1:29:9f:c0:3a:74:fe: 53:f9:10:80:a2:ba:ba:2e:32:57:f2:e0:79:b5:93: 62:72:1d:df:8d:1d:c3:5f:5d:ea:c7:94:9c:95:3f: 84:db:c4:15:c6:05:81:1b:05:31:d7:0c:2d:22:f2: a4:b4:0c:55:89:f4:6a:74:bb:fa:c1:e5:ef:3b:32: 4e:0c:1c:1d:1e:1b:07:70:17:3a:32:8e:33:4c:f3: de:df:04:dd:06:8a:e2:41:09:cf:88:32:e8:61:2e: a1:f1:bd:5e:ae:cd:72:67:c3:94:9b:16:61:aa:38: 94:f9:a0:28:5a:4b:e5:27:9c:5c:26:b3:00:de:03: ae:9a:75:1f:5a:96:3b:b4:59:d4:9e:5c:45:b5:f9: a2:e3:60:9f:d8:82:e9:b7:ed:b7:ea:51:e6:c2:5b: 7e:8f:f7:0d:cb:9a:d1:48:f3:82:48:04:ac:57:db: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:31:CC:F7:02:19:E6:69:D8:51:C6:30:65:6F:B8:54:54:AA:BA:92 X509v3 Authority Key Identifier: keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:69:98:15:4b:44:c3:73:1e:07:b6:1f:e0:9a:32:d1:32: 1f:55:c0:4e:e5:61:4b:3f:d5:f8:d8:99:13:fb:73:43:c8:28: b5:e0:2b:2f:d6:3d:b0:e5:30:25:0b:59:47:67:16:44:d4:bd: 8b:28:87:f5:80:53:34:41:2d:dc:d8:ee:0c:bc:13:dd:20:a9: d5:79:40:c3:c3:24:18:18:61:c5:87:29:c2:8f:3c:9c:67:0f: 3d:04:94:37:ae:d2:a9:e3:14:31:36:3a:18:82:3d:9a:88:8f: c6:57:5b:70:d0:22:8c:89:75:fb:d9:d5:5e:4c:52:72:c0:c1: 7b:ea:61:5b:3b:ed:6d:02:f3:98:80:bc:74:33:f4:fb:03:c4: fd:fe:aa:49:9f:41:d2:d9:6f:7e:a3:cb:c3:00:9e:77:94:55: c0:d0:52:a8:25:86:40:4a:a9:8a:68:04:42:ad:8c:0c:d8:31: f7:ab:4e:29:0b:c2:31:1b:3f:aa:ad:bf:92:89:c7:ce:e1:70: ba:94:fc:43:81:51:56:04:a5:ac:c2:0e:9a:3f:21:60:93:0f: 26:0b:ba:be:b1:f0:e8:98:0e:a9:bc:f2:f7:58:3e:7f:d3:08: 9a:93:06:08:05:6e:99:5d:43:a4:c7:45:a9:29:35:d8:60:d8: a4:e4:df:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aukKTb0ZPXzP6TQlJ/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZWNjYzQ4MjAwY2VmMDIxNmMyY2U1Mzg2OWZkMTkyYjRh MjNmNTQwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD Eyg5OTMxY2NmNzAyMTllNjY5ZDg1MWM2MzA2NTZmYjg1NDU0YWFiYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5B9NFZeq6ymZoKggvgP1WW47IwM gCTiXkW+A1aFKwnFzmKQXAtcFwjRxuuJ1pbLqvtWB80oI4zzGTxVJ+6OsWGG9Y2L DlbZgClXfAVMF0bVafEpn8A6dP5T+RCAorq6LjJX8uB5tZNich3fjR3DX13qx5Sc lT+E28QVxgWBGwUx1wwtIvKktAxVifRqdLv6weXvOzJODBwdHhsHcBc6Mo4zTPPe 3wTdBoriQQnPiDLoYS6h8b1ers1yZ8OUmxZhqjiU+aAoWkvlJ5xcJrMA3gOumnUf WpY7tFnUnlxFtfmi42Cf2ILpt+236lHmwlt+j/cNy5rRSPOCSASsV9uTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkxzPcCGeZp2FHGMGVvuFRUqrqSMB8GA1UdIwQY MBaAFPDszEggDO8CFsLOU4af0ZK0oj9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAt YmI2NWM1OTAwZjc1LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAtYmI2NWM1OTAwZjc1 LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgVpmBVL RMNzHge2H+CaMtEyH1XATuVhSz/V+NiZE/tzQ8goteArL9Y9sOUwJQtZR2cWRNS9 iyiH9YBTNEEt3NjuDLwT3SCp1XlAw8MkGBhhxYcpwo88nGcPPQSUN67SqeMUMTY6 GII9moiPxldbcNAijIl1+9nVXkxScsDBe+phWzvtbQLzmIC8dDP0+wPE/f6qSZ9B 0tlvfqPLwwCed5RVwNBSqCWGQEqpimgEQq2MDNgx96tOKQvCMRs/qq2/konHzuFw upT8Q4FRVgSlrMIOmj8hYJMPJgu6vrHw6JgOqbzy91g+f9MImpMGCAVumV1DpMdF qSk12GDYpOTfgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:50 2025 by rpki-client