This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json) Hash identifier: b6TNiipi/GxcTN+8DsZlZ6Wr+8g41loSPtZ05VxB92g= Subject key identifier: 39:55:8C:B8:43:B8:AA:33:6E:EE:CC:78:F6:69:60:45:6C:49:DC:CB Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47 Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47 Certificate serial: 019AF1D1E65707106FCE326A515CE785BFBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft Manifest number: 096D Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: 4Wg0GiqQtO8GdhFEVXsW79WAT4nBjpcOgS8jEYtqdxc=) 2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e6:57:07:10:6f:ce:32:6a:51:5c:e7:85:bf:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=39558cb843b8aa336eeecc78f66960456c49dccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:c7:8d:0e:81:fb:ce:a8:7b:d6:eb:50:81: 03:88:e0:1d:d7:c7:5a:1d:9b:0d:d6:99:2f:65:de: d0:bf:f5:f3:81:b0:a6:92:dd:42:31:ce:d3:aa:eb: 26:5a:5f:74:e8:17:b4:30:5f:cc:c6:69:84:7d:a7: 41:cf:5d:37:f6:db:53:d3:aa:2b:ea:14:2b:81:9a: 16:43:41:b6:b7:a0:11:18:53:16:33:e6:fb:f6:f7: ed:5c:81:63:99:6e:c9:93:10:95:a4:87:22:bd:fc: 60:b4:45:45:5c:f0:88:d8:92:f5:16:4f:43:0b:12: c9:00:ae:94:81:87:d0:3e:33:7c:07:a5:a2:f3:cc: fd:f2:14:aa:87:c8:b8:25:e7:14:1b:ba:91:59:8c: e7:0e:88:6b:7f:69:5c:15:ae:f0:f2:28:45:8c:de: 59:2a:52:47:de:8d:a2:01:0f:03:62:13:31:f3:7a: c8:c5:f6:26:1f:88:0f:73:c5:37:0e:e2:0b:76:c2: f2:da:5d:e9:54:d3:cf:3e:f5:66:c6:ce:8b:f6:47: c7:4e:0a:77:bd:71:82:cc:eb:01:42:5a:ac:aa:ad: 5d:ae:84:56:1a:09:e7:7e:4d:48:4c:e8:3e:e6:73: ac:0d:ff:35:17:f2:4f:91:ee:f6:ca:f3:8b:2a:47: 1b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:8C:B8:43:B8:AA:33:6E:EE:CC:78:F6:69:60:45:6C:49:DC:CB X509v3 Authority Key Identifier: keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:21:d5:94:d9:3b:a6:dc:37:85:c9:4e:26:12:17:30:19:70: dc:57:6b:bf:a3:a8:07:89:91:9e:e9:94:5b:bd:8e:44:04:39: 24:ef:b9:0b:95:51:85:60:3f:f1:a9:e8:fe:ea:bd:e3:9d:aa: a2:ed:ca:85:31:1a:ba:a3:05:c8:38:d7:50:e9:68:ef:e9:4e: 1c:52:6f:40:ff:cf:73:f6:7f:0d:42:8b:84:5e:4c:ee:84:1c: 00:75:a2:82:15:ce:20:7f:c1:ed:64:e7:dd:c3:68:6c:da:36: b5:b0:9f:56:c2:e5:4c:d8:4d:28:41:47:2a:11:e6:cb:33:51: 15:d5:96:66:a2:8e:38:31:9b:37:d9:d4:17:d7:b5:65:aa:e6: 76:ca:0f:50:85:22:19:c9:d6:67:91:4d:27:9a:b8:f3:4b:f9: fe:8f:58:52:0b:20:17:d5:b1:54:39:51:9c:28:ad:a3:03:dc: fd:18:2f:02:54:7d:4b:46:15:e5:37:cc:ab:43:9b:18:4b:6e: 1b:f0:db:f9:cc:52:da:a0:8f:f1:83:83:43:1a:5c:c1:c6:84: ff:65:88:83:4b:fc:55:e7:fa:0f:b6:22:2a:cb:bb:ac:8c:b4: 86:1c:d6:e0:8f:40:76:b6:61:0b:bc:53:a5:3b:e7:71:1c:35: 44:11:4e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eZXBxBvzjJqUVznhb+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOGEwOGViOGZhN2JlZTZhMzE4M2UzMmRlNTFhMmYzY2Nk NGFlNDcwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EygzOTU1OGNiODQzYjhhYTMzNmVlZWNjNzhmNjY5NjA0NTZjNDlkY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVbHjQ6B+86oe9brUIEDiOAd18da HZsN1pkvZd7Qv/XzgbCmkt1CMc7TqusmWl906Be0MF/MxmmEfadBz1039ttT06or 6hQrgZoWQ0G2t6ARGFMWM+b79vftXIFjmW7JkxCVpIcivfxgtEVFXPCI2JL1Fk9D CxLJAK6UgYfQPjN8B6Wi88z98hSqh8i4JecUG7qRWYznDohrf2lcFa7w8ihFjN5Z KlJH3o2iAQ8DYhMx83rIxfYmH4gPc8U3DuILdsLy2l3pVNPPPvVmxs6L9kfHTgp3 vXGCzOsBQlqsqq1droRWGgnnfk1ITOg+5nOsDf81F/JPke72yvOLKkcbKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlVjLhDuKozbu7MePZpYEVsSdzLMB8GA1UdIwQY MBaAFPCKCOuPp77moxg+Mt5RovPM1K5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMt YjFlYzI4YzY3Yzc0LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hYjExYzktMjVkNS00M2ZhLTliZDMtYjFlYzI4YzY3Yzc0 LzEvOElvSTY0LW52dWFqR0Q0eTNsR2k4OHpVcmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSHVlNk7 ptw3hclOJhIXMBlw3Fdrv6OoB4mRnumUW72ORAQ5JO+5C5VRhWA/8ano/uq9452q ou3KhTEauqMFyDjXUOlo7+lOHFJvQP/Pc/Z/DUKLhF5M7oQcAHWighXOIH/B7WTn 3cNobNo2tbCfVsLlTNhNKEFHKhHmyzNRFdWWZqKOODGbN9nUF9e1ZarmdsoPUIUi GcnWZ5FNJ5q480v5/o9YUgsgF9WxVDlRnCitowPc/RgvAlR9S0YV5TfMq0ObGEtu G/Db+cxS2qCP8YODQxpcwcaE/2WIg0v8Vef6D7YiKsu7rIy0hhzW4I9AdrZhC7xT pTvncRw1RBFOLA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:00 2025 by rpki-client