This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json) Hash identifier: dC1g+NPZJ4GNMUQbDWgHS3lVyxhpIBFm9z1WCsUBq7Q= Subject key identifier: 52:0D:7C:3B:A4:32:09:19:C4:A1:2D:20:C1:50:23:6A:48:41:68:BB Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9 Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9 Certificate serial: 019B2D78EA499891FD8DEAD03155FE485FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft Manifest number: 1097 Signing time: Wed 17 Dec 2025 18:00:57 +0000 Manifest this update: Wed 17 Dec 2025 18:00:57 +0000 Manifest next update: Thu 18 Dec 2025 18:00:57 +0000 Files and hashes: 1: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: d5HzIpLXflXsvi/Ewc84msbLwBBloqxVuoF597wL0BI=) 2: nqo_O7xWpllnpXWgXV-EBK2yLMY.roa (hash: v3gPcs+xtmwPaPJ3A0/t7F8YEQgyHeonW0dBXWdUhwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:ea:49:98:91:fd:8d:ea:d0:31:55:fe:48:5f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9 Validity Not Before: Dec 17 18:00:57 2025 GMT Not After : Dec 18 18:00:57 2025 GMT Subject: CN=520d7c3ba4320919c4a12d20c150236a484168bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:9c:f9:d6:78:b4:ff:94:f9:09:14:0c:5b: 70:d9:04:bf:d3:b6:80:bb:22:6f:d7:71:b4:89:9b: 3b:5e:d3:0c:19:f7:4b:4a:80:59:d3:f7:60:eb:ee: 82:06:bc:98:3f:76:9b:ca:82:0b:a2:d3:fa:fe:79: a1:fc:fb:3a:bd:11:d0:e7:29:04:a6:01:ad:b5:60: ec:57:00:ab:40:05:b8:e9:16:6f:53:5b:e5:7e:d9: 11:23:50:c8:54:f2:e3:f6:3b:5d:d8:63:50:34:28: 93:aa:c3:f7:6c:56:a7:49:18:eb:8b:b6:55:d3:f8: 3d:b7:0e:8d:7d:fb:c5:a6:79:3f:b7:f8:e6:19:aa: b5:d6:64:b2:1d:28:0c:26:73:e3:03:eb:5e:f2:c2: 9b:18:aa:ba:c6:2e:00:c5:42:08:6d:b8:01:ca:1a: 7b:c6:9c:ae:93:78:24:82:21:bc:36:fc:80:fa:18: e7:e8:6a:0b:d8:30:a1:02:dc:51:ea:58:e8:f8:2a: 7c:7c:ad:fb:c0:af:93:f0:08:c3:5e:29:ef:44:8c: 87:8e:b4:3b:56:bf:13:7a:c5:7b:80:4a:ec:59:c4: 80:9d:8f:7e:41:8b:94:1c:11:b2:1b:46:66:45:c0: dc:a5:b7:2d:ca:5c:07:05:c0:29:a5:46:2a:f9:5e: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0D:7C:3B:A4:32:09:19:C4:A1:2D:20:C1:50:23:6A:48:41:68:BB X509v3 Authority Key Identifier: keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:64:11:72:75:5c:60:0a:ff:02:8d:a5:7e:44:01:4e:af:a1: 7b:4b:6b:2b:15:12:ca:80:d6:bd:b9:77:bf:8c:54:88:bc:3a: 29:5f:69:fe:0b:1f:16:c7:25:69:c6:66:04:d9:c7:af:fc:24: 76:da:23:53:fc:6e:0c:89:23:ec:65:d8:73:a8:ce:e3:e8:53: e4:17:8a:df:1e:18:a2:be:81:47:a4:2d:bc:f9:37:0b:51:52: 33:5c:f2:c6:d7:14:57:55:55:81:7d:75:93:51:e8:c4:b4:b9: 02:35:3a:c9:61:db:13:41:eb:5d:80:d8:56:90:8d:8c:b9:35: 2a:75:4e:96:a4:2f:c3:93:77:18:17:0a:fd:7f:10:0a:c4:26: a3:90:41:f3:9b:eb:bd:32:35:ee:41:40:c5:ea:38:21:f2:7b: 98:15:5b:c0:45:c7:b0:55:ad:8b:13:da:31:f0:ef:db:5c:75: 4a:a9:2c:d2:f7:4c:e9:03:51:61:26:6c:e8:ab:80:0e:54:cd: ac:5e:e9:4e:41:cc:5b:5b:52:7f:4d:8a:d4:eb:4c:dc:d4:8b: d2:4f:9e:f9:e5:f2:27:10:85:19:c1:c7:71:12:22:ea:07:cd: 74:3b:c6:e4:32:af:23:7e:44:6c:8b:52:3f:aa:bc:86:09:84: 07:fc:b1:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteOpJmJH9jerQMVX+SF/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2EwZWRmMTIyZjRjZjk4YjA4MmRkNGNjMGQ4NGY1ZWRl ODA0YjkwHhcNMjUxMjE3MTgwMDU3WhcNMjUxMjE4MTgwMDU3WjAzMTEwLwYDVQQD Eyg1MjBkN2MzYmE0MzIwOTE5YzRhMTJkMjBjMTUwMjM2YTQ4NDE2OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy+c+dZ4tP+U+QkUDFtw2QS/07aA uyJv13G0iZs7XtMMGfdLSoBZ0/dg6+6CBryYP3abyoILotP6/nmh/Ps6vRHQ5ykE pgGttWDsVwCrQAW46RZvU1vlftkRI1DIVPLj9jtd2GNQNCiTqsP3bFanSRjri7ZV 0/g9tw6NffvFpnk/t/jmGaq11mSyHSgMJnPjA+te8sKbGKq6xi4AxUIIbbgByhp7 xpyuk3gkgiG8NvyA+hjn6GoL2DChAtxR6ljo+Cp8fK37wK+T8AjDXinvRIyHjrQ7 Vr8TesV7gErsWcSAnY9+QYuUHBGyG0ZmRcDcpbctylwHBcAppUYq+V4AFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFINfDukMgkZxKEtIMFQI2pIQWi7MB8GA1UdIwQY MBaAFIvKDt8SL0z5iwgt1MwNhPXt6AS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hZWYwZWEtOTQwMy00N2ZiLWFkODAt MWVkYTUzYWViZTUxLzEvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hZWYwZWEtOTQwMy00N2ZiLWFkODAtMWVkYTUzYWViZTUx LzEvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWQRcnVc YAr/Ao2lfkQBTq+he0trKxUSyoDWvbl3v4xUiLw6KV9p/gsfFsclacZmBNnHr/wk dtojU/xuDIkj7GXYc6jO4+hT5BeK3x4Yor6BR6QtvPk3C1FSM1zyxtcUV1VVgX11 k1HoxLS5AjU6yWHbE0HrXYDYVpCNjLk1KnVOlqQvw5N3GBcK/X8QCsQmo5BB85vr vTI17kFAxeo4IfJ7mBVbwEXHsFWtixPaMfDv21x1Sqks0vdM6QNRYSZs6KuADlTN rF7pTkHMW1tSf02K1OtM3NSL0k+e+eXyJxCFGcHHcRIi6gfNdDvG5DKvI35EbItS P6q8hgmEB/yxRw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:41 2025 by rpki-client