This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json) Hash identifier: lhTre9y5flvuTPnqaq1F8BO1kqqQL7u06CHp5IgXLbQ= Subject key identifier: 7D:85:C7:C5:B3:B4:99:6B:81:E0:90:5C:2D:7C:BF:2D:F9:BA:BB:6F Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89 Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389 Certificate serial: 019AF2ADCCB5887CC7F7A367BD71FE96CD75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: bHR5lBXOVrdU9xWRnJiPj5pwiMc3NC246p2b+Xx0pNo=) 2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cc:b5:88:7c:c7:f7:a3:67:bd:71:fe:96:cd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=7d85c7c5b3b4996b81e0905c2d7cbf2df9babb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:90:f3:0d:f1:7a:32:ed:1c:c8:6d:4e:fd: b8:69:60:33:02:b3:e8:a6:bd:d5:17:b8:1b:bb:ae: b6:55:c3:b5:c5:c1:91:ff:6b:88:ca:d2:98:41:ba: 95:fb:f1:9b:ec:6b:0f:36:af:53:5b:05:ce:3f:64: 69:d3:4e:30:38:af:66:e6:df:ac:f8:83:fc:a4:03: e2:d3:30:17:04:81:1f:6e:d5:1a:87:f4:a8:fe:5e: 05:8f:c3:a9:c5:5b:c1:2e:78:4b:17:aa:04:27:4e: a0:2e:4e:5c:03:23:02:0c:96:16:9c:39:dd:e9:7b: d7:74:8e:0d:e3:fd:6e:03:96:ac:82:a5:49:db:73: 05:29:d8:04:16:d1:dc:88:d5:c2:29:f2:da:80:2c: 82:7d:5f:b2:c0:ce:c5:59:18:4a:cf:c5:9a:fb:6c: f3:a7:67:88:22:7e:19:40:22:05:ae:bd:79:db:6c: cb:d7:59:1f:36:08:90:81:bb:26:de:ba:fa:96:bf: 03:4f:9c:06:71:72:90:a2:1a:68:e3:6c:a6:cb:ad: 87:16:72:bc:9e:fa:10:e5:ce:0f:56:c8:eb:e0:c2: a3:d3:64:34:cf:b6:44:af:47:09:6e:62:b0:47:e4: f9:03:79:77:9d:48:6c:fc:a3:ab:8b:03:cb:59:a6: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:85:C7:C5:B3:B4:99:6B:81:E0:90:5C:2D:7C:BF:2D:F9:BA:BB:6F X509v3 Authority Key Identifier: keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b5:26:8f:d9:01:14:f6:24:66:4e:88:e4:38:24:35:44:e3: 08:6b:6f:09:a4:86:2a:77:0d:7c:d1:5d:92:d9:ea:ba:ea:43: cf:f5:cc:af:51:be:71:53:39:b5:0e:b6:31:33:0a:09:b1:c8: e7:e6:7d:6d:4d:60:e8:a3:33:9b:1a:1a:d6:b2:9c:2d:87:71: 47:2a:69:34:20:bc:15:d7:80:cc:84:06:0b:f1:0f:af:17:60: 86:1b:6b:b2:7f:de:85:43:aa:43:59:c5:f6:bf:58:1b:7a:c5: b8:d8:d0:d4:00:eb:8b:d0:1d:5f:6e:96:f8:9f:4a:a0:8b:ee: 1a:4c:a2:a8:a7:cf:73:3f:8a:f1:72:58:30:f8:04:e4:ab:17: c3:a8:fe:86:53:25:7b:b5:08:71:83:87:a1:db:ee:27:c0:30: 9b:dc:64:ab:b6:33:e6:90:4e:cd:c3:e2:35:38:9f:dc:23:ca: 75:26:4d:c4:63:0d:3e:76:fc:45:3d:a6:bc:cb:69:f6:17:c7: b9:63:e6:94:18:a8:28:e8:97:03:ee:8a:6d:8c:30:4d:ca:5a: 9e:21:05:97:f5:90:bc:84:06:9e:f0:3d:73:43:9f:84:2f:09: 1e:61:67:ef:6d:bf:ef:56:c6:cd:9f:df:84:0c:ae:17:ff:41: d2:cb:b5:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcy1iHzH96NnvXH+ls11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYzg5MzM3NWFkMTU1YjVmZmNlZDNjYmVlMjUzNWI4NjU5 ZmUzODkwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD Eyg3ZDg1YzdjNWIzYjQ5OTZiODFlMDkwNWMyZDdjYmYyZGY5YmFiYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E2Q8w3xejLtHMhtTv24aWAzArPo pr3VF7gbu662VcO1xcGR/2uIytKYQbqV+/Gb7GsPNq9TWwXOP2Rp004wOK9m5t+s +IP8pAPi0zAXBIEfbtUah/So/l4Fj8OpxVvBLnhLF6oEJ06gLk5cAyMCDJYWnDnd 6XvXdI4N4/1uA5asgqVJ23MFKdgEFtHciNXCKfLagCyCfV+ywM7FWRhKz8Wa+2zz p2eIIn4ZQCIFrr1522zL11kfNgiQgbsm3rr6lr8DT5wGcXKQohpo42ymy62HFnK8 nvoQ5c4PVsjr4MKj02Q0z7ZEr0cJbmKwR+T5A3l3nUhs/KOriwPLWabVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2Fx8WztJlrgeCQXC18vy35urtvMB8GA1UdIwQY MBaAFAvIkzda0VW1/87Ty+4lNbhln+OJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUt MGVkMDc4ZjRiY2FmLzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUtMGVkMDc4ZjRiY2Fm LzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7Umj9kB FPYkZk6I5DgkNUTjCGtvCaSGKncNfNFdktnquupDz/XMr1G+cVM5tQ62MTMKCbHI 5+Z9bU1g6KMzmxoa1rKcLYdxRyppNCC8FdeAzIQGC/EPrxdghhtrsn/ehUOqQ1nF 9r9YG3rFuNjQ1ADri9AdX26W+J9KoIvuGkyiqKfPcz+K8XJYMPgE5KsXw6j+hlMl e7UIcYOHodvuJ8Awm9xkq7Yz5pBOzcPiNTif3CPKdSZNxGMNPnb8RT2mvMtp9hfH uWPmlBioKOiXA+6KbYwwTcpaniEFl/WQvIQGnvA9c0OfhC8JHmFn722/71bGzZ/f hAyuF/9B0su1wA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:36 2025 by rpki-client