This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json) Hash identifier: YOi3StshHS5xCSQhM3GhKrSqWOvFi5mXrwWLtogw7LU= Subject key identifier: F2:9E:F9:CB:F5:A6:88:96:8E:1B:4A:8B:08:AC:E3:95:C0:36:9B:89 Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Certificate serial: 019B4E16BBB4DC15C7A48CA507E644A89333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft Manifest number: 0ECB Signing time: Wed 24 Dec 2025 02:01:11 +0000 Manifest this update: Wed 24 Dec 2025 02:01:11 +0000 Manifest next update: Thu 25 Dec 2025 02:01:11 +0000 Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=) 2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: c3OPSD3piAcGHTmWZvScUJtnoN/iLhSrT8PO/juS28k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:bb:b4:dc:15:c7:a4:8c:a5:07:e6:44:a8:93:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Validity Not Before: Dec 24 02:01:11 2025 GMT Not After : Dec 25 02:01:11 2025 GMT Subject: CN=f29ef9cbf5a688968e1b4a8b08ace395c0369b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:f2:1e:7f:dc:12:bb:b7:cc:c0:79:2b:17: 55:0c:af:cc:58:72:fd:1c:95:11:da:c7:4e:50:6e: 50:a1:81:55:87:10:e7:7c:d3:82:50:b7:41:33:cd: f8:e3:10:60:b0:44:bc:d5:b7:28:24:51:7b:6d:f2: c1:6e:b1:82:00:0a:b7:ce:36:0b:78:0b:e6:25:38: 29:36:60:3e:0f:b3:9d:2c:f3:27:eb:d5:83:2f:85: 5a:bd:a1:e5:97:11:f9:9f:41:8e:7a:89:44:98:34: 1d:9e:b2:c8:db:e8:cb:37:d7:b9:3c:ed:e1:09:ec: f0:92:a1:42:2b:e8:bf:2e:dd:75:c8:d7:29:be:56: e1:3c:6a:a0:b6:09:3f:79:7a:fa:fd:12:95:66:8b: 62:05:c4:4d:e5:f7:1b:31:be:1c:7c:e4:b2:4a:5c: 00:e8:d7:35:4b:81:4f:a4:86:e7:09:6a:13:a4:06: 01:22:a4:56:10:56:87:eb:87:ba:d8:d9:e7:3a:7d: ec:9a:bd:f2:65:6b:64:35:1e:48:9a:5f:aa:3e:db: ef:7e:ef:18:ec:85:83:da:18:fd:a1:43:6e:d5:6c: a6:79:9f:e4:8f:77:21:90:91:ed:b0:96:31:93:07: 53:cb:10:5c:ab:dd:39:a7:24:c4:4d:0e:9a:41:89: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9E:F9:CB:F5:A6:88:96:8E:1B:4A:8B:08:AC:E3:95:C0:36:9B:89 X509v3 Authority Key Identifier: keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:62:ed:84:17:10:05:72:3b:c2:84:33:15:36:5d:d1:28:56: f5:8f:0c:e6:cd:e7:d4:c9:15:73:80:a4:41:d4:b2:1e:06:e2: 9c:d7:42:17:30:a6:c7:4c:30:7b:eb:d1:f9:b3:3f:86:ae:46: 1a:43:6c:78:b5:14:b8:4a:c9:d9:56:4b:0a:0d:2f:c4:ab:e7: 8f:b5:50:95:74:90:8a:e8:79:a0:a4:81:5e:6d:76:bc:8c:e1: 45:6b:aa:a3:5a:23:69:33:0c:ac:05:f9:54:2e:5e:c5:6b:f9: 31:2d:0d:2e:69:ca:f0:82:18:68:c7:46:f7:59:33:8f:54:29: cc:e7:25:12:48:53:a5:3d:8a:0a:4a:dc:c9:cb:31:da:af:13: 1d:c0:62:2e:65:91:c3:e4:23:a9:80:8f:fb:9c:d6:4c:44:05: e1:d9:02:92:d0:8c:ea:92:09:65:9d:7f:9c:ca:e1:a8:34:a1: 5f:4c:3d:34:0c:96:aa:cf:06:c6:74:84:37:b1:42:d9:05:ef: 00:2d:e6:23:e2:93:e1:bc:f0:9b:19:54:a4:2b:c0:38:07:aa: 94:2f:f1:f0:b1:60:08:2a:a9:1a:75:4f:2a:20:6c:fd:08:64: bc:1c:27:92:cf:c0:64:bf:89:32:82:98:8d:6f:af:03:31:40: 97:69:3c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFru03BXHpIylB+ZEqJMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi NmI3ZjMwHhcNMjUxMjI0MDIwMTExWhcNMjUxMjI1MDIwMTExWjAzMTEwLwYDVQQD EyhmMjllZjljYmY1YTY4ODk2OGUxYjRhOGIwOGFjZTM5NWMwMzY5Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFzyHn/cEru3zMB5KxdVDK/MWHL9 HJUR2sdOUG5QoYFVhxDnfNOCULdBM8344xBgsES81bcoJFF7bfLBbrGCAAq3zjYL eAvmJTgpNmA+D7OdLPMn69WDL4VavaHllxH5n0GOeolEmDQdnrLI2+jLN9e5PO3h CezwkqFCK+i/Lt11yNcpvlbhPGqgtgk/eXr6/RKVZotiBcRN5fcbMb4cfOSySlwA 6Nc1S4FPpIbnCWoTpAYBIqRWEFaH64e62NnnOn3smr3yZWtkNR5Iml+qPtvvfu8Y 7IWD2hj9oUNu1WymeZ/kj3chkJHtsJYxkwdTyxBcq905pyTETQ6aQYkFxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKe+cv1poiWjhtKiwis45XANpuJMB8GA1UdIwQY MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmLthBcQ BXI7woQzFTZd0ShW9Y8M5s3n1MkVc4CkQdSyHgbinNdCFzCmx0wwe+vR+bM/hq5G GkNseLUUuErJ2VZLCg0vxKvnj7VQlXSQiuh5oKSBXm12vIzhRWuqo1ojaTMMrAX5 VC5exWv5MS0NLmnK8IIYaMdG91kzj1QpzOclEkhTpT2KCkrcycsx2q8THcBiLmWR w+QjqYCP+5zWTEQF4dkCktCM6pIJZZ1/nMrhqDShX0w9NAyWqs8GxnSEN7FC2QXv AC3mI+KT4bzwmxlUpCvAOAeqlC/x8LFgCCqpGnVPKiBs/QhkvBwnks/AZL+JMoKY jW+vAzFAl2k8Ww== -----END CERTIFICATE-----Generated at Wed Dec 24 12:25:53 2025 by rpki-client