This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json) Hash identifier: L63f4RPe2HKfRvzmVqob8D81A8qgDeMvsSVlUMJFoDo= Subject key identifier: 28:AD:58:F3:DA:46:FF:FD:F4:62:E2:3E:0C:C5:2B:BB:2A:D2:A3:39 Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Certificate serial: 019B2B5394B298F4120B26335F554F40CB50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft Manifest number: 0846 Signing time: Wed 17 Dec 2025 08:00:56 +0000 Manifest this update: Wed 17 Dec 2025 08:00:56 +0000 Manifest next update: Thu 18 Dec 2025 08:00:56 +0000 Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=) 2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=) 3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: mPDkzlaTPTI7RQZwUpHAYPvUVrrriq++uJjkSVSCECo=) 4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:94:b2:98:f4:12:0b:26:33:5f:55:4f:40:cb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Validity Not Before: Dec 17 08:00:56 2025 GMT Not After : Dec 18 08:00:56 2025 GMT Subject: CN=28ad58f3da46fffdf462e23e0cc52bbb2ad2a339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:db:19:8d:5e:51:fb:d3:a2:00:9a:aa:0c: ab:ed:ac:de:92:4e:95:57:59:43:30:9e:22:81:3c: c3:ca:57:97:c7:83:c2:93:0f:c7:8a:d7:dd:03:4d: 2f:74:ec:f4:9f:10:11:f8:a4:b5:38:95:1b:01:f6: 38:65:c0:9f:73:01:4a:ae:7d:08:6b:ff:49:30:d9: a6:33:23:38:40:0d:c0:c6:f3:12:44:46:0f:7d:78: 34:b9:f4:4a:18:be:ef:56:b3:a9:6e:45:ae:00:67: ec:8f:d1:0b:03:d7:f0:2c:a7:af:4f:a4:e9:52:58: 9e:26:29:07:e4:2e:d5:e2:cf:4e:36:21:de:f8:67: 63:ab:1b:44:02:e8:33:62:ff:82:ea:0d:9a:79:bc: 2d:0a:6d:85:92:c6:16:2c:f1:32:d2:ac:d4:72:5a: ed:df:6d:a3:ea:c2:87:68:a5:31:79:bf:b5:41:7a: 90:52:22:c0:04:c5:98:6f:04:d2:3d:17:ba:10:c4: d4:15:e9:93:28:7a:12:c3:f9:74:3c:f5:df:9b:c4: 98:9f:0c:c3:61:69:e9:0c:b7:23:df:8c:ca:06:d2: 8e:cb:82:53:c9:62:09:de:ee:56:e2:14:ee:ae:7e: 5b:76:29:5f:99:63:b1:c0:46:55:16:6c:9b:f4:68: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AD:58:F3:DA:46:FF:FD:F4:62:E2:3E:0C:C5:2B:BB:2A:D2:A3:39 X509v3 Authority Key Identifier: keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:79:bb:b6:08:26:4d:d5:13:79:c7:dc:bf:5f:7b:50:37:01: 20:d0:0e:30:72:ea:31:12:5e:af:ad:d8:a0:4b:0f:cf:3a:b4: c4:b9:2b:aa:91:e5:3f:22:6a:08:da:7a:82:b5:e1:c5:e0:20: f8:2b:96:7b:07:98:58:75:94:ff:44:13:67:b1:7b:d7:94:b6: d2:59:62:96:11:89:28:53:38:6e:5f:64:b0:77:99:5f:f3:43: 86:8e:79:f5:0c:3c:8e:0a:1d:50:16:82:89:a9:27:8e:40:f5: 90:39:04:38:e4:7d:0b:56:fb:c8:5b:08:74:1e:d1:b8:94:19: f3:b7:ba:5c:9f:82:4e:ff:79:23:ef:58:eb:aa:19:9a:cd:78: 6d:7e:a3:26:50:ce:43:38:50:ae:ea:4c:7c:b0:b7:ff:5f:cf: ab:82:65:ea:63:49:6c:c4:dd:81:b1:3e:fd:d4:8b:a0:5a:8f: 42:74:dd:57:2d:e5:50:c5:29:85:00:1d:ae:dd:13:f2:f8:54: 0f:83:1d:da:ca:59:e8:11:d1:c4:8c:01:db:a3:47:30:ad:bc: 8e:a0:70:8c:eb:f0:66:41:a2:10:9d:60:24:ba:56:21:01:7b: d5:bb:4c:fb:7b:4b:aa:d4:c4:08:4d:9b:9d:a8:40:69:0b:95: 4e:3b:43:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU5SymPQSCyYzX1VPQMtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5 NThkZDAwHhcNMjUxMjE3MDgwMDU2WhcNMjUxMjE4MDgwMDU2WjAzMTEwLwYDVQQD EygyOGFkNThmM2RhNDZmZmZkZjQ2MmUyM2UwY2M1MmJiYjJhZDJhMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtLbGY1eUfvTogCaqgyr7azekk6V V1lDMJ4igTzDyleXx4PCkw/HitfdA00vdOz0nxAR+KS1OJUbAfY4ZcCfcwFKrn0I a/9JMNmmMyM4QA3AxvMSREYPfXg0ufRKGL7vVrOpbkWuAGfsj9ELA9fwLKevT6Tp UlieJikH5C7V4s9ONiHe+GdjqxtEAugzYv+C6g2aebwtCm2FksYWLPEy0qzUclrt 322j6sKHaKUxeb+1QXqQUiLABMWYbwTSPRe6EMTUFemTKHoSw/l0PPXfm8SYnwzD YWnpDLcj34zKBtKOy4JTyWIJ3u5W4hTurn5bdilfmWOxwEZVFmyb9Giz+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCitWPPaRv/99GLiPgzFK7sq0qM5MB8GA1UdIwQY MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt NmZlMzQ4MDVhNmM2LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2 LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXm7tggm TdUTecfcv197UDcBINAOMHLqMRJer63YoEsPzzq0xLkrqpHlPyJqCNp6grXhxeAg +CuWeweYWHWU/0QTZ7F715S20llilhGJKFM4bl9ksHeZX/NDho559Qw8jgodUBaC iaknjkD1kDkEOOR9C1b7yFsIdB7RuJQZ87e6XJ+CTv95I+9Y66oZms14bX6jJlDO QzhQrupMfLC3/1/Pq4Jl6mNJbMTdgbE+/dSLoFqPQnTdVy3lUMUphQAdrt0T8vhU D4Md2spZ6BHRxIwB26NHMK28jqBwjOvwZkGiEJ1gJLpWIQF71btM+3tLqtTECE2b nahAaQuVTjtDAg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:36 2025 by rpki-client