This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json) Hash identifier: EUWTbOCGdRQKLCOtNNNabiQydioUaGob7+1GkVXINE8= Subject key identifier: C2:DE:C4:7B:7D:41:9A:D2:CF:E1:A6:27:49:FD:B0:4B:DE:A1:EA:3A Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Certificate serial: 019B19BC7A19701D5B7C8CD42B7934B15736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft Manifest number: 1136 Signing time: Sat 13 Dec 2025 22:02:20 +0000 Manifest this update: Sat 13 Dec 2025 22:02:20 +0000 Manifest next update: Sun 14 Dec 2025 22:02:20 +0000 Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: V8D79IIJH+HtO95BXDkrIfzYGpd4EoOhOiP18IZdn2k=) 2: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (hash: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:7a:19:70:1d:5b:7c:8c:d4:2b:79:34:b1:57:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Validity Not Before: Dec 13 22:02:20 2025 GMT Not After : Dec 14 22:02:20 2025 GMT Subject: CN=c2dec47b7d419ad2cfe1a62749fdb04bdea1ea3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:5c:74:30:25:67:6c:eb:74:b5:9a:4a:54: 09:4e:40:f5:b4:4e:98:01:64:e1:56:45:04:83:1e: 2f:36:2e:54:7f:e9:b4:48:15:e8:9d:7c:fc:de:62: 2c:1b:c8:56:e1:ad:bf:b9:b4:c4:8c:cc:3c:8d:00: be:27:72:ab:92:fd:8e:f2:e5:ef:f1:27:ad:b2:ed: 37:48:d1:dc:cd:d6:f4:18:59:58:82:39:8a:ea:1e: f4:29:6d:37:ac:74:e0:d0:70:74:e6:08:0d:9e:1d: 67:b0:ad:46:6e:ad:b0:46:40:10:1b:1e:71:cd:df: 08:2e:67:20:fc:d2:fe:ca:73:68:98:19:59:3b:48: fd:be:7a:00:29:93:8f:c6:ad:45:0e:41:59:d1:ea: 6a:d0:60:95:08:ba:73:e7:79:61:3e:54:f9:b6:2f: 5d:4f:b7:4b:7d:9f:6b:2b:05:ff:54:d7:28:94:aa: 03:6a:12:d8:4e:3a:fa:9d:7e:af:f4:61:3b:da:e2: 6b:2e:f6:7e:95:a0:4c:b3:cf:5f:35:ae:ab:78:d4: d1:96:e0:31:cf:36:12:65:8f:af:5f:cf:34:53:f3: 06:0f:e4:bc:cb:d5:74:6d:a2:88:0f:23:63:cb:f2: fc:f6:af:10:68:43:36:25:99:03:e9:2a:2d:4c:ff: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DE:C4:7B:7D:41:9A:D2:CF:E1:A6:27:49:FD:B0:4B:DE:A1:EA:3A X509v3 Authority Key Identifier: keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:13:97:2e:be:0b:cb:4a:3c:32:a1:57:44:2d:f5:0f:4c:f1: 0e:2d:9b:54:47:4e:47:d6:bb:f4:98:a6:6a:68:cc:86:da:da: 45:a2:8e:2e:f8:3a:90:2d:52:98:4d:0d:3e:6f:9d:a3:b2:b7: 08:f2:91:c6:86:a6:6d:6c:46:52:fe:71:d0:84:40:76:ee:38: cd:1d:73:56:82:5d:5a:c3:76:f1:af:c3:b0:aa:01:50:c6:e2: 5b:51:af:1d:55:a3:75:ca:62:91:97:2f:92:78:4a:a3:1b:34: 87:5f:69:2f:6e:c7:fb:68:0c:3e:3e:9c:80:f6:15:44:b7:d4: 3c:18:5d:54:c5:f5:4c:52:5a:69:11:63:e1:af:3a:06:a5:0e: d2:eb:53:12:da:17:16:53:9c:51:d0:bb:89:fd:af:83:7f:d5: 0e:17:02:92:2c:e0:e8:a8:df:e8:9f:b3:48:1d:2b:ce:d7:44: 26:c5:6f:18:1b:dd:32:0b:93:71:28:c0:87:fc:78:d0:2c:28: a5:24:4e:aa:15:c0:bc:ec:6f:09:fd:be:24:1d:74:2d:f3:83: 3c:4e:9d:96:e9:7f:10:57:1e:f0:d9:8f:aa:4b:29:be:31:75: c8:a1:4e:5b:10:13:41:49:1f:b2:95:d4:c4:bb:ee:ec:a8:07: 28:66:66:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvHoZcB1bfIzUK3k0sVc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzhiMTBhMzhmODFjNjRlMjAxMjA3YmZjMzU0NGMyOTcy YWY1ZjMwHhcNMjUxMjEzMjIwMjIwWhcNMjUxMjE0MjIwMjIwWjAzMTEwLwYDVQQD EyhjMmRlYzQ3YjdkNDE5YWQyY2ZlMWE2Mjc0OWZkYjA0YmRlYTFlYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp1cdDAlZ2zrdLWaSlQJTkD1tE6Y AWThVkUEgx4vNi5Uf+m0SBXonXz83mIsG8hW4a2/ubTEjMw8jQC+J3Krkv2O8uXv 8Setsu03SNHczdb0GFlYgjmK6h70KW03rHTg0HB05ggNnh1nsK1Gbq2wRkAQGx5x zd8ILmcg/NL+ynNomBlZO0j9vnoAKZOPxq1FDkFZ0epq0GCVCLpz53lhPlT5ti9d T7dLfZ9rKwX/VNcolKoDahLYTjr6nX6v9GE72uJrLvZ+laBMs89fNa6reNTRluAx zzYSZY+vX880U/MGD+S8y9V0baKIDyNjy/L89q8QaEM2JZkD6SotTP9fyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLexHt9QZrSz+GmJ0n9sEveoeo6MB8GA1UdIwQY MBaAFNPIsQo4+Bxk4gEge/w1RMKXKvXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEt MzdhYTM1ZTY5ZGMxLzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEtMzdhYTM1ZTY5ZGMx LzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxOXLr4L y0o8MqFXRC31D0zxDi2bVEdOR9a79JimamjMhtraRaKOLvg6kC1SmE0NPm+do7K3 CPKRxoambWxGUv5x0IRAdu44zR1zVoJdWsN28a/DsKoBUMbiW1GvHVWjdcpikZcv knhKoxs0h19pL27H+2gMPj6cgPYVRLfUPBhdVMX1TFJaaRFj4a86BqUO0utTEtoX FlOcUdC7if2vg3/VDhcCkizg6Kjf6J+zSB0rztdEJsVvGBvdMguTcSjAh/x40Cwo pSROqhXAvOxvCf2+JB10LfODPE6dlul/EFce8NmPqkspvjF1yKFOWxATQUkfspXU xLvu7KgHKGZmDQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:39:48 2025 by rpki-client