This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json) Hash identifier: xl1gQn4Jd+b9BpTtfug4+35IkLXwVxUZCqkO1Vp7Ur8= Subject key identifier: EE:4B:0B:29:E6:02:5A:64:1D:33:FA:11:C1:63:7B:20:56:C8:E0:B3 Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a Certificate serial: 019AF2093C9FE91FF2AB8ACDCB31CF0569F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft Manifest number: 0B27 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=) 2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: R5XizPPmFTPxK+gWRH61VdjZVFvI9A1P9tHsuysKL00=) 3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3c:9f:e9:1f:f2:ab:8a:cd:cb:31:cf:05:69:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=ee4b0b29e6025a641d33fa11c1637b2056c8e0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cc:12:ef:3d:cf:83:9d:69:dd:fe:4d:c9:96: 4a:2d:aa:8a:8d:a5:1c:70:36:21:94:e9:36:c5:70: 93:80:4d:d6:a5:6a:f4:1b:ec:c1:42:4f:26:1d:aa: 96:12:ec:b2:93:c7:f8:d6:05:4f:92:63:f0:4e:50: 00:e4:59:23:e5:6f:27:90:d5:be:0e:b7:1f:a0:9e: 91:cd:1b:de:ab:f1:2e:73:1d:f9:f6:cc:f7:bd:df: b7:5f:b4:f7:15:ae:9c:79:e1:b0:16:cb:0f:08:7d: 64:28:c6:fe:3c:2f:1b:f8:9d:f3:68:c0:7b:88:09: 3f:82:bd:dc:1e:c8:f5:e5:ec:19:d8:fd:3f:fb:0f: bc:6f:58:c7:51:1a:9a:9c:66:fe:1c:44:78:43:8d: c6:c5:c2:eb:ad:5a:df:68:20:ce:02:95:6f:50:78: 6b:50:72:fd:b0:55:cd:c0:ee:3d:e2:4e:d2:9d:59: 5a:eb:0d:67:39:e2:6d:af:fb:41:34:64:f6:ba:5b: cf:48:7a:7b:20:3e:1a:27:f5:96:03:68:cb:bc:2b: 3f:99:1e:ed:cb:e7:f2:e9:24:ac:32:9e:0a:18:b1: e5:88:5a:26:7c:4f:f7:e0:be:e7:6e:cf:e2:6e:64: 86:10:62:26:f8:58:4f:92:ff:a0:a2:d0:19:97:d7: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4B:0B:29:E6:02:5A:64:1D:33:FA:11:C1:63:7B:20:56:C8:E0:B3 X509v3 Authority Key Identifier: keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:52:0b:9f:10:b9:93:30:56:0d:12:de:a2:30:85:bb:6c:5b: b6:ee:20:9d:88:d0:28:ff:c9:ba:b3:5e:9c:f6:a8:f0:bb:3e: 18:4a:4f:73:d8:d7:df:74:32:76:9e:92:08:a3:bf:a4:43:e9: fa:78:c6:b5:7c:fb:49:62:0b:13:e7:e7:db:20:f8:b7:48:14: ad:d2:97:62:b8:a0:99:61:75:4a:53:87:d1:01:8b:4c:6a:f2: 1c:d1:83:6d:90:6f:ac:c2:a6:92:34:70:ec:48:bf:60:01:d7: 87:c0:7b:59:45:b7:54:82:ca:1e:6e:f2:10:b9:52:5f:b8:9d: 56:2d:f3:2e:33:32:f9:cc:17:33:e6:e0:2d:c2:db:7e:71:43: 73:f7:b8:1a:87:f5:08:e3:0a:3d:98:f8:d4:b8:7c:ee:6f:04: 26:5b:32:8a:a2:43:23:d9:53:a2:30:5b:96:c5:c5:b6:fc:90: 0f:f8:b8:8a:e1:bd:46:0a:43:d5:05:01:63:69:80:89:6c:79: 1e:9a:ef:fb:1f:9b:10:ad:51:ec:9f:c8:34:9e:22:4f:86:90: 10:61:10:df:45:ff:38:1b:27:b2:27:cb:71:53:54:6e:3a:f1: 88:5c:b0:d8:fb:8c:da:87:11:49:56:d5:1c:42:ae:21:ff:5e: b4:bc:d6:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTyf6R/yq4rNyzHPBWnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2EzNGEzMDM0MTc3ZDA4NDMzOGQzM2IwODliN2UwM2Nj YTNhOGEwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhlZTRiMGIyOWU2MDI1YTY0MWQzM2ZhMTFjMTYzN2IyMDU2YzhlMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cwS7z3Pg51p3f5NyZZKLaqKjaUc cDYhlOk2xXCTgE3WpWr0G+zBQk8mHaqWEuyyk8f41gVPkmPwTlAA5Fkj5W8nkNW+ DrcfoJ6RzRveq/Eucx359sz3vd+3X7T3Fa6ceeGwFssPCH1kKMb+PC8b+J3zaMB7 iAk/gr3cHsj15ewZ2P0/+w+8b1jHURqanGb+HER4Q43GxcLrrVrfaCDOApVvUHhr UHL9sFXNwO494k7SnVla6w1nOeJtr/tBNGT2ulvPSHp7ID4aJ/WWA2jLvCs/mR7t y+fy6SSsMp4KGLHliFomfE/34L7nbs/ibmSGEGIm+FhPkv+gotAZl9d6cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5LCynmAlpkHTP6EcFjeyBWyOCzMB8GA1UdIwQY MBaAFDvKNKMDQXfQhDONM7CJt+A8yjqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDIt ODk3NTNmMmI0N2RjLzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDItODk3NTNmMmI0N2Rj LzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1ILnxC5 kzBWDRLeojCFu2xbtu4gnYjQKP/JurNenPao8Ls+GEpPc9jX33Qydp6SCKO/pEPp +njGtXz7SWILE+fn2yD4t0gUrdKXYrigmWF1SlOH0QGLTGryHNGDbZBvrMKmkjRw 7Ei/YAHXh8B7WUW3VILKHm7yELlSX7idVi3zLjMy+cwXM+bgLcLbfnFDc/e4Gof1 COMKPZj41Lh87m8EJlsyiqJDI9lTojBblsXFtvyQD/i4iuG9RgpD1QUBY2mAiWx5 Hprv+x+bEK1R7J/INJ4iT4aQEGEQ30X/OBsnsifLcVNUbjrxiFyw2PuM2ocRSVbV HEKuIf9etLzWEA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:00 2025 by rpki-client