This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json) Hash identifier: zvY0fzw1j8Ab8YY+lbiPziRHsnVfCX+JZl2Bv/Y+isU= Subject key identifier: F8:0C:21:EF:1C:14:74:DF:64:2E:92:C8:0B:0D:99:98:D9:B9:D3:5F Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019B3C46D8AC1E37CBD1D57DBD9044406CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft Manifest number: 1094 Signing time: Sat 20 Dec 2025 15:00:34 +0000 Manifest this update: Sat 20 Dec 2025 15:00:34 +0000 Manifest next update: Sun 21 Dec 2025 15:00:34 +0000 Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: Z/wX4UJpYo3OqQpjPRnemj+SiR88+VBuEro4IzDDxNk=) 2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=) 3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=) 4: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=) 5: Ts1zo9Z82k-9ve-8edbDB9i2RHs.roa (hash: Jg/jOB8cB9GuZDvZAaZXrBbzDRGk3pxwKEfz4X5Tl/0=) 6: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=) 7: xIeAXdfn38yQDbyF7veotWoFZu0.roa (hash: PRijsI9u95zDDy86ofoQ6KFQuR5A71lxwPw9qkFWPs8=) 8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d8:ac:1e:37:cb:d1:d5:7d:bd:90:44:40:6c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Dec 20 15:00:34 2025 GMT Not After : Dec 21 15:00:34 2025 GMT Subject: CN=f80c21ef1c1474df642e92c80b0d9998d9b9d35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:3a:e5:27:6f:5c:73:d9:45:6e:48:32:07: c5:fe:6d:0b:4e:89:36:b8:99:37:00:21:55:a0:88: 39:25:3c:14:13:93:13:96:5e:01:2a:89:11:09:fb: bb:c4:80:0a:d2:8e:22:76:24:3e:a9:05:36:1a:f2: 24:a0:8d:f8:7b:24:aa:1e:0e:b3:fb:f0:4d:f1:e2: f6:e0:89:0c:3e:25:2c:9a:ff:c7:6c:f7:d2:70:bc: 09:3f:5d:da:03:c9:00:1e:ef:b6:bb:78:9e:dd:e7: dd:97:80:f0:7f:be:1e:28:ba:ff:c4:a3:23:e5:65: 16:dc:3f:b9:1a:5e:73:2c:5f:f2:02:cb:ec:a0:b3: d5:ad:21:f1:34:d1:54:9f:65:2d:90:40:4b:bf:1e: 33:eb:25:80:09:f2:dc:f7:f7:7e:f6:bd:19:46:35: ef:4e:87:fd:33:e0:a8:78:c9:90:8f:b1:f1:6e:66: 58:47:b2:8d:d3:5e:ba:10:db:8c:03:98:61:6c:33: e4:28:03:ed:b5:87:8f:d4:df:02:3c:1f:9b:9e:63: 66:27:5c:a9:2f:94:8c:3c:13:4e:41:04:25:2f:04: 9e:25:7e:5d:64:13:e0:bc:2e:a3:10:cb:f6:83:c9: c6:3b:25:90:21:4a:2a:2e:52:8b:98:bb:82:4b:a3: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0C:21:EF:1C:14:74:DF:64:2E:92:C8:0B:0D:99:98:D9:B9:D3:5F X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:81:b3:a2:f5:b0:e9:6a:68:af:32:bf:91:4d:16:62:3c:65: 8c:f3:bd:4a:47:f6:0a:5d:04:d4:79:f0:db:5e:90:ee:bb:cf: 54:4c:f7:07:5b:c1:cb:d8:30:6d:5e:ff:59:49:2b:dc:2a:eb: db:b6:69:72:41:1f:91:80:d5:c6:e8:7b:7d:1c:7e:11:06:ee: e9:a0:29:ad:a6:41:de:a5:ef:a4:8a:67:dd:5d:e3:20:71:b0: bf:f5:9a:11:fe:6e:57:4b:d4:a7:e1:8a:80:57:66:47:c4:e6: 63:19:4f:e3:59:4a:9f:1d:e7:cf:6e:f9:dc:8c:1e:d8:56:74: 55:c9:e9:8e:78:e8:84:01:f7:e0:db:04:a8:88:ad:75:b3:1d: 28:af:6b:32:26:6a:a7:3d:0e:9e:dc:f9:50:1a:db:a0:57:6d: e1:8c:85:45:2b:33:a0:be:6e:5c:f6:65:e8:e7:70:c8:36:f7: 21:f8:63:f2:35:88:77:4f:96:05:88:4f:ee:be:6b:b1:ce:23: 4f:0d:e6:23:fd:64:80:d9:b3:cd:cc:18:fd:2a:42:49:36:72: 7c:79:2c:e0:a3:12:33:46:39:32:96:07:af:16:3c:f4:6f:fe: 79:dd:05:23:17:b7:88:87:15:4e:db:e7:c0:58:2d:af:61:1d: 5f:3f:be:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RtisHjfL0dV9vZBEQGzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjUxMjIwMTUwMDM0WhcNMjUxMjIxMTUwMDM0WjAzMTEwLwYDVQQD EyhmODBjMjFlZjFjMTQ3NGRmNjQyZTkyYzgwYjBkOTk5OGQ5YjlkMzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtA65SdvXHPZRW5IMgfF/m0LTok2 uJk3ACFVoIg5JTwUE5MTll4BKokRCfu7xIAK0o4idiQ+qQU2GvIkoI34eySqHg6z +/BN8eL24IkMPiUsmv/HbPfScLwJP13aA8kAHu+2u3ie3efdl4Dwf74eKLr/xKMj 5WUW3D+5Gl5zLF/yAsvsoLPVrSHxNNFUn2UtkEBLvx4z6yWACfLc9/d+9r0ZRjXv Tof9M+CoeMmQj7HxbmZYR7KN0166ENuMA5hhbDPkKAPttYeP1N8CPB+bnmNmJ1yp L5SMPBNOQQQlLwSeJX5dZBPgvC6jEMv2g8nGOyWQIUoqLlKLmLuCS6MsPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgMIe8cFHTfZC6SyAsNmZjZudNfMB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYGzovWw 6WporzK/kU0WYjxljPO9Skf2Cl0E1Hnw216Q7rvPVEz3B1vBy9gwbV7/WUkr3Crr 27ZpckEfkYDVxuh7fRx+EQbu6aApraZB3qXvpIpn3V3jIHGwv/WaEf5uV0vUp+GK gFdmR8TmYxlP41lKnx3nz2753Iwe2FZ0VcnpjnjohAH34NsEqIitdbMdKK9rMiZq pz0Ontz5UBrboFdt4YyFRSszoL5uXPZl6OdwyDb3Ifhj8jWId0+WBYhP7r5rsc4j Tw3mI/1kgNmzzcwY/SpCSTZyfHks4KMSM0Y5MpYHrxY89G/+ed0FIxe3iIcVTtvn wFgtr2EdXz++XQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:56 2025 by rpki-client