This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json) Hash identifier: Gp2ASXgJxGkmiWYn0U65Dm3a2As6p9rEOY9XVABI1bw= Subject key identifier: 93:1C:79:41:E9:07:D5:29:BE:BD:63:45:41:C3:AC:1D:23:57:CF:4E Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Certificate serial: 019B3532535AE52A60DD211E0976745DA45F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft Manifest number: 0246 Signing time: Fri 19 Dec 2025 06:00:49 +0000 Manifest this update: Fri 19 Dec 2025 06:00:49 +0000 Manifest next update: Sat 20 Dec 2025 06:00:49 +0000 Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: tR7m7+7LDKYfSKOxQUJ4nACK5ILst7zLme0FIBgyqnI=) 2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:53:5a:e5:2a:60:dd:21:1e:09:76:74:5d:a4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Validity Not Before: Dec 19 06:00:49 2025 GMT Not After : Dec 20 06:00:49 2025 GMT Subject: CN=931c7941e907d529bebd634541c3ac1d2357cf4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:c4:01:38:72:94:d5:43:a9:1a:02:0c:c5: 2f:da:9c:f6:4d:d9:bc:a1:f0:d9:37:7c:40:91:c8: 8b:2f:46:b7:be:15:4b:ff:8a:eb:f5:c9:20:93:eb: a1:8c:e0:4d:33:01:d4:cd:3c:9d:31:f8:78:79:b9: 07:27:5b:52:68:73:f0:0a:0a:b3:4d:52:f7:49:ff: 0a:6a:e5:1a:07:3e:e7:19:12:99:7c:86:f0:74:ee: b2:4b:fe:75:f7:50:45:33:9b:c0:eb:0a:49:12:9f: c3:63:b1:45:21:67:62:0e:2a:ce:b4:c0:ec:b0:fb: 7c:cd:2d:44:e5:7d:9a:56:13:6b:35:a0:ce:fd:59: ef:35:1a:f2:6a:70:98:cb:32:2d:ee:98:b6:a0:80: 79:75:a7:11:98:ca:46:14:31:9f:74:5f:9f:47:30: 12:42:05:f0:fc:aa:e4:3a:ce:87:27:32:29:c2:42: e6:dc:a0:b0:c6:0d:b1:a9:8b:c2:34:73:bd:ec:16: 38:97:9e:51:be:67:a4:9b:89:3c:5b:36:58:21:65: af:2b:e7:c9:c1:78:4d:ab:f4:26:6c:72:48:60:68: f7:9f:58:23:cb:3a:db:9a:2f:d7:40:fa:27:db:01: 26:99:90:96:6a:aa:64:d6:3a:58:0e:8f:d7:5e:66: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1C:79:41:E9:07:D5:29:BE:BD:63:45:41:C3:AC:1D:23:57:CF:4E X509v3 Authority Key Identifier: keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:08:30:f7:6e:39:91:68:12:b3:0b:25:fd:aa:49:05:9f:b2: ab:4d:f0:90:3f:d2:5f:80:b9:0a:92:b9:f3:de:d8:36:2c:91: cb:c7:8f:cb:dc:76:74:9d:92:dc:29:03:af:e4:24:d8:5e:4b: 7c:6b:bc:35:02:87:a5:b1:53:5a:db:9e:1e:87:13:c6:be:d9: 0b:ae:a5:2c:c6:9e:d9:21:3d:d2:27:35:a5:3d:4a:38:cb:37: 02:79:3c:39:bd:c9:42:ec:74:07:06:38:83:f0:d4:40:bd:8b: ff:6e:d6:74:03:00:78:cf:c7:cd:33:d4:90:4f:d4:57:51:89: 22:a6:62:94:ef:8c:61:b9:c6:08:c9:06:b5:d6:51:05:ac:6e: c2:55:fd:7a:d6:64:d4:b1:bb:dd:15:77:cc:07:f5:41:e2:b0: cb:02:f9:ff:4f:f0:d5:21:78:c8:3e:b5:23:4d:e9:83:45:8b: 7e:1a:4e:d8:5d:95:6d:99:f7:20:04:2f:67:21:55:ff:a6:49: 32:ae:d5:42:90:fb:c4:9e:6f:8e:2c:85:a5:e0:1c:48:eb:2d: 64:f6:3b:c7:06:bd:35:12:46:01:69:d1:14:ef:8d:a9:89:3a: fe:0c:f0:f9:0e:d9:9e:16:08:ff:a5:a4:49:b9:2c:ce:fb:e6: ee:d7:3b:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MlNa5Spg3SEeCXZ0XaRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGYwZTBhOGUwMGYxYTZkOGMxYzI2NmUzZjQzNmQ0NmU3 MWU4NzcwHhcNMjUxMjE5MDYwMDQ5WhcNMjUxMjIwMDYwMDQ5WjAzMTEwLwYDVQQD Eyg5MzFjNzk0MWU5MDdkNTI5YmViZDYzNDU0MWMzYWMxZDIzNTdjZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi/EAThylNVDqRoCDMUv2pz2Tdm8 ofDZN3xAkciLL0a3vhVL/4rr9ckgk+uhjOBNMwHUzTydMfh4ebkHJ1tSaHPwCgqz TVL3Sf8KauUaBz7nGRKZfIbwdO6yS/5191BFM5vA6wpJEp/DY7FFIWdiDirOtMDs sPt8zS1E5X2aVhNrNaDO/VnvNRryanCYyzIt7pi2oIB5dacRmMpGFDGfdF+fRzAS QgXw/KrkOs6HJzIpwkLm3KCwxg2xqYvCNHO97BY4l55Rvmekm4k8WzZYIWWvK+fJ wXhNq/QmbHJIYGj3n1gjyzrbmi/XQPon2wEmmZCWaqpk1jpYDo/XXmbAtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMceUHpB9Upvr1jRUHDrB0jV89OMB8GA1UdIwQY MBaAFNAPDgqOAPGm2MHCZuP0NtRuceh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAt NjVhYjBkMzUxZjI3LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAtNjVhYjBkMzUxZjI3 LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQgw9245 kWgSswsl/apJBZ+yq03wkD/SX4C5CpK5897YNiyRy8ePy9x2dJ2S3CkDr+Qk2F5L fGu8NQKHpbFTWtueHocTxr7ZC66lLMae2SE90ic1pT1KOMs3Ank8Ob3JQux0BwY4 g/DUQL2L/27WdAMAeM/HzTPUkE/UV1GJIqZilO+MYbnGCMkGtdZRBaxuwlX9etZk 1LG73RV3zAf1QeKwywL5/0/w1SF4yD61I03pg0WLfhpO2F2VbZn3IAQvZyFV/6ZJ Mq7VQpD7xJ5vjiyFpeAcSOstZPY7xwa9NRJGAWnRFO+NqYk6/gzw+Q7ZnhYI/6Wk Sbkszvvm7tc79w== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:13 2025 by rpki-client