This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json) Hash identifier: GjolEK46Q01OPRX+q7V6XmX5eWIPWe6dY4/o4Y8rp4M= Subject key identifier: EB:96:DD:46:8A:6A:EC:27:23:7D:46:DB:AD:40:A4:AE:18:63:76:A9 Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89 Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89 Certificate serial: 019B5ABF9CD7B991A93E8ADB91BC6A828995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft Manifest number: 0BD2 Signing time: Fri 26 Dec 2025 13:01:05 +0000 Manifest this update: Fri 26 Dec 2025 13:01:05 +0000 Manifest next update: Sat 27 Dec 2025 13:01:05 +0000 Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: QGpOIL9PSdS3aomkXRgxVAgWHrigj0c1JvTujITnD9g=) 2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:9c:d7:b9:91:a9:3e:8a:db:91:bc:6a:82:89:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89 Validity Not Before: Dec 26 13:01:05 2025 GMT Not After : Dec 27 13:01:05 2025 GMT Subject: CN=eb96dd468a6aec27237d46dbad40a4ae186376a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:45:8d:44:48:6c:8c:0b:3c:da:f2:2a:b4:e4: b7:0a:30:00:f2:b6:74:aa:7a:94:8a:e2:8a:02:cf: 96:0a:87:da:f4:21:96:8a:10:33:ff:3b:3a:8f:43: 8c:3b:f2:72:f4:46:ba:90:e3:fb:a8:4f:94:e0:3a: 84:f2:d3:eb:d4:de:79:44:5c:db:f7:20:97:45:82: db:5f:f0:fd:4e:87:6e:5e:15:5a:7b:97:6b:48:ce: fc:bf:50:f9:b0:4d:d2:cd:f9:28:6e:dd:58:33:e0: f9:22:06:83:b6:a0:7b:f0:a2:d7:c1:e8:db:4b:ba: d1:c9:82:f6:c4:ac:6d:a6:03:72:ae:38:5e:84:15: be:fe:4e:dd:43:c0:e6:49:cf:46:c1:f9:77:0d:bd: 13:2f:ce:8f:0a:0a:d7:90:ce:c9:16:1a:21:48:25: 3c:ef:61:6a:55:46:81:05:18:1f:68:3d:47:ad:f6: 21:0b:f9:95:4d:3f:d0:18:ac:08:94:46:f8:2e:36: 75:5c:75:93:43:ac:86:9e:1f:fd:9c:ad:95:88:85: 18:d4:ad:fd:4d:4e:a0:b2:e1:82:25:e3:48:8d:3a: 29:f3:e3:99:1d:6c:6c:32:20:98:d6:68:7e:b3:96: 6d:99:31:2b:0b:43:ef:e3:9c:87:f2:27:00:22:da: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:96:DD:46:8A:6A:EC:27:23:7D:46:DB:AD:40:A4:AE:18:63:76:A9 X509v3 Authority Key Identifier: keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1e:b1:e7:bd:67:db:79:11:8a:7c:71:23:ed:5f:9f:97:b5: 23:4e:46:48:0a:ca:7b:db:2d:d9:8c:35:23:f5:f9:4a:2d:ce: cb:4d:17:0c:69:e6:98:b0:03:e3:67:7d:31:1f:a7:18:f2:05: 0e:75:f1:1b:b3:c0:9e:86:b9:7d:54:07:2c:eb:e1:20:5a:5a: 5d:b3:cf:a7:3e:e4:c0:2a:09:6d:27:a5:f0:9f:c7:a8:36:e2: 4c:10:0e:d4:18:39:d9:33:51:be:e1:34:75:23:2a:be:a5:b3: 2a:06:ff:6d:67:73:14:8d:59:3a:36:62:21:26:1f:74:3f:b2: f4:6d:bb:7c:c7:16:71:ff:a0:57:fd:25:df:49:b6:80:58:4c: aa:95:4b:48:38:3c:84:79:d4:08:55:35:1b:f2:4f:35:ce:b6: fa:b2:b7:ed:28:ae:23:30:38:ec:92:03:be:96:eb:b4:56:50: d1:e6:c0:d9:26:37:34:9e:18:4b:24:20:c9:ea:9e:e8:11:ed: 7e:a4:92:be:f7:9d:72:a8:3d:14:d7:70:ab:b6:51:6e:11:5e: 42:46:af:08:ab:60:3d:d0:aa:75:be:3f:6f:7a:4e:d5:7d:a2: 86:a2:46:ef:33:c8:b5:f2:dd:a2:41:9e:de:77:28:53:8d:29: 78:58:e6:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav5zXuZGpPorbkbxqgomVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl YTdhODkwHhcNMjUxMjI2MTMwMTA1WhcNMjUxMjI3MTMwMTA1WjAzMTEwLwYDVQQD EyhlYjk2ZGQ0NjhhNmFlYzI3MjM3ZDQ2ZGJhZDQwYTRhZTE4NjM3NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/UWNREhsjAs82vIqtOS3CjAA8rZ0 qnqUiuKKAs+WCofa9CGWihAz/zs6j0OMO/Jy9Ea6kOP7qE+U4DqE8tPr1N55RFzb 9yCXRYLbX/D9ToduXhVae5drSM78v1D5sE3Szfkobt1YM+D5IgaDtqB78KLXwejb S7rRyYL2xKxtpgNyrjhehBW+/k7dQ8DmSc9Gwfl3Db0TL86PCgrXkM7JFhohSCU8 72FqVUaBBRgfaD1HrfYhC/mVTT/QGKwIlEb4LjZ1XHWTQ6yGnh/9nK2ViIUY1K39 TU6gsuGCJeNIjTop8+OZHWxsMiCY1mh+s5ZtmTErC0Pv45yH8icAItryzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuW3UaKauwnI31G261ApK4YY3apMB8GA1UdIwQY MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1 LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbR6x571n 23kRinxxI+1fn5e1I05GSArKe9st2Yw1I/X5Si3Oy00XDGnmmLAD42d9MR+nGPIF DnXxG7PAnoa5fVQHLOvhIFpaXbPPpz7kwCoJbSel8J/HqDbiTBAO1Bg52TNRvuE0 dSMqvqWzKgb/bWdzFI1ZOjZiISYfdD+y9G27fMcWcf+gV/0l30m2gFhMqpVLSDg8 hHnUCFU1G/JPNc62+rK37SiuIzA47JIDvpbrtFZQ0ebA2SY3NJ4YSyQgyeqe6BHt fqSSvvedcqg9FNdwq7ZRbhFeQkavCKtgPdCqdb4/b3pO1X2ihqJG7zPItfLdokGe 3ncoU40peFjmlA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:01 2025 by rpki-client