This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json) Hash identifier: HoP8PYXvucows99POvRncMh/Cd1JrRj9FTQpKUBHuLg= Subject key identifier: 1C:AB:73:C5:E6:37:8B:B4:58:74:07:FB:90:FE:C8:FF:45:78:DD:4F Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78 Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78 Certificate serial: 019AF3C0D7D48C6EB9917B02DF4085352970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:01:32 +0000 Manifest this update: Sat 06 Dec 2025 13:01:32 +0000 Manifest next update: Sun 07 Dec 2025 13:01:32 +0000 Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: u7A94lWN4t01tgMxP8yBbpwQA55MmHnKOKwMIfIoAY4=) 2: Z9dAkp6DWkibOyxuZSYF8JC0FP8.roa (hash: Di2cqBcEpf6hgxQLLA7v+y+JplI7ajbTFP4r/fEMeKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:d7:d4:8c:6e:b9:91:7b:02:df:40:85:35:29:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78 Validity Not Before: Dec 6 13:01:32 2025 GMT Not After : Dec 7 13:01:32 2025 GMT Subject: CN=1cab73c5e6378bb4587407fb90fec8ff4578dd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:ec:8a:f1:56:71:fc:5b:8b:eb:8a:04:2d: 39:48:2c:95:cf:9a:d0:43:06:e3:25:0f:66:8b:c4: cc:c8:92:67:1d:1a:58:ce:7b:ae:60:7b:d6:38:30: 2c:01:0b:8d:5f:bc:d5:53:e0:f2:9b:af:4d:6f:47: 89:05:bb:d7:cc:31:0f:66:97:ae:51:c8:a1:a5:2a: d7:d2:7d:a6:1f:9c:b0:76:ee:2b:48:57:39:2d:54: 81:14:1f:3a:13:41:c6:de:ed:25:74:4d:3c:3f:05: 24:d6:b2:93:17:b3:29:66:25:f4:47:aa:5e:00:ad: 52:e4:de:f9:a3:f4:18:eb:6b:bf:4d:b9:e4:fa:f5: b7:4a:39:c4:be:02:1e:c3:64:a5:2f:d5:f9:7d:a8: 61:9b:61:b6:ef:24:db:89:b3:a3:74:d8:b8:aa:71: 12:41:d1:2d:e1:24:6f:70:79:00:29:0c:56:b6:53: f3:ea:1f:b6:52:30:e2:19:16:46:a3:b7:33:96:54: a6:56:90:c5:54:02:da:64:43:86:00:a0:d5:e8:5c: b8:fc:be:9d:da:68:0e:ed:3c:8b:20:5b:45:a3:f3: ef:57:c2:1a:15:3d:7c:92:05:23:e2:6b:d4:9c:65: ac:4f:5f:8e:b1:51:a7:88:d0:31:ba:71:d9:0c:3a: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:73:C5:E6:37:8B:B4:58:74:07:FB:90:FE:C8:FF:45:78:DD:4F X509v3 Authority Key Identifier: keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:00:67:ff:c7:07:c8:3a:7b:01:12:6e:66:bc:e2:4b:32:0c: c1:d6:67:58:e8:57:06:10:19:9b:52:0d:6b:a9:39:06:4b:28: 7f:93:72:24:98:6b:3c:8b:c1:ed:c4:76:91:03:16:0b:a6:30: b1:bd:52:0a:64:20:6f:f9:17:ec:b7:9e:cb:36:8a:3f:38:4d: 70:2e:f3:db:32:4a:53:d8:c8:c6:ed:02:fd:61:a6:f1:b8:bb: 2b:4e:3b:06:92:2c:ef:15:86:f7:2b:33:76:19:4b:92:71:8f: 8d:08:6c:06:19:1e:de:3e:56:ca:14:ab:ba:58:59:c4:67:74: 6d:f4:ec:cb:5d:50:d4:65:b9:7e:2b:08:2a:c1:3d:20:2e:1f: 6c:5a:71:0a:35:1e:88:e9:11:4e:f2:52:a9:75:5d:9a:ef:d2: 6b:62:18:1f:3c:64:31:18:bb:2b:f4:f4:46:ae:da:aa:fd:9f: df:53:17:db:60:f8:b4:cb:12:64:37:20:ce:37:a0:c7:a7:0e: 7f:5f:96:f2:71:8f:37:b9:72:dc:ba:02:ac:7a:15:cb:2e:c3: f8:e0:b5:9d:62:fe:7d:a6:c6:2b:f2:38:31:4f:66:99:b9:80: c8:eb:1f:81:a7:a4:b4:3c:a7:f3:1a:db:7a:79:44:d7:2e:cd: 65:27:35:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwNfUjG65kXsC30CFNSlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzYxNzhmYjAzNDkwNTEzMGFmMGNlMWNkMjc1MTU0ZjJi NTliNzgwHhcNMjUxMjA2MTMwMTMyWhcNMjUxMjA3MTMwMTMyWjAzMTEwLwYDVQQD EygxY2FiNzNjNWU2Mzc4YmI0NTg3NDA3ZmI5MGZlYzhmZjQ1NzhkZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLnsivFWcfxbi+uKBC05SCyVz5rQ QwbjJQ9mi8TMyJJnHRpYznuuYHvWODAsAQuNX7zVU+Dym69Nb0eJBbvXzDEPZpeu UcihpSrX0n2mH5ywdu4rSFc5LVSBFB86E0HG3u0ldE08PwUk1rKTF7MpZiX0R6pe AK1S5N75o/QY62u/Tbnk+vW3SjnEvgIew2SlL9X5fahhm2G27yTbibOjdNi4qnES QdEt4SRvcHkAKQxWtlPz6h+2UjDiGRZGo7czllSmVpDFVALaZEOGAKDV6Fy4/L6d 2mgO7TyLIFtFo/PvV8IaFT18kgUj4mvUnGWsT1+OsVGniNAxunHZDDr7mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByrc8XmN4u0WHQH+5D+yP9FeN1PMB8GA1UdIwQY MBaAFNPGF4+wNJBRMK8M4c0nUVTytZt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzct YTdjNGIyZjZlMjc2LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzctYTdjNGIyZjZlMjc2 LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgBn/8cH yDp7ARJuZrziSzIMwdZnWOhXBhAZm1INa6k5Bksof5NyJJhrPIvB7cR2kQMWC6Yw sb1SCmQgb/kX7LeeyzaKPzhNcC7z2zJKU9jIxu0C/WGm8bi7K047BpIs7xWG9ysz dhlLknGPjQhsBhke3j5WyhSrulhZxGd0bfTsy11Q1GW5fisIKsE9IC4fbFpxCjUe iOkRTvJSqXVdmu/Sa2IYHzxkMRi7K/T0Rq7aqv2f31MX22D4tMsSZDcgzjegx6cO f1+W8nGPN7ly3LoCrHoVyy7D+OC1nWL+fabGK/I4MU9mmbmAyOsfgaektDyn8xrb enlE1y7NZSc19Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:09 2025 by rpki-client