This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json) Hash identifier: gWadjkVfL+KY/YOq8Uc+JULqj8RGqskFYzz/5OMiAiw= Subject key identifier: 3C:87:98:07:BC:EB:65:13:C0:D9:2C:60:2C:4D:0F:45:C7:08:89:CB Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Certificate serial: 019B3EA31AD43101C1D0B12128A9E7754EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft Manifest number: 0850 Signing time: Sun 21 Dec 2025 02:00:35 +0000 Manifest this update: Sun 21 Dec 2025 02:00:35 +0000 Manifest next update: Mon 22 Dec 2025 02:00:35 +0000 Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=) 2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=) 3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: 63gsFx07ESP3x9qTnFFQNyvJpYj9ExvHENrAkuGc0a0=) 4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:1a:d4:31:01:c1:d0:b1:21:28:a9:e7:75:4e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0 Validity Not Before: Dec 21 02:00:35 2025 GMT Not After : Dec 22 02:00:35 2025 GMT Subject: CN=3c879807bceb6513c0d92c602c4d0f45c70889cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:22:28:13:7d:d3:c2:20:55:33:56:a0:fc: 53:db:79:ee:f4:ca:88:c4:0c:40:c0:9e:b3:65:5f: 0b:2b:5b:7e:8c:9d:be:35:fd:3c:27:5c:ad:90:a6: f8:3c:6c:86:59:0a:b2:87:52:cb:05:98:40:ed:62: 30:66:42:bb:f5:91:88:4f:c4:7a:fd:5c:83:82:aa: f0:47:90:b0:45:f9:a1:22:68:5f:6b:93:42:ed:1c: 9e:bc:0f:bb:17:cb:7c:0d:31:95:18:2d:30:5e:41: f3:04:b0:d5:e3:09:4b:08:ed:db:18:aa:73:70:d7: 7b:20:10:22:be:1c:06:cd:f3:e3:58:d2:c3:b3:43: de:b1:12:f4:c2:14:35:c2:14:89:75:fe:ae:45:5f: 5d:36:c1:ad:30:11:57:a7:b1:37:51:08:cd:c8:37: 7b:31:27:b2:93:5f:9c:f0:68:14:a5:09:59:d1:1c: 09:1e:cb:79:68:09:a0:7b:10:2f:fe:9e:d8:e8:f3: 93:ef:cc:05:fa:ed:26:c2:0b:a2:57:a5:e7:e6:9b: d4:16:67:69:c2:40:b2:5e:5e:81:f3:3e:29:c5:d0: 72:5e:03:98:97:59:75:57:5f:04:64:18:0d:44:97: db:4a:d8:a4:3c:a9:81:48:ba:cd:33:e5:ce:58:29: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:87:98:07:BC:EB:65:13:C0:D9:2C:60:2C:4D:0F:45:C7:08:89:CB X509v3 Authority Key Identifier: keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:70:a7:f7:79:05:af:9c:47:39:f1:a4:bb:3f:86:65:f8:29: 4b:c0:21:0b:e1:e7:32:6f:5f:9f:34:68:b1:f7:6d:89:60:98: 32:2f:52:97:f6:e7:bb:c2:35:b4:47:94:22:c4:18:cf:93:3c: 67:5b:cb:9b:b8:67:06:51:9e:b5:7e:40:2d:da:67:cf:8e:18: eb:92:97:2b:a9:e5:f1:eb:a0:ea:69:fa:13:dc:15:7d:52:aa: e6:43:f5:56:d3:bb:c3:c6:ea:42:83:9e:f7:e4:5b:2e:bc:57: 63:3f:7e:f6:42:35:5e:a2:34:30:71:fd:bb:bc:ea:ec:ef:00: 1a:91:a7:3e:00:74:87:20:eb:7d:27:21:8a:6a:d5:38:83:d9: cb:47:05:ff:6c:7b:42:b0:88:94:e6:9b:77:12:73:ba:ba:35: 9a:77:13:b3:81:61:43:83:30:9f:bc:6c:1a:e3:02:09:d9:62: 06:1d:0b:20:75:25:95:21:03:ad:0e:e1:be:f8:65:91:1f:ec: 6f:09:13:08:e6:d5:1d:81:cb:7c:04:d3:f6:0d:96:2b:51:f9: ba:92:a4:d9:b4:b0:31:83:b2:9d:cb:df:6c:ec:96:fe:10:f4: e2:18:14:9d:b5:0e:e5:b1:d5:ed:09:bb:b6:68:b3:f4:8b:4d: aa:3d:c3:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxrUMQHB0LEhKKnndU7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5 NThkZDAwHhcNMjUxMjIxMDIwMDM1WhcNMjUxMjIyMDIwMDM1WjAzMTEwLwYDVQQD EygzYzg3OTgwN2JjZWI2NTEzYzBkOTJjNjAyYzRkMGY0NWM3MDg4OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtggiKBN908IgVTNWoPxT23nu9MqI xAxAwJ6zZV8LK1t+jJ2+Nf08J1ytkKb4PGyGWQqyh1LLBZhA7WIwZkK79ZGIT8R6 /VyDgqrwR5CwRfmhImhfa5NC7RyevA+7F8t8DTGVGC0wXkHzBLDV4wlLCO3bGKpz cNd7IBAivhwGzfPjWNLDs0PesRL0whQ1whSJdf6uRV9dNsGtMBFXp7E3UQjNyDd7 MSeyk1+c8GgUpQlZ0RwJHst5aAmgexAv/p7Y6POT78wF+u0mwguiV6Xn5pvUFmdp wkCyXl6B8z4pxdByXgOYl1l1V18EZBgNRJfbStikPKmBSLrNM+XOWClxiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyHmAe862UTwNksYCxND0XHCInLMB8GA1UdIwQY MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt NmZlMzQ4MDVhNmM2LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2 LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnCn93kF r5xHOfGkuz+GZfgpS8AhC+HnMm9fnzRosfdtiWCYMi9Sl/bnu8I1tEeUIsQYz5M8 Z1vLm7hnBlGetX5ALdpnz44Y65KXK6nl8eug6mn6E9wVfVKq5kP1VtO7w8bqQoOe 9+RbLrxXYz9+9kI1XqI0MHH9u7zq7O8AGpGnPgB0hyDrfSchimrVOIPZy0cF/2x7 QrCIlOabdxJzuro1mncTs4FhQ4Mwn7xsGuMCCdliBh0LIHUllSEDrQ7hvvhlkR/s bwkTCObVHYHLfATT9g2WK1H5upKk2bSwMYOyncvfbOyW/hD04hgUnbUO5bHV7Qm7 tmiz9ItNqj3DcA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:39:59 2025 by rpki-client