This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json) Hash identifier: 9zX1JFdJT2x5RUzB83SOBseby9idfgqlExMIbR2KhUw= Subject key identifier: 46:82:BF:83:FE:DB:B1:E1:E4:7B:AF:E2:20:4E:81:DE:B3:C6:0E:C6 Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4 Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4 Certificate serial: 019B47A629A2450BC98ABC21940553A97E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft Manifest number: 0368 Signing time: Mon 22 Dec 2025 20:00:30 +0000 Manifest this update: Mon 22 Dec 2025 20:00:30 +0000 Manifest next update: Tue 23 Dec 2025 20:00:30 +0000 Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: 3X4nW5PLYj+18g1oBeWZNWKFGIYDD9JetCA/dPTJO68=) 2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:29:a2:45:0b:c9:8a:bc:21:94:05:53:a9:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4 Validity Not Before: Dec 22 20:00:30 2025 GMT Not After : Dec 23 20:00:30 2025 GMT Subject: CN=4682bf83fedbb1e1e47bafe2204e81deb3c60ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:b5:eb:ba:3a:36:46:7b:ed:7d:46:d8:b0: b4:ef:38:75:85:98:9c:fe:e9:e7:61:e5:ed:79:38: 45:ed:71:bb:ec:dc:98:63:9b:14:14:61:41:94:67: cc:85:34:dd:6b:40:4e:b7:e8:45:b7:9e:09:48:7a: f0:83:e0:5c:4d:fe:c5:75:e0:aa:a6:cd:81:f3:e1: 2f:8d:3e:9f:c1:7a:04:ae:46:29:5d:b8:2d:c9:7e: 8c:cb:ea:0a:60:de:48:73:e3:5c:c7:69:22:94:ac: f8:65:32:e1:c0:f6:81:7f:36:b5:1d:a8:ff:8b:5b: 3a:8c:73:37:9d:4f:1a:e7:5d:f1:e1:1b:31:1d:c5: af:82:9f:fb:7d:09:63:ab:8c:9b:f7:8a:5e:0d:40: 92:47:8f:28:54:a5:42:86:20:ae:a8:88:6b:19:d0: ad:12:8d:32:df:1f:7d:93:47:be:4a:44:b6:8c:c3: dc:72:4e:41:d7:3f:9b:cb:0d:61:ec:59:59:58:42: c3:2f:73:61:41:a9:94:68:44:77:67:01:60:7a:65: aa:00:23:8c:5e:ef:7b:4e:29:f1:9d:37:6e:3f:7a: c0:b1:21:c5:89:80:11:ce:38:2e:9d:38:47:6a:80: f5:f4:a3:57:f1:6f:7c:2a:10:a5:19:18:3d:91:9b: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:82:BF:83:FE:DB:B1:E1:E4:7B:AF:E2:20:4E:81:DE:B3:C6:0E:C6 X509v3 Authority Key Identifier: keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:66:b0:8c:af:bf:86:0e:11:09:9e:1d:6c:31:44:f8:eb:4b: c4:81:a4:25:ea:cd:4b:2b:55:79:fb:0f:45:94:45:f5:70:c2: 37:6d:24:d0:72:37:8d:aa:ab:ba:4d:2a:f2:88:27:6a:cf:f4: e3:a2:20:83:dc:a1:3b:58:bd:71:22:b3:80:b7:9e:4a:ff:19: 93:2f:1f:54:c3:51:e3:88:29:d9:fd:21:68:3b:98:eb:02:0c: 55:21:9a:45:14:97:8b:5f:a0:4d:1d:1c:2f:e3:d0:d3:f8:3a: 67:f9:3e:9d:02:19:de:98:8b:04:f7:37:52:e3:f8:35:0c:a3: 50:62:b5:aa:af:7f:f6:6c:7f:9a:7f:ee:ec:d7:dc:e9:5c:d1: 20:bd:83:da:05:0f:6c:36:a0:95:6d:32:3b:96:65:85:fb:17: a5:cb:bb:0a:5a:99:1e:2a:53:a0:43:9f:59:e5:58:25:33:f8: 04:c0:53:9d:1c:34:b5:3c:01:04:62:db:b5:a6:90:69:c8:a9: a4:0d:c9:67:3d:69:43:02:d9:6e:50:af:bf:3f:96:ce:83:87: 1d:86:d1:b2:00:c4:08:23:72:22:5e:5f:e3:82:45:c1:da:9b: 40:04:f6:06:34:03:90:4a:dd:c8:c9:c1:1c:32:e4:a6:fd:3a: 63:9e:bf:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpimiRQvJirwhlAVTqX5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTlhYzljZjkwNWExNmM1YWZhMGU1MDM1ZmZhN2EyMzUy ZTEzZjQwHhcNMjUxMjIyMjAwMDMwWhcNMjUxMjIzMjAwMDMwWjAzMTEwLwYDVQQD Eyg0NjgyYmY4M2ZlZGJiMWUxZTQ3YmFmZTIyMDRlODFkZWIzYzYwZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvi167o6NkZ77X1G2LC07zh1hZic /unnYeXteThF7XG77NyYY5sUFGFBlGfMhTTda0BOt+hFt54JSHrwg+BcTf7FdeCq ps2B8+EvjT6fwXoErkYpXbgtyX6My+oKYN5Ic+Ncx2kilKz4ZTLhwPaBfza1Haj/ i1s6jHM3nU8a513x4RsxHcWvgp/7fQljq4yb94peDUCSR48oVKVChiCuqIhrGdCt Eo0y3x99k0e+SkS2jMPcck5B1z+byw1h7FlZWELDL3NhQamUaER3ZwFgemWqACOM Xu97TinxnTduP3rAsSHFiYARzjgunThHaoD19KNX8W98KhClGRg9kZtiNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaCv4P+27Hh5Huv4iBOgd6zxg7GMB8GA1UdIwQY MBaAFPDprJz5BaFsWvoOUDX/p6I1LhP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAt NmFjMTBiNGQyYmJjLzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAtNmFjMTBiNGQyYmJj LzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWawjK+/ hg4RCZ4dbDFE+OtLxIGkJerNSytVefsPRZRF9XDCN20k0HI3jaqruk0q8ognas/0 46Igg9yhO1i9cSKzgLeeSv8Zky8fVMNR44gp2f0haDuY6wIMVSGaRRSXi1+gTR0c L+PQ0/g6Z/k+nQIZ3piLBPc3UuP4NQyjUGK1qq9/9mx/mn/u7Nfc6VzRIL2D2gUP bDaglW0yO5ZlhfsXpcu7ClqZHipToEOfWeVYJTP4BMBTnRw0tTwBBGLbtaaQacip pA3JZz1pQwLZblCvvz+WzoOHHYbRsgDECCNyIl5f44JFwdqbQAT2BjQDkErdyMnB HDLkpv06Y56/Ug== -----END CERTIFICATE-----Generated at Tue Dec 23 04:10:21 2025 by rpki-client