This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json) Hash identifier: pS2yMNepc8F357U0RbkXyCS5wJnfGjrdNWrH7qmuWes= Subject key identifier: F1:21:28:14:8D:DC:80:C2:A3:60:11:23:C6:20:6A:8A:5B:58:63:75 Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Certificate serial: 019B194D1BC888BB0283E0574D0B126AECC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft Manifest number: 0346 Signing time: Sat 13 Dec 2025 20:00:42 +0000 Manifest this update: Sat 13 Dec 2025 20:00:42 +0000 Manifest next update: Sun 14 Dec 2025 20:00:42 +0000 Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=) 2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: 5MKT6jmUBEioe0Bex6lSsmI50z4GNR/yN40hmEnn9jQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:1b:c8:88:bb:02:83:e0:57:4d:0b:12:6a:ec:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Validity Not Before: Dec 13 20:00:42 2025 GMT Not After : Dec 14 20:00:42 2025 GMT Subject: CN=f12128148ddc80c2a3601123c6206a8a5b586375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:80:6f:9c:4b:5c:7f:95:9b:2a:b9:c5:28: 63:e2:48:11:02:0c:20:18:44:07:24:34:c1:d1:a9: 06:24:b7:88:e3:a2:ef:40:97:72:a7:bd:30:24:35: f6:8c:cd:37:84:04:0c:04:b0:a0:b6:5a:02:01:c9: 39:d9:a6:ba:1a:74:b5:15:91:95:c7:1a:e4:88:96: b5:cd:6b:aa:93:bd:71:8f:f7:6b:94:a0:66:dd:06: 44:b5:85:20:8e:eb:68:81:d6:d7:b6:02:d3:25:a0: a3:ec:91:13:83:6b:f8:ed:20:2d:21:f2:50:eb:20: 6d:63:ee:7b:0f:57:e4:6d:95:19:fc:ec:12:d5:fa: 82:34:4b:3a:2b:cf:f8:06:5a:19:13:b5:6f:d1:76: fc:f8:7c:b2:23:b2:a1:6c:41:ec:74:2c:e4:50:80: 34:1f:ad:cc:c5:4b:b4:e5:11:29:b1:55:0e:0b:ba: 66:d2:26:0a:35:78:af:5d:e8:31:a1:64:cb:2a:e9: 68:c7:87:01:91:96:74:c9:2b:36:0e:6b:a5:51:45: 20:e1:e2:01:d8:7e:b7:60:3f:2e:a0:f5:31:a6:5f: 09:83:08:d7:a0:e2:61:44:63:57:b6:06:50:b6:ad: 4c:d3:69:0a:d1:7a:4d:17:05:ab:32:43:f8:1c:ee: 37:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:28:14:8D:DC:80:C2:A3:60:11:23:C6:20:6A:8A:5B:58:63:75 X509v3 Authority Key Identifier: keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8f:dd:05:ec:68:67:f9:a8:d7:85:60:73:eb:f5:72:7b:56: fa:a5:81:d9:1d:fd:68:27:ec:10:43:77:c4:c3:c4:95:eb:77: 0b:b2:ed:f4:43:a1:0a:0e:78:54:fc:6f:93:1b:55:fe:ae:34: fe:a2:7f:35:51:e3:4c:c0:1c:3e:f4:f9:f7:a6:0d:5f:49:8c: 74:37:ce:e6:92:86:de:4e:fd:f4:3a:c6:17:b1:4c:53:5c:cc: 80:ab:36:39:f8:b1:03:9d:d9:81:e9:2b:2e:cb:09:74:4a:d4: 97:e4:c4:e4:21:86:db:e5:6d:d9:3e:82:e5:ef:91:85:b9:07: 5e:bc:f7:8d:27:95:78:81:17:cf:b2:2b:e9:be:c0:82:dd:af: 70:ba:57:91:6a:38:47:95:38:e4:cb:ef:d7:7c:62:d3:a7:a3: 00:14:77:8a:32:12:7d:ee:43:2f:e8:58:15:28:d5:19:51:c6: d2:35:b3:38:78:47:07:3d:60:c6:bc:36:b1:f0:cf:f9:38:58: ac:73:35:f1:09:1f:db:6f:9c:d4:36:8b:0b:d8:ad:d0:94:9c: 38:2c:75:d0:18:c3:08:de:0d:c7:90:24:8e:ed:59:d9:f6:8e: fe:f0:8f:d4:2f:0f:ce:18:fe:09:19:a7:7e:e8:48:6d:4a:ff: c6:d7:6e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTRvIiLsCg+BXTQsSauzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4 MjZjMjYwHhcNMjUxMjEzMjAwMDQyWhcNMjUxMjE0MjAwMDQyWjAzMTEwLwYDVQQD EyhmMTIxMjgxNDhkZGM4MGMyYTM2MDExMjNjNjIwNmE4YTViNTg2Mzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8eAb5xLXH+Vmyq5xShj4kgRAgwg GEQHJDTB0akGJLeI46LvQJdyp70wJDX2jM03hAQMBLCgtloCAck52aa6GnS1FZGV xxrkiJa1zWuqk71xj/drlKBm3QZEtYUgjutogdbXtgLTJaCj7JETg2v47SAtIfJQ 6yBtY+57D1fkbZUZ/OwS1fqCNEs6K8/4BloZE7Vv0Xb8+HyyI7KhbEHsdCzkUIA0 H63MxUu05REpsVUOC7pm0iYKNXivXegxoWTLKulox4cBkZZ0ySs2DmulUUUg4eIB 2H63YD8uoPUxpl8JgwjXoOJhRGNXtgZQtq1M02kK0XpNFwWrMkP4HO43FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEhKBSN3IDCo2ARI8YgaopbWGN1MB8GA1UdIwQY MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt Y2NiZmE3MzQyNGE3LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3 LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4/dBexo Z/mo14Vgc+v1cntW+qWB2R39aCfsEEN3xMPElet3C7Lt9EOhCg54VPxvkxtV/q40 /qJ/NVHjTMAcPvT596YNX0mMdDfO5pKG3k799DrGF7FMU1zMgKs2OfixA53Zgekr LssJdErUl+TE5CGG2+Vt2T6C5e+RhbkHXrz3jSeVeIEXz7Ir6b7Agt2vcLpXkWo4 R5U45Mvv13xi06ejABR3ijISfe5DL+hYFSjVGVHG0jWzOHhHBz1gxrw2sfDP+ThY rHM18Qkf22+c1DaLC9it0JScOCx10BjDCN4Nx5Akju1Z2faO/vCP1C8Pzhj+CRmn fuhIbUr/xtduGw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:27 2025 by rpki-client