This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json) Hash identifier: xlgm8cWarBzBtp0POR2BTBR0IPGHGSJQF+t7rFoo9Nw= Subject key identifier: 92:C2:6A:73:7E:ED:12:39:26:6C:1D:59:25:8D:AD:DB:27:65:1C:AE Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84 Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384 Certificate serial: 019AF2ADEB3D0389C5BFB51DEC0A98E67A4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft Manifest number: 04E0 Signing time: Sat 06 Dec 2025 08:01:15 +0000 Manifest this update: Sat 06 Dec 2025 08:01:15 +0000 Manifest next update: Sun 07 Dec 2025 08:01:15 +0000 Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: Limrko9E64m3vqle+bYPPodVnYvYoVfiNO2GD/pOQs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:eb:3d:03:89:c5:bf:b5:1d:ec:0a:98:e6:7a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384 Validity Not Before: Dec 6 08:01:15 2025 GMT Not After : Dec 7 08:01:15 2025 GMT Subject: CN=92c26a737eed1239266c1d59258daddb27651cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:7d:6b:7e:8d:5b:1b:bc:df:eb:6e:6d:b9: 3e:6d:b2:2f:bf:2e:e9:cc:0c:a8:d9:8c:49:cd:29: 95:6e:dc:95:90:8b:b6:bb:75:57:c0:e5:27:98:a3: 85:1b:29:cb:7a:ca:eb:46:a8:c7:c2:96:16:9e:95: a7:94:e0:c6:89:b1:52:03:ed:44:a1:da:6f:5b:ac: 38:91:74:5d:c4:5c:5b:ab:d0:f8:33:ee:23:e8:c7: ce:72:5f:b3:6e:65:17:82:1c:bb:78:3d:d7:e4:b6: b9:48:1a:9b:4a:92:56:cd:c2:b6:52:5d:8c:82:c1: f6:f3:af:0e:5e:72:e9:13:e6:bb:50:91:61:4e:d1: b9:f7:ce:ad:a1:45:d2:82:c7:10:5b:d3:cd:d9:77: e2:c2:10:bb:df:23:5a:1a:6b:eb:44:7a:d0:f2:78: 24:0d:30:0f:29:92:6e:bd:43:c2:09:a9:60:97:7e: 7c:6b:5a:ec:a4:fc:73:44:c0:3b:98:3c:c2:34:3b: fa:3f:b6:3e:e2:cf:15:68:62:a3:ee:d2:00:a2:87: 8b:9e:0b:7c:00:c1:e7:bc:f7:7a:fa:bb:43:2c:2c: 3e:55:31:6e:51:0a:d1:6a:51:5d:e9:a2:20:05:46: 66:fb:1f:58:3f:86:d1:bd:3d:5f:60:14:8d:9f:1b: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C2:6A:73:7E:ED:12:39:26:6C:1D:59:25:8D:AD:DB:27:65:1C:AE X509v3 Authority Key Identifier: keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:01:aa:4c:b3:2a:52:39:99:39:ab:b9:c0:11:cb:6a:02:1a: 84:81:a1:b4:8d:46:e2:69:75:a2:e9:9e:1f:d9:db:d7:ab:e9: 4c:8a:b9:92:ef:ab:20:52:6e:6f:bb:ec:ee:75:aa:76:0e:19: 3b:94:78:7f:dd:6d:c9:dd:f1:bd:78:33:36:3f:e6:99:ff:d0: 30:80:8e:fc:38:ad:aa:e0:7d:23:06:48:9a:8e:b5:d9:52:94: 7d:78:5f:ae:de:fa:ef:9d:ea:d5:df:58:6c:18:fb:0b:c5:e9: db:10:5a:9f:61:f3:9c:e2:bd:a2:e7:a5:da:cd:1c:fc:dd:a9: 9f:0b:8c:cd:a6:ff:51:8b:1d:1d:4d:e2:4d:f1:f1:ae:96:0c: 3c:07:8c:ec:09:0c:55:13:1f:82:52:30:3b:ea:b7:df:70:84: 2d:d5:b9:9b:fa:f7:6a:6f:8e:e0:84:e1:9b:e3:8b:90:bb:73: 96:e7:88:f6:6e:6e:24:98:b4:47:30:90:8e:59:79:e4:67:f3: b8:2d:81:ad:6d:1b:e6:73:a9:c7:7a:4e:5d:a6:44:9c:42:d0: a6:54:50:c8:a3:e9:ca:3b:d1:6d:6b:dc:d4:25:dc:76:e3:35: e3:fa:6d:22:e5:f2:61:92:43:6c:06:d0:34:a2:17:c4:42:05: 9d:e3:b1:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryres9A4nFv7Ud7AqY5npKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWYyMDZmZTMwODVkOTk0M2NiNmEwNjNkYzk3ZTBkZWI3 ZjQzODQwHhcNMjUxMjA2MDgwMTE1WhcNMjUxMjA3MDgwMTE1WjAzMTEwLwYDVQQD Eyg5MmMyNmE3MzdlZWQxMjM5MjY2YzFkNTkyNThkYWRkYjI3NjUxY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvit9a36NWxu83+tubbk+bbIvvy7p zAyo2YxJzSmVbtyVkIu2u3VXwOUnmKOFGynLesrrRqjHwpYWnpWnlODGibFSA+1E odpvW6w4kXRdxFxbq9D4M+4j6MfOcl+zbmUXghy7eD3X5La5SBqbSpJWzcK2Ul2M gsH2868OXnLpE+a7UJFhTtG5986toUXSgscQW9PN2XfiwhC73yNaGmvrRHrQ8ngk DTAPKZJuvUPCCalgl358a1rspPxzRMA7mDzCNDv6P7Y+4s8VaGKj7tIAooeLngt8 AMHnvPd6+rtDLCw+VTFuUQrRalFd6aIgBUZm+x9YP4bRvT1fYBSNnxs5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLCanN+7RI5JmwdWSWNrdsnZRyuMB8GA1UdIwQY MBaAFETvIG/jCF2ZQ8tqBj3Jfg3rf0OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQt ZmJkNTBjZDg4ZWM0LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQtZmJkNTBjZDg4ZWM0 LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQGqTLMq UjmZOau5wBHLagIahIGhtI1G4ml1oumeH9nb16vpTIq5ku+rIFJub7vs7nWqdg4Z O5R4f91tyd3xvXgzNj/mmf/QMICO/DitquB9IwZImo612VKUfXhfrt76753q1d9Y bBj7C8Xp2xBan2HznOK9ouel2s0c/N2pnwuMzab/UYsdHU3iTfHxrpYMPAeM7AkM VRMfglIwO+q333CELdW5m/r3am+O4IThm+OLkLtzlueI9m5uJJi0RzCQjll55Gfz uC2BrW0b5nOpx3pOXaZEnELQplRQyKPpyjvRbWvc1CXcduM14/ptIuXyYZJDbAbQ NKIXxEIFneOxNg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:40 2025 by rpki-client