This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json) Hash identifier: MtcAsSICYwO3WTLzheNc2rlE/gwrQHxGLbVBKZ9puJY= Subject key identifier: 9D:4D:5B:BF:18:6E:1D:83:8A:A0:51:05:D2:01:96:9D:92:09:D9:D7 Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Certificate serial: 019B4B4CC28BFDC0477BC19CA682FDD63C22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft Manifest number: 1759 Signing time: Tue 23 Dec 2025 13:01:20 +0000 Manifest this update: Tue 23 Dec 2025 13:01:20 +0000 Manifest next update: Wed 24 Dec 2025 13:01:20 +0000 Files and hashes: 1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=) 2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: gXC56bvAG5k9YFkCo5Q0dmzdFR8QIzhDkJ+3lNDYEtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:c2:8b:fd:c0:47:7b:c1:9c:a6:82:fd:d6:3c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a Validity Not Before: Dec 23 13:01:20 2025 GMT Not After : Dec 24 13:01:20 2025 GMT Subject: CN=9d4d5bbf186e1d838aa05105d201969d9209d9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:f5:c3:d1:4f:74:7e:c1:fb:b4:58:c7:22: 28:33:4b:c3:b9:5f:a1:91:82:cd:79:65:4c:6a:33: 40:b6:eb:fa:9d:7a:b9:02:96:41:14:06:d5:29:b4: fb:d6:c9:84:25:5b:1a:c1:23:d7:a6:a9:54:28:f2: f1:df:f1:41:1d:91:23:f8:b7:3f:cf:c2:7a:85:3c: 85:59:1a:87:94:93:19:36:96:29:08:4a:5b:8d:b7: b9:d3:57:4c:8d:fd:f7:67:38:43:d4:1b:18:da:1a: 01:f6:0d:a8:66:da:24:96:e1:76:0e:0b:52:4e:d4: 5c:b0:a6:3f:23:67:d3:cb:b1:99:6f:e5:e9:ee:1e: 58:71:a2:3d:fb:97:ec:cf:98:58:26:81:9a:58:1f: 65:ed:44:2d:c7:b7:8d:10:05:f9:f2:ac:02:e2:bc: fa:ed:40:52:7f:04:db:54:c4:2e:58:58:1f:b7:24: 98:13:44:7b:d4:d2:a2:d3:05:75:92:6c:87:49:54: 06:12:92:f0:3c:c7:78:dc:5d:c2:76:5f:a1:2b:e7: 82:08:b2:bf:0a:bd:70:fd:b4:82:a4:0f:11:d3:2a: 91:dc:ad:3a:56:2d:d6:b8:75:5e:45:a7:e3:7f:a8: 55:d4:a5:e0:b2:20:fd:af:0e:41:d9:b1:35:ba:b0: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4D:5B:BF:18:6E:1D:83:8A:A0:51:05:D2:01:96:9D:92:09:D9:D7 X509v3 Authority Key Identifier: keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:a7:93:47:71:b0:85:cc:24:eb:fc:97:23:c4:6b:e5:7d:d5: fb:05:06:93:57:a1:fb:21:30:9f:b2:a5:44:5f:6f:7c:7d:a0: ac:01:63:40:e3:25:e1:74:fa:33:1e:54:59:4d:a7:52:05:08: 89:70:bb:09:88:e4:15:e9:13:61:cd:3c:61:b3:f3:dd:da:a3: 41:a8:1b:9a:44:81:c4:24:d1:8f:1f:14:90:15:5b:f5:d0:16: 07:20:21:03:82:06:c5:2f:34:47:c1:82:cf:8b:f2:07:55:b8: 6a:91:f0:ae:3a:2d:91:30:d2:cd:a3:43:0c:8e:97:e9:be:9b: ed:1b:8e:b4:b8:d9:69:f5:b1:49:ed:69:8f:15:5a:82:eb:1c: a4:3c:76:de:f6:ed:eb:71:e7:8a:64:7a:05:75:01:4a:4b:4d: 3b:29:a9:cc:6c:06:28:c8:e9:dd:15:c7:04:f3:c4:eb:28:38: 60:79:30:45:e2:16:ae:c2:dc:04:44:b4:ba:13:d8:2a:78:63: 37:f4:a4:7f:b4:4f:f1:58:35:09:8f:ac:7b:5d:db:4c:ef:c9: c4:ce:4b:6a:fe:f9:c5:5e:88:c7:e9:af:b8:25:00:ae:0d:61: e0:a6:4c:3b:f5:47:6b:54:ec:0e:33:f6:71:f7:59:53:f9:ae: 3e:c1:c1:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTMKL/cBHe8GcpoL91jwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZmEzY2FkY2E0ZTEzMWEwZmJlMWI5ZTQwZGJhMzgzODMz Y2Y0OGEwHhcNMjUxMjIzMTMwMTIwWhcNMjUxMjI0MTMwMTIwWjAzMTEwLwYDVQQD Eyg5ZDRkNWJiZjE4NmUxZDgzOGFhMDUxMDVkMjAxOTY5ZDkyMDlkOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9v1w9FPdH7B+7RYxyIoM0vDuV+h kYLNeWVMajNAtuv6nXq5ApZBFAbVKbT71smEJVsawSPXpqlUKPLx3/FBHZEj+Lc/ z8J6hTyFWRqHlJMZNpYpCEpbjbe501dMjf33ZzhD1BsY2hoB9g2oZtokluF2DgtS TtRcsKY/I2fTy7GZb+Xp7h5YcaI9+5fsz5hYJoGaWB9l7UQtx7eNEAX58qwC4rz6 7UBSfwTbVMQuWFgftySYE0R71NKi0wV1kmyHSVQGEpLwPMd43F3Cdl+hK+eCCLK/ Cr1w/bSCpA8R0yqR3K06Vi3WuHVeRafjf6hV1KXgsiD9rw5B2bE1urAH5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1NW78Ybh2DiqBRBdIBlp2SCdnXMB8GA1UdIwQY MBaAFMf6PK3KThMaD74bnkDbo4ODPPSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYt ZjFkNDU2ODY5Zjk3LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYtZjFkNDU2ODY5Zjk3 LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6eTR3Gw hcwk6/yXI8Rr5X3V+wUGk1eh+yEwn7KlRF9vfH2grAFjQOMl4XT6Mx5UWU2nUgUI iXC7CYjkFekTYc08YbPz3dqjQagbmkSBxCTRjx8UkBVb9dAWByAhA4IGxS80R8GC z4vyB1W4apHwrjotkTDSzaNDDI6X6b6b7RuOtLjZafWxSe1pjxVaguscpDx23vbt 63HnimR6BXUBSktNOympzGwGKMjp3RXHBPPE6yg4YHkwReIWrsLcBES0uhPYKnhj N/Skf7RP8Vg1CY+se13bTO/JxM5Lav75xV6Ix+mvuCUArg1h4KZMO/VHa1TsDjP2 cfdZU/muPsHBew== -----END CERTIFICATE-----Generated at Tue Dec 23 15:17:36 2025 by rpki-client