This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft File: 8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json) Hash identifier: fvkw11QK3b0xxAfa56qso7BWFU0k4U2d4AkYyhRYWRM= Subject key identifier: 3B:4C:CD:E4:50:93:58:69:02:30:70:C8:8C:A2:92:15:62:03:1A:45 Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Certificate serial: 019AF1D1B1A0263DAA5260CD44249FC923E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft Manifest number: 1521 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=) 2: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: 3ebq3E5A3SsdfwQmalWRE7cADDttHl00FsLtV3pUrc0=) 3: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=) 4: k8gLy7StQaIvKZDqraAi2w_fvtc.roa (hash: SkLPv2Z8PHPm64h4i6RldP3OE6ycpgOCRTvbQRULZdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b1:a0:26:3d:aa:52:60:cd:44:24:9f:c9:23:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=3b4ccde450935869023070c88ca2921562031a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:c4:65:a3:d4:6c:6a:5d:5c:0e:34:e3:01: 04:b5:12:65:d2:c8:ce:e7:3b:bf:9d:43:0d:e9:a7: ed:84:2d:64:5a:7d:4a:cc:85:7f:a5:4e:87:84:9f: f8:ed:58:38:71:9c:22:83:81:56:3b:5d:b8:b2:ac: 72:92:05:a3:bb:9f:12:59:c2:fc:d9:73:2b:c3:96: 52:b3:1e:5b:3f:74:45:72:4f:88:ec:d7:60:17:01: 50:2d:16:dd:a4:38:51:b9:6d:b6:ba:00:4b:99:7d: 96:00:ed:9d:52:3f:c2:fc:21:41:c7:69:90:1d:e0: c1:87:78:8a:68:05:8d:60:9a:4f:e7:56:0e:ab:81: ac:b6:e9:9e:fe:78:ee:d2:ba:8a:05:7c:7a:40:ca: 74:88:f5:41:63:6d:cc:b9:10:dc:57:c7:28:bb:03: bf:bf:00:74:1c:20:73:66:13:f8:99:47:8b:6e:71: 7c:b6:4a:9e:1a:8e:85:93:e6:cd:34:59:bf:60:8c: 20:e7:4d:86:fd:c5:66:0d:4a:78:60:04:e0:c3:91: 8e:f0:0d:1b:f2:cb:e0:47:95:b1:40:7f:de:bd:c8: 62:03:d7:48:ce:74:54:39:8b:6c:25:be:11:dd:32: 11:51:d6:3b:6e:e0:59:9c:a9:fd:7d:24:c9:fc:bf: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4C:CD:E4:50:93:58:69:02:30:70:C8:8C:A2:92:15:62:03:1A:45 X509v3 Authority Key Identifier: keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:52:40:12:26:8a:7a:3a:b1:6a:d2:6a:5f:e6:bb:25:90:55: 1f:af:d2:2d:e9:d6:49:6f:79:2a:52:f6:54:70:f5:5c:b2:c9: 43:03:5d:89:34:05:2d:8e:c8:de:88:c7:78:f7:fe:1f:29:4f: 5c:03:8b:b5:e0:0a:e4:c2:bb:bf:a7:c9:a8:de:81:a0:7d:cd: 3d:b5:e1:ba:82:6b:96:25:d1:83:31:27:ac:fe:86:dd:89:2d: fc:0c:49:ec:76:00:cf:5a:09:d9:24:51:b7:92:2c:68:fb:94: ea:37:2d:0b:81:49:e2:35:f5:a6:e1:30:96:8a:1f:de:5a:e5: 4a:c5:34:2a:66:96:40:55:93:cd:df:54:4d:d8:41:8e:ce:41: 1d:cb:54:d3:fc:f8:85:ee:51:15:c5:96:f9:7f:ff:14:78:8b: 6e:b5:6f:8c:77:31:eb:3a:15:96:df:6a:47:79:32:b9:9d:26: 11:16:4c:44:80:e8:c1:1c:ad:a0:67:03:30:79:d2:39:ac:50: ee:23:21:eb:c0:21:b4:36:a0:15:e7:5c:de:2d:51:e5:ed:75: 89:46:c8:0e:2b:7b:e8:20:b3:f8:d9:fd:f2:4d:87:51:c4:c4: d7:b7:40:5f:98:a5:8b:95:87:5c:d0:37:7a:67:82:34:77:96: d5:29:3c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bGgJj2qUmDNRCSfySPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm MjM3YTAwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EygzYjRjY2RlNDUwOTM1ODY5MDIzMDcwYzg4Y2EyOTIxNTYyMDMxYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoHEZaPUbGpdXA404wEEtRJl0sjO 5zu/nUMN6afthC1kWn1KzIV/pU6HhJ/47Vg4cZwig4FWO124sqxykgWju58SWcL8 2XMrw5ZSsx5bP3RFck+I7NdgFwFQLRbdpDhRuW22ugBLmX2WAO2dUj/C/CFBx2mQ HeDBh3iKaAWNYJpP51YOq4Gstume/nju0rqKBXx6QMp0iPVBY23MuRDcV8couwO/ vwB0HCBzZhP4mUeLbnF8tkqeGo6Fk+bNNFm/YIwg502G/cVmDUp4YATgw5GO8A0b 8svgR5WxQH/evchiA9dIznRUOYtsJb4R3TIRUdY7buBZnKn9fSTJ/L/SGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtMzeRQk1hpAjBwyIyikhViAxpFMB8GA1UdIwQY MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt ODcyNGVkNWU5MDNhLzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1JAEiaK ejqxatJqX+a7JZBVH6/SLenWSW95KlL2VHD1XLLJQwNdiTQFLY7I3ojHePf+HylP XAOLteAK5MK7v6fJqN6BoH3NPbXhuoJrliXRgzEnrP6G3Ykt/AxJ7HYAz1oJ2SRR t5IsaPuU6jctC4FJ4jX1puEwloof3lrlSsU0KmaWQFWTzd9UTdhBjs5BHctU0/z4 he5RFcWW+X//FHiLbrVvjHcx6zoVlt9qR3kyuZ0mERZMRIDowRytoGcDMHnSOaxQ 7iMh68AhtDagFedc3i1R5e11iUbIDit76CCz+Nn98k2HUcTE17dAX5ili5WHXNA3 emeCNHeW1Sk8Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:25 2025 by rpki-client