This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json) Hash identifier: E/bTQC9jae5GedkJKZk2feWJGPE+arBHxS270Iyon4I= Subject key identifier: 74:DF:7E:FE:A6:8B:34:55:D9:30:B8:6B:C4:29:83:B2:58:63:81:FF Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Certificate serial: 019AF0BF8FB0205EB8A9549031395E62796F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft Manifest number: 01CB Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=) 2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: Teh+yOwsvnVDisVpRO6VJPyNZl7NnxVPcl9JbRMIw48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8f:b0:20:5e:b8:a9:54:90:31:39:5e:62:79:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=74df7efea68b3455d930b86bc42983b2586381ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:0b:2a:9d:1e:a6:42:f3:79:14:e7:b6:f2: 73:7d:3f:2b:0d:c1:74:f8:2b:54:2c:6c:80:38:23: 5a:9b:0a:d8:6b:a0:c3:da:9c:62:51:47:ff:e8:4c: c7:2f:39:5a:f8:33:f4:44:4c:f1:5c:52:67:00:e4: bf:5f:de:60:55:cb:ea:23:8a:42:be:64:4f:ce:e1: 9d:24:e3:22:47:6c:44:bb:30:72:1d:16:56:07:66: 33:6b:1d:43:80:3f:40:52:67:66:06:3c:62:19:43: ce:1b:d3:e1:93:f2:2a:c8:c8:08:35:fd:5b:cb:53: 2d:bd:05:4e:e2:ca:1a:c0:b5:68:38:c2:f5:8a:b5: 8a:b5:61:b1:06:59:9c:6f:08:8f:a5:79:8d:d1:76: 33:48:c2:b8:15:da:75:10:6e:c4:db:09:2c:58:ba: 8c:71:ac:56:43:a3:56:49:f3:03:20:c0:85:11:16: cc:d9:e1:80:93:1e:f3:12:73:60:60:d0:43:67:70: 64:e8:f1:20:db:fb:37:2a:59:f3:24:d0:fd:dc:14: 53:df:13:12:44:40:d4:cf:8c:d5:e4:ff:82:df:7e: 87:be:9e:d0:f6:70:b2:21:e9:10:3d:46:47:a5:d2: 06:a8:6c:71:33:63:ae:92:ca:de:83:64:31:ef:f0: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DF:7E:FE:A6:8B:34:55:D9:30:B8:6B:C4:29:83:B2:58:63:81:FF X509v3 Authority Key Identifier: keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:84:ea:8a:cc:d9:9a:08:66:bc:8a:8a:84:31:98:45:0a:74: 0f:eb:9a:81:fd:64:1b:2c:60:d9:78:18:f7:dc:1e:ae:76:9c: 30:bb:fa:91:78:0c:00:3b:ad:fa:26:75:6b:a1:08:d8:08:ce: b7:89:2b:6c:22:ce:b2:37:96:0c:a1:53:d6:61:7f:60:bc:da: ce:9c:1b:ed:fb:5f:be:0f:02:7c:a2:dd:ed:f9:92:eb:44:d0: 88:e2:02:6a:f7:12:3c:90:25:c2:91:29:69:8a:0c:1e:71:10: 6c:8b:d9:83:61:fe:1b:8d:8c:57:05:f3:7e:69:09:6b:96:c2: 07:83:a3:8e:31:b2:d6:83:e3:64:16:47:15:be:9f:ab:4c:50: bf:19:c8:5d:2e:b2:71:c4:b8:85:f7:a9:c2:fa:89:b7:09:fe: 53:55:fc:4b:f2:13:54:85:7c:53:99:04:4c:17:07:6a:42:b2: 15:e0:19:b9:54:4a:aa:72:82:95:50:b6:55:21:ae:42:b9:ea: d0:b1:e3:db:14:b2:72:8b:2e:cd:c0:08:8c:ca:85:6b:f6:2a: 77:3c:a4:0a:eb:ea:a5:ce:77:e4:6f:da:89:96:64:1b:a3:34: c9:ca:4c:7b:39:6f:bd:f4:a9:9e:b6:bf:ee:49:84:b6:55:36: 92:f3:f5:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4+wIF64qVSQMTleYnlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmYzZmYzYzBhMWZmYjNhZjIwZjViOTVlOGNiNjRjODgw NDNmMzkwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD Eyg3NGRmN2VmZWE2OGIzNDU1ZDkzMGI4NmJjNDI5ODNiMjU4NjM4MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHILKp0epkLzeRTntvJzfT8rDcF0 +CtULGyAOCNamwrYa6DD2pxiUUf/6EzHLzla+DP0REzxXFJnAOS/X95gVcvqI4pC vmRPzuGdJOMiR2xEuzByHRZWB2Yzax1DgD9AUmdmBjxiGUPOG9Phk/IqyMgINf1b y1MtvQVO4soawLVoOML1irWKtWGxBlmcbwiPpXmN0XYzSMK4Fdp1EG7E2wksWLqM caxWQ6NWSfMDIMCFERbM2eGAkx7zEnNgYNBDZ3Bk6PEg2/s3KlnzJND93BRT3xMS REDUz4zV5P+C336Hvp7Q9nCyIekQPUZHpdIGqGxxM2Ouksreg2Qx7/A4+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTffv6mizRV2TC4a8Qpg7JYY4H/MB8GA1UdIwQY MBaAFIkvP/PAof+zryD1uV6MtkyIBD85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQt ZjkyMWRiNzViZGY5LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQtZjkyMWRiNzViZGY5 LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWITqiszZ mghmvIqKhDGYRQp0D+uagf1kGyxg2XgY99wernacMLv6kXgMADut+iZ1a6EI2AjO t4krbCLOsjeWDKFT1mF/YLzazpwb7ftfvg8CfKLd7fmS60TQiOICavcSPJAlwpEp aYoMHnEQbIvZg2H+G42MVwXzfmkJa5bCB4OjjjGy1oPjZBZHFb6fq0xQvxnIXS6y ccS4hfepwvqJtwn+U1X8S/ITVIV8U5kETBcHakKyFeAZuVRKqnKClVC2VSGuQrnq 0LHj2xSycosuzcAIjMqFa/YqdzykCuvqpc535G/aiZZkG6M0ycpMezlvvfSpnra/ 7kmEtlU2kvP1nA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:27 2025 by rpki-client