This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json) Hash identifier: IpAK6TYB5HsipbPVB55v4/AbxbJlHNm4Ri+whyKB08U= Subject key identifier: 31:1B:F0:98:01:E1:80:54:32:5F:2E:CA:33:8D:62:11:D0:00:BB:C5 Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Certificate serial: 019B3FED3E687FA6F80D013F51F9810E6CFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft Manifest number: 01F4 Signing time: Sun 21 Dec 2025 08:01:11 +0000 Manifest this update: Sun 21 Dec 2025 08:01:11 +0000 Manifest next update: Mon 22 Dec 2025 08:01:11 +0000 Files and hashes: 1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=) 2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: z0CJUwqqMxny40zZ+2xCj3w7gJoXLTcF4HHen/2cQPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:3e:68:7f:a6:f8:0d:01:3f:51:f9:81:0e:6c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39 Validity Not Before: Dec 21 08:01:11 2025 GMT Not After : Dec 22 08:01:11 2025 GMT Subject: CN=311bf09801e18054325f2eca338d6211d000bbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:09:1e:a6:7b:78:37:68:c7:da:f3:73:fc: b9:3b:92:3b:50:f5:10:b9:f2:99:1c:e0:ed:2b:d5: 2c:b4:20:57:72:25:93:20:55:76:cd:f3:be:36:df: be:33:08:8b:99:1f:39:21:ee:ae:aa:8d:83:83:e3: ed:4f:d1:f9:5b:38:f5:3a:ff:72:8a:1a:87:9c:d4: f4:ff:48:bf:09:cb:f8:c3:7b:67:19:de:63:de:e5: e0:be:6c:b6:11:dd:20:ee:64:f4:c7:7d:9e:20:25: 74:38:8d:67:85:34:fb:68:e3:9a:d9:6f:d2:18:44: 5f:a4:08:b6:9e:66:b5:3c:be:13:5a:63:e1:9e:21: ea:8d:a2:1c:9b:6a:2f:47:ac:b5:1d:7f:28:0b:af: 7a:a1:a2:ff:a4:89:a6:b4:73:5d:ab:44:6c:31:74: e2:5f:27:ba:00:51:32:23:8b:4e:38:fb:18:c7:c0: 54:e5:09:a2:1b:39:6d:62:92:c4:20:f6:59:bb:15: 76:f8:38:af:fd:11:d8:c5:c0:0a:f0:83:db:6c:0b: ac:01:dd:42:5e:23:68:00:c6:4e:41:27:16:db:3c: 70:7b:f9:c8:44:c4:39:bf:bb:6e:ac:9b:e5:b7:bc: 33:8d:bb:f8:9a:a3:ce:b2:4b:d7:22:b3:46:ec:a4: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1B:F0:98:01:E1:80:54:32:5F:2E:CA:33:8D:62:11:D0:00:BB:C5 X509v3 Authority Key Identifier: keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:80:d8:f3:72:8f:e8:b1:e9:e1:8b:83:eb:3d:76:40:c0:2a: ea:63:3a:c4:ad:a7:6f:14:c7:95:89:5e:bc:02:93:c9:8b:a8: 38:d9:ab:8b:38:21:20:a8:07:28:bc:68:6a:5e:82:1e:b1:7c: 04:55:9b:0a:21:48:3c:91:ca:49:c9:b2:87:c8:90:f9:fa:e1: 9d:79:bc:56:70:75:2a:f7:ce:18:8b:70:8b:b1:76:02:15:fa: 98:33:6d:04:86:14:4c:3a:62:f1:56:d0:80:40:e3:78:6d:f9: e4:4b:0a:bf:6e:fa:fb:29:89:eb:b4:5c:42:51:94:4b:88:9f: d7:8f:13:79:da:88:ab:f6:1c:7c:87:a4:b9:40:98:b7:90:a7: b4:bc:6f:01:3c:88:01:d6:fe:a2:03:ff:14:7f:48:2e:9d:6d: fc:fb:d8:25:0b:5d:66:e4:60:b4:43:f4:ef:c5:84:9e:81:32: f2:ef:cb:da:c1:54:8e:cf:59:b8:ee:b0:72:61:dd:bb:dd:97: 48:72:94:ca:f5:af:c2:70:1b:8a:80:41:d8:21:e3:69:2d:be: 70:b5:7d:83:a0:bf:cc:6e:ec:51:c0:ff:f2:0c:c5:0d:d5:a6: 54:19:02:fc:d5:24:a2:9b:26:d2:2c:db:c0:63:3a:32:ae:fc: c2:b2:ab:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7T5of6b4DQE/UfmBDmz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmYzZmYzYzBhMWZmYjNhZjIwZjViOTVlOGNiNjRjODgw NDNmMzkwHhcNMjUxMjIxMDgwMTExWhcNMjUxMjIyMDgwMTExWjAzMTEwLwYDVQQD EygzMTFiZjA5ODAxZTE4MDU0MzI1ZjJlY2EzMzhkNjIxMWQwMDBiYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM8JHqZ7eDdox9rzc/y5O5I7UPUQ ufKZHODtK9UstCBXciWTIFV2zfO+Nt++MwiLmR85Ie6uqo2Dg+PtT9H5Wzj1Ov9y ihqHnNT0/0i/Ccv4w3tnGd5j3uXgvmy2Ed0g7mT0x32eICV0OI1nhTT7aOOa2W/S GERfpAi2nma1PL4TWmPhniHqjaIcm2ovR6y1HX8oC696oaL/pImmtHNdq0RsMXTi Xye6AFEyI4tOOPsYx8BU5QmiGzltYpLEIPZZuxV2+Div/RHYxcAK8IPbbAusAd1C XiNoAMZOQScW2zxwe/nIRMQ5v7turJvlt7wzjbv4mqPOskvXIrNG7KQg3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEb8JgB4YBUMl8uyjONYhHQALvFMB8GA1UdIwQY MBaAFIkvP/PAof+zryD1uV6MtkyIBD85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQt ZjkyMWRiNzViZGY5LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQtZjkyMWRiNzViZGY5 LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIDY83KP 6LHp4YuD6z12QMAq6mM6xK2nbxTHlYlevAKTyYuoONmrizghIKgHKLxoal6CHrF8 BFWbCiFIPJHKScmyh8iQ+frhnXm8VnB1KvfOGItwi7F2AhX6mDNtBIYUTDpi8VbQ gEDjeG355EsKv276+ymJ67RcQlGUS4if148TedqIq/YcfIekuUCYt5CntLxvATyI Adb+ogP/FH9ILp1t/PvYJQtdZuRgtEP078WEnoEy8u/L2sFUjs9ZuO6wcmHdu92X SHKUyvWvwnAbioBB2CHjaS2+cLV9g6C/zG7sUcD/8gzFDdWmVBkC/NUkopsm0izb wGM6Mq78wrKr+w== -----END CERTIFICATE-----Generated at Sun Dec 21 13:36:56 2025 by rpki-client