This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json) Hash identifier: GKKDdMWdlNbSK2HTzmoQ/kcDWSD5viZ2BkDpIZuLWEU= Subject key identifier: D7:B3:20:9F:20:DE:AB:73:B3:C0:B2:AC:EF:D2:D1:D4:F3:C8:5A:DC Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Certificate serial: 019B4F606765166B2F0B763B6E09B9846AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft Manifest number: 01FC Signing time: Wed 24 Dec 2025 08:01:16 +0000 Manifest this update: Wed 24 Dec 2025 08:01:16 +0000 Manifest next update: Thu 25 Dec 2025 08:01:16 +0000 Files and hashes: 1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=) 2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: hMLPTFiWxkLGZg2EL44ZqF8Aqqaad0SFFr3UokUtpqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:67:65:16:6b:2f:0b:76:3b:6e:09:b9:84:6a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Validity Not Before: Dec 24 08:01:16 2025 GMT Not After : Dec 25 08:01:16 2025 GMT Subject: CN=d7b3209f20deab73b3c0b2acefd2d1d4f3c85adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:cc:76:ab:c1:d7:3a:f3:52:1b:f2:e1:50: 64:6d:6b:a5:4c:d8:57:b5:23:ab:4c:f2:b2:9e:59: 2a:a1:3a:9a:1e:d2:87:ee:ba:67:cd:93:a8:1f:0c: 17:4a:cc:f7:c7:b2:b3:1c:f6:c7:9a:13:de:59:29: a8:ea:b1:ec:c5:4a:9b:28:29:3f:8b:16:05:7d:40: 99:7c:ba:25:79:3f:db:16:14:9d:27:f1:5d:bc:20: c7:94:b6:8b:98:a5:9b:dd:9a:8e:1d:27:16:5e:12: b3:7d:25:87:bd:ed:5f:c4:81:98:73:50:b7:b6:f9: 4e:fc:2a:3b:f8:67:bc:a1:9f:c2:9b:44:57:3d:bd: e6:09:87:3e:d9:d1:dd:cf:64:3d:12:3d:68:ba:6b: ee:ab:99:0d:7f:56:f0:ba:94:87:05:44:b7:4a:67: 9f:f4:c9:55:6f:16:fb:d9:a6:41:ca:71:b0:07:98: 69:9d:34:4b:b1:ce:ed:cc:d7:11:e7:41:ea:ab:ff: 17:0f:0e:01:f8:06:1a:ac:1b:35:3a:f4:e6:60:b3: b2:44:1a:b5:85:ed:51:56:ae:8c:a4:27:44:0c:c0: ba:6e:7b:1e:f7:bb:4e:04:18:d6:e1:21:a6:59:59: ef:c5:62:11:c7:e8:ec:62:e5:16:4d:2b:9b:f2:cf: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B3:20:9F:20:DE:AB:73:B3:C0:B2:AC:EF:D2:D1:D4:F3:C8:5A:DC X509v3 Authority Key Identifier: keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:86:55:d9:2b:e0:2e:2b:9a:7b:61:92:7f:06:18:9f:ab:90: a2:da:05:39:8b:cc:57:ba:b6:75:2e:c9:4f:a2:e1:6d:49:f2: 7c:fc:3e:f6:fc:6e:99:4d:3d:56:02:c3:30:14:4a:1e:93:df: ec:a2:9e:1f:82:10:05:e3:59:c6:7d:65:16:d6:a1:40:35:74: 7b:27:81:bf:d4:d1:d2:69:01:28:26:ac:60:c9:ae:3b:44:1d: de:f7:3b:11:f4:ac:48:7f:b9:d2:c6:5a:42:11:b3:a2:73:5a: 09:e7:d5:9b:bb:0e:26:c3:55:fe:7c:93:cc:58:b6:cb:c5:75: f5:05:a7:98:1f:f1:6b:72:c0:02:1f:14:e5:e5:50:df:26:43: a2:1f:2e:cc:1c:33:cb:67:74:b9:57:02:c3:17:51:34:2a:90: 60:06:df:2b:56:4b:3a:b7:68:e4:be:f8:0c:e8:ba:cc:64:4a: 85:00:b1:16:a5:31:4c:c3:b1:74:b3:80:8a:fb:6f:56:c5:3a: 78:1f:8b:d2:bd:96:65:b3:d5:1a:ce:e3:65:bf:0f:42:cd:b3: 61:9b:35:99:43:6a:50:4d:6e:98:58:18:3e:34:d9:90:19:5f: 72:0a:d3:63:93:01:c8:67:c4:44:2a:46:f6:05:f4:4e:74:df: 8b:7e:e1:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYGdlFmsvC3Y7bgm5hGrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmYzZmYzYzBhMWZmYjNhZjIwZjViOTVlOGNiNjRjODgw NDNmMzkwHhcNMjUxMjI0MDgwMTE2WhcNMjUxMjI1MDgwMTE2WjAzMTEwLwYDVQQD EyhkN2IzMjA5ZjIwZGVhYjczYjNjMGIyYWNlZmQyZDFkNGYzYzg1YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6rMdqvB1zrzUhvy4VBkbWulTNhX tSOrTPKynlkqoTqaHtKH7rpnzZOoHwwXSsz3x7KzHPbHmhPeWSmo6rHsxUqbKCk/ ixYFfUCZfLoleT/bFhSdJ/FdvCDHlLaLmKWb3ZqOHScWXhKzfSWHve1fxIGYc1C3 tvlO/Co7+Ge8oZ/Cm0RXPb3mCYc+2dHdz2Q9Ej1oumvuq5kNf1bwupSHBUS3Smef 9MlVbxb72aZBynGwB5hpnTRLsc7tzNcR50Hqq/8XDw4B+AYarBs1OvTmYLOyRBq1 he1RVq6MpCdEDMC6bnse97tOBBjW4SGmWVnvxWIRx+jsYuUWTSub8s96zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNezIJ8g3qtzs8CyrO/S0dTzyFrcMB8GA1UdIwQY MBaAFIkvP/PAof+zryD1uV6MtkyIBD85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQt ZjkyMWRiNzViZGY5LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQtZjkyMWRiNzViZGY5 LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIZV2Svg Liuae2GSfwYYn6uQotoFOYvMV7q2dS7JT6LhbUnyfPw+9vxumU09VgLDMBRKHpPf 7KKeH4IQBeNZxn1lFtahQDV0eyeBv9TR0mkBKCasYMmuO0Qd3vc7EfSsSH+50sZa QhGzonNaCefVm7sOJsNV/nyTzFi2y8V19QWnmB/xa3LAAh8U5eVQ3yZDoh8uzBwz y2d0uVcCwxdRNCqQYAbfK1ZLOrdo5L74DOi6zGRKhQCxFqUxTMOxdLOAivtvVsU6 eB+L0r2WZbPVGs7jZb8PQs2zYZs1mUNqUE1umFgYPjTZkBlfcgrTY5MByGfERCpG 9gX0TnTfi37hlg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:52:27 2025 by rpki-client