This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json) Hash identifier: /+nrE21ums8owyeIs72+WdU3WwgarzbDz1LdOsTfsU0= Subject key identifier: 19:0B:1C:25:08:E2:0F:7E:66:E5:EA:49:F8:D1:EA:93:33:7D:12:23 Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a Certificate serial: 019B2250CAFC9151D0A1C31F004D8A0D7E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft Manifest number: 0B40 Signing time: Mon 15 Dec 2025 14:01:18 +0000 Manifest this update: Mon 15 Dec 2025 14:01:18 +0000 Manifest next update: Tue 16 Dec 2025 14:01:18 +0000 Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=) 2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: n+eq+XwtgT03wljknVSzlVXA813HYjS0w/yt/BieZvg=) 3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:ca:fc:91:51:d0:a1:c3:1f:00:4d:8a:0d:7e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a Validity Not Before: Dec 15 14:01:18 2025 GMT Not After : Dec 16 14:01:18 2025 GMT Subject: CN=190b1c2508e20f7e66e5ea49f8d1ea93337d1223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:7d:4b:75:16:07:47:b2:03:de:8a:01:40: 79:11:94:42:b1:3f:9c:ae:7c:68:97:27:c8:ac:40: 35:d4:62:b2:33:36:06:7e:20:e2:45:c3:a1:50:13: a8:ae:f0:64:9e:f5:63:46:d8:9a:40:7a:15:73:bf: 98:63:86:48:e5:59:e3:50:21:25:20:10:57:27:65: 66:2f:ed:37:d7:ef:38:91:c9:e0:8c:68:9f:aa:6a: 7b:54:a7:c8:90:30:99:d9:f1:4a:d3:8e:dc:49:16: 3f:d6:a7:c2:e1:1f:66:94:27:f2:41:c7:1d:17:25: 6f:0d:50:56:af:32:8d:ff:00:e7:be:b3:c7:51:69: 64:4b:dc:7e:0a:a6:b5:e9:c7:ff:e3:99:69:eb:5e: 40:10:26:8b:ce:05:97:e8:c7:ca:b4:ff:41:b9:e8: d9:6d:73:da:cc:bc:6b:4f:91:9c:d5:70:da:81:e1: fe:42:7d:72:8a:fd:d3:bc:2a:a6:52:f5:0d:ed:ab: 8e:ef:79:89:eb:f6:14:85:72:b2:76:2e:3d:7d:f7: de:99:ce:32:f4:d3:74:3f:ea:94:f6:39:c4:07:da: fd:20:0a:93:6d:74:1f:45:07:7d:42:d2:a4:54:b8: 59:f0:fc:ad:40:d1:0b:7e:c3:c3:42:5e:f7:30:39: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0B:1C:25:08:E2:0F:7E:66:E5:EA:49:F8:D1:EA:93:33:7D:12:23 X509v3 Authority Key Identifier: keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:36:12:d5:7f:aa:bb:6d:82:7d:de:f3:a3:4b:be:e7:50:f7: 5a:f1:73:4f:2c:12:47:ca:f7:ab:c4:6b:24:3d:72:9b:e4:cd: 06:f5:ab:ea:f0:13:a6:21:53:ee:b2:a0:d5:56:4c:4c:ef:2d: 22:c5:06:d9:be:25:87:40:fb:c0:63:69:9c:37:88:b8:ce:60: 99:65:c4:35:24:71:e1:bd:02:bb:0d:ef:e9:cf:05:73:28:1f: 52:07:bb:ef:b4:78:3b:93:24:34:e0:c0:19:4b:f5:32:6e:19: 8a:aa:12:32:eb:58:42:c9:08:ac:83:72:af:7d:5b:05:5e:96: d3:ce:07:c0:6b:66:32:cb:e2:9c:56:1f:18:81:7b:22:fc:71: b7:94:33:bb:32:87:65:63:1a:8c:55:ae:1c:e4:65:bb:44:7a: fa:65:72:c4:e8:62:33:c9:1f:87:1e:c1:22:d0:6e:f4:bd:a6: 75:d0:3b:f1:01:65:9e:64:30:25:0c:98:29:17:a9:12:3b:5c: 19:26:9c:a5:02:1c:56:c4:84:cb:e8:93:60:90:d2:9d:cd:d4: 2a:c7:33:be:e8:0c:f5:20:47:da:09:71:0e:9b:78:5a:50:10: f9:b1:8f:e0:1a:70:44:81:5d:67:96:a4:d5:03:2d:1e:a1:18: 64:7d:d8:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUMr8kVHQocMfAE2KDX4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2EzNGEzMDM0MTc3ZDA4NDMzOGQzM2IwODliN2UwM2Nj YTNhOGEwHhcNMjUxMjE1MTQwMTE4WhcNMjUxMjE2MTQwMTE4WjAzMTEwLwYDVQQD EygxOTBiMWMyNTA4ZTIwZjdlNjZlNWVhNDlmOGQxZWE5MzMzN2QxMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme59S3UWB0eyA96KAUB5EZRCsT+c rnxolyfIrEA11GKyMzYGfiDiRcOhUBOorvBknvVjRtiaQHoVc7+YY4ZI5VnjUCEl IBBXJ2VmL+031+84kcngjGifqmp7VKfIkDCZ2fFK047cSRY/1qfC4R9mlCfyQccd FyVvDVBWrzKN/wDnvrPHUWlkS9x+Cqa16cf/45lp615AECaLzgWX6MfKtP9BuejZ bXPazLxrT5Gc1XDageH+Qn1yiv3TvCqmUvUN7auO73mJ6/YUhXKydi49fffemc4y 9NN0P+qU9jnEB9r9IAqTbXQfRQd9QtKkVLhZ8PytQNELfsPDQl73MDlN8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkLHCUI4g9+ZuXqSfjR6pMzfRIjMB8GA1UdIwQY MBaAFDvKNKMDQXfQhDONM7CJt+A8yjqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDIt ODk3NTNmMmI0N2RjLzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDItODk3NTNmMmI0N2Rj LzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDYS1X+q u22Cfd7zo0u+51D3WvFzTywSR8r3q8RrJD1ym+TNBvWr6vATpiFT7rKg1VZMTO8t IsUG2b4lh0D7wGNpnDeIuM5gmWXENSRx4b0Cuw3v6c8FcygfUge777R4O5MkNODA GUv1Mm4ZiqoSMutYQskIrINyr31bBV6W084HwGtmMsvinFYfGIF7Ivxxt5QzuzKH ZWMajFWuHORlu0R6+mVyxOhiM8kfhx7BItBu9L2mddA78QFlnmQwJQyYKRepEjtc GSacpQIcVsSEy+iTYJDSnc3UKsczvugM9SBH2glxDpt4WlAQ+bGP4BpwRIFdZ5ak 1QMtHqEYZH3YAA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:26:08 2025 by rpki-client