This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json) Hash identifier: 0A7Kb+tM0ld0VVgw2kRT3QJy+ciJ7gVEk6UqaYLFkg4= Subject key identifier: 41:FD:B2:B0:F0:41:D5:94:2C:1A:50:36:8F:DE:23:AE:D0:80:0C:08 Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89 Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89 Certificate serial: 019AF2766B5E976750EE4B1F75976DBF4A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft Manifest number: 0B9C Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: VmX9F7Q8GZ1+cGgbqkOmcRZCrUxxrCC9Rz2lhaSElVo=) 2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6b:5e:97:67:50:ee:4b:1f:75:97:6d:bf:4a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=41fdb2b0f041d5942c1a50368fde23aed0800c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:d7:59:e8:9a:5b:ff:1b:b8:ff:b5:88:76: 13:2e:d9:65:11:b6:96:98:f8:60:0d:2e:6b:8d:eb: 7f:fc:27:7c:cc:82:81:d3:ea:a6:c8:78:55:43:2d: 5f:27:60:3d:54:a6:f6:4a:88:54:e2:72:ca:c3:a5: 68:51:f2:d3:b3:e4:c6:e6:e6:3d:f6:a0:09:d4:2a: e5:6a:6e:ec:fc:88:3d:b3:0e:91:36:56:1b:7d:f2: 8f:04:78:0a:19:09:2b:ab:ca:d9:8f:41:72:14:e0: bf:85:0e:d2:a2:5c:40:8f:e2:0b:11:15:0e:92:9d: 5a:0e:6c:e5:1b:1f:7c:9a:4c:13:0a:38:eb:8e:e6: aa:b7:10:1b:ec:98:f7:3d:bf:e5:29:bb:79:b4:8e: af:88:74:c5:c9:7a:49:b3:38:54:08:0d:7e:d3:24: 01:fa:97:f3:bd:ac:ff:2f:66:2d:be:d4:98:6e:57: 9e:24:68:41:6f:4e:45:4e:1a:88:38:be:c7:2f:15: c3:11:61:b1:85:99:f1:94:a1:f5:c8:d2:2e:89:84: ab:95:d1:ba:ab:be:d5:01:b6:62:85:d0:bf:f9:7b: ff:aa:61:c3:f6:c4:d2:ed:58:cf:4e:a0:d1:6f:9a: bf:0b:d4:ad:96:0d:f1:15:3b:66:89:7c:da:47:59: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FD:B2:B0:F0:41:D5:94:2C:1A:50:36:8F:DE:23:AE:D0:80:0C:08 X509v3 Authority Key Identifier: keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9c:9a:a6:f7:4a:97:b2:6b:08:b3:25:20:d5:b1:aa:f0:76: 74:c3:e2:75:62:3d:de:43:90:74:66:f3:79:ad:24:8f:20:19: 91:db:64:e8:27:9b:b0:35:52:36:81:1f:49:7a:f8:95:9c:86: f4:26:bf:cf:f9:a6:38:47:4e:1d:16:b4:3d:33:ed:da:25:c9: b6:91:a7:1b:7d:9a:eb:12:67:d7:74:21:95:8e:0f:5a:57:09: 0b:c3:1e:75:71:95:d9:de:a9:43:4d:c9:ae:41:63:5d:86:56: d6:ec:74:1f:a9:75:53:d9:fc:2f:4a:be:ab:4c:20:43:89:fa: 0a:ca:1b:7b:77:9d:e1:28:ac:8b:82:91:6b:94:8f:82:62:4c: 94:95:f3:00:35:c0:70:c9:a8:38:c8:3b:3e:36:40:76:d1:45: 29:fd:d1:c1:af:5b:fe:b9:87:bf:64:40:6c:1b:6e:2c:6f:a5: 22:da:a2:42:f4:28:99:ee:57:d2:14:61:99:37:17:53:8f:71: 5e:4c:ab:b3:e8:1b:1b:3f:2b:48:54:fe:4b:b8:56:99:c1:7f: 6c:26:03:ed:07:e6:0b:8c:44:37:20:b6:0b:79:1a:56:14:03: 4a:a9:4a:78:57:87:f8:9e:c3:92:ff:f9:47:92:11:35:24:43: 27:84:f3:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmtel2dQ7ksfdZdtv0qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl YTdhODkwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD Eyg0MWZkYjJiMGYwNDFkNTk0MmMxYTUwMzY4ZmRlMjNhZWQwODAwYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOvXWeiaW/8buP+1iHYTLtllEbaW mPhgDS5rjet//Cd8zIKB0+qmyHhVQy1fJ2A9VKb2SohU4nLKw6VoUfLTs+TG5uY9 9qAJ1Crlam7s/Ig9sw6RNlYbffKPBHgKGQkrq8rZj0FyFOC/hQ7SolxAj+ILERUO kp1aDmzlGx98mkwTCjjrjuaqtxAb7Jj3Pb/lKbt5tI6viHTFyXpJszhUCA1+0yQB +pfzvaz/L2YtvtSYbleeJGhBb05FThqIOL7HLxXDEWGxhZnxlKH1yNIuiYSrldG6 q77VAbZihdC/+Xv/qmHD9sTS7VjPTqDRb5q/C9Stlg3xFTtmiXzaR1m3mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEH9srDwQdWULBpQNo/eI67QgAwIMB8GA1UdIwQY MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1 LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZyapvdK l7JrCLMlINWxqvB2dMPidWI93kOQdGbzea0kjyAZkdtk6CebsDVSNoEfSXr4lZyG 9Ca/z/mmOEdOHRa0PTPt2iXJtpGnG32a6xJn13QhlY4PWlcJC8MedXGV2d6pQ03J rkFjXYZW1ux0H6l1U9n8L0q+q0wgQ4n6Csobe3ed4Sisi4KRa5SPgmJMlJXzADXA cMmoOMg7PjZAdtFFKf3Rwa9b/rmHv2RAbBtuLG+lItqiQvQome5X0hRhmTcXU49x Xkyrs+gbGz8rSFT+S7hWmcF/bCYD7QfmC4xENyC2C3kaVhQDSqlKeFeH+J7Dkv/5 R5IRNSRDJ4Tzeg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:51 2025 by rpki-client