This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json) Hash identifier: vuS7BsHo+sDz5XDbyfp6e6izlQ0/MHigMwOYfr3Mf3I= Subject key identifier: CA:49:21:08:9F:9E:2F:C2:3C:C8:B3:CC:3C:D0:26:5F:A1:E4:37:A0 Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27 Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527 Certificate serial: 019B3D90DB16EA9BC29C36C1C9C3085C8BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft Manifest number: 0343 Signing time: Sat 20 Dec 2025 21:01:01 +0000 Manifest this update: Sat 20 Dec 2025 21:01:01 +0000 Manifest next update: Sun 21 Dec 2025 21:01:01 +0000 Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: lAbWnAtCtFYFHFwc4AShQJh3r416eG4gP7k/RpVMnFI=) 2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:db:16:ea:9b:c2:9c:36:c1:c9:c3:08:5c:8b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527 Validity Not Before: Dec 20 21:01:01 2025 GMT Not After : Dec 21 21:01:01 2025 GMT Subject: CN=ca4921089f9e2fc23cc8b3cc3cd0265fa1e437a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:a9:42:26:c3:1b:7d:ab:56:15:9b:64:5a: 88:61:31:14:18:c6:4f:52:82:a7:e3:f1:90:dd:b4: 72:40:17:01:a1:1d:82:27:eb:7c:1b:28:07:32:25: 41:40:f5:05:17:cc:d5:34:ac:90:81:ff:4b:57:31: df:a9:ab:3b:99:aa:8a:e7:0b:b4:10:a4:c1:46:25: 70:cd:20:9e:d1:40:d1:0b:05:36:87:ce:07:44:94: 47:00:ce:b3:72:61:0f:c1:f7:ff:ad:8c:7b:21:51: 7c:8b:bb:87:60:d8:f4:d5:d4:45:8b:a9:ce:5a:9b: 83:17:d3:06:87:01:23:65:60:b0:5b:86:7d:61:95: f0:bf:9a:0e:56:a3:96:73:1d:54:c7:f6:65:81:6d: 95:52:39:98:2a:c2:40:ee:66:6e:a9:86:f5:51:9d: c2:ba:43:15:36:68:5f:02:84:c0:5a:92:99:72:cd: 41:60:8a:7c:8d:19:d6:8e:78:17:b1:e9:a2:ee:2b: 23:00:5d:d9:fe:a8:f9:ce:56:89:ae:aa:f0:9b:7b: d9:76:7e:25:5c:09:1a:a4:9e:5e:32:cb:fc:c9:43: 34:67:56:9a:fe:42:3e:15:6d:12:3c:f9:82:72:d0: 3c:71:66:4f:75:bc:84:54:3d:66:4a:66:9b:13:05: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:21:08:9F:9E:2F:C2:3C:C8:B3:CC:3C:D0:26:5F:A1:E4:37:A0 X509v3 Authority Key Identifier: keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:61:ea:41:ea:53:d6:87:4b:54:97:e5:3b:96:a3:27:4b:17: 54:9b:20:35:a3:11:19:a1:63:69:d6:17:a7:da:e5:6e:18:56: b4:a7:e3:4c:60:61:e3:2d:95:84:29:4f:fc:79:c3:5c:97:d6: 23:df:cd:fc:38:f7:15:fe:80:5e:b0:95:e6:33:9c:da:d6:52: 33:68:46:c5:84:ca:9e:58:9a:cc:35:33:6d:4e:c2:7f:27:5f: 15:da:ff:42:be:b9:b6:53:d5:c2:55:7a:26:9c:d3:b1:2a:07: 01:eb:46:c4:d8:b6:31:dc:d0:97:e4:5c:99:37:2e:e9:c9:be: 93:ca:d3:75:08:5e:0a:96:ed:47:66:65:ae:c2:e2:8a:b1:56: 9b:1d:b7:d9:20:76:15:8e:db:31:0b:01:28:cf:95:42:d6:df: ba:74:16:2e:79:bd:69:62:85:2d:72:a6:5c:c2:bf:c6:af:73: af:38:f2:51:dc:17:cf:7a:2c:c6:87:4a:84:49:c4:54:4e:c1: 4d:f2:dc:55:e3:a3:af:49:28:5e:33:d1:d8:cd:eb:de:e0:6c: cc:56:69:c4:b0:93:9e:f6:97:ba:6b:ec:73:e8:60:a6:20:66: 56:01:f5:26:92:78:6d:57:8a:ff:f8:97:11:c7:1f:48:f5:23: f5:fa:7a:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNsW6pvCnDbBycMIXIveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmYzZTdkODY1OWU4YWU5ZjZmNGYzMWQzZjI0ZmRiM2M2 ZGY1MjcwHhcNMjUxMjIwMjEwMTAxWhcNMjUxMjIxMjEwMTAxWjAzMTEwLwYDVQQD EyhjYTQ5MjEwODlmOWUyZmMyM2NjOGIzY2MzY2QwMjY1ZmExZTQzN2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0OpQibDG32rVhWbZFqIYTEUGMZP UoKn4/GQ3bRyQBcBoR2CJ+t8GygHMiVBQPUFF8zVNKyQgf9LVzHfqas7maqK5wu0 EKTBRiVwzSCe0UDRCwU2h84HRJRHAM6zcmEPwff/rYx7IVF8i7uHYNj01dRFi6nO WpuDF9MGhwEjZWCwW4Z9YZXwv5oOVqOWcx1Ux/ZlgW2VUjmYKsJA7mZuqYb1UZ3C ukMVNmhfAoTAWpKZcs1BYIp8jRnWjngXsemi7isjAF3Z/qj5zlaJrqrwm3vZdn4l XAkapJ5eMsv8yUM0Z1aa/kI+FW0SPPmCctA8cWZPdbyEVD1mSmabEwVAkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpJIQifni/CPMizzDzQJl+h5DegMB8GA1UdIwQY MBaAFPf/Pn2GWeiun29PMdPyT9s8bfUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV84LWZZWlo2SzZmYjA4eDBfSlAyenh0OVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84OTY4OGMtZTA5NC00MzE2LTgxMzAt YWEyZjhhMmIwZTg4LzEvOV84LWZZWlo2SzZmYjA4eDBfSlAyenh0OVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC84OTY4OGMtZTA5NC00MzE2LTgxMzAtYWEyZjhhMmIwZTg4 LzEvOV84LWZZWlo2SzZmYjA4eDBfSlAyenh0OVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWHqQepT 1odLVJflO5ajJ0sXVJsgNaMRGaFjadYXp9rlbhhWtKfjTGBh4y2VhClP/HnDXJfW I9/N/Dj3Ff6AXrCV5jOc2tZSM2hGxYTKnliazDUzbU7CfydfFdr/Qr65tlPVwlV6 JpzTsSoHAetGxNi2MdzQl+RcmTcu6cm+k8rTdQheCpbtR2ZlrsLiirFWmx232SB2 FY7bMQsBKM+VQtbfunQWLnm9aWKFLXKmXMK/xq9zrzjyUdwXz3osxodKhEnEVE7B TfLcVeOjr0koXjPR2M3r3uBszFZpxLCTnvaXumvsc+hgpiBmVgH1JpJ4bVeK//iX EccfSPUj9fp6hA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:40 2025 by rpki-client