This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json) Hash identifier: Q8NNcLxL77QYn8iZmpzic2j4y5XYA6hv54FxSksqSbY= Subject key identifier: 87:84:18:1F:12:49:11:74:E3:A1:57:38:58:30:7C:EC:07:B3:FE:14 Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019B3A58915EC422AF4E1C332D65D9EA2BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft Manifest number: 1093 Signing time: Sat 20 Dec 2025 06:00:41 +0000 Manifest this update: Sat 20 Dec 2025 06:00:41 +0000 Manifest next update: Sun 21 Dec 2025 06:00:41 +0000 Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: vLP8/TncHZI7Jwae5B0ph8MrKd6kto3WoXDtp4j5wDY=) 2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=) 3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=) 4: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=) 5: Ts1zo9Z82k-9ve-8edbDB9i2RHs.roa (hash: Jg/jOB8cB9GuZDvZAaZXrBbzDRGk3pxwKEfz4X5Tl/0=) 6: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=) 7: xIeAXdfn38yQDbyF7veotWoFZu0.roa (hash: PRijsI9u95zDDy86ofoQ6KFQuR5A71lxwPw9qkFWPs8=) 8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:91:5e:c4:22:af:4e:1c:33:2d:65:d9:ea:2b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Dec 20 06:00:41 2025 GMT Not After : Dec 21 06:00:41 2025 GMT Subject: CN=8784181f12491174e3a1573858307cec07b3fe14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:d8:8e:8b:8d:69:56:b2:c4:b4:11:ea:e3: b9:6c:9f:80:3b:f2:8a:6a:58:b7:94:4d:c2:bf:74: 75:dd:8b:de:a3:ea:9c:d6:10:bc:a4:cc:c5:28:dc: 01:a9:09:d6:55:99:69:ce:4f:a6:9e:3f:23:d6:df: 8a:8c:af:69:86:ae:dc:7a:28:d6:3e:31:c9:53:3c: 3c:bb:c0:49:40:80:6d:6a:2d:fe:0e:e4:f8:ef:05: 75:04:5a:76:31:e3:92:fa:bb:a2:59:15:af:46:4e: b0:d7:1e:b8:fa:f4:c5:79:a1:18:37:d0:4f:2e:06: 0e:ac:57:35:cb:b2:8d:58:7a:1c:14:b4:3f:40:73: 19:92:45:29:2e:84:95:fc:5c:36:01:2f:00:17:a9: 3b:9e:41:fa:89:64:35:4c:34:1e:db:19:a1:0a:11: 7a:18:fe:2d:ea:5e:79:f3:7b:2f:93:42:06:7b:77: 15:b3:ad:2e:be:ac:74:35:9d:c2:5c:e9:38:b1:58: 33:76:09:e0:9f:d6:f7:f9:eb:ed:21:fb:26:5c:7c: 33:32:e6:c4:16:69:84:32:fb:72:10:fe:13:4e:67: b6:62:61:ec:5c:53:6d:61:6f:a1:7a:dd:93:aa:e4: 1c:2f:42:f6:66:90:1c:e2:6e:7f:ad:b9:fa:5a:f3: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:18:1F:12:49:11:74:E3:A1:57:38:58:30:7C:EC:07:B3:FE:14 X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5a:1d:f9:ae:6b:ca:60:d2:56:ec:68:f9:a7:8c:ab:9a:09: 96:8d:18:22:0a:1e:dc:79:30:4c:60:dc:d3:ed:bb:ae:7e:ec: 64:3e:47:96:89:11:b4:9d:de:77:16:62:98:d7:7e:00:d9:00: 43:c1:fb:4b:b0:bf:0b:36:0a:8e:48:66:73:f6:77:7a:e1:2b: 66:da:b6:1f:de:f7:06:fd:38:75:e4:cc:d5:47:97:a9:15:45: 94:8c:5d:c1:aa:71:e6:a0:fa:ea:c5:86:bc:1b:16:24:1c:87: 72:db:c9:9d:d0:1f:f8:02:a7:d7:4c:fb:01:19:32:e1:09:56: 2e:76:aa:2e:94:9d:8a:6c:ad:3d:0f:b2:27:ea:e8:c7:c6:ea: c3:74:53:cd:59:a2:83:af:c7:af:47:7a:5c:20:82:90:d5:dc: 42:2a:46:37:81:13:d1:3a:ff:53:10:9d:c6:f3:53:26:a7:7c: 98:d0:5a:78:6e:ce:09:24:34:6b:62:ac:b1:d6:5f:e5:e8:0c: 09:ec:fc:f4:b3:5d:52:18:da:63:ad:cf:5b:c9:80:06:44:dd: 0a:25:24:f4:13:89:9b:0f:3b:c2:f5:94:04:8e:9f:38:12:13: fe:93:7c:6e:fe:f4:33:43:e3:29:00:94:26:93:0a:60:b2:a0: 7f:c8:fc:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJFexCKvThwzLWXZ6iuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjUxMjIwMDYwMDQxWhcNMjUxMjIxMDYwMDQxWjAzMTEwLwYDVQQD Eyg4Nzg0MTgxZjEyNDkxMTc0ZTNhMTU3Mzg1ODMwN2NlYzA3YjNmZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpLYjouNaVayxLQR6uO5bJ+AO/KK ali3lE3Cv3R13Yveo+qc1hC8pMzFKNwBqQnWVZlpzk+mnj8j1t+KjK9phq7ceijW PjHJUzw8u8BJQIBtai3+DuT47wV1BFp2MeOS+ruiWRWvRk6w1x64+vTFeaEYN9BP LgYOrFc1y7KNWHocFLQ/QHMZkkUpLoSV/Fw2AS8AF6k7nkH6iWQ1TDQe2xmhChF6 GP4t6l5583svk0IGe3cVs60uvqx0NZ3CXOk4sVgzdgngn9b3+evtIfsmXHwzMubE FmmEMvtyEP4TTme2YmHsXFNtYW+het2TquQcL0L2ZpAc4m5/rbn6WvMNBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeEGB8SSRF046FXOFgwfOwHs/4UMB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVod+a5r ymDSVuxo+aeMq5oJlo0YIgoe3HkwTGDc0+27rn7sZD5HlokRtJ3edxZimNd+ANkA Q8H7S7C/CzYKjkhmc/Z3euErZtq2H973Bv04deTM1UeXqRVFlIxdwapx5qD66sWG vBsWJByHctvJndAf+AKn10z7ARky4QlWLnaqLpSdimytPQ+yJ+rox8bqw3RTzVmi g6/Hr0d6XCCCkNXcQipGN4ET0Tr/UxCdxvNTJqd8mNBaeG7OCSQ0a2KssdZf5egM Cez89LNdUhjaY63PW8mABkTdCiUk9BOJmw87wvWUBI6fOBIT/pN8bv70M0PjKQCU JpMKYLKgf8j8zw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:41:02 2025 by rpki-client