This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json) Hash identifier: wVFdKDJlLPdgK9ZFq2hECrrrNP68XPjMf4fbwe/SOX4= Subject key identifier: 19:50:0D:64:4B:19:D6:29:A3:8E:8B:7D:4A:46:A6:5A:22:83:FE:B7 Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Certificate serial: 019B19F1D1FE54CFFA5BAA46E3DB68FE79D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft Manifest number: 083D Signing time: Sat 13 Dec 2025 23:00:36 +0000 Manifest this update: Sat 13 Dec 2025 23:00:36 +0000 Manifest next update: Sun 14 Dec 2025 23:00:36 +0000 Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=) 2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=) 3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: DNqIjGWKVWpp6qtXV5dRCyaZyfqq0QthEUP5zQRmEA4=) 4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:d1:fe:54:cf:fa:5b:aa:46:e3:db:68:fe:79:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Validity Not Before: Dec 13 23:00:36 2025 GMT Not After : Dec 14 23:00:36 2025 GMT Subject: CN=19500d644b19d629a38e8b7d4a46a65a2283feb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:04:ca:e6:41:e5:33:6a:71:b0:95:50:9b: c5:72:b8:60:bd:39:e9:d3:ba:74:68:41:f4:7e:5c: 58:ce:6d:57:40:f7:33:67:c9:81:69:d1:00:bd:25: 15:fa:37:bb:78:e1:78:64:25:24:4f:30:91:ef:bc: a1:77:65:a0:73:d9:07:5e:3f:37:46:c7:39:bc:83: 8e:a1:ff:b7:c8:a5:10:05:a7:21:ea:69:76:ac:23: c1:fd:ff:7d:e1:10:08:2b:56:a4:18:2b:39:c6:ca: 15:b7:bc:bd:9b:b8:03:ea:c5:2f:c4:f9:bb:c6:3a: 91:67:9b:94:d8:2b:e4:0f:1d:cc:85:26:d7:55:a3: 0e:28:30:68:c5:af:16:2c:db:8e:d5:c2:10:fa:e9: da:74:bf:73:00:78:5a:93:d5:76:3e:7f:a1:cc:97: dc:3d:43:13:95:5d:4f:e4:9d:ab:ee:aa:14:de:aa: 65:88:c6:86:17:9a:ea:2a:ed:f9:a1:c3:39:6c:d8: 72:a0:bc:56:15:45:5d:d5:76:65:7e:16:c8:d3:fe: 5b:03:fc:43:1e:75:77:39:23:a9:68:01:b2:53:50: c1:7f:dd:29:57:dd:95:6b:ef:0d:b7:97:38:07:11: d2:a2:1e:79:bc:ae:8c:c6:58:7c:a2:6b:70:62:d4: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:50:0D:64:4B:19:D6:29:A3:8E:8B:7D:4A:46:A6:5A:22:83:FE:B7 X509v3 Authority Key Identifier: keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f0:2c:92:17:2d:17:7b:80:78:90:ce:99:d3:d6:37:5c:81: 69:64:3d:e9:57:2c:78:0a:40:4e:27:e5:b9:12:23:b2:e9:92: 56:94:a5:ae:5e:6f:6f:14:8b:2e:af:05:ee:2d:f8:a8:11:12: 0b:7c:a7:65:e9:13:1b:09:98:31:fd:b7:88:5e:e7:08:d8:4f: e9:31:cc:b1:16:89:6e:40:40:13:17:2a:29:4e:9c:1d:b3:72: 53:58:10:f6:19:a7:ab:b6:a2:da:48:e7:7f:22:bd:7d:53:8e: 80:e7:1b:a9:04:e7:a0:68:b4:cb:16:d1:a1:e6:c0:8e:93:d8: 84:87:9c:71:c4:84:7c:fc:85:ae:a0:82:43:71:66:2a:86:ff: 1b:1a:57:af:c1:6e:dc:e9:ef:14:1e:2c:9b:aa:60:9d:1e:14: 9d:ce:bc:65:ca:b5:95:66:04:73:60:e8:57:94:98:03:df:f2: 9c:2b:8a:90:9b:56:43:d0:7f:65:65:9c:d8:4f:4f:7d:c5:54: 72:e6:e0:bd:d0:8c:ff:9b:66:93:53:a2:7c:04:46:f0:33:88: 60:e3:aa:88:63:95:d0:a2:9e:ab:bc:6d:1b:78:e8:e4:a1:5a: 6e:1b:06:a1:46:d7:82:89:bd:4a:01:9c:1d:da:81:6d:11:68: 9e:9c:0f:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8dH+VM/6W6pG49to/nnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5 NThkZDAwHhcNMjUxMjEzMjMwMDM2WhcNMjUxMjE0MjMwMDM2WjAzMTEwLwYDVQQD EygxOTUwMGQ2NDRiMTlkNjI5YTM4ZThiN2Q0YTQ2YTY1YTIyODNmZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswUEyuZB5TNqcbCVUJvFcrhgvTnp 07p0aEH0flxYzm1XQPczZ8mBadEAvSUV+je7eOF4ZCUkTzCR77yhd2Wgc9kHXj83 Rsc5vIOOof+3yKUQBach6ml2rCPB/f994RAIK1akGCs5xsoVt7y9m7gD6sUvxPm7 xjqRZ5uU2CvkDx3MhSbXVaMOKDBoxa8WLNuO1cIQ+unadL9zAHhak9V2Pn+hzJfc PUMTlV1P5J2r7qoU3qpliMaGF5rqKu35ocM5bNhyoLxWFUVd1XZlfhbI0/5bA/xD HnV3OSOpaAGyU1DBf90pV92Va+8Nt5c4BxHSoh55vK6Mxlh8omtwYtQsaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlQDWRLGdYpo46LfUpGploig/63MB8GA1UdIwQY MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt NmZlMzQ4MDVhNmM2LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2 LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivAskhct F3uAeJDOmdPWN1yBaWQ96VcseApATifluRIjsumSVpSlrl5vbxSLLq8F7i34qBES C3ynZekTGwmYMf23iF7nCNhP6THMsRaJbkBAExcqKU6cHbNyU1gQ9hmnq7ai2kjn fyK9fVOOgOcbqQTnoGi0yxbRoebAjpPYhIecccSEfPyFrqCCQ3FmKob/GxpXr8Fu 3OnvFB4sm6pgnR4Unc68Zcq1lWYEc2DoV5SYA9/ynCuKkJtWQ9B/ZWWc2E9PfcVU cubgvdCM/5tmk1OifARG8DOIYOOqiGOV0KKeq7xtG3jo5KFabhsGoUbXgom9SgGc HdqBbRFonpwPew== -----END CERTIFICATE-----Generated at Sun Dec 14 01:14:39 2025 by rpki-client