This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json) Hash identifier: sbPPkNFgiAlIIU2k7uq0s/7zk9nNY/KHYNeXTRF539U= Subject key identifier: E6:D8:4A:1C:71:59:84:4E:B7:95:A5:5E:DD:B0:4A:9A:D5:6A:EC:BD Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27 Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527 Certificate serial: 019AF23FB476222AB8051EA38F30B141C8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft Manifest number: 031C Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: i+2Zg/AC8DCuishjDoP5976o8vOfo6k5P2NSsvzHb1Y=) 2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b4:76:22:2a:b8:05:1e:a3:8f:30:b1:41:c8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527 Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=e6d84a1c7159844eb795a55eddb04a9ad56aecbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b5:78:6a:e6:0b:e8:a8:48:d7:df:ad:51:6d: ff:50:5f:85:cb:a1:a2:6f:a0:87:db:7a:13:08:0d: 0f:ef:6f:47:17:da:19:d1:6f:f0:d4:0b:eb:16:96: 84:00:4c:37:59:ae:55:b0:1b:d4:16:5f:5b:0d:f9: e4:0f:dc:60:3e:78:7f:14:93:ba:71:e8:5c:c1:6a: a3:0c:97:5d:fe:5e:1a:4c:74:42:60:b0:58:c7:ca: 6c:9a:ef:8f:3a:df:a4:29:ee:e5:a2:71:b3:d0:ef: 3e:58:9c:23:db:ff:50:7e:0b:81:eb:76:8f:e8:dc: d6:a1:b3:1b:1c:82:a8:e4:89:94:09:75:4e:70:11: f1:bc:9e:fc:09:3f:9a:5f:13:cd:cd:46:6f:d9:4f: 03:09:51:96:7b:03:43:8f:da:da:05:d7:30:70:39: 20:04:ef:23:3a:0b:5f:65:ab:01:65:04:3c:90:9d: e2:b9:6a:e7:e9:57:fd:76:71:ac:2e:8d:7d:55:1a: 6a:a6:5a:46:44:bc:13:d2:29:02:cc:b2:86:35:54: 7e:fc:f9:aa:85:c4:bd:ad:7a:f3:07:d0:7b:69:82: a3:79:82:38:60:a5:16:38:3a:0b:8b:42:c8:b8:65: 47:a5:bf:81:f3:b5:6a:43:b0:75:3d:ba:2b:d5:bd: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D8:4A:1C:71:59:84:4E:B7:95:A5:5E:DD:B0:4A:9A:D5:6A:EC:BD X509v3 Authority Key Identifier: keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:86:85:36:da:6f:bd:85:53:2a:e7:5a:e4:84:fe:f4:34:f6: 81:63:5c:11:2e:f8:a1:3e:b6:ed:8d:a2:f2:b7:b5:83:85:a6: db:1c:ce:5d:d1:32:19:bc:f7:19:5b:f0:ed:74:68:c6:52:d3: 1e:db:4c:f0:6c:cd:31:dc:89:06:0b:51:a5:f3:7c:63:61:c4: bf:b8:cc:6b:39:16:c0:87:3e:e4:f1:fb:0f:18:50:09:fb:de: 52:79:ae:99:d7:44:a2:fe:4e:8c:ea:08:46:c2:68:89:14:e7: fd:b9:7c:ac:0a:60:45:66:a5:9e:ab:38:dc:20:ae:26:54:5f: 16:f0:3d:39:e3:ad:36:f4:53:99:95:f7:4d:d8:1a:3c:f3:ce: 3c:d9:18:a7:9f:55:66:2f:f5:f4:00:ce:18:a8:1d:86:1c:56: d1:ec:71:c5:ec:15:2f:9f:52:c0:2a:76:b4:b0:f0:b0:8f:c0: 99:ac:33:dd:1a:4c:30:64:dd:61:3a:ff:9c:1c:96:35:88:03: b3:83:d5:69:1b:fc:94:1b:22:5d:0b:e0:48:67:e5:2a:ea:68: ba:a6:b8:cc:34:e1:4b:39:8f:d6:2c:8e:a7:99:87:05:75:4b: b1:c0:37:b6:5e:c8:44:59:1e:68:9a:61:bf:95:46:e9:7b:b4: ae:81:9f:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7R2Iiq4BR6jjzCxQcj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmYzZTdkODY1OWU4YWU5ZjZmNGYzMWQzZjI0ZmRiM2M2 ZGY1MjcwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EyhlNmQ4NGExYzcxNTk4NDRlYjc5NWE1NWVkZGIwNGE5YWQ1NmFlY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbV4auYL6KhI19+tUW3/UF+Fy6Gi b6CH23oTCA0P729HF9oZ0W/w1AvrFpaEAEw3Wa5VsBvUFl9bDfnkD9xgPnh/FJO6 cehcwWqjDJdd/l4aTHRCYLBYx8psmu+POt+kKe7lonGz0O8+WJwj2/9QfguB63aP 6NzWobMbHIKo5ImUCXVOcBHxvJ78CT+aXxPNzUZv2U8DCVGWewNDj9raBdcwcDkg BO8jOgtfZasBZQQ8kJ3iuWrn6Vf9dnGsLo19VRpqplpGRLwT0ikCzLKGNVR+/Pmq hcS9rXrzB9B7aYKjeYI4YKUWODoLi0LIuGVHpb+B87VqQ7B1Pbor1b23kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObYShxxWYROt5WlXt2wSprVauy9MB8GA1UdIwQY MBaAFPf/Pn2GWeiun29PMdPyT9s8bfUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV84LWZZWlo2SzZmYjA4eDBfSlAyenh0OVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84OTY4OGMtZTA5NC00MzE2LTgxMzAt YWEyZjhhMmIwZTg4LzEvOV84LWZZWlo2SzZmYjA4eDBfSlAyenh0OVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC84OTY4OGMtZTA5NC00MzE2LTgxMzAtYWEyZjhhMmIwZTg4 LzEvOV84LWZZWlo2SzZmYjA4eDBfSlAyenh0OVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4aFNtpv vYVTKuda5IT+9DT2gWNcES74oT627Y2i8re1g4Wm2xzOXdEyGbz3GVvw7XRoxlLT HttM8GzNMdyJBgtRpfN8Y2HEv7jMazkWwIc+5PH7DxhQCfveUnmumddEov5OjOoI RsJoiRTn/bl8rApgRWalnqs43CCuJlRfFvA9OeOtNvRTmZX3TdgaPPPOPNkYp59V Zi/19ADOGKgdhhxW0exxxewVL59SwCp2tLDwsI/Amawz3RpMMGTdYTr/nByWNYgD s4PVaRv8lBsiXQvgSGflKupouqa4zDThSzmP1iyOp5mHBXVLscA3tl7IRFkeaJph v5VG6Xu0roGfpg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:30 2025 by rpki-client