This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json) Hash identifier: FSsqfqy5OVpgrZVDGWBXzFGlJbTblQchqMQwiR3WYeE= Subject key identifier: 76:75:32:56:0B:52:F6:8A:89:79:28:3A:5A:1C:20:19:CD:BC:23:2E Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019B0558FC84311AA016F1A6E50F2368FA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft Manifest number: 1076 Signing time: Tue 09 Dec 2025 23:01:16 +0000 Manifest this update: Tue 09 Dec 2025 23:01:16 +0000 Manifest next update: Wed 10 Dec 2025 23:01:16 +0000 Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: K7kPXifIIY+v0UZiRUVUNU2+xh3avcrxIqD3Q5/xvtA=) 2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=) 3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=) 4: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=) 5: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=) 6: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=) 7: xIeAXdfn38yQDbyF7veotWoFZu0.roa (hash: PRijsI9u95zDDy86ofoQ6KFQuR5A71lxwPw9qkFWPs8=) 8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:58:fc:84:31:1a:a0:16:f1:a6:e5:0f:23:68:fa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Dec 9 23:01:16 2025 GMT Not After : Dec 10 23:01:16 2025 GMT Subject: CN=767532560b52f68a8979283a5a1c2019cdbc232e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:1a:4a:8b:c5:28:d8:5b:08:39:c4:44:23: f0:72:77:04:2e:46:ca:af:30:41:5b:c8:1a:f2:a7: c0:4d:1f:24:be:bc:80:ea:25:ea:84:a2:c1:22:62: 2e:72:58:cf:c6:7a:cb:fc:ee:35:6c:fd:65:c1:ef: 62:16:f2:0f:36:e0:e7:25:3d:c0:48:b1:db:32:e8: 9d:7a:4a:f0:1a:43:b8:61:25:6f:d2:3b:26:a9:95: 13:6f:9c:fc:24:17:18:25:69:2c:cc:80:83:81:ab: 2a:7d:81:23:86:df:0a:c1:28:b8:02:f7:64:8a:0a: 53:e0:4b:8c:78:43:d7:18:91:6d:c1:51:5d:fc:57: c8:e7:70:b2:d3:a5:5e:a8:d5:a6:e5:1e:a8:3f:d8: 7f:d2:76:c1:a6:95:b3:30:e2:d5:64:d6:48:24:96: e7:9d:ac:8c:93:06:a9:8b:00:86:1e:2b:06:8d:c4: ef:a3:d1:e3:37:ee:56:0a:3e:26:98:1c:37:2e:2e: 11:23:2e:23:0d:42:9d:59:e9:d3:66:63:72:76:b0: a1:fe:da:18:db:4a:b7:8c:e7:35:f9:dd:43:19:7e: 59:fc:5e:b9:08:24:5f:39:ac:6e:6d:c0:fc:f1:44: ce:18:61:29:bc:34:41:55:0b:a4:bb:64:78:61:46: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:75:32:56:0B:52:F6:8A:89:79:28:3A:5A:1C:20:19:CD:BC:23:2E X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:0e:dd:a2:17:3a:a7:19:69:f9:d4:ae:8a:4b:5f:77:0d: 70:cb:f6:c7:ef:be:b5:8d:66:0f:b5:71:42:f6:3a:8d:fa:c7: fe:69:db:48:f2:33:79:d4:56:80:e6:72:4d:1b:5f:98:22:8d: 77:87:58:fa:43:fe:e5:2e:4e:9b:25:97:b9:27:90:49:30:a0: 2d:1d:f0:a8:ad:b0:07:58:08:ee:30:b4:96:99:cf:bf:49:26: d2:8c:54:74:67:8e:fe:84:01:94:01:f7:b7:4f:89:37:8d:6f: 64:67:a4:5e:b1:ef:e5:8a:68:c6:e2:d8:78:ab:77:6a:a1:82: 26:93:06:57:75:a1:99:82:78:37:13:b6:4d:79:df:9c:71:cb: 6a:df:22:c4:2c:0d:14:9c:56:9b:f4:ba:4b:06:27:b5:88:ad: 7b:56:48:b3:79:fe:79:d6:08:0f:56:4e:71:9b:4c:1d:cc:ef: 92:21:13:be:87:bb:5c:31:08:5f:bd:c7:d1:6b:94:48:8e:2a: 4d:9d:bf:0c:4a:b9:91:66:6a:72:c3:89:de:ec:1c:37:34:25: 43:ad:27:ac:88:fc:ff:67:f1:eb:1e:66:d0:ae:19:98:ad:29: 32:66:13:1a:44:ca:a0:f5:9f:b3:43:c0:58:0a:1e:3b:3f:fc: 0d:b4:51:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFWPyEMRqgFvGm5Q8jaPqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjUxMjA5MjMwMTE2WhcNMjUxMjEwMjMwMTE2WjAzMTEwLwYDVQQD Eyg3Njc1MzI1NjBiNTJmNjhhODk3OTI4M2E1YTFjMjAxOWNkYmMyMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEYaSovFKNhbCDnERCPwcncELkbK rzBBW8ga8qfATR8kvryA6iXqhKLBImIucljPxnrL/O41bP1lwe9iFvIPNuDnJT3A SLHbMuidekrwGkO4YSVv0jsmqZUTb5z8JBcYJWkszICDgasqfYEjht8KwSi4Avdk igpT4EuMeEPXGJFtwVFd/FfI53Cy06VeqNWm5R6oP9h/0nbBppWzMOLVZNZIJJbn nayMkwapiwCGHisGjcTvo9HjN+5WCj4mmBw3Li4RIy4jDUKdWenTZmNydrCh/toY 20q3jOc1+d1DGX5Z/F65CCRfOaxubcD88UTOGGEpvDRBVQuku2R4YUbP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ1MlYLUvaKiXkoOlocIBnNvCMuMB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/cO3aIX OqcZafnUropLX3cNcMv2x+++tY1mD7VxQvY6jfrH/mnbSPIzedRWgOZyTRtfmCKN d4dY+kP+5S5OmyWXuSeQSTCgLR3wqK2wB1gI7jC0lpnPv0km0oxUdGeO/oQBlAH3 t0+JN41vZGekXrHv5YpoxuLYeKt3aqGCJpMGV3WhmYJ4NxO2TXnfnHHLat8ixCwN FJxWm/S6SwYntYite1ZIs3n+edYID1ZOcZtMHczvkiETvoe7XDEIX73H0WuUSI4q TZ2/DEq5kWZqcsOJ3uwcNzQlQ60nrIj8/2fx6x5m0K4ZmK0pMmYTGkTKoPWfs0PA WAoeOz/8DbRR8w== -----END CERTIFICATE-----Generated at Wed Dec 10 07:54:13 2025 by rpki-client