This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json) Hash identifier: rcBDzVYxEL0bx4DpsiaNoALpaSHpt9/z1EqEHkPW90M= Subject key identifier: 49:3A:39:93:C9:99:F2:18:19:E9:E9:12:97:37:69:46:2D:6E:92:00 Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec Certificate serial: 019AF0F5E03C4F8BF1614E5791BA33F00D0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 00:00:36 +0000 Manifest this update: Sat 06 Dec 2025 00:00:36 +0000 Manifest next update: Sun 07 Dec 2025 00:00:36 +0000 Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: +jMG1gJV16BuJihovYsXkro+Pvqw2pUAYnUsx0q2zMM=) 2: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e0:3c:4f:8b:f1:61:4e:57:91:ba:33:f0:0d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec Validity Not Before: Dec 6 00:00:36 2025 GMT Not After : Dec 7 00:00:36 2025 GMT Subject: CN=493a3993c999f21819e9e912973769462d6e9200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6c:29:6d:9d:56:dc:bc:57:69:00:9d:e5:6c: cc:c8:f5:c2:ca:aa:63:12:25:eb:ae:2b:97:bd:20: d3:e0:a3:b1:4c:cd:db:0b:58:25:46:17:ad:29:cb: 40:e9:e4:0d:95:4a:de:af:f0:bf:f1:0f:0b:13:7c: 2d:22:ec:50:38:20:a8:35:9d:3a:d0:2b:05:98:86: 90:00:5d:7a:42:d4:e5:7c:fb:c5:74:5e:32:49:8b: 42:40:08:a7:f8:66:23:dd:49:c7:54:04:93:e7:c9: 0d:3e:6a:be:c0:72:f1:de:21:d2:3c:b9:75:f2:ac: c6:6e:b8:d5:25:ea:81:fd:f8:12:0e:0d:bf:f7:ba: 6d:17:fb:5b:21:e6:b2:63:a2:1a:3f:ff:70:b8:1c: 08:58:5d:fd:35:54:d6:5e:ca:48:5d:19:2d:7e:dc: 80:b0:46:57:48:5a:e5:0d:12:a4:16:4d:7c:8d:27: 01:a1:b9:62:a5:b9:f9:5c:23:96:db:02:22:5e:65: e1:54:35:ac:c7:12:9a:48:70:d7:a9:34:8d:7b:95: 38:7c:73:9a:70:d8:05:8e:ad:9f:da:de:e9:14:2f: a5:3a:d1:67:d5:4e:af:67:17:6f:36:6b:dc:78:ae: 4c:08:38:95:66:a7:a5:88:4d:de:50:18:93:ee:4c: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3A:39:93:C9:99:F2:18:19:E9:E9:12:97:37:69:46:2D:6E:92:00 X509v3 Authority Key Identifier: keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fd:12:88:8c:3c:8a:b3:36:e8:e2:33:7a:58:e4:77:61:3c: 4a:fe:0c:9f:ff:37:91:b6:1e:69:fb:72:3c:eb:d7:e2:15:b4: fc:45:50:07:ab:7d:89:f7:40:50:ba:32:c3:71:85:83:d9:c1: 36:57:c3:15:12:03:04:9a:df:81:e6:ac:fc:eb:cc:af:44:6a: 9d:d1:7f:f8:26:b1:e4:7c:b4:67:d6:84:b0:da:03:9e:32:49: 4c:3c:f1:92:d2:1d:98:4f:aa:f5:b7:d0:ea:8e:25:22:2f:bd: 83:98:aa:68:02:51:73:ec:c0:c0:96:66:a1:80:a7:c5:92:e1: 78:2a:fa:86:94:57:bf:d6:4d:c6:b0:cd:4c:06:9c:bd:3a:b4: de:9e:e2:04:c4:1b:da:66:a1:25:68:43:75:df:e1:9c:53:d5: 4f:93:5b:e1:68:6b:2e:d2:12:3d:a2:f4:1a:af:0c:bd:d0:4f: 51:c3:b3:da:30:62:81:4f:1c:fb:cf:1e:e3:2e:9f:8b:07:13: 58:b7:39:7f:ef:40:ca:c1:1e:34:6e:d2:52:13:9d:d1:6e:3b: 6a:9a:89:d4:83:37:15:68:a8:18:a2:e8:ef:7c:1d:f5:8a:54: 07:4c:fe:4d:ed:91:df:c5:38:40:2d:36:13:e6:ba:c3:6f:3c: 11:26:75:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eA8T4vxYU5Xkboz8A0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw YTNhZWMwHhcNMjUxMjA2MDAwMDM2WhcNMjUxMjA3MDAwMDM2WjAzMTEwLwYDVQQD Eyg0OTNhMzk5M2M5OTlmMjE4MTllOWU5MTI5NzM3Njk0NjJkNmU5MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72wpbZ1W3LxXaQCd5WzMyPXCyqpj EiXrriuXvSDT4KOxTM3bC1glRhetKctA6eQNlUrer/C/8Q8LE3wtIuxQOCCoNZ06 0CsFmIaQAF16QtTlfPvFdF4ySYtCQAin+GYj3UnHVAST58kNPmq+wHLx3iHSPLl1 8qzGbrjVJeqB/fgSDg2/97ptF/tbIeayY6IaP/9wuBwIWF39NVTWXspIXRktftyA sEZXSFrlDRKkFk18jScBoblipbn5XCOW2wIiXmXhVDWsxxKaSHDXqTSNe5U4fHOa cNgFjq2f2t7pFC+lOtFn1U6vZxdvNmvceK5MCDiVZqeliE3eUBiT7kw8+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEk6OZPJmfIYGenpEpc3aUYtbpIAMB8GA1UdIwQY MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt NDM2MTJlN2Q5Y2MxLzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf0SiIw8 irM26OIzeljkd2E8Sv4Mn/83kbYeaftyPOvX4hW0/EVQB6t9ifdAULoyw3GFg9nB NlfDFRIDBJrfgeas/OvMr0RqndF/+Cax5Hy0Z9aEsNoDnjJJTDzxktIdmE+q9bfQ 6o4lIi+9g5iqaAJRc+zAwJZmoYCnxZLheCr6hpRXv9ZNxrDNTAacvTq03p7iBMQb 2mahJWhDdd/hnFPVT5Nb4WhrLtISPaL0Gq8MvdBPUcOz2jBigU8c+88e4y6fiwcT WLc5f+9AysEeNG7SUhOd0W47apqJ1IM3FWioGKLo73wd9YpUB0z+Te2R38U4QC02 E+a6w288ESZ1Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:30 2025 by rpki-client