This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json) Hash identifier: U5raxBWAq+fa4Wz+hsYAIx16KlEYqBhUX4I8pp3oKbE= Subject key identifier: A3:DE:CC:BF:B7:52:90:CE:09:CD:9C:14:B6:E1:25:AF:E5:8B:03:2B Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e Certificate serial: 019B22BDED01CC1BEA52B32537EB43DCAF60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft Manifest number: 1712 Signing time: Mon 15 Dec 2025 16:00:30 +0000 Manifest this update: Mon 15 Dec 2025 16:00:30 +0000 Manifest next update: Tue 16 Dec 2025 16:00:30 +0000 Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=) 2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=) 3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: O87cv+qwHSOLyqLryGn8ZhrkhnuzHVB9V2PEKqya/7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:bd:ed:01:cc:1b:ea:52:b3:25:37:eb:43:dc:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e Validity Not Before: Dec 15 16:00:30 2025 GMT Not After : Dec 16 16:00:30 2025 GMT Subject: CN=a3deccbfb75290ce09cd9c14b6e125afe58b032b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:80:b2:7b:46:c4:0b:a2:d7:78:32:6b:76: 35:e2:12:7a:39:31:e7:b9:12:b4:b5:aa:80:d2:a0: fe:cc:63:32:a1:04:45:fd:89:01:67:82:fa:ec:91: 5f:fa:18:52:6e:3f:f3:0f:2d:56:7e:b0:b8:27:01: 6a:1d:8a:8e:27:a0:23:92:f1:87:b9:63:4a:fc:1d: 9d:74:3a:fb:2b:ab:95:8c:d1:f4:ad:2e:73:9d:73: 38:08:0a:1a:42:35:2b:39:0f:19:37:f0:28:e3:d8: ec:04:ec:9a:57:f6:81:03:05:bb:f6:fd:0c:ab:1b: a2:e6:6c:ac:a0:0f:41:b8:e7:7b:d8:a0:1c:ab:84: 45:3d:ef:f8:24:32:66:d9:6c:ce:55:7b:5d:1d:54: 56:ec:97:41:ae:a1:e5:4f:81:25:b2:98:50:d9:86: 3c:6d:33:9f:02:04:33:eb:88:d5:88:67:22:e4:f2: b0:01:c5:0f:b4:8c:52:d2:0d:a5:7f:0b:47:3f:9c: cc:e1:4e:99:83:a2:df:40:d2:fc:40:ee:d1:c9:f5: 00:f7:82:4c:a3:15:ab:28:0d:b4:9d:02:f6:67:9d: 09:65:09:0c:1d:11:54:2d:f7:6c:70:ff:e2:a3:ea: d2:6a:d4:f6:05:36:c7:fd:13:fe:d9:95:f9:3a:cf: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DE:CC:BF:B7:52:90:CE:09:CD:9C:14:B6:E1:25:AF:E5:8B:03:2B X509v3 Authority Key Identifier: keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c7:f6:1d:ba:46:cf:ce:91:19:a3:bb:51:ae:07:e3:3b:fb: 8b:2f:40:4d:f4:9f:6a:e8:22:27:a5:a7:0e:db:fe:d8:fc:04: 37:a3:75:5d:87:42:96:30:00:e2:2a:5a:d3:20:3e:d4:c4:0a: 15:93:35:93:2e:f1:6e:44:69:fa:9c:f9:5d:56:8d:36:b6:97: 8f:2a:2d:1b:4f:66:c8:90:e4:2e:4d:6d:8d:bf:97:d5:29:ae: 8c:d7:08:d5:da:7f:a4:be:17:22:84:25:60:c4:8e:d5:9e:32: 95:87:ca:17:fb:be:30:6a:6f:9c:b0:72:9e:28:5e:d9:d3:ca: 60:c8:13:b1:fa:e6:ea:25:04:52:53:30:9f:eb:3a:24:31:b1: 42:b1:6c:e9:18:5c:b9:22:52:04:61:5a:21:56:20:b7:30:66: ec:b3:a2:5d:0e:c9:e7:3e:f7:37:13:e6:fe:5d:e3:3e:b2:00: db:9e:5d:d6:7d:ef:92:fa:90:ca:27:a9:36:a7:24:be:ae:8e: 38:d2:5b:18:d9:98:59:60:ea:1c:26:92:c8:15:24:e5:70:75: 69:eb:92:54:9e:cd:13:50:4f:29:bd:a3:d4:96:29:c1:e0:7b: fe:33:50:9c:a3:1e:d2:a8:26:de:d0:b7:1c:f7:fb:4c:0b:ed: b4:82:bc:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsive0BzBvqUrMlN+tD3K9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzAzMTU4YWVkODExNjFkNGY1N2MxNzQyZDQ2MDgzNDE3 M2E3OWUwHhcNMjUxMjE1MTYwMDMwWhcNMjUxMjE2MTYwMDMwWjAzMTEwLwYDVQQD EyhhM2RlY2NiZmI3NTI5MGNlMDljZDljMTRiNmUxMjVhZmU1OGIwMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkiAsntGxAui13gya3Y14hJ6OTHn uRK0taqA0qD+zGMyoQRF/YkBZ4L67JFf+hhSbj/zDy1WfrC4JwFqHYqOJ6AjkvGH uWNK/B2ddDr7K6uVjNH0rS5znXM4CAoaQjUrOQ8ZN/Ao49jsBOyaV/aBAwW79v0M qxui5mysoA9BuOd72KAcq4RFPe/4JDJm2WzOVXtdHVRW7JdBrqHlT4ElsphQ2YY8 bTOfAgQz64jViGci5PKwAcUPtIxS0g2lfwtHP5zM4U6Zg6LfQNL8QO7RyfUA94JM oxWrKA20nQL2Z50JZQkMHRFULfdscP/io+rSatT2BTbH/RP+2ZX5Os9ppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPezL+3UpDOCc2cFLbhJa/liwMrMB8GA1UdIwQY MBaAFKPAMViu2BFh1PV8F0LUYINBc6eeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2Yjgt NGMxMGUzMzYwNTc3LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2YjgtNGMxMGUzMzYwNTc3 LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8f2HbpG z86RGaO7Ua4H4zv7iy9ATfSfaugiJ6WnDtv+2PwEN6N1XYdCljAA4ipa0yA+1MQK FZM1ky7xbkRp+pz5XVaNNraXjyotG09myJDkLk1tjb+X1SmujNcI1dp/pL4XIoQl YMSO1Z4ylYfKF/u+MGpvnLBynihe2dPKYMgTsfrm6iUEUlMwn+s6JDGxQrFs6Rhc uSJSBGFaIVYgtzBm7LOiXQ7J5z73NxPm/l3jPrIA255d1n3vkvqQyiepNqckvq6O ONJbGNmYWWDqHCaSyBUk5XB1aeuSVJ7NE1BPKb2j1JYpweB7/jNQnKMe0qgm3tC3 HPf7TAvttIK8aA== -----END CERTIFICATE-----Generated at Tue Dec 16 02:23:15 2025 by rpki-client