This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json) Hash identifier: OYSKNTHrkQEy3tpF7cF9jYpFOjGT0g1PTO2V+hj10Ro= Subject key identifier: AE:62:8C:9D:E3:1C:C2:BF:F1:D4:11:18:E0:4E:73:D8:CF:D1:13:5E Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Certificate serial: 019B3C101B54FD660510C078B10427DD508A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft Manifest number: 0A76 Signing time: Sat 20 Dec 2025 14:00:47 +0000 Manifest this update: Sat 20 Dec 2025 14:00:47 +0000 Manifest next update: Sun 21 Dec 2025 14:00:47 +0000 Files and hashes: 1: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: bXVJLxBn+CA9vSSwaCxtI2sNFy547XZUOHtfYoklne0=) 2: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=) 3: YDaMnob-poIuRLZ4wAjLgOqFZQM.roa (hash: EN3W1yByHMOyyQbNASn6BXFzScIQPAOmgfjXpvzxDJ0=) 4: ocQ6hkGGlpLFqJevmWMP4yG9kcg.roa (hash: V2gAUafgNGkT92VkWusvaTxnq34wT53AXCaLQN/T3EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:1b:54:fd:66:05:10:c0:78:b1:04:27:dd:50:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1 Validity Not Before: Dec 20 14:00:47 2025 GMT Not After : Dec 21 14:00:47 2025 GMT Subject: CN=ae628c9de31cc2bff1d41118e04e73d8cfd1135e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:52:e0:18:98:a8:f7:9b:f0:e2:d0:6e:36: b2:88:16:ff:12:db:51:5d:68:a9:95:b4:c8:7c:34: a8:f6:54:51:c0:d4:af:33:df:95:5c:aa:5c:20:4d: 77:68:6d:58:2c:ff:4b:88:4e:db:3a:9e:73:d9:65: 54:6f:80:49:8c:8f:4c:de:c5:f8:88:49:aa:ff:62: 5e:be:85:dc:c7:e6:99:f2:e5:b9:0c:75:79:d5:1c: 34:9c:43:86:fb:be:93:92:b9:3b:00:c3:83:8f:1a: 6d:1b:e1:b9:36:2c:9f:04:19:37:ee:8c:a9:eb:89: 24:ab:5a:cd:19:c4:9d:a6:45:45:1a:1c:e5:0c:56: 4f:60:9c:c6:0c:41:20:2a:2f:13:df:19:45:4c:8a: 3f:5c:7c:f6:88:56:29:b1:08:7b:f9:2b:d7:6e:87: 39:d2:0c:c1:66:2d:44:5b:48:5a:6f:22:b4:64:ea: cf:5d:91:26:0e:af:9a:62:5e:8c:ea:bf:f9:f8:34: c6:17:15:87:e8:1a:2e:70:de:81:fb:83:67:d9:94: 95:fa:06:b7:ad:a2:c1:b5:c0:70:16:9c:06:8f:cb: c7:92:37:5b:c9:42:cd:e6:d6:5e:c5:31:52:08:ed: b1:e0:34:e1:9f:55:bb:15:f8:c6:c9:54:d5:dc:48: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:62:8C:9D:E3:1C:C2:BF:F1:D4:11:18:E0:4E:73:D8:CF:D1:13:5E X509v3 Authority Key Identifier: keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d4:ee:76:93:bc:86:a1:fd:6d:a1:36:2d:3a:64:bb:a8:ed: 96:f5:bd:d4:03:59:1e:02:32:b0:11:3c:8d:e9:2e:aa:05:2f: cd:b6:75:55:0a:98:c2:32:78:ad:54:8f:22:e9:20:66:c3:da: fa:f7:ab:c9:0c:d5:8e:f0:2e:33:7a:1b:9d:01:96:72:19:60: c8:78:5a:e2:ba:fa:78:17:a8:71:dd:68:e5:f5:6a:f2:f1:19: c5:19:e2:d2:25:db:17:5c:85:d9:6a:45:b5:94:dd:eb:42:02: d3:b0:10:11:17:e8:62:6b:dc:df:54:d6:82:57:a9:e5:bb:87: 6b:27:74:4e:94:48:8b:5c:f4:2a:81:21:2c:04:12:f8:77:cc: f8:a2:17:d8:c4:b6:f4:93:a7:4e:23:a4:65:eb:36:58:8d:d0: e2:8a:2a:93:44:e6:01:0c:2c:21:a4:4e:4b:b9:99:1c:f9:56: 19:66:e7:74:a2:c3:8a:21:5b:8d:46:b3:3b:a9:56:d7:0d:c6: 8b:9d:01:b8:cf:17:3d:95:41:75:87:27:63:85:b2:d1:41:ab: 2f:29:fd:d1:e7:26:aa:8c:94:30:8d:8b:8b:7a:c0:ec:84:53: 1f:cb:e9:7a:6f:25:72:ff:e9:27:59:f6:5b:b1:04:71:a4:b5: b4:64:20:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBtU/WYFEMB4sQQn3VCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2NiYzcwZTE4YjZjNjllNTNlZjUyYTVlOTI1ZTVmNGYw Y2RjYzEwHhcNMjUxMjIwMTQwMDQ3WhcNMjUxMjIxMTQwMDQ3WjAzMTEwLwYDVQQD EyhhZTYyOGM5ZGUzMWNjMmJmZjFkNDExMThlMDRlNzNkOGNmZDExMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhhS4BiYqPeb8OLQbjayiBb/EttR XWiplbTIfDSo9lRRwNSvM9+VXKpcIE13aG1YLP9LiE7bOp5z2WVUb4BJjI9M3sX4 iEmq/2JevoXcx+aZ8uW5DHV51Rw0nEOG+76Tkrk7AMODjxptG+G5NiyfBBk37oyp 64kkq1rNGcSdpkVFGhzlDFZPYJzGDEEgKi8T3xlFTIo/XHz2iFYpsQh7+SvXboc5 0gzBZi1EW0habyK0ZOrPXZEmDq+aYl6M6r/5+DTGFxWH6BoucN6B+4Nn2ZSV+ga3 raLBtcBwFpwGj8vHkjdbyULN5tZexTFSCO2x4DThn1W7FfjGyVTV3Ej2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5ijJ3jHMK/8dQRGOBOc9jP0RNeMB8GA1UdIwQY MBaAFDvMvHDhi2xp5T71Kl6SXl9PDNzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgt YmJlNjBlYTIyMmM1LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgtYmJlNjBlYTIyMmM1 LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftTudpO8 hqH9baE2LTpku6jtlvW91ANZHgIysBE8jekuqgUvzbZ1VQqYwjJ4rVSPIukgZsPa +veryQzVjvAuM3obnQGWchlgyHha4rr6eBeocd1o5fVq8vEZxRni0iXbF1yF2WpF tZTd60IC07AQERfoYmvc31TWglep5buHayd0TpRIi1z0KoEhLAQS+HfM+KIX2MS2 9JOnTiOkZes2WI3Q4ooqk0TmAQwsIaROS7mZHPlWGWbndKLDiiFbjUazO6lW1w3G i50BuM8XPZVBdYcnY4Wy0UGrLyn90ecmqoyUMI2Li3rA7IRTH8vpem8lcv/pJ1n2 W7EEcaS1tGQgCw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:09 2025 by rpki-client