This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json) Hash identifier: 0hc6qUEe+bITYpr9O68+prYmooxcZKrdWNI9tKF5+vk= Subject key identifier: 29:BD:A5:C9:16:51:28:2F:1E:78:39:F0:B5:11:2C:D1:CE:71:39:82 Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Certificate serial: 019B38D81E4C6CB5EC0EFF19EE2DA3F125B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft Manifest number: 0EC0 Signing time: Fri 19 Dec 2025 23:00:46 +0000 Manifest this update: Fri 19 Dec 2025 23:00:46 +0000 Manifest next update: Sat 20 Dec 2025 23:00:46 +0000 Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=) 2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: njWo0f94pksKPAe9Sn1eAB/AS8BXgaL4/kBb4Fs78TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:1e:4c:6c:b5:ec:0e:ff:19:ee:2d:a3:f1:25:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Validity Not Before: Dec 19 23:00:46 2025 GMT Not After : Dec 20 23:00:46 2025 GMT Subject: CN=29bda5c91651282f1e7839f0b5112cd1ce713982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:5b:cb:c2:6b:c4:69:93:54:f8:a9:1d:48: cd:a5:0f:de:e3:9a:cf:0d:a8:98:75:a2:de:6d:65: 78:22:ea:e6:ff:ce:07:54:7a:58:2a:3b:a6:f7:d2: 2c:db:a2:05:b6:5a:89:79:2e:0e:4e:99:5c:5f:1e: ba:78:8e:8b:08:23:6d:bd:6d:af:06:b3:a7:70:c7: 1f:38:71:2f:72:f2:3c:fb:59:80:52:d9:08:b6:91: df:8a:98:2e:44:d0:26:81:07:03:81:45:b1:de:ac: dc:d5:02:dc:c7:8e:0b:ca:a1:b6:ca:8a:42:d1:17: 9c:46:b4:53:29:e0:10:0e:a0:89:48:8f:8e:2b:f0: 5e:59:1b:48:d0:34:ad:48:b6:a7:13:fd:8a:6b:38: 9c:f7:45:94:37:dd:5e:fa:c0:45:b6:b7:c3:e2:1f: 5e:7f:43:e3:07:5d:b2:75:7a:da:72:aa:1c:ab:15: d9:77:1b:dd:9b:54:ec:30:2b:f8:6e:8f:1d:9a:21: d0:24:6b:df:f6:ef:46:7b:99:99:21:9d:6b:cd:e7: 69:c1:a5:59:88:8a:eb:09:03:20:01:46:69:a8:19: e3:15:78:f9:5f:da:ec:e2:e0:06:f6:d1:58:f7:65: e7:2a:cb:be:73:06:41:20:00:4e:4c:5b:8c:31:15: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:A5:C9:16:51:28:2F:1E:78:39:F0:B5:11:2C:D1:CE:71:39:82 X509v3 Authority Key Identifier: keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ae:d5:10:63:0c:46:22:f0:22:04:ac:1b:3a:9e:ec:81:9a: 88:cd:a0:ad:f9:bd:ca:d6:f4:ad:4a:ab:08:d0:a9:4d:53:b0: de:30:ca:41:19:de:76:f1:79:48:c9:0f:53:49:ca:c9:dc:89: 10:bb:ae:06:39:16:b8:de:aa:0c:ac:df:d2:bf:66:30:3b:e1: c0:4d:f7:b8:1c:00:2c:1e:eb:5c:7e:62:ef:2a:ce:c9:c3:de: 09:46:85:29:78:84:7d:63:34:f8:ae:f4:be:e2:c8:f6:dd:0b: c9:98:6c:d1:30:31:cc:8b:58:ad:bf:4a:c9:9e:bd:e7:d5:0a: f4:c3:09:70:7c:96:25:df:e2:a8:71:08:0b:67:f8:67:39:eb: 68:b3:8d:e5:2d:11:85:8f:a1:68:fe:81:71:fc:f1:73:19:a9: 1b:32:6c:88:12:e4:06:1a:50:78:d7:75:43:d5:95:20:fe:46: 24:71:c1:c0:38:91:db:62:5c:18:93:4f:ce:31:08:f8:a8:3d: 6c:ff:45:65:5e:0f:69:a1:e5:e9:4e:cd:33:09:2c:74:80:54: 26:22:01:59:b2:41:fa:85:00:bf:58:ff:33:d9:03:5a:76:66: 30:6b:f8:80:ed:f5:83:1c:9c:47:28:0b:c4:a1:6c:f5:cf:88: 77:22:33:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42B5MbLXsDv8Z7i2j8SWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi NmI3ZjMwHhcNMjUxMjE5MjMwMDQ2WhcNMjUxMjIwMjMwMDQ2WjAzMTEwLwYDVQQD EygyOWJkYTVjOTE2NTEyODJmMWU3ODM5ZjBiNTExMmNkMWNlNzEzOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzahby8JrxGmTVPipHUjNpQ/e45rP DaiYdaLebWV4Iurm/84HVHpYKjum99Is26IFtlqJeS4OTplcXx66eI6LCCNtvW2v BrOncMcfOHEvcvI8+1mAUtkItpHfipguRNAmgQcDgUWx3qzc1QLcx44LyqG2yopC 0RecRrRTKeAQDqCJSI+OK/BeWRtI0DStSLanE/2Kazic90WUN91e+sBFtrfD4h9e f0PjB12ydXracqocqxXZdxvdm1TsMCv4bo8dmiHQJGvf9u9Ge5mZIZ1rzedpwaVZ iIrrCQMgAUZpqBnjFXj5X9rs4uAG9tFY92XnKsu+cwZBIABOTFuMMRXDjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm9pckWUSgvHng58LURLNHOcTmCMB8GA1UdIwQY MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOa7VEGMM RiLwIgSsGzqe7IGaiM2grfm9ytb0rUqrCNCpTVOw3jDKQRnedvF5SMkPU0nKydyJ ELuuBjkWuN6qDKzf0r9mMDvhwE33uBwALB7rXH5i7yrOycPeCUaFKXiEfWM0+K70 vuLI9t0LyZhs0TAxzItYrb9KyZ6959UK9MMJcHyWJd/iqHEIC2f4ZznraLON5S0R hY+haP6BcfzxcxmpGzJsiBLkBhpQeNd1Q9WVIP5GJHHBwDiR22JcGJNPzjEI+Kg9 bP9FZV4PaaHl6U7NMwksdIBUJiIBWbJB+oUAv1j/M9kDWnZmMGv4gO31gxycRygL xKFs9c+IdyIz5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 01:49:04 2025 by rpki-client