This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: K8CKk1+BbYNLJlxn/VBr/AJxfwoid4+camtkM98gUVA= Subject key identifier: 08:34:18:0C:C1:58:1E:97:71:B8:8F:A8:0E:7E:DB:87:19:E4:F5:F7 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019B3AC6D93C34E953748C8DD204C07B7D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 17CF Signing time: Sat 20 Dec 2025 08:01:08 +0000 Manifest this update: Sat 20 Dec 2025 08:01:08 +0000 Manifest next update: Sun 21 Dec 2025 08:01:08 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 2tgBVmzXGxk2dORJHycmoqheNvg.roa (hash: kLmIpYFnCrJEJseq7gvSUWiTbkY+zk+XKRVcxk6gNqA=) 3: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 4: 87A59tFx6zF_AoyfTTInJAFnkcA.roa (hash: unw4vIAiAfpS55i1OMoFYw1rzCbyU808aYVca3OlIMc=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: LI_BrZ3VZKWECTK4PHtWYY7GAJM.roa (hash: lyNsMl43jND1X0aQMPVXU9dtabwJ/cC1LPXFbBVJ4vY=) 7: YBvNoajDSlWBD9rpf_g7I4GMsIw.roa (hash: Dj39vgxSEEOQgYRsBD+Yi70TljAy8Kf7UHt7BDtlwUU=) 8: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 9: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: oP0nQUEv2+BGRhqrI0okHARKryLcC1b5tH4+SaaN64w=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d9:3c:34:e9:53:74:8c:8d:d2:04:c0:7b:7d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Dec 20 08:01:08 2025 GMT Not After : Dec 21 08:01:08 2025 GMT Subject: CN=0834180cc1581e9771b88fa80e7edb8719e4f5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:5e:43:6c:4b:1d:24:3a:82:24:eb:b2:5b: e5:51:bb:17:58:23:ed:f3:0d:b2:7d:60:17:0a:a5: 9c:7c:59:63:ab:e8:83:3a:b3:ef:d9:d3:93:7a:93: 8f:4d:1f:77:4f:73:e1:2c:3e:59:ed:1f:f6:91:d1: 0a:ad:08:0d:a5:3a:b5:40:e3:0b:48:1b:d3:c8:7e: 68:dd:6e:cf:c1:49:fb:60:b3:23:56:36:a6:c2:11: 12:75:ad:b3:ef:b8:86:43:7a:05:51:84:9f:ca:6f: e5:6d:1b:7a:dd:ba:41:b9:fe:be:0a:cf:59:e1:ba: a4:18:0e:fa:31:9c:3a:7c:18:24:c1:66:ca:de:a1: b4:31:e3:b8:f9:58:45:d4:ab:fe:23:7b:6b:8d:30: 41:07:e1:fe:1c:e2:72:1c:a7:63:70:fb:27:67:e9: b4:b0:1e:e0:8f:cd:ce:94:f0:22:71:f5:9f:f1:db: e2:cb:80:a9:e9:a5:11:5c:23:34:1b:22:58:28:b4: 4e:76:98:92:cd:e4:9b:50:0d:b1:4f:60:b7:3a:1e: bc:ce:db:e8:f1:a8:f3:3a:31:aa:68:31:47:6e:f4: ee:a6:77:b9:5d:b3:7c:f3:07:ba:52:aa:c8:db:89: 29:f7:14:f3:5e:11:c2:20:db:47:21:33:c8:ad:f5: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:34:18:0C:C1:58:1E:97:71:B8:8F:A8:0E:7E:DB:87:19:E4:F5:F7 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:b4:75:f0:7f:67:1d:8d:62:17:23:e0:dc:ee:db:55:47: 24:1c:d9:80:d3:7b:d2:aa:f2:de:80:05:c9:e9:f7:07:52:65: 04:68:e4:ac:7e:36:bc:ef:04:4c:d1:f7:5f:90:9f:9e:f9:b2: c5:51:49:12:c4:25:a9:8a:cc:15:f3:75:de:cc:7b:3b:02:7c: 3c:6c:dd:c1:73:36:b4:ab:65:83:ab:11:03:b8:c2:93:b0:65: 46:7d:a1:6a:20:5e:d8:91:fa:7b:ff:69:9d:c5:95:fc:ae:2b: 77:06:3e:88:a8:11:1c:1b:77:4a:25:05:f4:74:e1:8d:42:4f: 67:6d:b1:a2:66:4c:45:dc:41:4a:6c:aa:ce:d1:37:c3:3e:d7: 88:e9:ce:47:17:a6:96:b8:dc:28:5a:37:65:c3:da:1e:09:e9: 1f:89:78:82:ee:44:9b:42:f2:5b:30:f6:14:11:8c:f0:09:52: f5:85:2c:44:62:9b:c0:d0:31:1f:bb:b0:80:8d:30:c5:f9:18: 53:ad:c3:c9:e6:7f:90:63:b5:5d:fd:4a:3b:c6:00:40:0e:07: 59:3b:c4:f2:af:f0:20:64:51:21:76:86:d3:57:9d:15:9f:be: ce:af:ec:44:22:da:0a:d7:d0:31:29:ff:89:04:48:00:31:63: f7:82:6b:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtk8NOlTdIyN0gTAe31YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUxMjIwMDgwMTA4WhcNMjUxMjIxMDgwMTA4WjAzMTEwLwYDVQQD EygwODM0MTgwY2MxNTgxZTk3NzFiODhmYTgwZTdlZGI4NzE5ZTRmNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UBeQ2xLHSQ6giTrslvlUbsXWCPt 8w2yfWAXCqWcfFljq+iDOrPv2dOTepOPTR93T3PhLD5Z7R/2kdEKrQgNpTq1QOML SBvTyH5o3W7PwUn7YLMjVjamwhESda2z77iGQ3oFUYSfym/lbRt63bpBuf6+Cs9Z 4bqkGA76MZw6fBgkwWbK3qG0MeO4+VhF1Kv+I3trjTBBB+H+HOJyHKdjcPsnZ+m0 sB7gj83OlPAicfWf8dviy4Cp6aURXCM0GyJYKLROdpiSzeSbUA2xT2C3Oh68ztvo 8ajzOjGqaDFHbvTupne5XbN88we6UqrI24kp9xTzXhHCINtHITPIrfVYHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg0GAzBWB6XcbiPqA5+24cZ5PX3MB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWG0dfB/ Zx2NYhcj4Nzu21VHJBzZgNN70qry3oAFyen3B1JlBGjkrH42vO8ETNH3X5Cfnvmy xVFJEsQlqYrMFfN13sx7OwJ8PGzdwXM2tKtlg6sRA7jCk7BlRn2haiBe2JH6e/9p ncWV/K4rdwY+iKgRHBt3SiUF9HThjUJPZ22xomZMRdxBSmyqztE3wz7XiOnORxem lrjcKFo3ZcPaHgnpH4l4gu5Em0LyWzD2FBGM8AlS9YUsRGKbwNAxH7uwgI0wxfkY U63DyeZ/kGO1Xf1KO8YAQA4HWTvE8q/wIGRRIXaG01edFZ++zq/sRCLaCtfQMSn/ iQRIADFj94Jr0Q== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:54 2025 by rpki-client