This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json) Hash identifier: 8iEPdI3ib+eDsuTOdcCGS3F8ErRcILJlwrqdI48vJho= Subject key identifier: A4:F0:3A:CC:AA:F8:A1:97:56:87:4B:AE:53:2D:85:69:5F:AB:0F:C9 Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0 Certificate serial: 019B3E6D21FFB939A05635B27146A0E61861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft Manifest number: 14C8 Signing time: Sun 21 Dec 2025 01:01:38 +0000 Manifest this update: Sun 21 Dec 2025 01:01:38 +0000 Manifest next update: Mon 22 Dec 2025 01:01:38 +0000 Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: xNo9Y8XFLftBIgZsdIsPv2KkRJjBXry/3fv69LXbPQc=) 2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=) 3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:21:ff:b9:39:a0:56:35:b2:71:46:a0:e6:18:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0 Validity Not Before: Dec 21 01:01:38 2025 GMT Not After : Dec 22 01:01:38 2025 GMT Subject: CN=a4f03accaaf8a19756874bae532d85695fab0fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:65:80:c5:59:04:44:fc:ef:49:52:34:c0: 9c:c0:33:00:33:e5:a2:52:b3:09:7c:3e:85:11:c5: d1:9d:ae:76:c8:81:be:df:4a:67:8e:cc:7a:ef:79: ba:f6:19:e5:e0:90:79:4c:f0:17:ef:33:90:6e:93: 51:60:9f:df:b5:22:46:6a:f7:56:5a:4f:d0:5d:c3: 16:19:02:41:ec:fe:9f:db:d5:e8:42:fb:98:0f:fa: 4e:46:88:b6:32:60:f4:7a:ff:9a:94:84:24:d3:52: 02:aa:ef:40:6c:4d:82:e7:43:4e:f2:50:11:14:2b: df:af:c2:dd:d2:64:dc:e0:ba:d1:f1:e6:62:b2:8b: 04:de:87:98:38:87:52:99:e9:93:82:04:f0:73:6e: 7e:8e:96:20:99:ac:3e:30:04:73:9b:cc:d0:da:8a: cb:80:4a:46:5e:9f:f4:ad:34:f8:60:48:59:ae:32: 38:51:8f:e0:88:17:34:d1:40:ea:bd:a5:86:7d:60: 4c:f9:68:09:62:49:15:ef:d1:2e:59:d7:96:55:85: f8:eb:62:c7:6f:c8:33:82:d0:4b:4f:ab:02:24:bb: 45:17:ac:60:ca:76:b6:83:32:6c:ad:2c:e5:8c:ba: 00:e8:3a:56:74:a7:ea:ee:70:25:fa:ee:91:64:ff: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:3A:CC:AA:F8:A1:97:56:87:4B:AE:53:2D:85:69:5F:AB:0F:C9 X509v3 Authority Key Identifier: keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:14:75:3d:ac:79:8f:c3:1c:b5:59:9e:89:84:ec:38:61:06: 31:f4:ab:17:4e:4d:48:f5:fd:a9:bc:6e:93:70:5c:bd:4e:0a: cc:2d:0b:f1:7f:17:67:40:49:8f:e0:82:8d:8a:b4:e6:37:ba: e4:03:65:e3:cc:66:af:af:ed:ea:e9:90:58:69:3d:f4:10:93: 3e:19:15:2a:73:44:76:85:60:9c:6e:65:3c:8d:8a:11:d2:fb: 77:67:9f:d9:94:fe:d1:33:cb:95:cd:9d:46:fb:e1:7a:7c:ca: 90:e0:87:9f:a8:38:14:69:c1:cd:3c:5d:dc:a0:35:db:6b:a5: 5d:1d:74:60:c8:5e:0b:89:77:94:8c:65:39:2f:e4:f9:d9:81: 2c:da:c3:ff:76:0f:65:7e:9c:27:39:6a:9d:e3:3d:c3:1a:ac: 3f:87:a1:8e:c1:ad:48:51:98:f1:77:76:97:3b:5c:2b:d7:0d: fc:c9:1c:a6:fb:6c:99:a6:b5:9b:5d:6a:96:52:19:3b:1a:98: 2f:e2:09:7b:eb:ac:a0:a7:44:1c:20:a1:a6:37:ad:10:ff:1c: a0:bc:2c:09:19:ba:e4:c5:55:40:a6:a8:40:f1:8a:b3:ab:8f: 42:b2:e2:b6:0a:86:6e:f1:db:b8:26:d0:32:18:65:58:69:ef: 73:69:85:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bSH/uTmgVjWycUag5hhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0 ODg2ZTAwHhcNMjUxMjIxMDEwMTM4WhcNMjUxMjIyMDEwMTM4WjAzMTEwLwYDVQQD EyhhNGYwM2FjY2FhZjhhMTk3NTY4NzRiYWU1MzJkODU2OTVmYWIwZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2RlgMVZBET870lSNMCcwDMAM+Wi UrMJfD6FEcXRna52yIG+30pnjsx673m69hnl4JB5TPAX7zOQbpNRYJ/ftSJGavdW Wk/QXcMWGQJB7P6f29XoQvuYD/pORoi2MmD0ev+alIQk01ICqu9AbE2C50NO8lAR FCvfr8Ld0mTc4LrR8eZisosE3oeYOIdSmemTggTwc25+jpYgmaw+MARzm8zQ2orL gEpGXp/0rTT4YEhZrjI4UY/giBc00UDqvaWGfWBM+WgJYkkV79EuWdeWVYX462LH b8gzgtBLT6sCJLtFF6xgyna2gzJsrSzljLoA6DpWdKfq7nAl+u6RZP9GQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTwOsyq+KGXVodLrlMthWlfqw/JMB8GA1UdIwQY MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRR1Pax5 j8MctVmeiYTsOGEGMfSrF05NSPX9qbxuk3BcvU4KzC0L8X8XZ0BJj+CCjYq05je6 5ANl48xmr6/t6umQWGk99BCTPhkVKnNEdoVgnG5lPI2KEdL7d2ef2ZT+0TPLlc2d RvvhenzKkOCHn6g4FGnBzTxd3KA122ulXR10YMheC4l3lIxlOS/k+dmBLNrD/3YP ZX6cJzlqneM9wxqsP4ehjsGtSFGY8Xd2lztcK9cN/Mkcpvtsmaa1m11qllIZOxqY L+IJe+usoKdEHCChpjetEP8coLwsCRm65MVVQKaoQPGKs6uPQrLitgqGbvHbuCbQ MhhlWGnvc2mFnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:07 2025 by rpki-client