This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json) Hash identifier: 2xESswhMzDw5okr7fgXHETFhxOq4kPIIcdkF+4cY5Y4= Subject key identifier: 5F:F7:11:06:CF:8C:3A:64:F3:C5:66:FC:03:BC:D0:00:AF:1A:92:9B Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a Certificate serial: 019B36B3E128001CECD4813B9F6297842E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft Manifest number: 0503 Signing time: Fri 19 Dec 2025 13:01:56 +0000 Manifest this update: Fri 19 Dec 2025 13:01:56 +0000 Manifest next update: Sat 20 Dec 2025 13:01:56 +0000 Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: clU/gU8dLojgaqJQKFtLiz44qJ/JU1lJi08APBOnOUs=) 2: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (hash: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:e1:28:00:1c:ec:d4:81:3b:9f:62:97:84:2e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a Validity Not Before: Dec 19 13:01:56 2025 GMT Not After : Dec 20 13:01:56 2025 GMT Subject: CN=5ff71106cf8c3a64f3c566fc03bcd000af1a929b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:02:35:b8:df:ae:77:7d:f8:5f:37:0a:28: 61:50:33:f0:5e:10:7b:4f:68:78:24:f6:59:1a:2e: 52:2b:19:e2:15:2a:d9:3c:0c:bb:10:ae:63:d3:9a: 0a:7b:74:cb:c7:49:16:65:ae:46:22:04:e7:41:71: 3e:6c:2c:14:eb:75:76:ac:be:89:fc:bb:63:5b:e2: 67:6c:3e:10:91:15:ab:10:5d:b6:f6:01:f6:89:6a: fa:52:15:d1:d1:b7:7e:b1:09:77:c9:c5:7e:da:84: 42:44:f6:99:af:1e:cb:be:89:46:ff:b4:90:08:e3: f0:17:d5:8e:41:1f:40:96:40:84:c7:86:3e:40:6b: a5:a6:93:1d:00:4b:99:3e:56:ff:29:aa:f6:24:6c: 7c:b5:9a:ab:d4:f5:53:e4:86:b0:e6:07:ba:40:a6: ac:80:bf:29:90:a9:b8:45:aa:36:8f:a7:a9:fd:23: 0e:a2:9d:7f:4d:d7:2d:2b:09:9a:a5:21:68:78:d1: d8:9f:1e:f5:db:f3:5e:dc:49:2f:fe:3f:0c:b2:c0: ef:c2:56:a3:23:b5:f0:18:ce:e4:d9:f6:2b:53:55: 8f:b4:47:64:e8:7d:b5:24:0a:33:d9:b0:3c:2c:ca: a1:ef:90:8a:2c:be:37:14:92:b3:b0:6c:6c:ba:4e: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F7:11:06:CF:8C:3A:64:F3:C5:66:FC:03:BC:D0:00:AF:1A:92:9B X509v3 Authority Key Identifier: keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7c:43:04:95:c5:16:0a:fc:dd:68:35:56:3e:8d:9e:21:e9: e8:26:25:3e:39:a7:75:d6:4f:6d:ed:13:a3:44:9e:b8:87:9d: d6:2d:10:a9:b0:07:21:01:d2:c4:28:06:8c:5d:de:3f:aa:24: f0:23:83:90:8b:e9:8d:b6:5c:21:46:8f:36:2c:54:79:99:db: 64:37:71:12:76:d3:4b:71:75:c2:89:e8:2c:c8:8f:1c:c5:1d: db:ea:a1:18:24:0a:e4:07:84:be:ad:80:a3:2e:74:00:3a:3a: 66:04:58:73:5b:7a:a6:55:73:dc:ad:43:8e:ed:8d:17:36:4a: 7e:39:f8:1f:ab:86:82:fc:ed:1a:a1:57:a7:01:a7:00:1f:da: ba:54:52:08:42:68:ba:18:4b:5c:3a:06:f4:6a:d6:7f:05:39: fc:85:68:d0:14:c4:bd:64:f7:52:3d:d5:25:6b:77:88:52:7e: ac:5c:85:66:8a:fa:f2:40:e6:e9:78:f1:10:1b:13:c8:fd:47: 4e:47:36:87:3f:18:50:6e:b0:96:1b:c6:45:dc:1b:d7:29:3e: 49:09:39:54:aa:c3:eb:4f:e7:56:48:e0:2a:24:e7:cb:40:c6: c7:b3:a0:46:3f:4f:28:ad:4a:2b:82:dd:99:86:d3:f9:ef:8c: 46:3e:82:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s+EoABzs1IE7n2KXhC49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw YzcyMmEwHhcNMjUxMjE5MTMwMTU2WhcNMjUxMjIwMTMwMTU2WjAzMTEwLwYDVQQD Eyg1ZmY3MTEwNmNmOGMzYTY0ZjNjNTY2ZmMwM2JjZDAwMGFmMWE5MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kICNbjfrnd9+F83CihhUDPwXhB7 T2h4JPZZGi5SKxniFSrZPAy7EK5j05oKe3TLx0kWZa5GIgTnQXE+bCwU63V2rL6J /LtjW+JnbD4QkRWrEF229gH2iWr6UhXR0bd+sQl3ycV+2oRCRPaZrx7LvolG/7SQ COPwF9WOQR9AlkCEx4Y+QGulppMdAEuZPlb/Kar2JGx8tZqr1PVT5Iaw5ge6QKas gL8pkKm4Rao2j6ep/SMOop1/TdctKwmapSFoeNHYnx712/Ne3Ekv/j8MssDvwlaj I7XwGM7k2fYrU1WPtEdk6H21JAoz2bA8LMqh75CKLL43FJKzsGxsuk7F0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/3EQbPjDpk88Vm/AO80ACvGpKbMB8GA1UdIwQY MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXxDBJXF Fgr83Wg1Vj6NniHp6CYlPjmnddZPbe0To0SeuIed1i0QqbAHIQHSxCgGjF3eP6ok 8CODkIvpjbZcIUaPNixUeZnbZDdxEnbTS3F1wonoLMiPHMUd2+qhGCQK5AeEvq2A oy50ADo6ZgRYc1t6plVz3K1Dju2NFzZKfjn4H6uGgvztGqFXpwGnAB/aulRSCEJo uhhLXDoG9GrWfwU5/IVo0BTEvWT3Uj3VJWt3iFJ+rFyFZor68kDm6XjxEBsTyP1H Tkc2hz8YUG6wlhvGRdwb1yk+SQk5VKrD60/nVkjgKiTny0DGx7OgRj9PKK1KK4Ld mYbT+e+MRj6CnQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:08:02 2025 by rpki-client