This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json) Hash identifier: dRd6IEGSlhN1GCP/VG3KLraK3JMFZTpcd4zbQUZdSXw= Subject key identifier: 5B:E0:FA:21:99:88:18:6E:60:CC:40:5A:B5:B3:D7:2E:33:EB:A3:F3 Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Certificate serial: 019AF2ADCD258B3EBC1394DA78EDDA02ED6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft Manifest number: 0A50 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: ItoiIaHUwzU42cDnPlv3HD1Jbi3VI6j5bZ7BcPcKFZ8=) 2: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=) 3: YDaMnob-poIuRLZ4wAjLgOqFZQM.roa (hash: EN3W1yByHMOyyQbNASn6BXFzScIQPAOmgfjXpvzxDJ0=) 4: ocQ6hkGGlpLFqJevmWMP4yG9kcg.roa (hash: V2gAUafgNGkT92VkWusvaTxnq34wT53AXCaLQN/T3EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cd:25:8b:3e:bc:13:94:da:78:ed:da:02:ed:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=5be0fa219988186e60cc405ab5b3d72e33eba3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:6e:f2:fe:f0:1a:25:e9:a0:04:18:99:73: b2:83:d2:1f:78:2e:7a:8e:70:29:9f:9a:e5:b4:e1: 5c:f8:1a:93:f8:c6:a7:72:08:47:cc:b6:52:2b:7f: 7e:94:37:c0:a3:e2:3e:8c:aa:5b:1d:76:d8:79:2f: 84:1c:34:09:69:9a:a0:0a:c3:bf:0e:f5:d9:99:73: b4:0f:6f:1c:82:a7:0c:48:8d:76:fd:1a:16:b8:60: 89:26:10:79:f9:a4:12:45:ec:f1:5e:98:2c:2c:d7: e7:66:97:83:a3:f9:14:69:c3:dc:45:af:39:7a:b9: 8b:a3:47:a5:70:12:a4:fe:e5:70:b4:99:a1:b6:6a: bc:60:9e:13:29:34:a7:5d:f7:8c:22:7a:10:5f:25: 0b:8c:60:eb:be:26:d6:4c:a6:2b:7f:e6:2f:c8:77: 5e:ee:bb:a2:0c:dc:a4:64:26:4f:28:ac:42:86:8c: ca:95:5f:09:79:8b:6f:ea:f8:ee:3f:f3:1a:ae:d8: db:57:00:70:29:70:55:15:1e:c4:c8:47:01:15:ba: 86:52:78:13:4b:a2:54:be:ad:26:9d:8a:81:ee:61: 2c:29:ab:ba:34:7b:85:30:e7:69:ab:06:db:3f:00: 48:31:f2:76:8b:b2:45:1c:3b:45:ec:16:2e:c0:64: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E0:FA:21:99:88:18:6E:60:CC:40:5A:B5:B3:D7:2E:33:EB:A3:F3 X509v3 Authority Key Identifier: keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f9:d7:fd:89:03:56:41:d3:8c:66:75:c2:4a:f3:e7:43:a2: af:3d:8e:12:23:6d:06:e2:29:7c:5a:38:b5:19:25:4c:40:75: fc:91:ea:11:bd:50:91:b3:1d:5c:54:02:a1:06:34:8f:ea:0a: 2b:ac:aa:48:54:d0:96:7e:07:bd:94:56:78:be:6d:50:8d:91: e4:7e:78:45:d4:88:5a:71:7d:e4:e0:ba:ad:8f:4f:fa:5f:b7: 9d:43:9a:62:4e:99:61:3f:8d:de:a3:c6:78:98:0f:d8:9c:d1: 12:ef:16:ad:89:78:7f:fb:a1:39:b2:db:a5:59:e4:6b:1a:e2: c1:bf:07:dc:00:bf:ee:d8:45:90:ba:2a:f7:d0:10:d7:d9:d9: 0a:23:69:36:ab:4b:04:c6:2a:c5:8b:57:28:2d:fb:22:00:13: e2:ab:4d:c6:0c:5e:81:a6:35:46:22:f9:2d:cd:b7:1e:ac:95: 59:5b:9d:30:19:94:93:ef:22:92:e3:ce:99:49:8b:df:be:3a: 77:f7:90:0a:63:d7:c7:55:30:9e:b4:6c:e7:71:ca:7c:ee:6c: ec:da:40:9d:af:4a:d2:64:20:12:2c:ae:f9:7a:93:22:4b:45: 91:61:a2:ee:54:b7:36:7c:bd:a6:0f:30:38:d8:ad:08:e6:46: 6f:1e:86:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc0liz68E5TaeO3aAu1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2NiYzcwZTE4YjZjNjllNTNlZjUyYTVlOTI1ZTVmNGYw Y2RjYzEwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD Eyg1YmUwZmEyMTk5ODgxODZlNjBjYzQwNWFiNWIzZDcyZTMzZWJhM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPtu8v7wGiXpoAQYmXOyg9IfeC56 jnApn5rltOFc+BqT+MancghHzLZSK39+lDfAo+I+jKpbHXbYeS+EHDQJaZqgCsO/ DvXZmXO0D28cgqcMSI12/RoWuGCJJhB5+aQSRezxXpgsLNfnZpeDo/kUacPcRa85 ermLo0elcBKk/uVwtJmhtmq8YJ4TKTSnXfeMInoQXyULjGDrvibWTKYrf+YvyHde 7ruiDNykZCZPKKxChozKlV8JeYtv6vjuP/MartjbVwBwKXBVFR7EyEcBFbqGUngT S6JUvq0mnYqB7mEsKau6NHuFMOdpqwbbPwBIMfJ2i7JFHDtF7BYuwGT/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvg+iGZiBhuYMxAWrWz1y4z66PzMB8GA1UdIwQY MBaAFDvMvHDhi2xp5T71Kl6SXl9PDNzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgt YmJlNjBlYTIyMmM1LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgtYmJlNjBlYTIyMmM1 LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/nX/YkD VkHTjGZ1wkrz50Oirz2OEiNtBuIpfFo4tRklTEB1/JHqEb1QkbMdXFQCoQY0j+oK K6yqSFTQln4HvZRWeL5tUI2R5H54RdSIWnF95OC6rY9P+l+3nUOaYk6ZYT+N3qPG eJgP2JzREu8WrYl4f/uhObLbpVnkaxriwb8H3AC/7thFkLoq99AQ19nZCiNpNqtL BMYqxYtXKC37IgAT4qtNxgxegaY1RiL5Lc23HqyVWVudMBmUk+8ikuPOmUmL3746 d/eQCmPXx1UwnrRs53HKfO5s7NpAna9K0mQgEiyu+XqTIktFkWGi7lS3Nny9pg8w ONitCOZGbx6Gaw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:38 2025 by rpki-client