This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json) Hash identifier: PuZ40FiUcIwAAWzqYyIYO0+oLHWZ82rWB12UZtGrEC4= Subject key identifier: 97:AB:C3:C5:21:37:5E:59:4D:D6:41:F4:49:4E:06:F7:36:90:36:6F Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef Certificate serial: 019B19F21CD232A4E2B341A6D07FECC94F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft Manifest number: 0686 Signing time: Sat 13 Dec 2025 23:00:55 +0000 Manifest this update: Sat 13 Dec 2025 23:00:55 +0000 Manifest next update: Sun 14 Dec 2025 23:00:55 +0000 Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=) 2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: 3lbDySevOFZ8aQYsstQskwjhMvKHz5c/JWz5m1rmoSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:1c:d2:32:a4:e2:b3:41:a6:d0:7f:ec:c9:4f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef Validity Not Before: Dec 13 23:00:55 2025 GMT Not After : Dec 14 23:00:55 2025 GMT Subject: CN=97abc3c521375e594dd641f4494e06f73690366f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:92:f0:7d:c1:c4:db:dd:1e:b2:13:7f:d3: 7d:cd:a4:1a:54:fa:f8:89:6b:a9:2a:e8:77:33:b4: b4:b8:1b:f2:ef:f5:ed:3a:b0:77:5a:00:40:16:34: 05:da:23:95:8f:a3:2e:1e:aa:93:45:9f:76:b9:6d: 4f:4d:97:68:2c:c3:ee:bd:6c:4c:b5:06:39:40:e9: 4d:43:c4:7a:49:f0:71:b9:74:73:45:87:92:72:21: 34:a8:51:3f:df:bc:2c:c2:c9:8b:93:bd:cd:db:91: 47:76:8a:52:c9:6f:da:ce:5d:ef:ac:07:28:23:8b: 47:06:57:b6:97:80:18:21:6e:56:fb:76:13:a0:5c: 73:24:47:60:d0:50:f7:06:e7:57:aa:6d:fa:71:87: 02:58:e6:2e:4d:eb:3b:d3:e2:af:0b:b1:55:fe:e7: b8:f0:a3:42:93:8f:73:a5:cc:67:97:50:73:b1:78: 4f:18:b7:d2:80:34:c6:67:03:6b:0c:bb:5e:2e:e6: c0:05:ad:20:d0:1e:26:1e:1e:8b:84:6e:f5:ce:d2: 86:5f:bd:b8:fe:56:da:01:a3:6f:8e:04:bc:ad:b5: ac:30:d9:89:a6:31:62:86:33:b1:75:ad:00:61:e5: 4a:1c:98:92:7a:74:38:b4:1e:17:02:e9:37:f8:8f: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:C3:C5:21:37:5E:59:4D:D6:41:F4:49:4E:06:F7:36:90:36:6F X509v3 Authority Key Identifier: keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3c:fa:ad:20:61:a0:97:f3:b3:cc:94:a6:2e:db:51:c5:ac: ed:b1:ac:38:63:18:25:6d:36:36:4f:b3:1c:96:14:05:3d:b0: a3:06:03:a6:4c:7f:15:ca:d8:b8:e3:20:f1:6b:6a:98:79:47: e3:2b:4a:8a:bb:52:bd:8c:8e:c4:80:32:b9:c6:c5:89:b9:09: 73:4d:90:e7:13:33:c2:35:e5:f4:26:49:9e:a7:d7:85:0f:c7: bf:04:20:7b:d4:af:05:87:0a:39:f8:21:a7:e4:69:fb:3a:d5: 14:ff:06:67:ec:30:1d:93:b4:19:be:3a:3c:78:ad:72:5c:d4: f3:da:34:c4:53:28:8d:44:05:fb:bb:34:65:d5:b0:f4:94:76: 40:9e:00:02:18:8d:10:f0:20:f5:af:20:30:ee:18:c2:84:29: e6:7a:09:23:b6:c1:26:48:d5:72:7d:44:4e:9c:f3:4d:fd:6c: bf:b9:77:34:a1:b8:c3:2e:5e:df:f5:ab:6f:c2:9b:9c:b0:1b: d0:08:04:69:49:89:ed:d5:7a:f8:80:80:b3:b3:d7:1a:72:ed: b1:7f:14:f1:bc:f2:95:8b:a3:2e:3c:92:28:4d:20:d1:06:92: c3:a5:ef:23:39:39:12:d2:13:55:c8:a8:8a:22:fc:50:da:d1: 24:95:4a:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8hzSMqTis0Gm0H/syU8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2 YTg1ZWYwHhcNMjUxMjEzMjMwMDU1WhcNMjUxMjE0MjMwMDU1WjAzMTEwLwYDVQQD Eyg5N2FiYzNjNTIxMzc1ZTU5NGRkNjQxZjQ0OTRlMDZmNzM2OTAzNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXeS8H3BxNvdHrITf9N9zaQaVPr4 iWupKuh3M7S0uBvy7/XtOrB3WgBAFjQF2iOVj6MuHqqTRZ92uW1PTZdoLMPuvWxM tQY5QOlNQ8R6SfBxuXRzRYeSciE0qFE/37wswsmLk73N25FHdopSyW/azl3vrAco I4tHBle2l4AYIW5W+3YToFxzJEdg0FD3BudXqm36cYcCWOYuTes70+KvC7FV/ue4 8KNCk49zpcxnl1BzsXhPGLfSgDTGZwNrDLteLubABa0g0B4mHh6LhG71ztKGX724 /lbaAaNvjgS8rbWsMNmJpjFihjOxda0AYeVKHJiSenQ4tB4XAuk3+I9Q4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJerw8UhN15ZTdZB9ElOBvc2kDZvMB8GA1UdIwQY MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDz6rSBh oJfzs8yUpi7bUcWs7bGsOGMYJW02Nk+zHJYUBT2wowYDpkx/FcrYuOMg8WtqmHlH 4ytKirtSvYyOxIAyucbFibkJc02Q5xMzwjXl9CZJnqfXhQ/HvwQge9SvBYcKOfgh p+Rp+zrVFP8GZ+wwHZO0Gb46PHitclzU89o0xFMojUQF+7s0ZdWw9JR2QJ4AAhiN EPAg9a8gMO4YwoQp5noJI7bBJkjVcn1ETpzzTf1sv7l3NKG4wy5e3/Wrb8KbnLAb 0AgEaUmJ7dV6+ICAs7PXGnLtsX8U8bzylYujLjySKE0g0QaSw6XvIzk5EtITVcio iiL8UNrRJJVK9w== -----END CERTIFICATE-----Generated at Sun Dec 14 01:02:33 2025 by rpki-client