This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft File: _08Gv_OluFFRtlcFtDCOmvsf2Pc.mft (raw, json) Hash identifier: R8GXxW4AMmhGreIdkHJ5UtoIE3pifFFacEP6MHPSxQY= Subject key identifier: 9F:2F:33:90:36:AB:A0:3C:30:62:EB:9F:9C:2E:AF:41:69:C9:10:03 Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Certificate serial: 019AF2772E2667963C55B3484A1E036A9BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa (hash: /MIDEJVEQSp9V1rCF5ezc9jg3qtYKJbL8o4PDhdKQ+g=) 2: _08Gv_OluFFRtlcFtDCOmvsf2Pc.crl (hash: Qetj60mOPynaWOhVXopNHsjuM0WpYZdvyMyi/J5PmTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2e:26:67:96:3c:55:b3:48:4a:1e:03:6a:9b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=9f2f339036aba03c3062eb9f9c2eaf4169c91003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3c:27:8e:c9:2d:39:11:30:37:99:57:b9:94: b5:4b:1a:03:fc:13:00:08:b4:4d:a9:87:f8:9c:be: 83:86:02:67:88:9b:c5:e1:6e:c9:0d:d3:36:fa:e4: ab:9f:48:73:1b:7d:c9:2d:82:89:de:81:d4:d9:1d: b3:2f:79:ab:c6:c9:35:c1:65:30:c3:32:79:4e:81: 1e:78:99:d4:ee:78:6b:26:28:a3:15:63:a1:05:c7: 85:54:e4:35:b6:2b:da:c5:01:07:75:b1:d4:32:3a: 54:cb:35:ed:ba:fd:ea:7b:f5:2f:45:26:13:cd:d8: 49:30:99:08:2d:5c:0b:7e:4e:18:ab:c2:7e:ff:08: 1f:15:e9:72:32:b0:42:5a:64:e7:8e:6c:84:4d:11: 3d:b2:0d:80:ec:d9:8d:4e:f8:5f:83:29:e1:ed:d9: a0:f5:19:ed:75:b7:db:f4:29:b7:ef:ad:b5:17:34: c2:d8:cc:5f:a0:1b:02:cf:d0:bd:b9:52:b5:a7:3f: cf:be:9a:1c:fe:33:fb:77:14:a4:86:ce:3d:71:d6: 39:a8:7c:a6:84:8c:d9:7e:d5:94:da:cc:f1:a2:20: dd:7a:f5:24:5a:6b:f8:a1:cb:eb:ad:d1:60:24:10: 1f:62:4e:ab:85:aa:b7:4e:14:09:7d:bc:de:bf:d6: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:33:90:36:AB:A0:3C:30:62:EB:9F:9C:2E:AF:41:69:C9:10:03 X509v3 Authority Key Identifier: keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4c:08:a7:ed:ba:2e:e1:47:45:3f:56:2c:9d:14:28:d3:99: 16:b2:ca:0f:98:c5:1a:af:70:c4:c5:a7:30:7b:72:fe:b2:b8: 3e:b8:34:0b:f3:c8:2e:2e:64:a4:bb:d7:80:d2:f5:26:9c:43: 44:01:25:2f:98:84:23:70:52:96:5e:68:d9:53:a4:53:7e:4e: 70:84:91:1d:49:0d:a5:87:17:bc:26:ef:49:57:36:e9:e3:7e: 39:e8:a8:d9:12:71:8b:96:bb:0a:f7:37:cf:57:fc:a5:87:9f: 1e:7e:1b:bb:ff:3c:18:59:27:72:c2:29:b3:e3:bd:50:ae:f8: ff:3d:54:ab:5f:c1:a8:c7:d8:fc:45:3b:6b:08:be:eb:12:9a: c2:ec:74:2a:e3:10:30:44:b5:5b:29:cd:a9:ef:d0:51:7a:56: c4:2a:fa:60:9e:1e:22:a7:51:88:97:92:8a:fa:ba:a4:44:a1: 2b:4a:49:0e:9c:9a:38:fe:8f:a6:80:89:89:5b:33:e1:00:ba: 7f:d2:77:e2:6c:d5:4c:4c:af:c5:05:ef:a5:a9:b5:a8:1b:67: 91:9e:eb:7b:bc:3f:16:4d:d6:28:6e:ca:16:2c:64:f5:d5:8f: 67:54:7d:13:1e:0d:2d:a1:20:72:c1:b6:a1:b2:66:97:ad:10: ee:40:17:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy4mZ5Y8VbNISh4Dapv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGYwNmJmZjNhNWI4NTE1MWI2NTcwNWI0MzA4ZTlhZmIx ZmQ4ZjcwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg5ZjJmMzM5MDM2YWJhMDNjMzA2MmViOWY5YzJlYWY0MTY5YzkxMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjwnjsktOREwN5lXuZS1SxoD/BMA CLRNqYf4nL6DhgJniJvF4W7JDdM2+uSrn0hzG33JLYKJ3oHU2R2zL3mrxsk1wWUw wzJ5ToEeeJnU7nhrJiijFWOhBceFVOQ1tivaxQEHdbHUMjpUyzXtuv3qe/UvRSYT zdhJMJkILVwLfk4Yq8J+/wgfFelyMrBCWmTnjmyETRE9sg2A7NmNTvhfgynh7dmg 9Rntdbfb9Cm37621FzTC2MxfoBsCz9C9uVK1pz/Pvpoc/jP7dxSkhs49cdY5qHym hIzZftWU2szxoiDdevUkWmv4ocvrrdFgJBAfYk6rhaq3ThQJfbzev9b5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8vM5A2q6A8MGLrn5wur0FpyRADMB8GA1UdIwQY MBaAFP9PBr/zpbhRUbZXBbQwjpr7H9j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2Et MjVlZmZkZDc5NmRjLzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2EtMjVlZmZkZDc5NmRj LzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkwIp+26 LuFHRT9WLJ0UKNOZFrLKD5jFGq9wxMWnMHty/rK4Prg0C/PILi5kpLvXgNL1JpxD RAElL5iEI3BSll5o2VOkU35OcISRHUkNpYcXvCbvSVc26eN+Oeio2RJxi5a7Cvc3 z1f8pYefHn4bu/88GFkncsIps+O9UK74/z1Uq1/BqMfY/EU7awi+6xKawux0KuMQ MES1WynNqe/QUXpWxCr6YJ4eIqdRiJeSivq6pEShK0pJDpyaOP6PpoCJiVsz4QC6 f9J34mzVTEyvxQXvpam1qBtnkZ7re7w/Fk3WKG7KFixk9dWPZ1R9Ex4NLaEgcsG2 obJml60Q7kAXYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:02 2025 by rpki-client