This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json) Hash identifier: 0P0aiTAzvqpn0jGOdlbDA7lFU/wnIYeJ5hoRbszL8yg= Subject key identifier: 4A:6D:1B:31:3F:7D:05:F5:29:77:C6:BC:53:2A:3C:4A:B4:D7:36:F2 Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Certificate serial: 019B42800D5723D66F35B702C39C40480232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft Manifest number: 0EC5 Signing time: Sun 21 Dec 2025 20:00:46 +0000 Manifest this update: Sun 21 Dec 2025 20:00:46 +0000 Manifest next update: Mon 22 Dec 2025 20:00:46 +0000 Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=) 2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: tJk2YmNU9etvLb8JOb9nHBG6UaeLcE5dc8FQD5hgQ4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:0d:57:23:d6:6f:35:b7:02:c3:9c:40:48:02:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Validity Not Before: Dec 21 20:00:46 2025 GMT Not After : Dec 22 20:00:46 2025 GMT Subject: CN=4a6d1b313f7d05f52977c6bc532a3c4ab4d736f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:68:ae:ae:2c:cc:4e:26:f8:40:fa:3e:96: 54:6b:d5:be:9f:fa:52:86:f9:b9:3b:20:07:21:83: 14:b3:4c:ea:98:73:79:35:26:55:6d:50:e0:05:5d: b5:8f:dd:bf:40:3f:11:83:09:af:92:5e:c8:9f:b7: 56:07:68:a8:67:c0:74:57:3e:ff:36:6b:3a:ba:61: 6f:97:aa:51:5b:a8:5f:7c:3a:21:55:37:d4:f4:3f: 06:a6:ee:e9:d3:b9:ca:62:94:77:84:06:85:00:c4: 4f:56:78:b3:6e:c0:e0:c6:ee:d1:85:c4:27:74:35: 1a:c8:21:54:8d:6d:9e:b4:59:e4:0d:aa:1d:ef:94: 11:d7:c0:8c:57:10:e4:4f:d6:5d:be:f1:9d:9a:c2: a5:80:90:52:72:ab:4a:67:17:6a:1f:12:c5:cd:88: 0b:ff:0a:ca:32:c9:6c:91:0f:ef:b3:a6:97:3e:de: c3:d2:c3:4c:e2:fe:de:52:b9:14:63:d5:b5:33:c2: 39:f1:ef:40:c9:b4:1c:70:49:1e:ba:fe:08:9a:ce: ef:96:61:54:3f:79:7a:ad:64:05:52:ba:f6:93:98: 86:ae:88:1a:5e:48:54:6f:44:9b:6e:fc:81:4f:86: 91:58:2e:08:5d:17:b3:07:2a:02:92:b9:a4:6d:17: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:1B:31:3F:7D:05:F5:29:77:C6:BC:53:2A:3C:4A:B4:D7:36:F2 X509v3 Authority Key Identifier: keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fb:f7:e9:55:57:0d:43:05:be:ad:ba:0b:68:e6:a4:bb:ad: 69:f3:fb:f9:58:7b:55:bd:8c:bc:ab:61:b2:ab:00:c7:bb:c9: 75:f6:74:df:83:6a:07:23:f3:2a:3f:26:73:e3:89:3f:6d:19: fb:46:6f:b6:54:b8:8f:83:4c:f7:29:44:4b:b9:6b:eb:87:5c: b2:25:ab:1d:62:1f:32:dc:30:97:00:45:d8:d5:18:98:ba:d6: 4f:89:95:9f:d6:0c:92:96:99:1d:ba:1a:24:f2:5d:a4:36:48: 29:24:99:25:15:69:6d:c8:07:c5:5e:c6:22:f8:22:49:84:70: 56:65:56:7b:81:cb:d3:de:78:b9:e5:23:63:8f:6e:3d:71:8e: a2:a0:8b:59:b5:85:b3:27:2f:33:56:54:34:e2:67:82:d2:a9: 64:00:19:3c:b3:50:f8:61:e3:3f:82:29:52:bf:8d:0d:ae:17: 5c:ad:de:85:51:33:10:0b:fb:c7:92:ea:60:b5:50:c7:0e:c7: c1:16:63:90:0b:21:cb:40:4f:28:26:42:00:62:65:86:bb:03: f6:26:30:69:04:4c:14:d9:2c:82:fe:14:09:3f:5e:14:4d:3b: 70:26:b9:6f:2e:35:61:fb:42:8e:33:1e:6f:46:75:36:28:b9: 7b:49:bb:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgA1XI9ZvNbcCw5xASAIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi NmI3ZjMwHhcNMjUxMjIxMjAwMDQ2WhcNMjUxMjIyMjAwMDQ2WjAzMTEwLwYDVQQD Eyg0YTZkMWIzMTNmN2QwNWY1Mjk3N2M2YmM1MzJhM2M0YWI0ZDczNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkporq4szE4m+ED6PpZUa9W+n/pS hvm5OyAHIYMUs0zqmHN5NSZVbVDgBV21j92/QD8Rgwmvkl7In7dWB2ioZ8B0Vz7/ Nms6umFvl6pRW6hffDohVTfU9D8Gpu7p07nKYpR3hAaFAMRPVnizbsDgxu7RhcQn dDUayCFUjW2etFnkDaod75QR18CMVxDkT9ZdvvGdmsKlgJBScqtKZxdqHxLFzYgL /wrKMslskQ/vs6aXPt7D0sNM4v7eUrkUY9W1M8I58e9AybQccEkeuv4Ims7vlmFU P3l6rWQFUrr2k5iGrogaXkhUb0SbbvyBT4aRWC4IXRezByoCkrmkbRcbcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEptGzE/fQX1KXfGvFMqPEq01zbyMB8GA1UdIwQY MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafv36VVX DUMFvq26C2jmpLutafP7+Vh7Vb2MvKthsqsAx7vJdfZ034NqByPzKj8mc+OJP20Z +0ZvtlS4j4NM9ylES7lr64dcsiWrHWIfMtwwlwBF2NUYmLrWT4mVn9YMkpaZHboa JPJdpDZIKSSZJRVpbcgHxV7GIvgiSYRwVmVWe4HL0954ueUjY49uPXGOoqCLWbWF sycvM1ZUNOJngtKpZAAZPLNQ+GHjP4IpUr+NDa4XXK3ehVEzEAv7x5LqYLVQxw7H wRZjkAshy0BPKCZCAGJlhrsD9iYwaQRMFNksgv4UCT9eFE07cCa5by41YftCjjMe b0Z1Nii5e0m7AA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:33:08 2025 by rpki-client