This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft File: O8RoMnEppQF7l23I7aydG56aFMw.mft (raw, json) Hash identifier: E732gG5rqa4+2NXCL7VS/PIrvgiey186RHEvli/0lok= Subject key identifier: 63:F5:2D:E8:70:34:B9:22:AE:E1:1B:19:0C:06:28:91:CC:04:D7:C0 Authority key identifier: 3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC Certificate issuer: /CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc Certificate serial: 019B4D3B26E42DF1A2F3381BB0CEC301D664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft Manifest number: 171C Signing time: Tue 23 Dec 2025 22:01:20 +0000 Manifest this update: Tue 23 Dec 2025 22:01:20 +0000 Manifest next update: Wed 24 Dec 2025 22:01:20 +0000 Files and hashes: 1: O8RoMnEppQF7l23I7aydG56aFMw.crl (hash: Cruey+vEuVFCpEjmKpKVxZhHO7oJzf4Dt59jAqsmfmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3b:26:e4:2d:f1:a2:f3:38:1b:b0:ce:c3:01:d6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc Validity Not Before: Dec 23 22:01:20 2025 GMT Not After : Dec 24 22:01:20 2025 GMT Subject: CN=63f52de87034b922aee11b190c062891cc04d7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ea:b6:3b:c7:42:5b:8f:41:29:1b:ca:0d:ca: 70:1f:e0:69:26:68:7b:64:56:ec:97:95:f7:f5:cf: 37:67:8e:32:60:8d:ce:7a:86:16:2d:07:66:d5:b8: e1:f3:64:84:23:b3:26:16:f8:64:cd:44:a3:5b:30: 78:97:03:bf:e1:1b:57:67:7b:df:d2:44:1b:32:ff: 41:e7:0d:e7:7c:36:3a:d3:56:e9:e1:75:8d:d6:6e: 85:ca:34:cc:74:ce:ba:e5:2b:61:32:69:eb:f0:d5: 67:f5:18:a3:20:ac:94:91:b7:5d:dc:99:c6:26:b4: fd:40:c4:5e:5f:d7:eb:78:ec:7a:48:c4:dd:30:5b: 66:00:f7:68:ee:e0:c4:f3:66:44:55:19:ec:e9:cc: d5:85:b7:96:c3:3e:f5:64:ff:09:34:8b:d1:e7:23: a7:72:be:0d:9e:55:26:10:86:61:18:17:f4:54:bf: e0:4f:93:6f:51:b6:c9:cf:88:2e:44:d0:2b:38:4f: 56:3e:c4:e0:67:f6:f0:0a:1c:f6:16:47:b0:a5:c8: 97:49:a1:4e:0f:d6:bc:51:b4:48:fb:c6:7c:a1:0f: 2c:e0:a9:49:3a:9a:55:76:84:0f:45:c8:2f:b7:d9: 88:80:1d:1d:79:f3:3e:19:0b:e8:11:c4:54:bc:1b: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F5:2D:E8:70:34:B9:22:AE:E1:1B:19:0C:06:28:91:CC:04:D7:C0 X509v3 Authority Key Identifier: keyid:3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1f:88:9c:b0:2a:e6:01:04:be:d7:49:4e:3b:31:20:d6:64: bc:06:d1:8c:47:5a:56:93:b1:bd:28:38:5f:82:34:39:00:be: 7f:87:78:04:de:b2:51:07:8e:7e:1e:9d:ef:75:a8:e5:98:cc: 72:f5:26:ff:83:5b:f3:ba:52:2d:4f:ef:c0:45:21:fc:7a:80: 45:e4:f9:1b:ca:b8:88:6f:1a:bb:a9:6b:35:66:6a:9c:74:a5: 1b:c1:24:ef:d1:eb:0b:d5:2d:5c:85:99:44:b2:f0:3f:17:05: eb:64:96:84:6f:ce:87:1b:19:bc:44:9f:61:4a:78:99:f6:a0: 5e:ac:a2:09:99:7b:25:62:c5:20:ec:47:93:ae:e7:aa:af:0b: 41:81:07:5a:b2:cc:18:10:c8:9f:28:79:dc:a1:8a:f4:47:9c: 14:6a:04:b5:20:f8:a7:cd:57:67:d9:da:c4:ce:64:7a:68:fb: 21:c5:8f:77:e0:b5:72:a0:8c:90:75:4e:44:3c:aa:9e:00:75: 8c:04:a8:8b:b3:d3:21:27:01:58:0d:e6:a3:32:fa:6a:df:e5: 39:07:8b:30:5c:a4:9a:fd:89:a2:5e:34:8e:45:5d:5a:dd:02: ac:7e:fc:c1:fe:86:6c:7f:ab:bc:87:e9:78:29:aa:56:08:3d: 9e:af:be:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOybkLfGi8zgbsM7DAdZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYzQ2ODMyNzEyOWE1MDE3Yjk3NmRjOGVkYWM5ZDFiOWU5 YTE0Y2MwHhcNMjUxMjIzMjIwMTIwWhcNMjUxMjI0MjIwMTIwWjAzMTEwLwYDVQQD Eyg2M2Y1MmRlODcwMzRiOTIyYWVlMTFiMTkwYzA2Mjg5MWNjMDRkN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeq2O8dCW49BKRvKDcpwH+BpJmh7 ZFbsl5X39c83Z44yYI3OeoYWLQdm1bjh82SEI7MmFvhkzUSjWzB4lwO/4RtXZ3vf 0kQbMv9B5w3nfDY601bp4XWN1m6FyjTMdM665SthMmnr8NVn9RijIKyUkbdd3JnG JrT9QMReX9freOx6SMTdMFtmAPdo7uDE82ZEVRns6czVhbeWwz71ZP8JNIvR5yOn cr4NnlUmEIZhGBf0VL/gT5NvUbbJz4guRNArOE9WPsTgZ/bwChz2FkewpciXSaFO D9a8UbRI+8Z8oQ8s4KlJOppVdoQPRcgvt9mIgB0defM+GQvoEcRUvBts2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP1LehwNLkiruEbGQwGKJHMBNfAMB8GA1UdIwQY MBaAFDvEaDJxKaUBe5dtyO2snRuemhTMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzhSb01uRXBwUUY3bDIzSTdheWRHNTZhRk13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZDRjMDMtNWZjNy00MWFjLTk0ZjYt MWYwMmM3ZTkyM2IzLzEvTzhSb01uRXBwUUY3bDIzSTdheWRHNTZhRk13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZDRjMDMtNWZjNy00MWFjLTk0ZjYtMWYwMmM3ZTkyM2Iz LzEvTzhSb01uRXBwUUY3bDIzSTdheWRHNTZhRk13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR+InLAq 5gEEvtdJTjsxINZkvAbRjEdaVpOxvSg4X4I0OQC+f4d4BN6yUQeOfh6d73Wo5ZjM cvUm/4Nb87pSLU/vwEUh/HqAReT5G8q4iG8au6lrNWZqnHSlG8Ek79HrC9UtXIWZ RLLwPxcF62SWhG/OhxsZvESfYUp4mfagXqyiCZl7JWLFIOxHk67nqq8LQYEHWrLM GBDInyh53KGK9EecFGoEtSD4p81XZ9naxM5kemj7IcWPd+C1cqCMkHVORDyqngB1 jASoi7PTIScBWA3mozL6at/lOQeLMFykmv2Jol40jkVdWt0CrH78wf6GbH+rvIfp eCmqVgg9nq++hw== -----END CERTIFICATE-----Generated at Wed Dec 24 04:44:57 2025 by rpki-client