This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json) Hash identifier: Z9ZsNmRI6jSRxy4fCEbZyGJwPNK163diaVKzOfqTXH4= Subject key identifier: 31:B8:9B:66:25:7F:55:77:77:7B:EE:A1:4A:B4:06:1D:0C:37:78:49 Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Certificate serial: 019B3BD95C27F9A8C5FC700FE0FAA5D55B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft Manifest number: 1751 Signing time: Sat 20 Dec 2025 13:00:59 +0000 Manifest this update: Sat 20 Dec 2025 13:00:59 +0000 Manifest next update: Sun 21 Dec 2025 13:00:59 +0000 Files and hashes: 1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=) 2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: tZUgyx4brazHOoIgJLdgjBNaDuFJ+cNlW0oDpIKnSPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:5c:27:f9:a8:c5:fc:70:0f:e0:fa:a5:d5:5b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Validity Not Before: Dec 20 13:00:59 2025 GMT Not After : Dec 21 13:00:59 2025 GMT Subject: CN=31b89b66257f5577777beea14ab4061d0c377849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:ba:eb:2e:69:44:b5:77:04:49:46:a3:a2: c0:90:a6:d3:fc:43:b2:6b:46:71:c2:7d:78:42:fd: e9:b9:e7:8c:d7:b5:6a:d7:da:32:1d:16:91:62:d5: e2:f0:1a:53:72:91:28:80:96:3d:95:53:c0:2a:31: ee:76:98:30:d9:36:dc:0e:cd:4f:18:bc:05:63:9d: 3d:90:2c:00:d9:34:dc:d4:d8:d3:22:ff:09:f1:9b: 38:9d:a8:d6:4a:81:41:59:9f:de:1d:9b:7e:4a:1f: 8a:c5:b6:ae:fa:e3:6e:52:f9:cc:ef:a6:3e:5a:1d: 20:6a:c6:f6:d4:85:c8:c3:55:79:15:68:52:23:0d: 44:48:03:5f:96:9c:60:c4:52:37:36:67:03:da:2b: 46:f8:bd:76:da:97:aa:9e:f3:50:3b:27:0c:86:64: 52:45:cd:79:81:ee:1a:9f:fe:d6:35:1e:f6:0f:99: b6:d9:ee:33:78:85:dc:05:81:a6:8f:b7:5e:61:7d: f5:db:93:aa:f3:7d:65:79:79:fb:5f:9a:04:db:be: f5:a1:c9:17:bb:5a:44:9a:19:dd:6b:e9:45:2e:1d: 63:61:b1:ba:c6:3d:60:9d:93:78:41:fd:26:c2:e2: 26:ce:ab:f8:ac:9c:4e:4b:df:c4:76:47:8b:1d:19: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B8:9B:66:25:7F:55:77:77:7B:EE:A1:4A:B4:06:1D:0C:37:78:49 X509v3 Authority Key Identifier: keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ec:0f:ed:e1:25:e1:52:77:b3:eb:07:9f:3d:23:a6:8b:ea: c2:70:16:c8:c2:bf:f2:ef:a0:4e:3c:54:28:d5:8a:fb:ce:7e: 53:69:aa:7a:da:8b:32:f9:db:73:96:e8:7f:ad:b4:59:2f:ee: be:37:81:e8:c4:f5:fc:95:0d:8e:df:c6:aa:73:05:ac:54:f2: ff:fa:0a:b9:37:41:8f:3c:da:14:60:ae:b1:ee:c7:3d:25:0e: 08:85:91:79:b4:e8:bf:b6:76:20:b3:e5:64:b5:e6:09:3a:12: a7:76:53:22:ac:a8:9a:8c:dd:e3:97:ad:94:e3:ab:a9:52:f7: a7:5e:d6:09:71:f3:fe:6a:57:cb:11:83:98:51:55:35:f6:8d: c4:e7:2b:f0:a6:c3:4a:e3:71:4b:03:69:1b:dc:6f:54:09:8f: 19:fd:db:32:8a:70:da:9e:b1:b7:23:22:d3:ef:72:31:d2:e7: 89:ae:9a:4c:58:52:cd:92:12:8e:04:47:c8:ff:07:e6:25:42: 39:eb:c6:8d:da:2d:1d:7b:c7:27:a9:25:be:52:f5:bd:b7:a3: f8:ed:39:df:23:7a:ab:20:58:f2:07:c5:d3:95:22:0b:16:ee: 6d:94:fa:4b:21:6a:c4:6e:e5:3e:db:b9:e3:8f:c7:11:d6:e6: d0:ad:3d:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Vwn+ajF/HAP4Pql1VslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZmEzY2FkY2E0ZTEzMWEwZmJlMWI5ZTQwZGJhMzgzODMz Y2Y0OGEwHhcNMjUxMjIwMTMwMDU5WhcNMjUxMjIxMTMwMDU5WjAzMTEwLwYDVQQD EygzMWI4OWI2NjI1N2Y1NTc3Nzc3YmVlYTE0YWI0MDYxZDBjMzc3ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Mm66y5pRLV3BElGo6LAkKbT/EOy a0Zxwn14Qv3pueeM17Vq19oyHRaRYtXi8BpTcpEogJY9lVPAKjHudpgw2TbcDs1P GLwFY509kCwA2TTc1NjTIv8J8Zs4najWSoFBWZ/eHZt+Sh+Kxbau+uNuUvnM76Y+ Wh0gasb21IXIw1V5FWhSIw1ESANflpxgxFI3NmcD2itG+L122peqnvNQOycMhmRS Rc15ge4an/7WNR72D5m22e4zeIXcBYGmj7deYX3125Oq831leXn7X5oE2771ockX u1pEmhnda+lFLh1jYbG6xj1gnZN4Qf0mwuImzqv4rJxOS9/EdkeLHRlbeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDG4m2Ylf1V3d3vuoUq0Bh0MN3hJMB8GA1UdIwQY MBaAFMf6PK3KThMaD74bnkDbo4ODPPSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYt ZjFkNDU2ODY5Zjk3LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYtZjFkNDU2ODY5Zjk3 LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtewP7eEl 4VJ3s+sHnz0jpovqwnAWyMK/8u+gTjxUKNWK+85+U2mqetqLMvnbc5bof620WS/u vjeB6MT1/JUNjt/GqnMFrFTy//oKuTdBjzzaFGCuse7HPSUOCIWRebTov7Z2ILPl ZLXmCToSp3ZTIqyomozd45etlOOrqVL3p17WCXHz/mpXyxGDmFFVNfaNxOcr8KbD SuNxSwNpG9xvVAmPGf3bMopw2p6xtyMi0+9yMdLnia6aTFhSzZISjgRHyP8H5iVC OevGjdotHXvHJ6klvlL1vbej+O053yN6qyBY8gfF05UiCxbubZT6SyFqxG7lPtu5 44/HEdbm0K091g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:48:52 2025 by rpki-client