This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json) Hash identifier: CKRuL/DFBll+xh7/jfhzn62/1Z1xJ0c4lo+YncC5Xm0= Subject key identifier: 8E:87:B5:65:3B:8B:21:EC:96:EE:2E:A1:24:50:85:E2:BA:EA:B9:A1 Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019B07B53B99C040F1BD5B54124EC80D0F04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft Manifest number: 1643 Signing time: Wed 10 Dec 2025 10:01:16 +0000 Manifest this update: Wed 10 Dec 2025 10:01:16 +0000 Manifest next update: Thu 11 Dec 2025 10:01:16 +0000 Files and hashes: 1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=) 2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=) 3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=) 4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=) 5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=) 6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=) 7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=) 8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: wmk8hsfJuaCgc7a0i3aNbCmF/03N+jA7Sk0Jrac9kCA=) 9: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:3b:99:c0:40:f1:bd:5b:54:12:4e:c8:0d:0f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Dec 10 10:01:16 2025 GMT Not After : Dec 11 10:01:16 2025 GMT Subject: CN=8e87b5653b8b21ec96ee2ea1245085e2baeab9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:5d:5b:63:a1:bb:cc:2d:a4:f8:0c:04:f1: ca:b5:f4:b7:21:c5:e0:ee:cc:ec:05:ee:ba:cb:2b: aa:b3:af:51:05:3a:88:53:43:e8:18:97:a6:4c:61: fe:fe:ba:95:3a:39:46:92:63:0c:63:e8:77:c8:7f: 59:21:1d:8b:b0:ac:16:48:3d:e9:17:02:5f:23:6a: 9f:49:f2:ad:d9:e3:93:38:06:ea:84:7c:71:1c:84: 5f:4d:eb:c6:2f:e5:ab:56:db:1b:58:7c:4c:b2:c7: f0:a8:42:59:df:e4:3c:c8:e0:9b:e7:41:76:50:a8: 83:eb:04:b4:e9:bb:9c:97:cb:37:ca:67:60:29:f1: 54:38:3c:29:d8:f0:a4:b1:e8:74:49:f0:5e:92:42: a2:6c:6b:44:ec:6a:6f:8d:d7:6c:e1:52:84:36:40: 87:18:73:ab:f6:46:c0:83:58:8a:80:56:16:a1:88: 74:cd:02:ee:0b:9e:99:01:f7:19:9f:b4:51:d8:1f: 17:ca:1d:fb:97:72:0a:23:45:60:90:c1:ab:89:f9: a4:30:15:44:45:de:16:f9:2c:7d:35:0a:59:a6:eb: 5d:0e:31:a8:66:c3:5c:c1:8d:8f:df:b9:cd:51:0c: a8:5c:d8:75:a6:50:33:19:fa:b8:90:e0:bb:e3:d6: b3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:87:B5:65:3B:8B:21:EC:96:EE:2E:A1:24:50:85:E2:BA:EA:B9:A1 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7a:d7:47:d7:7f:f3:b1:6c:21:b6:4f:7b:86:4d:7e:79:c0: 7d:32:83:f4:d0:6c:1b:7e:5c:a9:00:42:d0:cd:cc:93:f4:4a: 13:44:a3:f7:a2:06:af:db:47:77:e7:ba:ff:ab:a6:e7:d2:df: 1e:83:8b:3c:2a:b5:dd:69:2c:4e:c7:f9:24:f8:56:26:7b:ae: e9:ed:3a:d0:d6:68:5c:2a:39:31:03:a7:82:6e:c5:cc:b9:5b: ed:ce:15:7f:e3:d2:86:ee:4b:3f:23:22:8d:4e:c3:a0:9f:90: 92:0d:a6:21:e8:51:96:74:c1:34:16:1a:ba:95:de:c0:70:d2: 57:2f:50:79:ad:74:1c:e0:e9:c6:24:6e:45:29:56:fc:3d:7a: d9:7e:11:ad:30:19:e9:7c:dd:82:6a:77:99:92:c4:dd:91:42: 13:96:14:31:03:6a:e9:1f:16:9e:ee:a1:e6:b4:a0:8b:dd:01: 15:1e:89:a8:16:e0:4d:e4:ab:db:6a:03:d2:1e:7d:22:24:4c: 77:9e:d7:9c:ca:ad:5e:a6:04:7a:00:da:4e:72:5c:74:6b:fd: ad:11:47:68:ac:e2:f4:ec:56:a2:95:ba:c5:8f:8b:85:1a:9e: 7e:68:34:c4:32:40:75:f0:cf:8e:26:fc:68:6d:42:de:cd:56: b7:4f:5d:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtTuZwEDxvVtUEk7IDQ8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjUxMjEwMTAwMTE2WhcNMjUxMjExMTAwMTE2WjAzMTEwLwYDVQQD Eyg4ZTg3YjU2NTNiOGIyMWVjOTZlZTJlYTEyNDUwODVlMmJhZWFiOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LVdW2Ohu8wtpPgMBPHKtfS3IcXg 7szsBe66yyuqs69RBTqIU0PoGJemTGH+/rqVOjlGkmMMY+h3yH9ZIR2LsKwWSD3p FwJfI2qfSfKt2eOTOAbqhHxxHIRfTevGL+WrVtsbWHxMssfwqEJZ3+Q8yOCb50F2 UKiD6wS06bucl8s3ymdgKfFUODwp2PCkseh0SfBekkKibGtE7Gpvjdds4VKENkCH GHOr9kbAg1iKgFYWoYh0zQLuC56ZAfcZn7RR2B8Xyh37l3IKI0VgkMGrifmkMBVE Rd4W+Sx9NQpZputdDjGoZsNcwY2P37nNUQyoXNh1plAzGfq4kOC749azAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6HtWU7iyHslu4uoSRQheK66rmhMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXrXR9d/ 87FsIbZPe4ZNfnnAfTKD9NBsG35cqQBC0M3Mk/RKE0Sj96IGr9tHd+e6/6um59Lf HoOLPCq13WksTsf5JPhWJnuu6e060NZoXCo5MQOngm7FzLlb7c4Vf+PShu5LPyMi jU7DoJ+Qkg2mIehRlnTBNBYaupXewHDSVy9Qea10HODpxiRuRSlW/D162X4RrTAZ 6Xzdgmp3mZLE3ZFCE5YUMQNq6R8Wnu6h5rSgi90BFR6JqBbgTeSr22oD0h59IiRM d57XnMqtXqYEegDaTnJcdGv9rRFHaKzi9OxWopW6xY+LhRqefmg0xDJAdfDPjib8 aG1C3s1Wt09dDQ== -----END CERTIFICATE-----Generated at Wed Dec 10 12:55:02 2025 by rpki-client