This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json) Hash identifier: oFOvbnuECbkgteDKjhbX7AofbVgLiJQWlESD7i0omgc= Subject key identifier: 62:82:DE:52:F0:B3:AE:B7:95:57:DC:F3:42:8C:C4:C0:8A:10:7F:92 Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a Certificate serial: 019B3E6C5498506E5F5351584A6E3FF3B3D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft Manifest number: 0507 Signing time: Sun 21 Dec 2025 01:00:45 +0000 Manifest this update: Sun 21 Dec 2025 01:00:45 +0000 Manifest next update: Mon 22 Dec 2025 01:00:45 +0000 Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: t8ql+QmcAAQoGzjL6xVrbGav3ml6nRUMLFPrbcJjUgo=) 2: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (hash: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:54:98:50:6e:5f:53:51:58:4a:6e:3f:f3:b3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a Validity Not Before: Dec 21 01:00:45 2025 GMT Not After : Dec 22 01:00:45 2025 GMT Subject: CN=6282de52f0b3aeb79557dcf3428cc4c08a107f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:da:1d:ee:36:68:34:90:d6:93:6b:4d:0e: 72:ea:6e:85:3b:df:8b:8e:bb:6b:9d:9e:d8:65:d3: d4:e9:8c:b2:28:59:52:dc:f6:aa:81:3c:54:c4:e7: 83:1d:6b:1f:51:b4:07:15:27:6d:5e:f3:bb:2d:6d: 7a:40:83:6c:b7:b7:54:d1:e8:7a:4e:2c:a0:f2:3b: f1:2d:76:99:37:96:cf:3b:ea:37:0f:98:9b:99:55: 96:50:a9:da:4e:9e:07:e1:7b:26:50:45:51:7e:ac: 95:16:5c:05:3a:ca:a1:ba:d2:43:99:07:17:d4:9d: b4:29:01:ff:5d:a1:d3:ca:80:f7:f2:d6:6e:5d:c3: a8:2f:e2:83:b0:05:68:5b:97:62:e9:ea:f3:b4:df: d2:59:ab:f5:2b:76:c5:d6:51:72:cc:8e:59:b1:11: 1f:27:b8:f5:f9:04:1c:c3:06:c1:c9:05:75:44:b1: b2:9c:19:08:cb:5a:93:81:a1:4c:80:59:0f:cc:34: 0c:b2:b2:12:9d:9e:28:6e:3f:c0:63:01:c3:0a:ca: 87:df:38:08:97:f9:65:21:46:b6:65:90:55:a3:87: dd:d8:06:47:b1:94:3f:2f:24:15:34:4c:f2:2b:77: e4:3f:e1:bf:55:aa:ce:2d:0f:f6:4f:46:6f:fc:33: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:DE:52:F0:B3:AE:B7:95:57:DC:F3:42:8C:C4:C0:8A:10:7F:92 X509v3 Authority Key Identifier: keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:70:a4:5d:1d:bb:34:85:53:b9:de:c0:c5:15:bb:62:ea:72: df:67:0f:95:56:58:b7:cc:42:ad:98:13:ac:0b:4b:8b:cb:55: 5a:80:05:30:53:80:3f:80:c2:0d:9a:99:8c:be:83:03:1d:30: 7a:9c:b7:21:f6:99:0a:8e:9a:07:fa:29:85:45:6d:c9:da:28: 18:9f:e7:6b:ea:7e:94:94:63:81:57:67:a0:e6:c2:36:cc:4c: 00:53:0b:9f:cc:82:23:db:b3:e8:8e:2d:af:05:9e:a5:d0:41: 4e:bd:ad:06:51:5e:22:03:89:cf:86:24:92:a9:73:34:ca:b1: 8b:96:64:d1:e4:29:3b:fb:fb:f6:65:1d:44:1c:33:d4:72:a5: 1c:01:54:d3:ef:f5:7f:de:ac:3a:90:0f:45:55:9b:b9:17:98: 6e:2b:ab:b3:51:a6:ad:1a:d6:7a:92:ca:b0:4f:9c:5e:60:6f: 2e:87:f1:95:41:78:81:d4:07:09:7a:09:06:62:4c:b9:08:74: 31:95:db:d6:a6:60:7d:b7:b7:e6:39:6c:a6:b6:01:2a:1d:7c: 38:6b:65:c5:39:81:54:ce:0b:64:ec:4a:f5:36:43:2d:6a:6c: 6f:97:e0:1c:bd:80:c6:1c:3f:fc:05:e7:8a:37:e6:3e:a8:a7: bb:c2:b8:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bFSYUG5fU1FYSm4/87PRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw YzcyMmEwHhcNMjUxMjIxMDEwMDQ1WhcNMjUxMjIyMDEwMDQ1WjAzMTEwLwYDVQQD Eyg2MjgyZGU1MmYwYjNhZWI3OTU1N2RjZjM0MjhjYzRjMDhhMTA3ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv3aHe42aDSQ1pNrTQ5y6m6FO9+L jrtrnZ7YZdPU6YyyKFlS3PaqgTxUxOeDHWsfUbQHFSdtXvO7LW16QINst7dU0eh6 Tiyg8jvxLXaZN5bPO+o3D5ibmVWWUKnaTp4H4XsmUEVRfqyVFlwFOsqhutJDmQcX 1J20KQH/XaHTyoD38tZuXcOoL+KDsAVoW5di6erztN/SWav1K3bF1lFyzI5ZsREf J7j1+QQcwwbByQV1RLGynBkIy1qTgaFMgFkPzDQMsrISnZ4obj/AYwHDCsqH3zgI l/llIUa2ZZBVo4fd2AZHsZQ/LyQVNEzyK3fkP+G/VarOLQ/2T0Zv/DNJTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKC3lLws663lVfc80KMxMCKEH+SMB8GA1UdIwQY MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXCkXR27 NIVTud7AxRW7Yupy32cPlVZYt8xCrZgTrAtLi8tVWoAFMFOAP4DCDZqZjL6DAx0w epy3IfaZCo6aB/ophUVtydooGJ/na+p+lJRjgVdnoObCNsxMAFMLn8yCI9uz6I4t rwWepdBBTr2tBlFeIgOJz4YkkqlzNMqxi5Zk0eQpO/v79mUdRBwz1HKlHAFU0+/1 f96sOpAPRVWbuReYbiurs1GmrRrWepLKsE+cXmBvLofxlUF4gdQHCXoJBmJMuQh0 MZXb1qZgfbe35jlsprYBKh18OGtlxTmBVM4LZOxK9TZDLWpsb5fgHL2Axhw//AXn ijfmPqinu8K4NA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:08:38 2025 by rpki-client