This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json) Hash identifier: 4gjKskOQIzx7UVtcTOyFyLJO5GX0r96vfuHEo0llHlA= Subject key identifier: B1:5D:59:9D:6A:68:EE:7F:68:34:30:42:FF:E0:E8:2D:34:25:B5:33 Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019AF20966635FB830517EE9278DFCD38EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft Manifest number: 106C Signing time: Sat 06 Dec 2025 05:01:33 +0000 Manifest this update: Sat 06 Dec 2025 05:01:33 +0000 Manifest next update: Sun 07 Dec 2025 05:01:33 +0000 Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: MZuzRhBcWAuAsV8+5sU9hDLvAIJMIog4G43BAZRpxj8=) 2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=) 3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=) 4: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=) 5: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=) 6: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=) 7: xIeAXdfn38yQDbyF7veotWoFZu0.roa (hash: PRijsI9u95zDDy86ofoQ6KFQuR5A71lxwPw9qkFWPs8=) 8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:66:63:5f:b8:30:51:7e:e9:27:8d:fc:d3:8e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Dec 6 05:01:33 2025 GMT Not After : Dec 7 05:01:33 2025 GMT Subject: CN=b15d599d6a68ee7f68343042ffe0e82d3425b533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:8c:1e:7c:38:ba:8b:9b:7f:0f:28:97:9c: 67:c0:69:aa:5d:6a:42:28:8a:b6:bc:ec:86:05:81: fe:f4:16:9e:cf:51:56:37:29:91:61:d3:00:8d:b1: 32:b3:2b:50:a4:58:0d:9a:eb:f9:f4:79:41:4a:10: 41:fc:e3:7d:07:78:13:4b:52:4e:47:10:26:b0:e3: 49:0b:72:f4:f7:1a:16:10:d3:78:91:2e:75:1d:3d: 72:90:b8:70:df:db:f3:82:db:2c:56:7c:d8:49:ee: e2:71:a9:14:d4:26:be:b9:43:a5:1c:71:1d:0c:04: cc:1c:57:f2:63:fb:6e:d7:e0:90:b1:b8:91:05:44: f3:06:96:66:83:d3:de:f6:bf:39:1f:57:f8:40:64: d0:67:86:56:fb:fb:02:b8:36:d3:3a:a1:c8:c6:5c: e4:99:71:a3:76:30:27:16:fd:89:87:23:30:3c:2c: 94:15:0e:3a:42:3b:5a:5a:c3:2c:53:9b:20:da:ef: 31:a5:60:c5:7c:50:30:6d:d7:6b:f9:12:c0:5e:10: 28:5e:01:b6:12:90:4a:7b:9e:d9:ac:a3:4b:e9:a5: f2:7b:2b:bb:68:83:b2:13:69:0e:05:6f:f3:42:cc: 9c:68:ba:05:0d:f9:05:44:1f:e3:d6:79:4a:d5:9f: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5D:59:9D:6A:68:EE:7F:68:34:30:42:FF:E0:E8:2D:34:25:B5:33 X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:21:b2:a0:aa:77:41:ed:93:c5:68:e5:70:59:bf:b6:07:1f: 1a:09:a0:fe:9b:35:59:10:ea:25:e1:83:5b:44:59:38:0c:95: ec:f0:f6:d3:b7:fa:ef:69:00:d8:bd:be:e8:ca:a2:73:e9:99: 3e:04:1a:6d:42:05:16:69:2b:3f:a3:08:74:1c:01:0a:da:b4: f4:73:6b:53:75:e0:08:3b:c1:1c:f5:00:16:f4:52:02:11:e3: 63:d2:5d:57:2a:5c:ca:ae:3f:bd:1f:6e:0f:03:2d:91:28:df: 53:79:b0:8b:e2:8e:ad:30:94:d4:8b:2d:d2:95:a3:d3:95:2d: e6:d4:7d:23:4b:b4:0d:94:89:aa:a1:95:e2:2d:c7:ac:91:58: 87:20:4a:22:d1:19:8d:9c:d9:58:be:37:ef:83:6b:fe:28:a7: 7b:3c:05:44:b0:8f:92:5c:e5:8f:fe:bb:3d:cf:e7:91:cb:48: c9:e9:90:72:87:f2:9e:54:4e:cf:6e:b5:01:57:e4:09:4e:77: e9:87:4f:96:4c:34:95:2a:23:22:44:8a:16:e9:45:2a:c4:d3: c9:4f:ee:2f:f6:1d:99:f7:b5:c8:2c:67:af:af:6e:39:d1:10: 64:24:5a:19:bc:95:26:68:fd:c5:b6:a2:18:2d:fc:e4:d8:e4: 0b:2d:90:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWZjX7gwUX7pJ4380463MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjUxMjA2MDUwMTMzWhcNMjUxMjA3MDUwMTMzWjAzMTEwLwYDVQQD EyhiMTVkNTk5ZDZhNjhlZTdmNjgzNDMwNDJmZmUwZTgyZDM0MjViNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSeMHnw4uoubfw8ol5xnwGmqXWpC KIq2vOyGBYH+9Baez1FWNymRYdMAjbEysytQpFgNmuv59HlBShBB/ON9B3gTS1JO RxAmsONJC3L09xoWENN4kS51HT1ykLhw39vzgtssVnzYSe7icakU1Ca+uUOlHHEd DATMHFfyY/tu1+CQsbiRBUTzBpZmg9Pe9r85H1f4QGTQZ4ZW+/sCuDbTOqHIxlzk mXGjdjAnFv2JhyMwPCyUFQ46QjtaWsMsU5sg2u8xpWDFfFAwbddr+RLAXhAoXgG2 EpBKe57ZrKNL6aXyeyu7aIOyE2kOBW/zQsycaLoFDfkFRB/j1nlK1Z9ufwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFdWZ1qaO5/aDQwQv/g6C00JbUzMB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSGyoKp3 Qe2TxWjlcFm/tgcfGgmg/ps1WRDqJeGDW0RZOAyV7PD207f672kA2L2+6Mqic+mZ PgQabUIFFmkrP6MIdBwBCtq09HNrU3XgCDvBHPUAFvRSAhHjY9JdVypcyq4/vR9u DwMtkSjfU3mwi+KOrTCU1Ist0pWj05Ut5tR9I0u0DZSJqqGV4i3HrJFYhyBKItEZ jZzZWL4374Nr/iinezwFRLCPklzlj/67Pc/nkctIyemQcofynlROz261AVfkCU53 6YdPlkw0lSojIkSKFulFKsTTyU/uL/Ydmfe1yCxnr69uOdEQZCRaGbyVJmj9xbai GC385NjkCy2QjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:22 2025 by rpki-client