This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json) Hash identifier: vT/RYGU1ekc2a5EnG+UBJQVO110I1UwC0cQUohFN+5U= Subject key identifier: CE:AA:63:0F:C5:72:12:44:E9:B0:2E:21:15:CB:19:56:22:18:3F:54 Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Certificate serial: 019AF16457F9E51E02D7326E7815BCF63949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft Manifest number: 0828 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=) 2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=) 3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: b/KWPipyBFlBqoVt05vw7g94xCB1mS7QWc573KyIMOw=) 4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:57:f9:e5:1e:02:d7:32:6e:78:15:bc:f6:39:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=ceaa630fc5721244e9b02e2115cb195622183f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:84:ac:99:a4:c9:83:99:39:29:82:6d:c4: 3b:5e:ca:8d:0a:28:8c:28:56:84:f8:e6:b8:48:a4: 14:1a:b5:8d:cc:31:1f:94:1e:e8:16:fb:62:36:d0: c1:7e:00:db:7e:af:63:d8:04:46:b1:e2:b7:6d:a4: f7:e7:c5:09:bf:7e:29:87:6e:42:35:03:d1:3c:04: e9:78:e1:07:bf:38:89:ad:59:09:8d:fd:52:da:06: 74:11:37:dc:b3:f4:2d:21:65:ed:66:fa:bb:63:43: 45:55:b4:93:90:6a:39:d9:54:fc:c9:82:8c:52:fd: c4:54:fa:d3:4a:c0:41:ae:58:4c:d7:21:ce:5f:6a: c1:1e:25:e8:2a:26:12:d0:33:a4:48:d3:a6:fb:a8: 12:d3:fb:cd:ae:27:43:d8:f4:b4:63:5a:9b:00:a1: e7:c4:a9:48:5d:cf:4b:ad:5b:dd:df:df:3d:70:b6: fa:03:47:94:02:8e:4c:8e:bb:d7:2a:bd:41:e0:24: 64:2c:16:8d:1c:29:47:45:d1:d4:98:81:b5:89:af: 10:71:46:69:01:ea:88:48:96:8d:47:db:91:e2:d9: 5e:14:11:3f:5c:03:3c:08:ea:e1:6e:1a:8c:41:d2: a2:a2:54:f9:5b:dc:fe:0e:25:a1:9a:b0:63:cc:fd: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:63:0F:C5:72:12:44:E9:B0:2E:21:15:CB:19:56:22:18:3F:54 X509v3 Authority Key Identifier: keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:db:cc:6b:1d:79:40:d9:95:c1:f2:12:a5:0e:3b:d6:bd:00: af:66:2e:85:8e:79:62:e0:9c:07:2e:78:99:c2:9d:2b:6e:a0: e6:a8:12:96:d7:7d:81:41:98:64:2d:de:1e:54:84:2e:03:db: 26:79:ef:29:0b:54:ef:5b:73:29:e6:51:e2:38:43:da:38:da: a2:61:84:73:dd:28:f1:9b:85:d8:22:0d:0c:d1:37:f8:d5:b3: 71:e3:e7:2e:ee:59:11:70:12:0a:79:82:cf:56:33:0d:cf:f5: 44:e0:06:75:c5:91:66:9c:82:38:1b:13:9b:55:bd:78:ea:94: 87:cf:fd:a1:cb:b2:e5:7c:d8:97:a7:82:d7:c4:af:e3:3f:cd: db:74:53:a4:ab:0c:26:55:31:13:86:d4:c6:7a:d5:19:c9:59: 81:7a:35:d0:8c:ae:c0:d1:01:a4:3f:b3:7b:bc:da:52:ec:73: ed:e6:c6:48:d2:2b:3c:2a:9f:c3:a7:f4:6a:77:7a:92:f6:c6: e4:dd:8d:89:84:21:da:04:71:b2:c1:dd:3d:dc:f7:c1:fc:80: 35:3e:74:ad:03:24:15:9d:34:19:52:6f:10:4e:1d:f5:32:4c: 30:da:de:62:e5:64:e2:bc:db:e3:0f:63:a7:47:3a:00:93:c5: f6:da:e6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFf55R4C1zJueBW89jlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5 NThkZDAwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EyhjZWFhNjMwZmM1NzIxMjQ0ZTliMDJlMjExNWNiMTk1NjIyMTgzZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNaErJmkyYOZOSmCbcQ7XsqNCiiM KFaE+Oa4SKQUGrWNzDEflB7oFvtiNtDBfgDbfq9j2ARGseK3baT358UJv34ph25C NQPRPATpeOEHvziJrVkJjf1S2gZ0ETfcs/QtIWXtZvq7Y0NFVbSTkGo52VT8yYKM Uv3EVPrTSsBBrlhM1yHOX2rBHiXoKiYS0DOkSNOm+6gS0/vNridD2PS0Y1qbAKHn xKlIXc9LrVvd3989cLb6A0eUAo5MjrvXKr1B4CRkLBaNHClHRdHUmIG1ia8QcUZp AeqISJaNR9uR4tleFBE/XAM8COrhbhqMQdKiolT5W9z+DiWhmrBjzP0awQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6qYw/FchJE6bAuIRXLGVYiGD9UMB8GA1UdIwQY MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt NmZlMzQ4MDVhNmM2LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2 LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitvMax15 QNmVwfISpQ471r0Ar2YuhY55YuCcBy54mcKdK26g5qgSltd9gUGYZC3eHlSELgPb JnnvKQtU71tzKeZR4jhD2jjaomGEc90o8ZuF2CINDNE3+NWzcePnLu5ZEXASCnmC z1YzDc/1ROAGdcWRZpyCOBsTm1W9eOqUh8/9ocuy5XzYl6eC18Sv4z/N23RTpKsM JlUxE4bUxnrVGclZgXo10IyuwNEBpD+ze7zaUuxz7ebGSNIrPCqfw6f0and6kvbG 5N2NiYQh2gRxssHdPdz3wfyANT50rQMkFZ00GVJvEE4d9TJMMNreYuVk4rzb4w9j p0c6AJPF9trmRA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:59 2025 by rpki-client