This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json) Hash identifier: kecuRz5WcWkNfX30BCXXARO3yg8LPo7TjL468OItjKw= Subject key identifier: 22:33:97:E1:7E:DA:C2:9B:C6:DD:45:73:E1:0B:0E:68:1D:95:38:AD Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab Certificate serial: 019B4136D927FEDB46963C9FE3CD28B3B335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft Manifest number: 0E16 Signing time: Sun 21 Dec 2025 14:01:12 +0000 Manifest this update: Sun 21 Dec 2025 14:01:12 +0000 Manifest next update: Mon 22 Dec 2025 14:01:12 +0000 Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: PL71WFTYy/gezA2YSjaYkfv8Lm817MhOaqxEvYxQrT0=) 2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:d9:27:fe:db:46:96:3c:9f:e3:cd:28:b3:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab Validity Not Before: Dec 21 14:01:12 2025 GMT Not After : Dec 22 14:01:12 2025 GMT Subject: CN=223397e17edac29bc6dd4573e10b0e681d9538ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:9c:97:63:f4:fc:9a:c4:9c:02:57:6e:45: 5c:a3:fc:bc:8f:eb:92:58:8a:4e:12:ad:22:aa:dd: 5d:cd:18:84:19:13:df:8d:c2:15:b9:f2:4f:66:18: 27:25:d6:b3:8f:ca:68:e2:a5:cb:32:46:bb:a3:c8: 5c:f5:9a:e6:6a:a0:fa:b1:0c:c7:fc:7a:a0:97:1c: de:66:3a:10:d9:26:e1:7b:5e:04:68:9f:da:53:24: 5b:ac:80:d6:d9:91:66:b7:03:6d:bf:c6:f5:c6:cb: de:46:3b:32:79:a6:ef:4a:65:93:c1:df:01:2f:30: aa:78:9e:96:ca:a3:4b:fa:55:21:28:60:f3:4a:d7: 6d:ee:98:17:b3:92:e7:ee:5d:c2:05:f8:a4:3d:80: 2d:26:76:f2:da:58:05:c9:68:3a:ba:68:50:76:79: 26:ec:ec:66:c7:99:43:c3:5f:5c:ef:ed:08:3a:d8: dd:2b:3f:de:4f:21:24:0e:f6:9c:af:99:bf:40:8b: 79:5c:e6:9a:17:ca:7f:65:df:3a:a8:fd:38:80:d6: f2:70:c0:13:8f:0d:ec:98:50:0f:c1:6c:5c:a6:bd: c5:88:10:9d:1b:2e:31:40:9b:ba:5b:54:ed:5a:17: a3:67:e1:ff:d7:c2:28:35:ed:1f:1a:8e:b0:7f:c9: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:97:E1:7E:DA:C2:9B:C6:DD:45:73:E1:0B:0E:68:1D:95:38:AD X509v3 Authority Key Identifier: keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7d:dd:aa:8e:3b:7f:c7:20:98:12:c4:ee:c4:66:cf:e5:60: b5:6b:91:f1:4d:92:1b:35:84:c3:5c:4d:e9:f9:a6:64:d3:93: 20:a9:5a:57:4f:e4:69:3a:34:ec:24:d9:9d:37:69:48:87:30: 55:e4:25:f0:93:90:17:a3:ea:df:92:b5:87:46:c5:f1:9e:0c: f0:d4:41:86:a4:bb:af:f6:de:27:4c:9f:72:59:ae:45:d8:44: 07:87:88:7a:be:33:df:10:e5:11:21:06:74:1b:6c:81:67:17: 83:bb:23:1c:77:5b:83:f1:fc:56:28:97:6f:b9:7e:e4:3d:bf: 11:15:d6:48:5c:4e:b5:ed:ef:d2:0a:c2:f1:ca:fd:5d:5a:17: f1:ad:5d:21:67:ab:03:4c:08:3e:ee:c0:e6:f7:25:45:95:8f: ad:6d:f8:0c:5d:44:1d:1c:60:4d:10:b9:9a:e1:01:eb:a3:40: 01:6c:c0:5e:95:54:c9:e9:56:a9:d1:a9:fe:93:8a:dd:a2:82: b7:37:bf:a5:c2:bc:ed:d2:b4:b8:32:41:a5:06:0a:30:b7:c4: 89:60:a5:92:74:d7:b7:b2:1a:e4:c2:95:c5:7b:df:f3:6f:b6: 2c:8a:6e:22:7c:55:43:71:0c:2b:9f:bd:b6:94:25:e8:a3:df: ae:67:32:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtkn/ttGljyf480os7M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZWYxMjkwY2YzOGI0ZjZlMDE4M2U3ZTRiZjg3YWM2N2Ex MmQ3YWIwHhcNMjUxMjIxMTQwMTEyWhcNMjUxMjIyMTQwMTEyWjAzMTEwLwYDVQQD EygyMjMzOTdlMTdlZGFjMjliYzZkZDQ1NzNlMTBiMGU2ODFkOTUzOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s2cl2P0/JrEnAJXbkVco/y8j+uS WIpOEq0iqt1dzRiEGRPfjcIVufJPZhgnJdazj8po4qXLMka7o8hc9ZrmaqD6sQzH /HqglxzeZjoQ2Sbhe14EaJ/aUyRbrIDW2ZFmtwNtv8b1xsveRjsyeabvSmWTwd8B LzCqeJ6WyqNL+lUhKGDzStdt7pgXs5Ln7l3CBfikPYAtJnby2lgFyWg6umhQdnkm 7Oxmx5lDw19c7+0IOtjdKz/eTyEkDvacr5m/QIt5XOaaF8p/Zd86qP04gNbycMAT jw3smFAPwWxcpr3FiBCdGy4xQJu6W1TtWhejZ+H/18IoNe0fGo6wf8m+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIzl+F+2sKbxt1Fc+ELDmgdlTitMB8GA1UdIwQY MBaAFNjvEpDPOLT24Bg+fkv4esZ6EterMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmIt NDhlNmYyNjBmYmE1LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmItNDhlNmYyNjBmYmE1 LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX3dqo47 f8cgmBLE7sRmz+VgtWuR8U2SGzWEw1xN6fmmZNOTIKlaV0/kaTo07CTZnTdpSIcw VeQl8JOQF6Pq35K1h0bF8Z4M8NRBhqS7r/beJ0yfclmuRdhEB4eIer4z3xDlESEG dBtsgWcXg7sjHHdbg/H8ViiXb7l+5D2/ERXWSFxOte3v0grC8cr9XVoX8a1dIWer A0wIPu7A5vclRZWPrW34DF1EHRxgTRC5muEB66NAAWzAXpVUyelWqdGp/pOK3aKC tze/pcK87dK0uDJBpQYKMLfEiWClknTXt7Ia5MKVxXvf82+2LIpuInxVQ3EMK5+9 tpQl6KPfrmcyrA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:34:27 2025 by rpki-client