This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json) Hash identifier: y4fGHdBSbGAxllfVjaYl2jraJkwe5IblNEI+Ash0OcU= Subject key identifier: A6:A3:CC:A4:23:69:8B:A8:EB:F2:63:3E:90:31:68:B5:BE:16:53:F5 Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e Certificate serial: 019AF208F7D106592E770D93D92BD91DD07F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft Manifest number: 120B Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: vtRmcIix+NT4PHO3mXk7BLq4hyb+VHW6pb3NvAjET2s=) 2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f7:d1:06:59:2e:77:0d:93:d9:2b:d9:1d:d0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=a6a3cca423698ba8ebf2633e903168b5be1653f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:fc:e6:63:c9:52:27:fc:10:ac:a7:a4:2b: 6e:79:13:93:e7:b9:1e:d4:6a:5a:f4:b4:ee:3b:7a: 8b:7f:69:d3:7a:78:73:93:61:5b:e7:92:cb:d7:1d: 9f:b4:bc:32:bd:5a:5b:6f:5a:0f:2a:dc:12:83:ef: 4c:02:fb:cb:de:cd:dc:ad:2b:18:be:7f:c3:43:61: c8:4d:79:7e:e5:bd:b2:10:75:8f:2b:05:5a:d7:62: 61:fd:93:40:c0:9a:f3:d7:48:19:e1:0c:28:e3:10: 2a:dc:7e:5d:49:31:16:20:80:70:cd:99:4d:ae:23: 9e:9f:cc:7e:07:03:51:7b:0c:79:19:24:d8:25:a5: 60:35:fb:01:b0:bb:3a:ea:f1:0c:95:54:af:f4:4b: c0:f4:a3:1a:96:1f:4f:bd:70:b7:69:ea:e3:e0:b4: d3:e6:48:3f:8a:a4:ca:8d:bf:45:c8:fe:5d:19:4d: 49:15:53:38:94:ae:7d:b0:5b:f9:04:41:24:ef:6d: 01:d8:f2:ef:dc:4e:bb:49:fc:99:5f:83:a3:bd:02: ad:70:47:e5:71:83:c4:61:14:e7:48:4d:43:7f:6d: 7c:0b:37:17:6d:3d:78:28:c4:86:3c:4f:48:b7:2c: 15:05:65:6e:a0:b5:86:4c:02:89:f5:ae:f0:ed:e9: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A3:CC:A4:23:69:8B:A8:EB:F2:63:3E:90:31:68:B5:BE:16:53:F5 X509v3 Authority Key Identifier: keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:4a:e4:a8:b4:1f:b6:c2:70:2f:66:f4:08:d3:3b:11:1e:81: d6:e0:fe:d4:b7:b9:67:d8:48:2d:6f:7b:6c:34:b2:ad:b2:92: 6f:fe:00:ce:eb:eb:01:61:dc:b8:55:2b:16:6e:7c:98:d5:f3: 5a:40:90:ab:4f:1e:1b:48:27:f7:e5:98:44:88:d0:87:64:88: 75:2a:5b:24:7e:df:c0:e5:b9:19:51:02:de:71:75:38:0f:f9: 6b:e3:61:98:30:61:dd:1d:89:94:c6:86:9c:2c:a2:0b:3d:45: c1:d5:b7:43:06:02:5b:2c:61:4e:12:c6:1e:48:cf:c6:4e:a5: 19:b0:3f:99:ee:74:d7:68:b7:a4:f3:0d:14:30:53:31:16:17: 77:40:c0:12:22:ef:d7:5e:8a:41:32:f1:a5:8e:2c:e6:de:82: 0f:21:c5:d7:91:2a:bc:c9:9a:5e:bd:af:89:14:3a:e9:b6:9f: 79:20:4b:b7:22:be:df:ca:3d:ca:12:40:c8:e6:05:ca:17:b0: 95:8e:de:d0:f7:7d:d1:83:55:25:1f:25:78:5e:98:dd:69:86: dd:fe:d2:47:99:70:66:d5:a2:09:c4:b0:ac:6c:2c:cf:7d:e5: 23:b6:f0:4d:61:94:2a:fc:8f:56:af:77:70:2d:43:9a:00:0a: 5b:f4:93:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPfRBlkudw2T2SvZHdB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOGUwYjc1OGJlNzNhMWRkYmZiNTE3ZWU4YjVlNGY4NjNh MjFmOWUwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EyhhNmEzY2NhNDIzNjk4YmE4ZWJmMjYzM2U5MDMxNjhiNWJlMTY1M2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppr85mPJUif8EKynpCtueROT57ke 1Gpa9LTuO3qLf2nTenhzk2Fb55LL1x2ftLwyvVpbb1oPKtwSg+9MAvvL3s3crSsY vn/DQ2HITXl+5b2yEHWPKwVa12Jh/ZNAwJrz10gZ4Qwo4xAq3H5dSTEWIIBwzZlN riOen8x+BwNRewx5GSTYJaVgNfsBsLs66vEMlVSv9EvA9KMalh9PvXC3aerj4LTT 5kg/iqTKjb9FyP5dGU1JFVM4lK59sFv5BEEk720B2PLv3E67SfyZX4OjvQKtcEfl cYPEYRTnSE1Df218CzcXbT14KMSGPE9ItywVBWVuoLWGTAKJ9a7w7emY2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKajzKQjaYuo6/JjPpAxaLW+FlP1MB8GA1UdIwQY MBaAFPKOC3WL5zod2/tRfui15Phjoh+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUt NjllM2QwODY2ZWY2LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUtNjllM2QwODY2ZWY2 LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ErkqLQf tsJwL2b0CNM7ER6B1uD+1Le5Z9hILW97bDSyrbKSb/4AzuvrAWHcuFUrFm58mNXz WkCQq08eG0gn9+WYRIjQh2SIdSpbJH7fwOW5GVEC3nF1OA/5a+NhmDBh3R2JlMaG nCyiCz1FwdW3QwYCWyxhThLGHkjPxk6lGbA/me5012i3pPMNFDBTMRYXd0DAEiLv 116KQTLxpY4s5t6CDyHF15EqvMmaXr2viRQ66bafeSBLtyK+38o9yhJAyOYFyhew lY7e0Pd90YNVJR8leF6Y3WmG3f7SR5lwZtWiCcSwrGwsz33lI7bwTWGUKvyPVq93 cC1DmgAKW/ST0A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:06 2025 by rpki-client