This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json) Hash identifier: E/ZXIrf8xve30xoob28wPSygoooLic14X7NJPOybiO8= Subject key identifier: 0C:3F:68:CB:5C:21:D1:77:71:E1:25:A1:8E:76:20:23:E6:15:4B:1E Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab Certificate serial: 019B2E54EFAD668E91A3CA4F75627D1F807C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft Manifest number: 0F4B Signing time: Wed 17 Dec 2025 22:01:16 +0000 Manifest this update: Wed 17 Dec 2025 22:01:16 +0000 Manifest next update: Thu 18 Dec 2025 22:01:16 +0000 Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=) 2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: AvldSKuo8kbz634gGZ2vnDxpN7HujikUfNxetch/Yxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:ef:ad:66:8e:91:a3:ca:4f:75:62:7d:1f:80:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab Validity Not Before: Dec 17 22:01:16 2025 GMT Not After : Dec 18 22:01:16 2025 GMT Subject: CN=0c3f68cb5c21d17771e125a18e762023e6154b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:32:57:96:8d:2a:3b:0c:c5:8d:0c:61:a4: e6:3f:79:1b:a5:7b:02:0e:8f:4c:c0:e8:84:08:75: f8:02:6b:43:1d:bc:3b:d4:53:7c:13:e4:83:2a:bd: e7:bb:11:47:8b:eb:cd:51:9b:0e:51:c5:be:1f:70: d4:70:37:1a:6c:94:b1:01:0e:93:c3:7f:21:8c:d8: d2:a3:48:4e:b8:8e:0c:7f:ee:d8:34:9f:99:bb:1f: 99:69:b9:99:99:89:04:db:0b:d3:a1:1e:65:93:98: cc:35:17:0d:26:e0:9c:8f:ab:66:68:78:0d:49:65: f3:3c:45:27:56:6b:af:00:e6:49:c5:34:93:68:93: bc:c8:98:01:e4:eb:7b:5a:e8:2c:53:72:11:45:96: f4:52:a4:35:b2:ec:80:99:88:de:d4:1b:e0:da:e2: 7f:fd:03:48:aa:c6:76:81:3e:01:b3:d4:a2:d1:8e: da:1b:6c:8a:fb:92:fd:30:c8:d9:42:13:a2:1e:5a: db:f5:23:47:a3:a0:f7:0f:ce:ad:22:b8:d7:19:a1: 91:b8:31:c1:b0:31:b5:a7:80:03:9d:37:8f:be:50: aa:3f:d0:0a:43:b2:94:62:8f:1b:40:a0:4a:ce:5c: 53:92:6f:03:d3:9a:ad:33:4e:03:87:7e:e5:a5:71: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3F:68:CB:5C:21:D1:77:71:E1:25:A1:8E:76:20:23:E6:15:4B:1E X509v3 Authority Key Identifier: keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1b:5d:8b:e9:20:da:39:f8:ed:0a:f8:40:32:9b:05:3f:32: 5c:e7:57:3c:be:c5:40:7b:f6:32:34:19:59:d8:b5:f9:9e:14: 5b:16:7b:14:98:fe:6e:a4:2f:8f:1e:fb:04:6c:71:eb:ee:0c: 0d:43:44:ff:7d:39:3b:b3:74:db:84:6b:36:8b:61:ec:c5:d0: 4b:0f:ea:ea:bb:f1:ee:6a:95:49:ce:15:a0:14:34:be:53:c8: da:7e:6b:58:e0:85:fe:55:dc:b7:8e:59:52:81:9a:57:d6:41: 4b:27:37:14:87:dc:00:ce:42:79:6d:cb:a3:68:be:6e:25:50: 38:96:51:84:bd:b0:58:c1:18:04:a0:4e:c0:fc:10:ad:73:60: 10:4b:8b:9b:d9:bc:ef:69:62:27:36:af:2b:d1:f0:de:ab:21: 51:62:99:4f:01:42:67:9c:b0:da:89:6d:0c:4a:c7:29:4a:a8: 3a:e7:1c:8c:7e:dc:10:27:04:9e:30:e0:83:01:00:8b:c0:e7: 06:37:5e:3a:5c:e4:c4:7c:a0:55:0d:4c:21:6c:29:21:12:f1: 23:1f:6c:82:87:ad:7a:ff:a6:bb:21:e2:c8:9d:7e:05:d3:6a: 7c:b1:d7:a4:b8:92:4d:2c:f9:54:9c:b1:4e:76:50:4d:17:11: 6c:f9:55:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVO+tZo6Ro8pPdWJ9H4B8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZTI1YmNjNTUzMGI2ZjQ2ZjNkMTFjYjgxMTNmMjE5YTQ2 ZGZkYWIwHhcNMjUxMjE3MjIwMTE2WhcNMjUxMjE4MjIwMTE2WjAzMTEwLwYDVQQD EygwYzNmNjhjYjVjMjFkMTc3NzFlMTI1YTE4ZTc2MjAyM2U2MTU0YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23IyV5aNKjsMxY0MYaTmP3kbpXsC Do9MwOiECHX4AmtDHbw71FN8E+SDKr3nuxFHi+vNUZsOUcW+H3DUcDcabJSxAQ6T w38hjNjSo0hOuI4Mf+7YNJ+Zux+ZabmZmYkE2wvToR5lk5jMNRcNJuCcj6tmaHgN SWXzPEUnVmuvAOZJxTSTaJO8yJgB5Ot7WugsU3IRRZb0UqQ1suyAmYje1Bvg2uJ/ /QNIqsZ2gT4Bs9Si0Y7aG2yK+5L9MMjZQhOiHlrb9SNHo6D3D86tIrjXGaGRuDHB sDG1p4ADnTePvlCqP9AKQ7KUYo8bQKBKzlxTkm8D05qtM04Dh37lpXGZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw/aMtcIdF3ceEloY52ICPmFUseMB8GA1UdIwQY MBaAFLDiW8xVMLb0bz0Ry4ET8hmkbf2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUt MWFhZGFiYTgwMDcyLzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUtMWFhZGFiYTgwMDcy LzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAextdi+kg 2jn47Qr4QDKbBT8yXOdXPL7FQHv2MjQZWdi1+Z4UWxZ7FJj+bqQvjx77BGxx6+4M DUNE/305O7N024RrNoth7MXQSw/q6rvx7mqVSc4VoBQ0vlPI2n5rWOCF/lXct45Z UoGaV9ZBSyc3FIfcAM5CeW3Lo2i+biVQOJZRhL2wWMEYBKBOwPwQrXNgEEuLm9m8 72liJzavK9Hw3qshUWKZTwFCZ5yw2oltDErHKUqoOuccjH7cECcEnjDggwEAi8Dn BjdeOlzkxHygVQ1MIWwpIRLxIx9sgoetev+muyHiyJ1+BdNqfLHXpLiSTSz5VJyx TnZQTRcRbPlV2w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:03 2025 by rpki-client