This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json) Hash identifier: Y+wCvQgnokxcsKDq1QSNKF+CluCjLvGhJ3CsSc7blcM= Subject key identifier: 33:91:3F:15:BA:CF:36:BF:6A:DA:C0:EC:3C:AB:66:06:3B:4F:34:E1 Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Certificate serial: 019B2D0C22C5E680CD7EE59A85E24BD785BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft Manifest number: 1140 Signing time: Wed 17 Dec 2025 16:02:08 +0000 Manifest this update: Wed 17 Dec 2025 16:02:08 +0000 Manifest next update: Thu 18 Dec 2025 16:02:08 +0000 Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: Kb7ubCCWH1bz07EmpZ9+4IoGLFf7GiPlqynoqgw696U=) 2: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (hash: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:22:c5:e6:80:cd:7e:e5:9a:85:e2:4b:d7:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Validity Not Before: Dec 17 16:02:08 2025 GMT Not After : Dec 18 16:02:08 2025 GMT Subject: CN=33913f15bacf36bf6adac0ec3cab66063b4f34e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:3a:cf:c8:45:de:63:58:aa:d1:6a:c9:8a: c9:ef:b3:16:17:74:fd:00:03:bc:d4:b4:2c:47:51: 8e:d5:c1:06:02:d7:e1:bd:a0:1e:be:2d:ea:9f:30: 75:a8:b6:b1:99:55:17:fe:ee:5e:12:0c:f2:e0:c1: 98:d4:f8:eb:0c:ad:c8:1f:54:2f:3d:78:4e:d9:c3: 01:98:99:f6:c5:4d:ab:7f:58:a8:d5:42:d1:c7:77: 42:ee:74:4f:e6:c4:e4:fa:96:fe:a2:20:5a:72:91: 06:54:30:19:9b:2f:43:28:77:88:8a:40:94:88:1b: 08:8e:13:ef:5a:5e:75:db:95:c0:e1:68:eb:1e:41: a4:1a:21:ec:3b:d6:ff:be:87:4b:7d:7f:db:9f:11: cb:4e:69:6a:76:dc:06:c4:1a:8c:10:2b:8b:ea:37: 55:5e:6a:14:19:88:09:e2:a0:21:a5:33:90:da:2c: 59:a5:bb:34:b8:dd:a0:37:d7:90:ef:f2:fb:cf:d8: b1:48:33:4d:66:a0:c2:79:5b:f4:91:15:1c:41:5c: 4b:f4:88:f0:8d:db:15:5f:a9:d6:7c:24:74:22:9c: bf:80:d3:bb:d5:63:e6:3e:5f:e2:d3:0c:4f:01:5d: 6b:87:e6:4c:5f:84:dc:0f:9c:66:35:ca:7c:1f:1c: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:91:3F:15:BA:CF:36:BF:6A:DA:C0:EC:3C:AB:66:06:3B:4F:34:E1 X509v3 Authority Key Identifier: keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b2:fd:cb:c8:88:6e:e6:72:63:c9:f8:d7:93:04:ee:f8:98: ec:08:9a:b2:29:03:1b:07:5b:37:59:22:dd:6a:32:0d:5d:8d: a7:c8:e8:ac:af:f0:af:ac:b7:9b:50:2e:d8:5a:fb:85:ee:8e: 60:b5:e3:d6:b2:7e:24:3e:1a:bb:53:01:d6:c8:52:d3:4d:49: d5:23:f9:e5:62:1e:f8:9b:a9:b9:b7:6d:2c:e4:8b:31:94:52: 91:5e:06:be:d7:87:ac:76:34:8d:71:ca:b5:f9:f5:ea:86:a3: a9:29:4c:91:f9:6a:c8:d1:03:fb:ea:04:49:cc:0b:3f:94:b5: 05:b5:9d:ba:49:8d:43:c6:83:bb:0f:88:48:61:0b:b4:45:43: e2:09:3f:39:21:83:83:2f:dd:cf:38:0d:1d:98:d5:26:a3:53: cc:8d:5d:87:ac:1d:7d:b3:db:19:66:1a:29:94:0f:4d:c9:c5: 54:7a:11:6d:84:f6:87:61:2c:d9:4f:34:c1:3e:a5:3a:9f:ef: e4:40:2f:74:d1:44:d7:81:0a:5b:c5:e9:44:d5:cc:ae:d5:01: 6c:db:65:ea:0b:e5:77:c0:95:c5:58:81:33:93:61:fe:83:4a: 72:76:8b:1b:f4:5a:20:e0:47:38:17:d0:4d:a5:26:01:e4:3b: e2:02:4c:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDCLF5oDNfuWaheJL14W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzhiMTBhMzhmODFjNjRlMjAxMjA3YmZjMzU0NGMyOTcy YWY1ZjMwHhcNMjUxMjE3MTYwMjA4WhcNMjUxMjE4MTYwMjA4WjAzMTEwLwYDVQQD EygzMzkxM2YxNWJhY2YzNmJmNmFkYWMwZWMzY2FiNjYwNjNiNGYzNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseY6z8hF3mNYqtFqyYrJ77MWF3T9 AAO81LQsR1GO1cEGAtfhvaAevi3qnzB1qLaxmVUX/u5eEgzy4MGY1PjrDK3IH1Qv PXhO2cMBmJn2xU2rf1io1ULRx3dC7nRP5sTk+pb+oiBacpEGVDAZmy9DKHeIikCU iBsIjhPvWl5125XA4WjrHkGkGiHsO9b/vodLfX/bnxHLTmlqdtwGxBqMECuL6jdV XmoUGYgJ4qAhpTOQ2ixZpbs0uN2gN9eQ7/L7z9ixSDNNZqDCeVv0kRUcQVxL9Ijw jdsVX6nWfCR0Ipy/gNO71WPmPl/i0wxPAV1rh+ZMX4TcD5xmNcp8Hxz6qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDORPxW6zza/atrA7DyrZgY7TzThMB8GA1UdIwQY MBaAFNPIsQo4+Bxk4gEge/w1RMKXKvXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEt MzdhYTM1ZTY5ZGMxLzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEtMzdhYTM1ZTY5ZGMx LzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbL9y8iI buZyY8n415ME7viY7AiasikDGwdbN1ki3WoyDV2Np8jorK/wr6y3m1Au2Fr7he6O YLXj1rJ+JD4au1MB1shS001J1SP55WIe+JupubdtLOSLMZRSkV4GvteHrHY0jXHK tfn16oajqSlMkflqyNED++oEScwLP5S1BbWdukmNQ8aDuw+ISGELtEVD4gk/OSGD gy/dzzgNHZjVJqNTzI1dh6wdfbPbGWYaKZQPTcnFVHoRbYT2h2Es2U80wT6lOp/v 5EAvdNFE14EKW8XpRNXMrtUBbNtl6gvld8CVxViBM5Nh/oNKcnaLG/RaIOBHOBfQ TaUmAeQ74gJMow== -----END CERTIFICATE-----Generated at Wed Dec 17 18:44:47 2025 by rpki-client