This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json) Hash identifier: X1yzrb7q1srJkMeVsCZwdMrxhn67jwAYeweBkeglTho= Subject key identifier: B6:3C:F9:16:0C:D3:31:90:AC:F9:4B:68:A7:81:38:41:E2:FC:E1:92 Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a Certificate serial: 019B3F48A26C505C12BF87AB3DA1F122DDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft Manifest number: 0B4F Signing time: Sun 21 Dec 2025 05:01:23 +0000 Manifest this update: Sun 21 Dec 2025 05:01:23 +0000 Manifest next update: Mon 22 Dec 2025 05:01:23 +0000 Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=) 2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: +ELz6p58Rg9wl/7evDP5yKBLZniKmBhUtYWKNfjUUQQ=) 3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:a2:6c:50:5c:12:bf:87:ab:3d:a1:f1:22:dd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a Validity Not Before: Dec 21 05:01:23 2025 GMT Not After : Dec 22 05:01:23 2025 GMT Subject: CN=b63cf9160cd33190acf94b68a7813841e2fce192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:5a:5d:8a:77:13:ed:f1:dd:f0:e8:c5:b4: 41:89:91:6d:83:1c:c8:49:2e:b7:fa:90:dc:b6:c3: 36:c4:3a:13:64:63:f9:62:ac:1f:d7:b6:79:1a:9f: 60:83:97:6d:59:3a:38:7e:6a:a9:8a:5f:54:15:1e: 4e:dc:10:eb:0b:34:ed:06:e6:4c:a9:0e:44:be:6c: de:25:ea:8d:e4:0a:00:d6:f2:83:05:b2:da:62:9e: f3:68:76:f1:30:2f:21:45:89:ba:b4:5a:a7:1b:a9: f5:2d:11:6e:07:dc:e9:46:04:e5:de:01:da:4d:cb: 26:9c:99:21:f1:37:01:d6:20:06:88:a6:7f:5f:e5: 01:94:64:76:ca:c7:90:07:f5:2f:1a:23:41:21:2c: 2f:6e:9d:00:ec:65:72:8f:52:65:63:f1:b2:41:62: a5:b7:d4:af:d6:8b:c0:c8:8a:d5:9e:03:d9:e5:f4: 42:7c:94:33:88:bb:98:5b:a9:6e:cf:47:89:5b:be: 89:3e:61:03:76:45:ec:03:55:00:47:e5:06:d9:cf: 34:a2:50:25:8d:5c:cf:61:41:2f:58:b8:03:9c:7b: 2f:8e:7c:a0:c0:8c:8a:80:8d:3e:47:33:35:f4:ad: 32:92:94:c4:73:1a:71:2b:46:d2:0b:70:d0:29:62: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:F9:16:0C:D3:31:90:AC:F9:4B:68:A7:81:38:41:E2:FC:E1:92 X509v3 Authority Key Identifier: keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:89:4d:6a:ef:80:21:d2:c3:b8:aa:a0:e7:5b:32:54:a3:a6: 4c:9f:a9:45:a1:df:c2:1f:a7:df:24:63:ab:6b:2d:28:be:a8: eb:84:94:99:b9:8e:35:27:d1:33:0c:46:37:77:2d:f4:d2:fd: c2:0d:4d:64:ad:64:cf:2f:62:e7:9e:f9:b8:0e:a6:fb:86:9f: 7c:ae:e1:c1:12:4f:08:2b:98:2a:14:14:a0:96:24:fd:3f:fa: 9b:cd:4b:ac:68:8d:ab:3a:fb:de:10:7c:97:cc:51:f4:81:dc: 0a:d2:a7:43:c1:d9:f4:b7:d4:32:8f:be:4f:cb:89:66:83:0e: 36:99:44:8e:87:31:87:9d:52:fa:82:25:0a:a5:95:9a:8f:12: fa:18:e4:19:90:97:af:33:75:bf:2a:32:3c:66:b3:42:e9:e9: 12:d0:70:ed:c8:4f:26:b3:62:1b:d0:8a:6e:a5:a0:66:5d:e9: 8c:f6:c3:db:50:08:8e:22:06:49:ab:cc:1d:16:76:fe:14:91: 5c:f4:6d:ee:cb:1c:48:1e:98:1e:b6:d3:be:ab:6d:30:21:d2: 2f:79:62:48:b5:83:46:54:7c:59:87:68:96:ce:9f:90:6a:4e: 26:20:e5:dc:88:14:4b:28:65:ae:62:3b:3a:74:4b:b4:fb:0d: 8c:4e:c7:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKJsUFwSv4erPaHxIt2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2EzNGEzMDM0MTc3ZDA4NDMzOGQzM2IwODliN2UwM2Nj YTNhOGEwHhcNMjUxMjIxMDUwMTIzWhcNMjUxMjIyMDUwMTIzWjAzMTEwLwYDVQQD EyhiNjNjZjkxNjBjZDMzMTkwYWNmOTRiNjhhNzgxMzg0MWUyZmNlMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwilaXYp3E+3x3fDoxbRBiZFtgxzI SS63+pDctsM2xDoTZGP5Yqwf17Z5Gp9gg5dtWTo4fmqpil9UFR5O3BDrCzTtBuZM qQ5EvmzeJeqN5AoA1vKDBbLaYp7zaHbxMC8hRYm6tFqnG6n1LRFuB9zpRgTl3gHa TcsmnJkh8TcB1iAGiKZ/X+UBlGR2yseQB/UvGiNBISwvbp0A7GVyj1JlY/GyQWKl t9Sv1ovAyIrVngPZ5fRCfJQziLuYW6luz0eJW76JPmEDdkXsA1UAR+UG2c80olAl jVzPYUEvWLgDnHsvjnygwIyKgI0+RzM19K0ykpTEcxpxK0bSC3DQKWLwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY8+RYM0zGQrPlLaKeBOEHi/OGSMB8GA1UdIwQY MBaAFDvKNKMDQXfQhDONM7CJt+A8yjqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDIt ODk3NTNmMmI0N2RjLzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDItODk3NTNmMmI0N2Rj LzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYlNau+A IdLDuKqg51syVKOmTJ+pRaHfwh+n3yRjq2stKL6o64SUmbmONSfRMwxGN3ct9NL9 wg1NZK1kzy9i5575uA6m+4affK7hwRJPCCuYKhQUoJYk/T/6m81LrGiNqzr73hB8 l8xR9IHcCtKnQ8HZ9LfUMo++T8uJZoMONplEjocxh51S+oIlCqWVmo8S+hjkGZCX rzN1vyoyPGazQunpEtBw7chPJrNiG9CKbqWgZl3pjPbD21AIjiIGSavMHRZ2/hSR XPRt7sscSB6YHrbTvqttMCHSL3liSLWDRlR8WYdols6fkGpOJiDl3IgUSyhlrmI7 OnRLtPsNjE7Hjw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:00 2025 by rpki-client