This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json) Hash identifier: qwg9YD5N3q5RgCagEoEGs/3Gvj88duHcMPHcvkyF/i0= Subject key identifier: D7:A3:D6:BB:4B:BD:B9:7B:92:ED:CD:E7:A8:7F:09:36:D1:3A:8C:49 Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9 Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9 Certificate serial: 019AF19AC49808B2F0AC3605A4D74AFBAFF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft Manifest number: 1078 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: d6BQkoBVDFGsbrjLCAPM0nBRbZL3mE/js1twrQOZydo=) 2: nqo_O7xWpllnpXWgXV-EBK2yLMY.roa (hash: v3gPcs+xtmwPaPJ3A0/t7F8YEQgyHeonW0dBXWdUhwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c4:98:08:b2:f0:ac:36:05:a4:d7:4a:fb:af:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=d7a3d6bb4bbdb97b92edcde7a87f0936d13a8c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:ce:57:5a:9e:ca:65:91:b1:2d:fc:9a:aa: d0:5f:03:33:bd:92:d5:41:70:c8:d9:54:12:18:c3: 3c:a7:ea:70:f5:61:e8:71:8b:0d:e5:2d:cb:39:da: a0:5a:85:0f:8c:4c:35:78:be:86:25:4c:c0:ab:1e: 60:3c:8a:35:ce:fd:70:07:fb:54:9a:8a:39:3d:e1: 92:e4:db:43:34:d5:fb:4c:ae:82:35:f6:b8:52:b7: ca:f8:d5:a3:70:d2:61:ff:a6:43:97:38:c2:87:8d: 29:04:6a:44:76:28:8d:62:8d:b8:db:98:a0:13:ea: 10:11:d0:80:4d:66:9f:8b:dd:c9:3e:34:7e:85:8e: 29:79:0e:24:12:ae:bc:93:4d:d8:10:36:06:76:96: 9f:05:2b:7f:eb:b7:7c:56:e4:3d:a8:1f:14:36:79: 5e:b3:60:fa:c1:c5:70:0f:45:87:3c:34:fd:7b:3a: 03:24:b5:8d:6a:58:b3:18:35:79:a6:5e:a9:91:85: 0a:1f:6b:8f:f8:1b:53:33:9f:94:35:0e:0b:a0:12: b5:70:bf:55:47:b7:e8:dd:04:a9:5d:b3:c0:c8:3e: 9c:55:f7:fb:42:90:8b:b0:72:fb:f9:23:43:2b:7e: b0:b2:3e:2d:8c:ea:06:63:5d:b3:1a:92:ea:45:e2: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A3:D6:BB:4B:BD:B9:7B:92:ED:CD:E7:A8:7F:09:36:D1:3A:8C:49 X509v3 Authority Key Identifier: keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a5:61:39:a6:df:6f:1b:6d:9a:b9:ee:07:4e:01:10:69:10: 52:2b:50:1e:16:17:14:b2:89:09:ea:fd:2c:7b:a5:5b:b4:a7: 3d:bc:f8:e4:c4:2a:40:81:73:38:d4:38:8e:78:c0:39:58:37: 69:2d:d1:82:d3:8c:44:c8:a4:a9:d3:95:62:c8:a0:d3:93:5f: 99:73:d4:79:6b:2a:43:34:60:51:28:9c:8d:cc:f6:e4:68:d5: ad:ef:5d:99:bc:17:68:ed:72:e7:58:11:94:99:06:80:0c:ac: 76:5c:92:d4:bf:2d:a3:34:dd:36:ad:06:82:4d:8f:3d:c5:b5: c0:5f:9c:cf:1a:e8:19:7f:e6:3c:22:2b:4c:dc:f0:2e:a2:38: a4:0f:26:4e:54:fb:cf:1c:f9:47:14:ab:62:12:44:27:e0:ca: 02:21:b9:42:0c:d2:57:2b:72:13:b3:d3:b3:01:de:6e:64:59: 39:5e:62:a1:c0:ca:0a:df:c2:78:c1:11:d2:02:9e:55:f6:0a: 5d:52:8e:98:33:87:e0:2c:8b:63:14:d2:51:69:f2:a8:ca:71: 2f:a7:a9:13:ce:46:a3:33:49:34:b4:42:b3:99:7e:23:0a:2c: 18:ff:1c:91:49:c8:3b:7e:14:7f:bb:45:5d:34:57:8f:1a:30: b0:40:10:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsSYCLLwrDYFpNdK+6/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2EwZWRmMTIyZjRjZjk4YjA4MmRkNGNjMGQ4NGY1ZWRl ODA0YjkwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EyhkN2EzZDZiYjRiYmRiOTdiOTJlZGNkZTdhODdmMDkzNmQxM2E4YzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU3OV1qeymWRsS38mqrQXwMzvZLV QXDI2VQSGMM8p+pw9WHocYsN5S3LOdqgWoUPjEw1eL6GJUzAqx5gPIo1zv1wB/tU moo5PeGS5NtDNNX7TK6CNfa4UrfK+NWjcNJh/6ZDlzjCh40pBGpEdiiNYo2425ig E+oQEdCATWafi93JPjR+hY4peQ4kEq68k03YEDYGdpafBSt/67d8VuQ9qB8UNnle s2D6wcVwD0WHPDT9ezoDJLWNalizGDV5pl6pkYUKH2uP+BtTM5+UNQ4LoBK1cL9V R7fo3QSpXbPAyD6cVff7QpCLsHL7+SNDK36wsj4tjOoGY12zGpLqReKJgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNej1rtLvbl7ku3N56h/CTbROoxJMB8GA1UdIwQY MBaAFIvKDt8SL0z5iwgt1MwNhPXt6AS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hZWYwZWEtOTQwMy00N2ZiLWFkODAt MWVkYTUzYWViZTUxLzEvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hZWYwZWEtOTQwMy00N2ZiLWFkODAtMWVkYTUzYWViZTUx LzEvaThvTzN4SXZUUG1MQ0MzVXpBMkU5ZTNvQkxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKVhOabf bxttmrnuB04BEGkQUitQHhYXFLKJCer9LHulW7SnPbz45MQqQIFzONQ4jnjAOVg3 aS3RgtOMRMikqdOVYsig05NfmXPUeWsqQzRgUSicjcz25GjVre9dmbwXaO1y51gR lJkGgAysdlyS1L8tozTdNq0Ggk2PPcW1wF+czxroGX/mPCIrTNzwLqI4pA8mTlT7 zxz5RxSrYhJEJ+DKAiG5QgzSVytyE7PTswHebmRZOV5iocDKCt/CeMER0gKeVfYK XVKOmDOH4CyLYxTSUWnyqMpxL6epE85GozNJNLRCs5l+IwosGP8ckUnIO34Uf7tF XTRXjxowsEAQ2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:41 2025 by rpki-client