This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json) Hash identifier: lm5WrZa9fxmpwQt7G3/6W4Wi+sudAVJgBzAaXnVY5PM= Subject key identifier: 15:B1:8F:33:00:39:FD:BD:81:94:7F:D3:7F:43:23:7F:64:72:AC:50 Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0 Certificate serial: 019B6EB415181CD3CC3B55F0AE0DE757A877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft Manifest number: 14E1 Signing time: Tue 30 Dec 2025 10:00:53 +0000 Manifest this update: Tue 30 Dec 2025 10:00:53 +0000 Manifest next update: Wed 31 Dec 2025 10:00:53 +0000 Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: /9SoKvLD7BoSKb5JYl6y3RKLCYQOvkYGxyITxj2/zfI=) 2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=) 3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:15:18:1c:d3:cc:3b:55:f0:ae:0d:e7:57:a8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0 Validity Not Before: Dec 30 10:00:53 2025 GMT Not After : Dec 31 10:00:53 2025 GMT Subject: CN=15b18f330039fdbd81947fd37f43237f6472ac50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:b0:7c:14:41:ac:92:25:9d:20:53:61:8e: 3c:30:99:f4:d0:eb:ef:c5:5e:28:30:9d:3c:74:00: 08:fb:c4:9a:65:7f:81:c1:66:5d:2f:be:15:1f:04: f4:59:06:23:d4:2f:59:97:f5:3d:ed:a4:4d:ee:0a: ee:ef:e2:5d:6f:fe:1b:12:e0:51:95:d6:e1:a5:63: 90:32:8c:2e:57:e5:52:25:63:4b:8c:51:b4:ae:00: f1:a3:ab:cc:d1:dd:52:01:8d:2c:0e:5e:ab:46:2f: 89:54:67:3a:4f:86:63:65:33:3a:c8:c1:e2:68:84: f2:be:41:63:bc:b4:d8:fb:3f:03:26:2b:0e:86:b7: 21:51:eb:89:48:22:b9:ad:44:39:38:21:53:3a:49: 87:f3:e9:d6:98:3e:ca:83:cd:64:90:8b:bd:40:2f: a4:3a:91:bd:ef:ac:4e:1e:51:2b:1f:8a:bc:96:9e: 63:11:fa:c9:95:11:e1:18:b3:30:d2:c4:f2:0e:47: 34:5b:5a:0d:6f:e5:3e:2f:9a:26:4e:a3:db:56:81: e3:cf:8a:90:e4:af:37:dd:45:33:83:b2:9c:28:70: f1:46:5c:01:ca:c2:9d:c9:c9:97:05:bb:ff:0c:a5: 26:40:f0:ec:40:ca:62:a4:30:34:b4:55:2c:a9:39: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:8F:33:00:39:FD:BD:81:94:7F:D3:7F:43:23:7F:64:72:AC:50 X509v3 Authority Key Identifier: keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bb:2f:6e:3c:0d:ac:3e:d9:22:b0:ef:fe:55:c1:4b:18:d7: 56:50:eb:11:d4:96:c2:3f:3c:9b:c4:83:e8:ac:c9:c2:f9:b2: 90:dd:85:c3:54:04:59:53:3a:91:b4:cf:9a:76:4b:35:ff:67: 0c:3b:61:69:8d:ce:07:3a:e9:9f:90:f1:fa:5a:97:75:1a:75: de:df:7d:55:cf:de:b4:03:5e:5a:20:c9:e3:1a:30:da:0a:a1: 26:b2:44:da:ba:f6:4a:b2:48:a9:97:9b:63:45:95:f6:41:22: d8:a8:11:6c:e5:41:c6:20:50:e0:83:ea:27:d4:81:ab:a3:72: 33:68:98:f8:44:ba:17:b9:86:71:8e:2c:b5:1e:89:cd:69:b9: 54:b6:54:7d:31:db:3d:e6:50:99:48:59:61:50:a5:f5:dc:d5: 38:4d:18:e4:3d:fa:c1:94:06:92:27:5e:16:0a:93:cd:51:c2: e7:ef:fb:a7:31:de:c5:f4:50:98:c7:c0:8d:d4:56:fe:dd:fc: 6d:98:83:e7:99:c9:84:ab:8d:c5:0c:8a:ff:cd:42:52:f6:bd: 24:ea:a2:86:45:0a:30:c3:ef:90:e9:d7:a6:e1:1d:58:1e:c5: 06:72:c0:3a:57:57:0f:82:5f:35:c8:6e:d2:01:cf:ce:78:9b: ff:1e:d7:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutBUYHNPMO1Xwrg3nV6h3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0 ODg2ZTAwHhcNMjUxMjMwMTAwMDUzWhcNMjUxMjMxMTAwMDUzWjAzMTEwLwYDVQQD EygxNWIxOGYzMzAwMzlmZGJkODE5NDdmZDM3ZjQzMjM3ZjY0NzJhYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu26wfBRBrJIlnSBTYY48MJn00Ovv xV4oMJ08dAAI+8SaZX+BwWZdL74VHwT0WQYj1C9Zl/U97aRN7gru7+Jdb/4bEuBR ldbhpWOQMowuV+VSJWNLjFG0rgDxo6vM0d1SAY0sDl6rRi+JVGc6T4ZjZTM6yMHi aITyvkFjvLTY+z8DJisOhrchUeuJSCK5rUQ5OCFTOkmH8+nWmD7Kg81kkIu9QC+k OpG976xOHlErH4q8lp5jEfrJlRHhGLMw0sTyDkc0W1oNb+U+L5omTqPbVoHjz4qQ 5K833UUzg7KcKHDxRlwBysKdycmXBbv/DKUmQPDsQMpipDA0tFUsqTkJSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWxjzMAOf29gZR/039DI39kcqxQMB8GA1UdIwQY MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7svbjwN rD7ZIrDv/lXBSxjXVlDrEdSWwj88m8SD6KzJwvmykN2Fw1QEWVM6kbTPmnZLNf9n DDthaY3OBzrpn5Dx+lqXdRp13t99Vc/etANeWiDJ4xow2gqhJrJE2rr2SrJIqZeb Y0WV9kEi2KgRbOVBxiBQ4IPqJ9SBq6NyM2iY+ES6F7mGcY4stR6JzWm5VLZUfTHb PeZQmUhZYVCl9dzVOE0Y5D36wZQGkideFgqTzVHC5+/7pzHexfRQmMfAjdRW/t38 bZiD55nJhKuNxQyK/81CUva9JOqihkUKMMPvkOnXpuEdWB7FBnLAOldXD4JfNchu 0gHPznib/x7X/Q== -----END CERTIFICATE-----Generated at Tue Dec 30 18:44:57 2025 by rpki-client