This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json) Hash identifier: kreUDMtnxFuMlNwo9Qw2O3vvZyiNTSdwmvHYcHE5Ct0= Subject key identifier: F9:E5:D9:FC:79:04:C0:A4:A3:DA:4C:69:3E:CB:6B:27:B6:7B:47:97 Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15 Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015 Certificate serial: 019B4AA7F8B1325D8F6F2FC9836E85EA2911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft Manifest number: 0713 Signing time: Tue 23 Dec 2025 10:01:20 +0000 Manifest this update: Tue 23 Dec 2025 10:01:20 +0000 Manifest next update: Wed 24 Dec 2025 10:01:20 +0000 Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: vbAeK/umsE3MRnuNvA7S4qXgfV6GCkz30fCJMvdYdQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:f8:b1:32:5d:8f:6f:2f:c9:83:6e:85:ea:29:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015 Validity Not Before: Dec 23 10:01:20 2025 GMT Not After : Dec 24 10:01:20 2025 GMT Subject: CN=f9e5d9fc7904c0a4a3da4c693ecb6b27b67b4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:6a:98:d1:a2:c3:63:f1:55:0f:ed:36:87: 4d:e8:f3:21:a3:a5:54:93:06:80:fa:27:59:09:96: da:0f:35:b6:79:46:7d:ff:39:85:a8:44:12:8a:0c: b1:1f:62:f7:89:31:e1:79:e4:0d:cf:f9:66:d9:96: 6e:8f:87:64:1f:cd:f3:a9:48:18:a4:ae:6f:0a:5d: 92:2a:88:92:5d:ab:20:88:8b:e9:17:8f:f2:e0:f3: c3:cd:19:16:10:f1:5e:71:8f:85:a2:a3:57:33:de: b4:f8:bc:c1:0e:03:b7:8c:74:18:1c:65:ab:6f:e2: 61:d4:0f:e7:7a:5b:7f:f9:34:66:8c:d8:a9:d6:db: 6a:e3:dc:b6:ed:6f:17:c0:8e:89:5e:71:47:a9:2c: 13:0e:1e:6d:1a:0c:69:41:f2:67:da:98:4c:cf:b1: 8a:54:99:21:6d:2f:84:91:89:fa:48:27:ed:f1:11: 96:c4:b3:c4:8e:ef:ea:46:95:a7:00:9f:39:4e:9f: e8:6f:55:7a:b2:20:59:2b:56:b9:24:2b:6d:c7:14: d5:17:c6:1f:33:0c:07:02:3b:a3:01:a4:62:d1:a2: f1:73:2f:fd:e2:e1:90:f6:6e:c6:5e:1f:e4:dd:db: 8b:8e:88:84:08:68:cb:73:da:54:47:0a:00:ce:ce: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E5:D9:FC:79:04:C0:A4:A3:DA:4C:69:3E:CB:6B:27:B6:7B:47:97 X509v3 Authority Key Identifier: keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9a:3f:a8:f9:f2:17:27:be:2d:01:b7:7d:20:a4:9b:fa:a2: 43:5a:84:44:01:77:3d:4d:5e:10:84:6d:9d:a2:5a:be:32:10: 85:cb:db:3c:15:1f:f9:01:1f:2e:cb:6e:05:5b:7a:74:2c:de: 60:7c:4d:93:6f:5c:a9:b9:43:29:2e:94:6c:39:73:a1:e2:07: ce:8c:e6:7a:aa:ef:85:65:1a:8d:3d:b8:92:04:d1:ea:0e:c5: d4:0f:ef:b2:9d:4d:c0:17:fe:b1:8c:af:b3:98:68:ad:23:7a: 49:96:98:18:86:f9:f2:93:86:f6:ef:5a:3f:63:aa:d0:39:90: 65:53:b1:77:98:f8:64:7c:a8:a1:c3:e2:b5:5f:9d:c9:1e:38: f4:67:71:05:82:e2:e8:82:95:2e:4a:3b:03:a4:41:25:f8:4b: d7:86:b3:69:80:68:a9:32:8c:d0:43:b1:47:30:7a:24:01:73: 50:b7:39:8e:49:20:ed:98:66:99:06:5f:fc:1f:bc:aa:2b:74: ec:47:05:b4:bb:8f:39:2a:62:36:4e:1c:0c:19:28:e7:76:89: 93:03:cd:27:5a:93:7a:e1:bf:9e:9e:c2:b7:79:a6:fa:67:28: df:5b:ee:de:46:c4:41:7d:5c:a8:bb:82:2c:fb:cd:9e:c5:fd: ae:5c:58:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp/ixMl2Pby/Jg26F6ikRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzU2ZWMxMzBkOThhZjJkMGQyOTQ1OWYyMGZhNzliZDYz NTkwMTUwHhcNMjUxMjIzMTAwMTIwWhcNMjUxMjI0MTAwMTIwWjAzMTEwLwYDVQQD EyhmOWU1ZDlmYzc5MDRjMGE0YTNkYTRjNjkzZWNiNmIyN2I2N2I0Nzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+BqmNGiw2PxVQ/tNodN6PMho6VU kwaA+idZCZbaDzW2eUZ9/zmFqEQSigyxH2L3iTHheeQNz/lm2ZZuj4dkH83zqUgY pK5vCl2SKoiSXasgiIvpF4/y4PPDzRkWEPFecY+FoqNXM960+LzBDgO3jHQYHGWr b+Jh1A/nelt/+TRmjNip1ttq49y27W8XwI6JXnFHqSwTDh5tGgxpQfJn2phMz7GK VJkhbS+EkYn6SCft8RGWxLPEju/qRpWnAJ85Tp/ob1V6siBZK1a5JCttxxTVF8Yf MwwHAjujAaRi0aLxcy/94uGQ9m7GXh/k3duLjoiECGjLc9pURwoAzs6+CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnl2fx5BMCko9pMaT7Laye2e0eXMB8GA1UdIwQY MBaAFKPFbsEw2Yry0NKUWfIPp5vWNZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjkt YjNlOWJlNzQyODk0LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjktYjNlOWJlNzQyODk0 LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZo/qPny Fye+LQG3fSCkm/qiQ1qERAF3PU1eEIRtnaJavjIQhcvbPBUf+QEfLstuBVt6dCze YHxNk29cqblDKS6UbDlzoeIHzozmeqrvhWUajT24kgTR6g7F1A/vsp1NwBf+sYyv s5horSN6SZaYGIb58pOG9u9aP2Oq0DmQZVOxd5j4ZHyoocPitV+dyR449GdxBYLi 6IKVLko7A6RBJfhL14azaYBoqTKM0EOxRzB6JAFzULc5jkkg7ZhmmQZf/B+8qit0 7EcFtLuPOSpiNk4cDBko53aJkwPNJ1qTeuG/np7Ct3mm+mco31vu3kbEQX1cqLuC LPvNnsX9rlxYfQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:42:10 2025 by rpki-client