This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft File: _08Gv_OluFFRtlcFtDCOmvsf2Pc.mft (raw, json) Hash identifier: RNWgIVSP5dXxN6HqBDCQfhFLN2JDAOIAOHF0qELoi/Q= Subject key identifier: C9:A1:93:51:18:14:A9:68:13:22:56:09:AE:C0:80:DA:6B:59:BB:6F Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Certificate serial: 019B6FFDF8F29004C04A2B599C8B56A63433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft Manifest number: 17AA Signing time: Tue 30 Dec 2025 16:01:13 +0000 Manifest this update: Tue 30 Dec 2025 16:01:13 +0000 Manifest next update: Wed 31 Dec 2025 16:01:13 +0000 Files and hashes: 1: 7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa (hash: /MIDEJVEQSp9V1rCF5ezc9jg3qtYKJbL8o4PDhdKQ+g=) 2: _08Gv_OluFFRtlcFtDCOmvsf2Pc.crl (hash: tVeWBIapHAr61WPnNy5jsRDr4EtfmEtKKzr/uvetnOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:f8:f2:90:04:c0:4a:2b:59:9c:8b:56:a6:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Validity Not Before: Dec 30 16:01:13 2025 GMT Not After : Dec 31 16:01:13 2025 GMT Subject: CN=c9a193511814a96813225609aec080da6b59bb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:ef:02:03:44:05:0a:80:74:d5:f0:e4:2f: d8:c1:e0:d7:b6:f3:5e:b9:65:92:06:54:d5:bb:8e: 0d:9f:0d:be:2b:43:e6:c0:94:85:ef:36:c2:0f:66: 58:ff:03:48:e6:bc:31:f7:6d:a7:8f:5a:c7:74:85: 28:f1:3d:3e:77:b9:a0:6b:ee:aa:32:c8:42:f9:d9: 56:74:04:80:69:58:72:50:0b:dc:99:c5:c2:02:ed: 02:34:4b:42:4e:0f:4f:60:bc:cd:53:c7:78:45:d7: aa:15:12:ea:b9:92:f1:ba:b8:0f:99:64:70:92:6e: c3:29:dd:5d:34:6d:d4:e0:d2:7e:30:b1:a1:e4:82: 6f:5b:6d:f1:43:98:d1:ae:e3:71:c6:0e:45:02:21: b1:83:6f:3e:0a:d4:a1:ae:49:e4:1e:28:39:a0:f0: 0f:f8:21:5b:b1:b6:9f:3b:3d:c3:43:e9:fa:0c:0e: 31:fd:c0:30:99:bf:61:c4:c8:c7:d9:21:63:2a:7f: d5:8b:cb:6c:1f:83:0c:f5:e7:f8:c8:5d:2a:b6:72: 79:1e:3e:dd:ee:dc:49:5e:0d:ce:d5:8e:d1:91:2e: 53:6f:a7:1b:7c:1c:41:ad:f4:f7:80:a0:f1:1a:70: 9a:8e:3d:df:23:f0:5a:77:0f:5c:26:65:0c:1f:63: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:93:51:18:14:A9:68:13:22:56:09:AE:C0:80:DA:6B:59:BB:6F X509v3 Authority Key Identifier: keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b6:f3:6f:45:98:61:de:62:f9:55:09:25:c3:93:9c:00:00: 4d:da:00:9a:50:65:6c:b8:0f:b5:cf:53:31:06:a3:ec:46:c8: e3:fd:78:1c:03:ef:2e:86:f3:56:b6:30:d0:62:7c:1c:26:c8: 6a:7f:cc:c4:8f:a4:37:c7:b0:e6:2b:6b:e7:b2:86:6a:b6:42: 36:40:1b:6b:08:c2:6b:90:8a:70:14:a1:2c:30:2d:a3:a5:98: 98:5c:87:06:78:3f:67:01:c8:27:65:bb:5f:78:2d:92:db:5e: 38:85:0f:ca:d2:12:f0:ab:22:ab:4e:ed:78:42:0d:49:50:08: cd:84:36:2a:d4:a3:8f:c7:a9:26:14:6d:cb:6c:b6:b3:1d:44: 5f:b5:2b:76:78:d3:16:9c:69:2e:dc:ec:00:d8:d4:4d:8d:fc: 41:d9:3f:4d:e3:da:f3:33:1b:d5:ca:62:c4:b8:c9:20:2d:97: d6:a7:ab:d7:c4:7d:46:57:9d:bf:e3:22:86:6b:68:63:38:47: 06:d9:c7:5d:6b:44:b1:54:52:66:85:24:75:ae:99:e6:76:2a: 33:1f:ec:21:2f:80:26:12:44:b4:3a:46:3f:ca:c1:7e:47:42: 32:66:15:bd:54:d9:f3:f4:c0:3d:7c:75:a5:48:b7:7b:33:17: 49:89:b5:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/fjykATASitZnItWpjQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGYwNmJmZjNhNWI4NTE1MWI2NTcwNWI0MzA4ZTlhZmIx ZmQ4ZjcwHhcNMjUxMjMwMTYwMTEzWhcNMjUxMjMxMTYwMTEzWjAzMTEwLwYDVQQD EyhjOWExOTM1MTE4MTRhOTY4MTMyMjU2MDlhZWMwODBkYTZiNTliYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2XvAgNEBQqAdNXw5C/YweDXtvNe uWWSBlTVu44Nnw2+K0PmwJSF7zbCD2ZY/wNI5rwx922nj1rHdIUo8T0+d7mga+6q MshC+dlWdASAaVhyUAvcmcXCAu0CNEtCTg9PYLzNU8d4RdeqFRLquZLxurgPmWRw km7DKd1dNG3U4NJ+MLGh5IJvW23xQ5jRruNxxg5FAiGxg28+CtShrknkHig5oPAP +CFbsbafOz3DQ+n6DA4x/cAwmb9hxMjH2SFjKn/Vi8tsH4MM9ef4yF0qtnJ5Hj7d 7txJXg3O1Y7RkS5Tb6cbfBxBrfT3gKDxGnCajj3fI/Badw9cJmUMH2On2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmhk1EYFKloEyJWCa7AgNprWbtvMB8GA1UdIwQY MBaAFP9PBr/zpbhRUbZXBbQwjpr7H9j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2Et MjVlZmZkZDc5NmRjLzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2EtMjVlZmZkZDc5NmRj LzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLbzb0WY Yd5i+VUJJcOTnAAATdoAmlBlbLgPtc9TMQaj7EbI4/14HAPvLobzVrYw0GJ8HCbI an/MxI+kN8ew5itr57KGarZCNkAbawjCa5CKcBShLDAto6WYmFyHBng/ZwHIJ2W7 X3gtktteOIUPytIS8Ksiq07teEINSVAIzYQ2KtSjj8epJhRty2y2sx1EX7UrdnjT FpxpLtzsANjUTY38Qdk/TePa8zMb1cpixLjJIC2X1qer18R9Rledv+MihmtoYzhH BtnHXWtEsVRSZoUkda6Z5nYqMx/sIS+AJhJEtDpGP8rBfkdCMmYVvVTZ8/TAPXx1 pUi3ezMXSYm14A== -----END CERTIFICATE-----Generated at Tue Dec 30 21:58:37 2025 by rpki-client