This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json) Hash identifier: B11La532ddkB4oM4wp0Ho0YFuqYCZVwEujv9UJlf3x8= Subject key identifier: 7A:7E:F9:E1:03:96:EB:06:69:A3:03:39:36:6B:46:67:39:65:8B:A5 Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a Certificate serial: 019B3D5A166EEA63BE1A33B4EBB0A79224DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft Manifest number: 01DB Signing time: Sat 20 Dec 2025 20:01:12 +0000 Manifest this update: Sat 20 Dec 2025 20:01:12 +0000 Manifest next update: Sun 21 Dec 2025 20:01:12 +0000 Files and hashes: 1: X-QlQ7J2mkMQ7aCqISeZm-0GPp8.roa (hash: tcckn5v078MeQtwYD02YyKajWXUMPOWsBI1IguOQcTI=) 2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: RbCDfJ5StwIquoKGa6YQ6lAT6COIjOlKy706H3t1CdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:16:6e:ea:63:be:1a:33:b4:eb:b0:a7:92:24:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a Validity Not Before: Dec 20 20:01:12 2025 GMT Not After : Dec 21 20:01:12 2025 GMT Subject: CN=7a7ef9e10396eb0669a30339366b466739658ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:7b:6f:66:6b:64:e8:ca:b5:6b:31:6e:a7: 51:31:5b:4b:58:96:b6:bd:e9:40:9c:e1:6a:ba:a7: d2:a3:ba:1c:fe:1c:a0:3d:bd:cf:a1:97:36:14:af: cb:fa:f4:62:f2:59:8b:79:94:d2:7c:dd:b8:82:12: 62:55:8a:1e:e4:69:dd:4d:93:f6:1d:a7:eb:af:e7: b6:d7:1c:96:fd:a2:d5:dc:03:4a:5c:65:d1:24:b3: 70:3f:aa:0d:27:35:90:0b:7a:17:3e:1c:e3:f3:be: 51:a6:37:2d:6f:10:6d:80:99:62:b1:f3:89:98:80: e5:d3:b4:4a:c5:57:c7:2f:b2:4d:48:c9:59:1f:bf: fe:50:60:67:db:6b:27:b4:a6:bb:3d:1d:1a:01:03: 70:89:fb:1d:b5:af:ba:53:59:06:a6:5a:45:99:5f: 9f:92:f8:9b:2c:c0:47:9c:a9:89:2e:db:a6:47:2c: ad:44:e3:7e:47:1b:7e:2d:12:c7:9f:87:1e:24:ed: 58:2e:69:cd:3c:6a:3c:72:99:f0:bb:fa:49:60:bf: 97:af:67:c8:a6:43:c2:d9:c7:a1:ff:d3:21:68:2b: f4:c5:d8:35:a6:01:e5:f3:93:39:e7:59:16:a3:ad: c5:9b:da:1a:6a:de:ad:83:dc:16:27:18:9c:29:9f: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7E:F9:E1:03:96:EB:06:69:A3:03:39:36:6B:46:67:39:65:8B:A5 X509v3 Authority Key Identifier: keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5e:71:06:9d:0b:9c:30:9d:ab:bc:3c:ab:e4:5f:fc:ac:1b: 2a:62:92:68:72:1d:45:b6:5e:4c:36:b9:b4:a9:88:45:c0:d5: 30:b5:6f:27:65:a9:c4:e9:53:28:93:0d:3a:c7:cf:6a:d6:75: f3:d9:0b:dd:9f:2f:78:87:19:af:7e:87:47:1e:06:b2:0d:11: e1:d7:79:22:6f:f5:72:a7:08:c6:a9:84:f4:96:89:df:9b:fa: 78:cd:6d:ea:d8:da:0f:90:b5:a9:02:8d:ec:27:9d:67:a8:a2: a0:8c:b3:90:2b:d1:f6:a0:89:64:1f:88:0a:4a:73:13:44:9a: 3b:ed:71:3d:1b:ad:6f:62:d3:cc:3d:fc:36:cf:7f:5d:57:82: 31:6f:ac:7d:b2:59:50:92:1d:9d:92:29:09:0c:35:ac:50:45: 16:e9:96:5a:1b:3d:9f:72:e8:53:f9:82:8b:85:6a:3b:28:67: e0:99:7b:e0:c5:4f:c2:fa:74:13:bb:f3:42:65:d5:76:f4:25: 72:db:71:c2:d6:32:f0:cd:3e:c7:af:aa:3f:b7:89:bf:d6:b5: 2f:47:4c:ec:37:2d:c1:92:95:21:d7:85:01:c2:c7:fc:37:4f: 25:40:7d:32:b0:97:38:5a:ad:6c:b9:d9:65:3e:85:a9:3a:61: 4d:ac:38:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WhZu6mO+GjO067CnkiTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2Y5YjY0NjUxNjkyOGI1ZDA2YzJhODE5ZWIyZGJjMGZl OTkyMGEwHhcNMjUxMjIwMjAwMTEyWhcNMjUxMjIxMjAwMTEyWjAzMTEwLwYDVQQD Eyg3YTdlZjllMTAzOTZlYjA2NjlhMzAzMzkzNjZiNDY2NzM5NjU4YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQh7b2ZrZOjKtWsxbqdRMVtLWJa2 velAnOFquqfSo7oc/hygPb3PoZc2FK/L+vRi8lmLeZTSfN24ghJiVYoe5GndTZP2 Hafrr+e21xyW/aLV3ANKXGXRJLNwP6oNJzWQC3oXPhzj875RpjctbxBtgJlisfOJ mIDl07RKxVfHL7JNSMlZH7/+UGBn22sntKa7PR0aAQNwifsdta+6U1kGplpFmV+f kvibLMBHnKmJLtumRyytRON+Rxt+LRLHn4ceJO1YLmnNPGo8cpnwu/pJYL+Xr2fI pkPC2ceh/9MhaCv0xdg1pgHl85M551kWo63Fm9oaat6tg9wWJxicKZ/KgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp++eEDlusGaaMDOTZrRmc5ZYulMB8GA1UdIwQY MBaAFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYt Mjg5Njk2Y2M5OWI5LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYtMjg5Njk2Y2M5OWI5 LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV5xBp0L nDCdq7w8q+Rf/KwbKmKSaHIdRbZeTDa5tKmIRcDVMLVvJ2WpxOlTKJMNOsfPatZ1 89kL3Z8veIcZr36HRx4Gsg0R4dd5Im/1cqcIxqmE9JaJ35v6eM1t6tjaD5C1qQKN 7CedZ6iioIyzkCvR9qCJZB+ICkpzE0SaO+1xPRutb2LTzD38Ns9/XVeCMW+sfbJZ UJIdnZIpCQw1rFBFFumWWhs9n3LoU/mCi4VqOyhn4Jl74MVPwvp0E7vzQmXVdvQl cttxwtYy8M0+x6+qP7eJv9a1L0dM7DctwZKVIdeFAcLH/DdPJUB9MrCXOFqtbLnZ ZT6FqTphTaw4ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:23 2025 by rpki-client