This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft File: _08Gv_OluFFRtlcFtDCOmvsf2Pc.mft (raw, json) Hash identifier: Qbwa+fAWHeNaBJdfcFZYlUiTvU9ARRhBwtxmKebo3tk= Subject key identifier: D0:97:C2:8D:6D:0A:EB:28:5D:8D:5D:3F:1F:CA:A6:55:9F:4B:84:65 Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Certificate serial: 019B43934A0892621F8441FB88EAEBBB8096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft Manifest number: 1793 Signing time: Mon 22 Dec 2025 01:01:24 +0000 Manifest this update: Mon 22 Dec 2025 01:01:24 +0000 Manifest next update: Tue 23 Dec 2025 01:01:24 +0000 Files and hashes: 1: 7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa (hash: /MIDEJVEQSp9V1rCF5ezc9jg3qtYKJbL8o4PDhdKQ+g=) 2: _08Gv_OluFFRtlcFtDCOmvsf2Pc.crl (hash: KNTXaiI5P9090OHsM7WL7i1TyKuEhmadA7SuXPVSRxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:4a:08:92:62:1f:84:41:fb:88:ea:eb:bb:80:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Validity Not Before: Dec 22 01:01:24 2025 GMT Not After : Dec 23 01:01:24 2025 GMT Subject: CN=d097c28d6d0aeb285d8d5d3f1fcaa6559f4b8465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:06:12:71:4e:5a:3b:e2:09:a1:44:6b:a8: 0f:5d:92:7b:fa:c0:0b:35:31:75:a6:c2:a2:5c:5f: 45:9a:22:28:00:e4:d3:21:3e:e4:2e:a3:19:6c:a6: 50:be:6a:87:79:13:7f:78:8e:04:75:1d:8d:ed:d5: 87:96:6a:88:8f:97:13:7d:0c:6f:a6:64:6e:d3:69: eb:1d:f3:2d:71:e5:14:8c:19:7a:15:70:ee:b4:7b: cb:19:b7:8b:1c:c3:85:0b:89:67:9f:65:bd:d7:31: 37:08:32:3e:5f:e8:0c:16:06:31:6c:83:e3:b5:48: f4:84:e8:44:07:7d:ce:1a:a5:3a:58:49:f7:21:0a: b0:58:3b:58:b8:45:cf:81:34:73:33:4d:4c:51:50: cf:cf:39:81:ee:b6:d4:d9:31:66:90:c8:a8:b2:8d: 6c:3a:c1:f2:12:76:6c:31:36:2c:29:b1:66:ea:74: ac:e7:42:f2:e3:0a:c9:e9:be:2e:bc:a9:2e:15:cd: b8:c2:05:51:82:93:e9:59:84:68:e6:69:5a:3d:a2: af:94:84:b4:4b:7c:19:72:f1:58:62:48:e6:ba:0c: 92:cd:f4:6e:b0:a1:21:0c:66:10:75:d1:66:5d:24: 1e:49:69:60:32:8c:7f:67:6e:0a:4b:2c:ff:fa:ca: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:97:C2:8D:6D:0A:EB:28:5D:8D:5D:3F:1F:CA:A6:55:9F:4B:84:65 X509v3 Authority Key Identifier: keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:dd:10:22:e7:2f:74:bf:4c:9f:a2:db:61:12:02:db:e3:a0: 00:dc:38:22:28:50:81:52:d0:34:11:8c:c0:f3:30:38:67:a5: d7:80:1e:e0:0e:60:24:6b:0f:d4:1f:be:cf:c8:9c:43:1f:75: 2e:73:3f:7c:5d:4d:d0:4f:2f:d6:b9:4d:dd:4b:ea:8c:8a:fc: 41:cd:af:c2:f0:b0:a1:c6:b6:cd:8b:08:e5:64:56:ee:c3:8a: 27:d0:84:8f:41:af:05:3a:5d:0f:4c:b9:c2:d2:6b:10:c0:10: a9:16:a9:de:f7:7c:e6:b4:01:fe:b0:2d:11:1c:64:5a:22:5f: a3:af:d4:09:bc:2d:63:cb:48:77:e6:58:f5:68:05:44:99:5e: f9:ad:83:cf:85:da:b2:60:d2:6c:26:51:1f:5e:a9:a4:ef:5c: 9d:2e:33:59:dd:33:58:af:d3:3e:ac:80:d3:e6:a0:d0:12:41: 63:78:8f:07:ae:e7:7e:3c:32:79:b2:5e:bb:81:48:b0:4d:60: 7b:7d:05:68:f5:21:40:aa:20:a5:d5:f7:98:d7:9b:bb:ad:76: b5:4b:ed:27:c4:c8:43:7c:9f:e9:1c:97:cf:a1:f0:67:9c:5d: ed:8b:d1:60:d0:e8:cc:ac:5d:82:5a:df:e6:e6:a3:2f:32:d3: 8e:2b:63:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDk0oIkmIfhEH7iOrru4CWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGYwNmJmZjNhNWI4NTE1MWI2NTcwNWI0MzA4ZTlhZmIx ZmQ4ZjcwHhcNMjUxMjIyMDEwMTI0WhcNMjUxMjIzMDEwMTI0WjAzMTEwLwYDVQQD EyhkMDk3YzI4ZDZkMGFlYjI4NWQ4ZDVkM2YxZmNhYTY1NTlmNGI4NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTIGEnFOWjviCaFEa6gPXZJ7+sAL NTF1psKiXF9FmiIoAOTTIT7kLqMZbKZQvmqHeRN/eI4EdR2N7dWHlmqIj5cTfQxv pmRu02nrHfMtceUUjBl6FXDutHvLGbeLHMOFC4lnn2W91zE3CDI+X+gMFgYxbIPj tUj0hOhEB33OGqU6WEn3IQqwWDtYuEXPgTRzM01MUVDPzzmB7rbU2TFmkMioso1s OsHyEnZsMTYsKbFm6nSs50Ly4wrJ6b4uvKkuFc24wgVRgpPpWYRo5mlaPaKvlIS0 S3wZcvFYYkjmugySzfRusKEhDGYQddFmXSQeSWlgMox/Z24KSyz/+spbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCXwo1tCusoXY1dPx/KplWfS4RlMB8GA1UdIwQY MBaAFP9PBr/zpbhRUbZXBbQwjpr7H9j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2Et MjVlZmZkZDc5NmRjLzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2EtMjVlZmZkZDc5NmRj LzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP90QIucv dL9Mn6LbYRIC2+OgANw4IihQgVLQNBGMwPMwOGel14Ae4A5gJGsP1B++z8icQx91 LnM/fF1N0E8v1rlN3UvqjIr8Qc2vwvCwoca2zYsI5WRW7sOKJ9CEj0GvBTpdD0y5 wtJrEMAQqRap3vd85rQB/rAtERxkWiJfo6/UCbwtY8tId+ZY9WgFRJle+a2Dz4Xa smDSbCZRH16ppO9cnS4zWd0zWK/TPqyA0+ag0BJBY3iPB67nfjwyebJeu4FIsE1g e30FaPUhQKogpdX3mNebu612tUvtJ8TIQ3yf6RyXz6HwZ5xd7YvRYNDozKxdglrf 5uajLzLTjitj4w== -----END CERTIFICATE-----Generated at Mon Dec 22 05:48:39 2025 by rpki-client