This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json) Hash identifier: QOYfmMtXfYczslmAt2CRIz79cXKyHu8lRADE4qSfMoo= Subject key identifier: 63:97:48:9E:2D:AD:0C:27:6E:FF:09:A4:18:6E:80:CF:0E:9A:10:FE Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40 Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240 Certificate serial: 019B397D04BF745391CCE84ACCBD8BB63550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft Manifest number: 12C8 Signing time: Sat 20 Dec 2025 02:00:53 +0000 Manifest this update: Sat 20 Dec 2025 02:00:53 +0000 Manifest next update: Sun 21 Dec 2025 02:00:53 +0000 Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: 4txC1775AEm8VHXlJgPIcMjHJHuqn3Qg2XjhTutRVYg=) 2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=) 3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:04:bf:74:53:91:cc:e8:4a:cc:bd:8b:b6:35:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240 Validity Not Before: Dec 20 02:00:53 2025 GMT Not After : Dec 21 02:00:53 2025 GMT Subject: CN=6397489e2dad0c276eff09a4186e80cf0e9a10fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:23:b7:89:72:30:5d:a9:85:61:dd:82:94: 65:db:26:72:dc:0b:f2:4b:c8:98:9c:8b:1b:b6:43: 87:ae:1a:7a:1d:a4:34:38:48:37:2d:f5:8f:32:7c: ee:3e:83:a6:85:68:29:bf:98:b5:26:ef:0d:12:06: a2:95:31:6f:17:ed:2a:ad:da:69:5b:00:1c:dd:47: 72:3f:95:a6:8f:e9:b3:14:14:1d:2d:4b:5b:91:62: 0d:29:3f:80:c4:57:b2:de:e0:ab:cf:06:03:68:bb: a7:86:7a:1e:c5:fc:77:52:80:9d:bc:ce:03:88:1e: 96:9c:ed:05:61:c5:6c:8c:98:58:2b:12:5e:bc:18: 02:f6:55:e2:b5:56:bf:3e:09:f0:1d:08:f8:78:44: bf:03:c5:02:fe:aa:f0:51:31:65:f9:48:51:1d:c0: 8d:fb:97:33:68:f8:7b:ea:68:da:72:c2:a0:2a:f0: f3:9b:cf:e1:b9:48:e1:fe:a4:e0:33:32:62:2d:70: b5:fd:c3:cb:07:46:6b:cd:51:e7:43:35:2c:50:d1: 44:0e:4d:0b:e0:bb:fc:a4:61:0f:a2:82:1a:1f:d3: 47:2e:99:df:ba:8b:49:f5:af:d3:86:e3:06:7d:3d: 4a:47:3b:ce:34:49:66:73:61:a4:94:90:21:94:bf: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:48:9E:2D:AD:0C:27:6E:FF:09:A4:18:6E:80:CF:0E:9A:10:FE X509v3 Authority Key Identifier: keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:23:3f:8c:64:7e:74:6e:c8:2a:23:b6:b9:9f:6e:a9:6e:b0: fc:c3:58:cc:f3:28:a6:1b:6e:fb:0b:c2:8f:88:95:be:6b:c9: 11:e3:5b:ff:4e:95:98:39:b9:d7:7b:80:46:5c:c4:f4:ae:21: b2:93:03:3f:0c:41:b3:4f:7d:a0:dc:eb:2f:2b:38:75:e0:e3: 37:85:75:7d:b7:d6:63:88:d5:b2:6a:3a:97:ec:9d:90:24:71: a9:23:3a:7c:4e:58:ee:8d:a9:05:a9:14:72:df:91:82:28:6e: c9:e3:3e:87:3b:fb:1b:9a:ae:5f:c4:96:21:29:98:f6:44:c1: cb:2e:a2:2c:31:33:32:73:76:b5:e9:36:eb:76:7a:36:54:b5: ee:03:cc:da:19:35:c9:78:f5:48:70:37:15:ee:02:88:1e:23: 57:1f:c5:fb:49:f6:c9:f1:04:ff:19:f1:18:17:0f:2f:86:e8: 13:2b:4e:01:4c:ac:30:e6:4f:e5:f6:7d:df:71:bc:22:38:50: 27:ce:7b:82:49:ac:d7:f9:b9:5d:cd:07:ff:26:d5:87:b2:20: f1:1f:0f:37:90:84:10:5c:e7:ef:4c:82:da:77:0e:b2:73:fc: a5:52:24:c5:96:a5:f9:6d:72:ce:aa:50:54:24:db:dd:ce:fb: 3d:fd:6a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQS/dFORzOhKzL2LtjVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyODA3ZjI4MGRhOTk1NjllY2EyNDM0NmJhYmU5ZGM4NWFj MTMyNDAwHhcNMjUxMjIwMDIwMDUzWhcNMjUxMjIxMDIwMDUzWjAzMTEwLwYDVQQD Eyg2Mzk3NDg5ZTJkYWQwYzI3NmVmZjA5YTQxODZlODBjZjBlOWExMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUgjt4lyMF2phWHdgpRl2yZy3Avy S8iYnIsbtkOHrhp6HaQ0OEg3LfWPMnzuPoOmhWgpv5i1Ju8NEgailTFvF+0qrdpp WwAc3UdyP5Wmj+mzFBQdLUtbkWINKT+AxFey3uCrzwYDaLunhnoexfx3UoCdvM4D iB6WnO0FYcVsjJhYKxJevBgC9lXitVa/PgnwHQj4eES/A8UC/qrwUTFl+UhRHcCN +5czaPh76mjacsKgKvDzm8/huUjh/qTgMzJiLXC1/cPLB0ZrzVHnQzUsUNFEDk0L 4Lv8pGEPooIaH9NHLpnfuotJ9a/ThuMGfT1KRzvONElmc2GklJAhlL9KbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOXSJ4trQwnbv8JpBhugM8OmhD+MB8GA1UdIwQY MBaAFPKAfygNqZVp7KJDRrq+nchawTJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYt YTlmYWY2YTI2NDI2LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYtYTlmYWY2YTI2NDI2 LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCM/jGR+ dG7IKiO2uZ9uqW6w/MNYzPMophtu+wvCj4iVvmvJEeNb/06VmDm513uARlzE9K4h spMDPwxBs099oNzrLys4deDjN4V1fbfWY4jVsmo6l+ydkCRxqSM6fE5Y7o2pBakU ct+RgihuyeM+hzv7G5quX8SWISmY9kTByy6iLDEzMnN2tek263Z6NlS17gPM2hk1 yXj1SHA3Fe4CiB4jVx/F+0n2yfEE/xnxGBcPL4boEytOAUysMOZP5fZ933G8IjhQ J857gkms1/m5Xc0H/ybVh7Ig8R8PN5CEEFzn70yC2ncOsnP8pVIkxZal+W1yzqpQ VCTb3c77Pf1qOQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:22 2025 by rpki-client