This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft File: o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json) Hash identifier: 4Piizltw7wShqbpkGklFMVyu+VFTWtTSoSVkEH1IWHI= Subject key identifier: 4F:95:FC:F4:D7:06:FD:F4:78:54:A7:63:47:50:A6:FD:AB:AB:1B:7A Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Certificate serial: 019AF464D8734CC36DC13E2C0899B51EB1B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft Manifest number: 08CC Signing time: Sat 06 Dec 2025 16:00:40 +0000 Manifest this update: Sat 06 Dec 2025 16:00:40 +0000 Manifest next update: Sun 07 Dec 2025 16:00:40 +0000 Files and hashes: 1: Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa (hash: /uxIZLUhjbrsvb3qsWaj7YVyFLtcx8Jkz3bF3E7gb3c=) 2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: 5SFqKxgTMll3ZGhm0lxoL7Q54GfpCDXSl5ZwFAdFUeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d8:73:4c:c3:6d:c1:3e:2c:08:99:b5:1e:b1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Validity Not Before: Dec 6 16:00:40 2025 GMT Not After : Dec 7 16:00:40 2025 GMT Subject: CN=4f95fcf4d706fdf47854a7634750a6fdabab1b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:bb:12:3c:17:00:06:52:ef:25:ca:46:a2: aa:08:d2:c3:85:50:27:1a:c9:68:35:17:f1:84:4b: 0a:40:78:b7:58:91:09:af:cb:f5:e8:c2:ce:47:b5: a3:35:ce:11:f6:65:b1:2f:f3:9b:5f:6c:c9:39:1e: 49:21:b4:63:c5:d0:4c:22:cd:4b:9a:ee:31:60:e2: b2:58:b5:9c:b6:b4:0d:34:dd:5d:4d:ce:c7:0a:0d: 39:5b:d6:44:2e:8e:75:22:11:e6:23:95:77:f3:89: 53:a5:30:93:d5:77:c8:31:c2:63:ff:fd:ad:0f:79: 7c:2c:e3:54:1a:11:21:e3:fd:5f:7c:15:b9:ec:cd: 45:2d:7e:37:40:a0:13:c5:4a:97:89:e9:f1:e0:08: 53:57:e7:c3:a2:a4:02:db:82:02:d6:56:ff:b8:4b: 4b:96:dd:1a:25:10:90:ea:21:67:dd:55:5d:db:25: 0c:57:83:28:64:54:56:a1:7f:8e:78:d6:5a:58:d9: ca:9e:8c:f7:3f:90:3c:b7:5d:c7:85:54:ba:7d:28: 6f:71:8f:fd:6e:56:65:a5:25:0f:e9:5f:1c:e4:3a: 56:38:94:be:91:d9:a4:33:0d:1c:48:53:cd:c2:41: 67:27:5b:a4:d6:fb:df:eb:01:79:40:76:b4:38:56: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:95:FC:F4:D7:06:FD:F4:78:54:A7:63:47:50:A6:FD:AB:AB:1B:7A X509v3 Authority Key Identifier: keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a4:a5:c5:27:da:0b:f7:75:24:85:b2:9c:a1:ba:27:f9:61: 45:72:6f:e4:05:0a:e3:92:7f:6b:0e:d8:0f:4c:41:cd:b0:2b: a5:a5:d7:73:ad:66:58:3f:69:69:43:07:22:ec:89:2e:e2:b9: 9f:51:e0:52:7f:28:38:7f:74:2c:6c:ca:5f:9a:e5:b6:b1:11: 70:12:d3:0a:7a:63:5c:83:ce:90:0a:1a:43:79:c2:a2:95:4b: 6c:f4:b3:65:59:08:7d:02:d4:4b:3d:50:61:9a:74:2f:8c:39: b2:a0:d1:25:af:32:e9:03:7c:d3:94:c8:4e:aa:0e:a5:04:62: 87:89:bf:bb:16:4a:dd:73:92:cb:1f:fe:02:24:84:77:03:cd: 76:84:57:07:1b:d7:f1:b7:2b:d1:7f:a1:71:72:22:cc:68:87: bc:cb:25:0e:e9:de:ce:62:85:91:12:1c:a8:ef:c0:63:a5:d7: 61:3b:82:fe:be:a9:f5:cc:23:9c:f9:b7:1f:df:30:d5:35:5b: 95:f7:47:62:d7:69:a3:ea:c7:8f:45:7d:f9:08:95:1e:64:2d: 80:c1:89:90:e8:68:4d:f0:12:8b:76:81:32:51:80:4b:e0:5b: 59:62:c9:53:a4:33:06:16:cf:05:74:95:49:5c:c3:f0:30:26: 0f:23:60:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNhzTMNtwT4sCJm1HrGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2VmOTNjYjdhY2IwZmI0OWJhMjg4YTdhMGZiZjI2ZDMw MDRmYTUwHhcNMjUxMjA2MTYwMDQwWhcNMjUxMjA3MTYwMDQwWjAzMTEwLwYDVQQD Eyg0Zjk1ZmNmNGQ3MDZmZGY0Nzg1NGE3NjM0NzUwYTZmZGFiYWIxYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNe7EjwXAAZS7yXKRqKqCNLDhVAn GsloNRfxhEsKQHi3WJEJr8v16MLOR7WjNc4R9mWxL/ObX2zJOR5JIbRjxdBMIs1L mu4xYOKyWLWctrQNNN1dTc7HCg05W9ZELo51IhHmI5V384lTpTCT1XfIMcJj//2t D3l8LONUGhEh4/1ffBW57M1FLX43QKATxUqXienx4AhTV+fDoqQC24IC1lb/uEtL lt0aJRCQ6iFn3VVd2yUMV4MoZFRWoX+OeNZaWNnKnoz3P5A8t13HhVS6fShvcY/9 blZlpSUP6V8c5DpWOJS+kdmkMw0cSFPNwkFnJ1uk1vvf6wF5QHa0OFZyfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+V/PTXBv30eFSnY0dQpv2rqxt6MB8GA1UdIwQY MBaAFKPO+Ty3rLD7SbooinoPvybTAE+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDkt NGI1Njk0OWVlNzUwLzEvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDktNGI1Njk0OWVlNzUw LzEvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKSlxSfa C/d1JIWynKG6J/lhRXJv5AUK45J/aw7YD0xBzbArpaXXc61mWD9paUMHIuyJLuK5 n1HgUn8oOH90LGzKX5rltrERcBLTCnpjXIPOkAoaQ3nCopVLbPSzZVkIfQLUSz1Q YZp0L4w5sqDRJa8y6QN805TITqoOpQRih4m/uxZK3XOSyx/+AiSEdwPNdoRXBxvX 8bcr0X+hcXIizGiHvMslDunezmKFkRIcqO/AY6XXYTuC/r6p9cwjnPm3H98w1TVb lfdHYtdpo+rHj0V9+QiVHmQtgMGJkOhoTfASi3aBMlGAS+BbWWLJU6QzBhbPBXSV SVzD8DAmDyNgww== -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:14 2025 by rpki-client