This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json) Hash identifier: ozxC6Le/bn+S6HLH/eQ3zG4CUEcwnoor34DiPFREI5Y= Subject key identifier: 8D:FD:DE:9A:EB:15:B9:5C:CE:7E:F5:4F:D5:DB:DC:75:A3:91:5E:82 Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9 Certificate serial: 019B3BA2581F035382173AAEDCFAE8E88E5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft Manifest number: 0B8C Signing time: Sat 20 Dec 2025 12:00:53 +0000 Manifest this update: Sat 20 Dec 2025 12:00:53 +0000 Manifest next update: Sun 21 Dec 2025 12:00:53 +0000 Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: +jcEKoXXTkq5GT851z2kekRlS2I7M8+6yl4Br14onCY=) 2: V1kohq7P4ydapDB7EU11fRLeRUg.roa (hash: TxOniEW/xxFZY5KmO7UC+sdZGH0WDC/W/Livh3vHUfw=) 3: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:58:1f:03:53:82:17:3a:ae:dc:fa:e8:e8:8e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9 Validity Not Before: Dec 20 12:00:53 2025 GMT Not After : Dec 21 12:00:53 2025 GMT Subject: CN=8dfdde9aeb15b95cce7ef54fd5dbdc75a3915e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:bd:13:38:72:86:cd:ec:75:dc:72:ac:24: 35:7b:e6:5e:53:db:b5:74:79:07:61:35:70:52:da: 06:2e:33:f7:5b:0f:c4:10:ab:99:f7:72:6b:32:4d: 52:7a:de:2e:83:b3:60:dc:48:4a:63:96:d1:9e:44: 3d:6e:6f:ff:ad:ec:e2:43:05:3e:64:f5:49:fc:0e: 4c:72:e9:75:82:2c:bf:0a:b7:2a:92:05:14:a5:cc: 92:a6:59:52:6e:0e:5a:dd:97:64:85:1c:e1:05:cb: 4b:a1:1b:82:62:93:67:f3:04:50:d9:ca:69:0e:7d: ee:5e:94:19:07:0d:7f:16:be:c1:83:13:35:c2:e9: b7:bc:0b:f4:f4:5a:47:ef:b6:82:02:12:f6:70:c8: 56:0e:2f:77:d5:f7:c5:1e:49:b9:99:f5:c6:8a:e4: 61:5e:fc:45:50:d3:e8:ef:cd:25:4d:df:02:fd:e2: 89:0b:ee:c5:b8:6b:c2:f9:47:69:27:3f:3a:d8:16: 51:73:b4:b7:d6:3f:46:b0:13:02:20:a0:14:c1:9d: fb:d0:02:74:16:9a:b3:87:d8:b4:f0:05:3e:0b:49: 97:95:a9:0c:17:63:4d:f5:b1:25:57:4a:0d:85:1c: c8:20:ff:ad:4e:ba:7f:db:2e:3d:f7:4d:f8:89:7e: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FD:DE:9A:EB:15:B9:5C:CE:7E:F5:4F:D5:DB:DC:75:A3:91:5E:82 X509v3 Authority Key Identifier: keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:86:39:b0:19:14:0d:87:3b:be:2d:6d:bc:ec:e8:52:07:ee: 13:56:32:2e:e4:18:20:69:97:2f:b6:c2:e9:42:29:c1:1e:99: b7:6f:c8:aa:68:0f:12:ea:85:b1:67:0e:f5:89:d7:d5:da:10: 16:9b:78:12:dd:3a:fe:1a:cb:ff:ad:f8:a7:0a:7f:90:dd:8b: 5d:64:c1:9d:a0:ed:e1:5a:84:0a:41:a1:29:29:d0:e5:43:82: 0a:dc:e9:b4:b3:d5:cd:3c:56:0b:ba:74:c4:2f:c0:57:72:b8: c7:be:e0:1f:45:54:a8:ee:29:44:47:19:1b:af:7b:2b:11:e2: 6d:74:e9:89:fb:c2:c5:a7:33:84:7b:9e:be:1b:42:cc:5a:ab: 38:93:f9:83:42:18:fb:a4:11:ae:4f:c9:e3:53:74:8f:a4:72: ca:38:7b:f4:7c:11:a4:b2:68:52:c3:08:d5:05:0d:2e:0a:12: 77:d2:c7:83:8f:66:a8:57:24:43:b4:61:33:4d:f2:57:19:3c: 4b:e6:90:e4:89:ed:a6:d5:bb:0e:e0:52:04:3f:93:43:56:1a: d4:e2:f4:51:2d:c7:a9:ab:b0:34:2e:de:bd:18:35:f7:87:ff: 45:04:36:0f:8b:83:07:7d:96:f6:a2:d7:38:07:a3:f9:4d:43: 99:66:f4:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olgfA1OCFzqu3Pro6I5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOWRjNzkyYWRmY2ZlODhjNzllNzk1OGZiZmVjNTI1NjMw YjYyZjkwHhcNMjUxMjIwMTIwMDUzWhcNMjUxMjIxMTIwMDUzWjAzMTEwLwYDVQQD Eyg4ZGZkZGU5YWViMTViOTVjY2U3ZWY1NGZkNWRiZGM3NWEzOTE1ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFi9Ezhyhs3sddxyrCQ1e+ZeU9u1 dHkHYTVwUtoGLjP3Ww/EEKuZ93JrMk1Set4ug7Ng3EhKY5bRnkQ9bm//reziQwU+ ZPVJ/A5Mcul1giy/CrcqkgUUpcySpllSbg5a3ZdkhRzhBctLoRuCYpNn8wRQ2cpp Dn3uXpQZBw1/Fr7BgxM1wum3vAv09FpH77aCAhL2cMhWDi931ffFHkm5mfXGiuRh XvxFUNPo780lTd8C/eKJC+7FuGvC+UdpJz862BZRc7S31j9GsBMCIKAUwZ370AJ0 Fpqzh9i08AU+C0mXlakMF2NN9bElV0oNhRzIIP+tTrp/2y499034iX7DjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI393prrFblczn71T9Xb3HWjkV6CMB8GA1UdIwQY MBaAFNKdx5Kt/P6Ix555WPv+xSVjC2L5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEt NDFlN2ZiYTZkNmUxLzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEtNDFlN2ZiYTZkNmUx LzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoY5sBkU DYc7vi1tvOzoUgfuE1YyLuQYIGmXL7bC6UIpwR6Zt2/IqmgPEuqFsWcO9YnX1doQ Fpt4Et06/hrL/634pwp/kN2LXWTBnaDt4VqECkGhKSnQ5UOCCtzptLPVzTxWC7p0 xC/AV3K4x77gH0VUqO4pREcZG697KxHibXTpifvCxaczhHuevhtCzFqrOJP5g0IY +6QRrk/J41N0j6Ryyjh79HwRpLJoUsMI1QUNLgoSd9LHg49mqFckQ7RhM03yVxk8 S+aQ5IntptW7DuBSBD+TQ1Ya1OL0US3HqauwNC7evRg194f/RQQ2D4uDB32W9qLX OAej+U1DmWb0Fw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:19 2025 by rpki-client