This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json) Hash identifier: aERPZ7ojBEnQd3+MUs2uCI0Lc8I/bna7TM72iFXBjls= Subject key identifier: B7:1F:45:B5:B0:77:68:B3:AF:72:40:52:AF:57:21:AB:F4:3C:E7:63 Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d Certificate serial: 019AF5E62CDF9D743495CB7E979B5EF14490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft Manifest number: 0550 Signing time: Sat 06 Dec 2025 23:01:33 +0000 Manifest this update: Sat 06 Dec 2025 23:01:33 +0000 Manifest next update: Sun 07 Dec 2025 23:01:33 +0000 Files and hashes: 1: X0-Djm0vHdUiJwsWds74O566gnw.roa (hash: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=) 2: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: HjYWTxtuZTuqENCPJP+uVndoeyHrueMMpDvGzWP/apI=) 3: wfeH5shQb9p8-APifaQwZCuXjuw.roa (hash: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:2c:df:9d:74:34:95:cb:7e:97:9b:5e:f1:44:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d Validity Not Before: Dec 6 23:01:33 2025 GMT Not After : Dec 7 23:01:33 2025 GMT Subject: CN=b71f45b5b07768b3af724052af5721abf43ce763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:f9:08:10:b0:85:77:fe:27:ea:32:75:10: 24:7a:6b:50:3b:c7:10:75:b5:ae:89:86:1b:af:35: 52:61:fd:f6:ba:16:40:fc:d0:25:61:aa:03:36:3a: be:86:f0:ba:cf:49:10:08:ef:47:23:93:22:d1:1c: bb:0e:56:03:97:b8:fe:54:e8:1d:b1:26:dd:75:2a: 35:b0:91:2f:09:3b:ca:64:e5:b4:ea:54:5d:aa:f6: cb:71:85:83:06:29:d1:e1:82:f2:08:86:e8:9f:76: 1c:26:90:db:e0:f5:ee:7f:d3:23:7a:d2:6f:5e:fa: 52:c0:f1:15:9b:56:c3:ac:66:b5:dd:04:c6:68:b7: 24:59:6e:01:1c:41:98:e6:c3:3e:15:da:cf:92:de: ff:06:9c:f3:59:39:26:11:4a:fa:5a:d8:34:53:ff: 3c:09:68:f6:ab:d3:20:ac:86:1a:82:d8:da:44:f1: c2:1d:d9:04:8b:b1:4f:3d:87:bc:8b:df:29:a0:11: cc:3f:65:3d:4a:cc:c5:18:03:35:d1:ab:9f:1d:5a: 22:3a:7a:fc:01:29:0f:4f:b0:98:78:bf:b4:1f:b6: 8e:b9:22:f2:00:86:67:21:d9:25:c5:04:fb:55:d0: 8e:7e:79:4a:7d:f2:c2:1c:9d:30:72:bc:94:d6:a6: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1F:45:B5:B0:77:68:B3:AF:72:40:52:AF:57:21:AB:F4:3C:E7:63 X509v3 Authority Key Identifier: keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:11:7b:ee:bb:1c:5f:7b:f2:b8:fc:d8:81:f1:6e:f1:04:58: af:c8:c5:7e:15:51:1a:dd:40:2a:e5:d9:41:52:01:f0:6c:c1: 36:0d:e3:86:3d:9e:8b:6f:0d:66:4e:e9:20:ad:6e:64:47:40: 24:42:99:bd:58:3f:52:4a:27:a5:ac:62:b2:24:eb:3d:dc:95: d3:45:70:31:10:97:96:fd:43:d4:3f:d8:d9:e9:f5:1b:c5:92: d4:e8:bd:56:74:8b:ec:48:b9:82:29:e8:3a:c2:09:2f:ab:02: 9e:a8:86:2c:64:52:76:33:24:95:e0:f7:1b:19:f2:8f:9b:30: ca:47:eb:64:f4:3e:3b:e4:2d:6a:76:26:64:a1:23:33:c0:78: 3b:8c:cb:85:45:4a:17:6b:71:01:35:ef:75:bd:6e:97:98:07: 57:8c:dc:c9:5d:b6:fe:10:22:7d:17:8b:f1:d3:bc:0d:5d:75: f8:41:10:ae:70:8a:90:b0:3c:72:49:0c:b6:5f:f8:d3:a9:91: 26:c0:24:b1:7e:14:04:12:60:a9:bc:38:db:f4:34:56:09:dc: 4c:a2:02:36:13:c7:63:db:8e:67:7f:c8:e3:cb:55:bc:da:5f: 7c:5b:ab:da:c1:09:21:7e:4e:ab:12:1d:32:cd:a9:3c:5d:46: c0:7d:0d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15izfnXQ0lct+l5te8USQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2E3YjFjMTNhN2Q3YjMxMjMxNDEyYjhmYjY5NDdhMTc0 N2RiOWQwHhcNMjUxMjA2MjMwMTMzWhcNMjUxMjA3MjMwMTMzWjAzMTEwLwYDVQQD EyhiNzFmNDViNWIwNzc2OGIzYWY3MjQwNTJhZjU3MjFhYmY0M2NlNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnL5CBCwhXf+J+oydRAkemtQO8cQ dbWuiYYbrzVSYf32uhZA/NAlYaoDNjq+hvC6z0kQCO9HI5Mi0Ry7DlYDl7j+VOgd sSbddSo1sJEvCTvKZOW06lRdqvbLcYWDBinR4YLyCIbon3YcJpDb4PXuf9MjetJv XvpSwPEVm1bDrGa13QTGaLckWW4BHEGY5sM+FdrPkt7/BpzzWTkmEUr6Wtg0U/88 CWj2q9MgrIYagtjaRPHCHdkEi7FPPYe8i98poBHMP2U9SszFGAM10aufHVoiOnr8 ASkPT7CYeL+0H7aOuSLyAIZnIdklxQT7VdCOfnlKffLCHJ0wcryU1qbH7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcfRbWwd2izr3JAUq9XIav0POdjMB8GA1UdIwQY MBaAFKPKexwTp9ezEjFBK4+2lHoXR9udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iY2RjY2EtZjA2Yi00MGNmLThlMjEt MjE0NTIyMDk5NGNlLzEvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iY2RjY2EtZjA2Yi00MGNmLThlMjEtMjE0NTIyMDk5NGNl LzEvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhF77rsc X3vyuPzYgfFu8QRYr8jFfhVRGt1AKuXZQVIB8GzBNg3jhj2ei28NZk7pIK1uZEdA JEKZvVg/UkonpaxisiTrPdyV00VwMRCXlv1D1D/Y2en1G8WS1Oi9VnSL7Ei5gino OsIJL6sCnqiGLGRSdjMkleD3Gxnyj5swykfrZPQ+O+QtanYmZKEjM8B4O4zLhUVK F2txATXvdb1ul5gHV4zcyV22/hAifReL8dO8DV11+EEQrnCKkLA8ckkMtl/406mR JsAksX4UBBJgqbw42/Q0VgncTKICNhPHY9uOZ3/I48tVvNpffFur2sEJIX5OqxId Ms2pPF1GwH0N5A== -----END CERTIFICATE-----Generated at Sun Dec 7 06:35:37 2025 by rpki-client