This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json) Hash identifier: UOq+L8MP1sRjejyL10kAQIkUivQP4+qXAXRFoCdP+GM= Subject key identifier: E2:97:FA:EE:FF:BA:0F:4C:34:EC:A2:D9:0D:16:09:40:93:F7:F3:CF Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Certificate serial: 019B19161FAC6540FDB6D69F45DC216BF94A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 19:00:38 +0000 Manifest this update: Sat 13 Dec 2025 19:00:38 +0000 Manifest next update: Sun 14 Dec 2025 19:00:38 +0000 Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=) 2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=) 3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: DKuRZnr9aG8zP1vk3oN/depIS8RsVY6sQj5XIX6OzYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:1f:ac:65:40:fd:b6:d6:9f:45:dc:21:6b:f9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Validity Not Before: Dec 13 19:00:38 2025 GMT Not After : Dec 14 19:00:38 2025 GMT Subject: CN=e297faeeffba0f4c34eca2d90d16094093f7f3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:81:b1:ef:f7:bc:13:0c:d8:49:57:66:8b: ff:24:ac:b3:e7:75:0d:26:45:02:de:bd:54:15:30: bf:31:a8:28:54:95:2c:79:fa:68:2c:8b:45:fd:f3: c3:9c:71:12:46:e7:92:a3:1d:45:75:3d:0c:de:13: 43:6d:f9:71:e6:97:46:46:84:3d:06:c8:74:c4:b9: cb:e1:32:0b:e6:8f:a2:35:0c:13:20:8a:09:0c:8a: ec:29:fd:93:2d:99:f8:cd:d6:57:c5:d0:43:6d:56: 79:38:06:ab:f1:c9:12:03:13:6c:c6:2e:9e:88:62: 20:b5:a7:74:a4:df:92:ff:45:a6:42:d3:0d:6f:31: 39:88:31:2a:c5:c8:f1:66:09:6f:9d:b7:ad:eb:3e: 16:47:08:fe:66:ad:41:f1:c2:b2:22:f3:23:00:46: 20:e3:58:7f:b1:d8:7f:47:5b:2e:d0:d7:a6:fc:65: f8:34:82:58:43:88:a3:75:35:4d:a1:94:46:1e:a8: a1:5e:51:00:d5:aa:cc:f8:40:36:9c:c8:0c:ab:b6: 8d:f6:86:b4:c2:35:43:d2:c1:7a:4f:ce:85:f1:db: 5b:c9:f5:cb:36:d2:75:09:60:4a:eb:be:c7:da:f5: c3:4f:4b:b8:f6:e5:83:66:6a:3d:40:81:c7:da:e3: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:97:FA:EE:FF:BA:0F:4C:34:EC:A2:D9:0D:16:09:40:93:F7:F3:CF X509v3 Authority Key Identifier: keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7a:50:40:93:d4:19:8c:7b:74:e5:d6:64:c7:97:9d:d8:37: 92:da:cd:dc:e1:c7:dc:b0:92:c8:9c:46:98:74:6a:75:b8:fb: 67:84:4a:dd:14:ac:b7:80:dd:4e:08:37:56:a6:79:05:74:bb: 8e:b0:63:f7:ac:93:d9:fa:ac:15:a7:99:d8:8a:aa:f1:db:d0: 2b:f8:ac:33:6a:69:80:e0:b9:d2:a2:c8:1e:38:c0:ea:b4:01: 05:c5:f1:68:a2:e9:20:3b:98:67:cb:75:b5:21:f5:8c:b9:3a: 21:b4:e5:66:ce:17:82:56:59:58:0b:aa:38:6a:5b:e1:5d:2d: a0:7a:f2:e7:3b:16:02:1c:ee:1f:6d:c4:4b:56:45:5d:0a:5d: 7f:c2:e5:96:80:80:ea:e2:67:c1:4c:dd:0f:49:50:8e:71:34: 81:98:77:2d:c2:7f:97:bf:9e:bd:cd:72:94:7f:8b:20:b8:9f: b8:fc:3f:10:ee:90:df:74:ef:66:d7:7e:0e:5d:fe:c4:df:ca: 09:1a:2e:cf:b9:d3:e9:dc:0c:e6:5c:1c:e3:24:ea:cd:d2:4f: 61:36:e6:f7:da:e0:c1:51:0f:df:38:d0:c4:87:80:c9:1b:59: 8d:81:38:96:1c:49:e0:4f:c9:1d:32:33:b4:bd:9a:e5:81:94: 8d:af:e9:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFh+sZUD9ttafRdwha/lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi Njc0MGYwHhcNMjUxMjEzMTkwMDM4WhcNMjUxMjE0MTkwMDM4WjAzMTEwLwYDVQQD EyhlMjk3ZmFlZWZmYmEwZjRjMzRlY2EyZDkwZDE2MDk0MDkzZjdmM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y6Bse/3vBMM2ElXZov/JKyz53UN JkUC3r1UFTC/MagoVJUsefpoLItF/fPDnHESRueSox1FdT0M3hNDbflx5pdGRoQ9 Bsh0xLnL4TIL5o+iNQwTIIoJDIrsKf2TLZn4zdZXxdBDbVZ5OAar8ckSAxNsxi6e iGIgtad0pN+S/0WmQtMNbzE5iDEqxcjxZglvnbet6z4WRwj+Zq1B8cKyIvMjAEYg 41h/sdh/R1su0Nem/GX4NIJYQ4ijdTVNoZRGHqihXlEA1arM+EA2nMgMq7aN9oa0 wjVD0sF6T86F8dtbyfXLNtJ1CWBK677H2vXDT0u49uWDZmo9QIHH2uMnzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKX+u7/ug9MNOyi2Q0WCUCT9/PPMB8GA1UdIwQY MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0 LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanpQQJPU GYx7dOXWZMeXndg3ktrN3OHH3LCSyJxGmHRqdbj7Z4RK3RSst4DdTgg3VqZ5BXS7 jrBj96yT2fqsFaeZ2Iqq8dvQK/isM2ppgOC50qLIHjjA6rQBBcXxaKLpIDuYZ8t1 tSH1jLk6IbTlZs4XglZZWAuqOGpb4V0toHry5zsWAhzuH23ES1ZFXQpdf8LlloCA 6uJnwUzdD0lQjnE0gZh3LcJ/l7+evc1ylH+LILifuPw/EO6Q33TvZtd+Dl3+xN/K CRouz7nT6dwM5lwc4yTqzdJPYTbm99rgwVEP3zjQxIeAyRtZjYE4lhxJ4E/JHTIz tL2a5YGUja/pIw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:04 2025 by rpki-client