This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json) Hash identifier: F5yRnuKInzY8PS5hkdiASAORvf4ykJsEWC0v3zeTzhY= Subject key identifier: 9C:0D:E5:AA:83:B0:5C:B8:7B:7E:89:4D:F7:E9:79:25:31:91:CF:52 Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4 Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4 Certificate serial: 019B533CD9F25D974B4452651B74B90F4D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft Manifest number: 036E Signing time: Thu 25 Dec 2025 02:00:55 +0000 Manifest this update: Thu 25 Dec 2025 02:00:55 +0000 Manifest next update: Fri 26 Dec 2025 02:00:55 +0000 Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: EySyDiDVqhNF2ITIIdSnhAVh5gCoey827VoiYVtFAsc=) 2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:d9:f2:5d:97:4b:44:52:65:1b:74:b9:0f:4d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4 Validity Not Before: Dec 25 02:00:55 2025 GMT Not After : Dec 26 02:00:55 2025 GMT Subject: CN=9c0de5aa83b05cb87b7e894df7e979253191cf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f8:94:f7:12:2c:08:d2:50:28:4b:a7:b0:b1: 99:93:a8:18:a4:5c:be:e9:2f:c1:b8:2c:fd:44:7a: 20:93:55:02:77:2b:55:c2:13:da:5a:a4:d9:0d:a6: d0:46:1a:59:89:07:b9:c6:78:ea:7b:9b:43:e6:22: a9:34:69:b4:43:bd:04:93:44:d7:26:ae:29:68:eb: e7:6b:05:56:bb:4b:8e:4b:b6:9b:74:16:6a:7e:c7: 11:f6:fb:f8:32:b7:c0:b2:d3:6d:33:48:2e:cc:7b: 43:bf:b6:4c:86:09:30:69:40:13:ab:e7:e8:54:ee: 5b:24:77:4e:ec:fa:4f:71:ca:9f:4b:16:31:08:44: 31:88:73:cd:93:03:b3:a8:80:b6:5a:2c:4c:00:66: 3b:eb:56:a4:70:b4:8f:97:31:60:dc:7a:01:cd:6f: 5c:59:91:76:fb:04:eb:65:de:f3:23:e5:3d:37:e4: 17:22:93:30:9f:50:fc:fe:6e:27:52:e2:29:92:38: c4:cc:24:9c:2d:86:a8:ec:d0:89:0b:6b:7b:2a:63: 8c:2f:f9:0e:f1:84:d2:e3:5d:7f:62:f1:69:3d:1d: 54:5c:05:6c:83:e5:65:3a:88:2a:29:1f:42:93:62: 05:ca:8b:98:5e:69:84:69:96:48:4a:9c:64:fb:68: 78:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:E5:AA:83:B0:5C:B8:7B:7E:89:4D:F7:E9:79:25:31:91:CF:52 X509v3 Authority Key Identifier: keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:17:9a:e5:94:09:7b:5f:86:fe:11:06:80:e1:cf:89:fa:2a: 4d:07:f0:23:0c:ca:90:e4:e6:a8:3d:38:69:2f:16:04:0f:6d: d1:3d:0f:77:15:65:25:f5:43:dc:76:50:a3:ac:bb:5d:82:97: 06:1a:2c:fe:a4:cd:fe:82:03:8c:b8:49:78:71:cc:f1:d9:b2: f4:26:72:74:38:de:37:7e:95:8b:57:77:d1:c8:74:c3:ac:e0: 1e:48:24:50:a2:63:97:e7:dc:92:b4:74:09:6e:5a:66:d7:ff: 9d:60:f9:2e:49:a9:d0:77:ef:fa:19:37:eb:1b:b5:b4:ca:86: 7a:99:ab:16:20:4a:8e:de:bc:c1:5c:ce:e3:b4:39:46:4c:2a: 84:49:fa:9f:f6:d2:03:7c:3a:7c:f2:da:20:6d:ee:35:b4:34: cb:7b:3a:66:9f:43:b8:dd:d7:61:c4:63:ec:e8:fd:6a:b6:1b: 9d:cd:ef:bb:0d:14:3f:06:66:c8:9b:49:a8:08:ae:e2:70:ed: 26:6b:6e:1d:bc:1c:07:63:35:76:b6:e0:32:27:c6:03:75:ed: 8e:a3:98:59:82:16:2f:19:55:aa:7a:c4:f2:dd:8f:f9:e3:8c: d7:b0:28:31:03:6e:31:39:bb:76:d0:fa:7a:44:cd:ad:c9:7d: f1:2d:54:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPNnyXZdLRFJlG3S5D02KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZTlhYzljZjkwNWExNmM1YWZhMGU1MDM1ZmZhN2EyMzUy ZTEzZjQwHhcNMjUxMjI1MDIwMDU1WhcNMjUxMjI2MDIwMDU1WjAzMTEwLwYDVQQD Eyg5YzBkZTVhYTgzYjA1Y2I4N2I3ZTg5NGRmN2U5NzkyNTMxOTFjZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4viU9xIsCNJQKEunsLGZk6gYpFy+ 6S/BuCz9RHogk1UCdytVwhPaWqTZDabQRhpZiQe5xnjqe5tD5iKpNGm0Q70Ek0TX Jq4paOvnawVWu0uOS7abdBZqfscR9vv4MrfAstNtM0guzHtDv7ZMhgkwaUATq+fo VO5bJHdO7PpPccqfSxYxCEQxiHPNkwOzqIC2WixMAGY761akcLSPlzFg3HoBzW9c WZF2+wTrZd7zI+U9N+QXIpMwn1D8/m4nUuIpkjjEzCScLYao7NCJC2t7KmOML/kO 8YTS411/YvFpPR1UXAVsg+VlOogqKR9Ck2IFyouYXmmEaZZISpxk+2h4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwN5aqDsFy4e36JTffpeSUxkc9SMB8GA1UdIwQY MBaAFPDprJz5BaFsWvoOUDX/p6I1LhP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAt NmFjMTBiNGQyYmJjLzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAtNmFjMTBiNGQyYmJj LzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBea5ZQJ e1+G/hEGgOHPifoqTQfwIwzKkOTmqD04aS8WBA9t0T0PdxVlJfVD3HZQo6y7XYKX Bhos/qTN/oIDjLhJeHHM8dmy9CZydDjeN36Vi1d30ch0w6zgHkgkUKJjl+fckrR0 CW5aZtf/nWD5Lkmp0Hfv+hk36xu1tMqGepmrFiBKjt68wVzO47Q5RkwqhEn6n/bS A3w6fPLaIG3uNbQ0y3s6Zp9DuN3XYcRj7Oj9arYbnc3vuw0UPwZmyJtJqAiu4nDt JmtuHbwcB2M1drbgMifGA3XtjqOYWYIWLxlVqnrE8t2P+eOM17AoMQNuMTm7dtD6 ekTNrcl98S1U4Q== -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:54 2025 by rpki-client