This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json) Hash identifier: IE5AdvR6HPAumQ3a5jOHSL+LhWwTTsabtMSu/MBZeqo= Subject key identifier: 69:E2:08:88:4D:CB:DC:F2:42:00:D7:82:BC:A5:F8:24:0E:94:E7:1B Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a Certificate serial: 019B33B23CFE271C7E67E370BA10FADE2743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft Manifest number: 01D6 Signing time: Thu 18 Dec 2025 23:01:17 +0000 Manifest this update: Thu 18 Dec 2025 23:01:17 +0000 Manifest next update: Fri 19 Dec 2025 23:01:17 +0000 Files and hashes: 1: X-QlQ7J2mkMQ7aCqISeZm-0GPp8.roa (hash: tcckn5v078MeQtwYD02YyKajWXUMPOWsBI1IguOQcTI=) 2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: N6lek+5txhPxF6aW+BDLyZjYhsk1o+Aa+iN0xPqm/rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:3c:fe:27:1c:7e:67:e3:70:ba:10:fa:de:27:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a Validity Not Before: Dec 18 23:01:17 2025 GMT Not After : Dec 19 23:01:17 2025 GMT Subject: CN=69e208884dcbdcf24200d782bca5f8240e94e71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:1d:48:8f:f6:48:19:3f:c9:c5:b5:ab:68: 99:0d:00:9e:cd:ba:4f:e2:e9:ff:46:a2:e2:72:f5: 0b:d8:03:29:33:47:b0:bb:05:71:e1:23:a1:9d:ae: f9:23:a3:96:de:93:35:90:51:e9:6b:b2:5e:5a:14: 09:bd:1f:a6:59:ba:85:1a:62:b8:85:e4:c4:3b:b8: 9b:cf:58:db:b0:2d:5a:b2:40:dd:76:e0:d3:de:31: e1:ff:cb:87:af:ae:d2:e0:e0:3a:2e:47:cc:fc:86: 2e:37:b3:9e:7e:a6:2b:2e:61:f4:8a:3e:95:c5:27: 7e:49:02:60:08:d8:25:d4:43:7f:d7:65:9f:a9:54: 04:14:a0:d1:72:bf:6a:a9:35:7b:29:5b:b8:af:f9: d2:bf:1b:fd:e5:48:24:a9:ff:8d:8b:03:3a:f0:68: bf:c0:4e:b1:02:68:4c:a4:54:3c:85:a1:df:57:18: 0d:e6:55:fa:ea:d1:7e:0d:c3:4c:f9:e2:f4:9e:67: fd:7d:6f:68:a6:d1:58:66:b1:f3:9a:28:90:d3:a6: 9d:a1:23:e9:00:02:1e:59:69:f3:1c:2a:4e:3b:61: 86:46:b7:c0:64:5b:cc:6e:b8:9d:c2:9e:91:c0:42: 81:bf:a0:a0:3f:df:92:57:ef:6b:31:7e:b9:7e:9e: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:08:88:4D:CB:DC:F2:42:00:D7:82:BC:A5:F8:24:0E:94:E7:1B X509v3 Authority Key Identifier: keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:38:6b:b9:a5:f8:16:24:c0:54:84:7e:c7:c9:22:6f:c4:c9: d9:01:e1:8d:ff:97:9d:95:3c:a7:b3:70:fa:27:30:17:c5:1b: 73:24:ae:d8:be:63:f5:1f:d0:5a:1e:49:95:94:b0:fc:4d:bb: 7c:ff:bd:96:74:fb:2f:8b:b8:e4:68:32:6a:1d:84:99:0e:7f: d5:f7:22:62:77:27:76:86:d5:3e:a5:82:6b:6c:d4:69:36:0f: b0:d2:4a:31:6a:e3:ab:de:d3:1a:19:79:b2:cb:7a:e5:23:89: 34:ca:62:59:ea:67:d2:bc:d2:4b:c5:3a:e1:f0:f2:93:2e:ea: fa:d4:e0:56:e3:54:86:46:c3:86:8a:bc:b1:12:13:cb:37:47: ff:e5:b1:51:94:a3:1b:99:e3:19:64:b2:1e:71:3d:1b:9c:cd: bc:c0:18:f6:89:11:2b:21:a7:2e:56:4a:9f:dc:3d:35:ec:78: 3e:f3:ba:bf:db:a7:a6:1b:51:69:ff:7c:14:eb:fa:9a:bb:2c: a5:b7:9e:0d:fa:31:8e:22:d2:22:4f:6c:14:3c:4c:2d:d9:56: 5a:9e:f1:53:32:85:50:a5:e3:2b:38:57:a7:3a:78:98:8a:b3: 78:7a:c7:27:5e:fb:d7:06:58:49:f9:3e:76:3a:23:25:b9:18: b1:5c:35:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsjz+Jxx+Z+NwuhD63idDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2Y5YjY0NjUxNjkyOGI1ZDA2YzJhODE5ZWIyZGJjMGZl OTkyMGEwHhcNMjUxMjE4MjMwMTE3WhcNMjUxMjE5MjMwMTE3WjAzMTEwLwYDVQQD Eyg2OWUyMDg4ODRkY2JkY2YyNDIwMGQ3ODJiY2E1ZjgyNDBlOTRlNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwIdSI/2SBk/ycW1q2iZDQCezbpP 4un/RqLicvUL2AMpM0ewuwVx4SOhna75I6OW3pM1kFHpa7JeWhQJvR+mWbqFGmK4 heTEO7ibz1jbsC1askDdduDT3jHh/8uHr67S4OA6LkfM/IYuN7OefqYrLmH0ij6V xSd+SQJgCNgl1EN/12WfqVQEFKDRcr9qqTV7KVu4r/nSvxv95Ugkqf+NiwM68Gi/ wE6xAmhMpFQ8haHfVxgN5lX66tF+DcNM+eL0nmf9fW9optFYZrHzmiiQ06adoSPp AAIeWWnzHCpOO2GGRrfAZFvMbridwp6RwEKBv6CgP9+SV+9rMX65fp5rLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGniCIhNy9zyQgDXgryl+CQOlOcbMB8GA1UdIwQY MBaAFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYt Mjg5Njk2Y2M5OWI5LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYtMjg5Njk2Y2M5OWI5 LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJThruaX4 FiTAVIR+x8kib8TJ2QHhjf+XnZU8p7Nw+icwF8UbcySu2L5j9R/QWh5JlZSw/E27 fP+9lnT7L4u45Ggyah2EmQ5/1fciYncndobVPqWCa2zUaTYPsNJKMWrjq97TGhl5 sst65SOJNMpiWepn0rzSS8U64fDyky7q+tTgVuNUhkbDhoq8sRITyzdH/+WxUZSj G5njGWSyHnE9G5zNvMAY9okRKyGnLlZKn9w9Nex4PvO6v9unphtRaf98FOv6mrss pbeeDfoxjiLSIk9sFDxMLdlWWp7xUzKFUKXjKzhXpzp4mIqzeHrHJ1771wZYSfk+ djojJbkYsVw1zQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:20 2025 by rpki-client