This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json) Hash identifier: GlSxN1HKgQhuoWHUAFYLvZ2AOceRdRELaMRzI/dVQPY= Subject key identifier: BE:ED:05:3D:FC:5F:9B:A4:44:A8:C7:F4:EF:34:55:96:0D:EB:87:79 Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Certificate serial: 019AF2768FBF95FCC46CFAA7D0786FE56208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=) 2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=) 3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: fWMej2f1x3/tSz+u5QYZtfgkJFDZI7Dpt+oF8zN+pVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8f:bf:95:fc:c4:6c:fa:a7:d0:78:6f:e5:62:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=beed053dfc5f9ba444a8c7f4ef3455960deb8779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:02:81:de:6d:32:b2:34:2f:ec:c1:7e:54: 10:c8:7a:cb:e2:11:71:9b:69:7e:9a:39:2f:c2:72: 88:70:c5:9d:70:ed:6e:f3:65:96:ef:c5:dc:55:a3: de:31:46:c2:9e:28:24:9f:ab:51:02:93:d3:04:f1: 21:45:f9:c2:33:ee:a2:39:b2:c0:a3:80:d5:11:33: 14:15:7e:fa:79:fc:1a:86:31:0b:5a:32:25:93:87: 73:9f:3d:45:5c:c5:85:16:77:fc:58:d1:c8:ad:a4: 1a:56:e0:d1:01:58:07:50:f4:f2:1d:31:91:e5:62: 73:74:0b:5e:51:b2:bb:2c:3a:00:d9:d1:e4:6c:60: 0d:a1:c2:2c:83:4e:65:4e:3a:76:08:93:06:21:b1: 8a:fa:ce:c3:73:7f:1d:d2:ac:90:1d:3b:5e:ae:8a: 7e:2e:a7:5f:67:31:7e:05:d0:fb:85:cb:28:4f:44: 5b:36:d6:54:7d:ef:be:aa:c1:d3:84:04:d4:9b:b7: 9c:1d:21:76:4a:83:12:b5:8d:b5:ca:e3:ee:bc:80: 9d:82:16:f4:4b:d7:3b:3f:17:8b:64:4b:de:41:6e: 76:5c:a3:34:9b:2f:25:39:01:4c:01:00:3c:cc:60: 07:3d:6b:fd:93:80:e5:ef:41:f4:30:4a:64:aa:cc: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:ED:05:3D:FC:5F:9B:A4:44:A8:C7:F4:EF:34:55:96:0D:EB:87:79 X509v3 Authority Key Identifier: keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b5:e8:e5:b5:42:81:98:0f:ba:93:7b:e8:35:c3:80:81:cd: 65:3d:d4:94:8e:df:05:91:25:a1:6b:c6:79:2a:ea:8e:2d:9d: a1:8b:52:4e:77:dc:a0:66:de:b0:2f:90:79:1f:64:4b:b4:92: ff:c4:a1:e9:9a:3a:ac:db:d5:38:e2:90:d8:de:c3:2f:5c:a9: 33:7e:ad:3d:01:d2:1d:43:5c:41:51:18:e8:0d:f1:23:56:e3: 48:a4:e9:d7:92:f4:d2:05:1e:83:5c:0d:e9:a1:65:7a:c6:bd: 69:8f:38:d2:b8:af:c0:e9:f3:b9:ee:24:b8:8c:de:88:d0:9a: fb:0d:e5:28:ad:a5:4e:02:ef:38:0b:9c:cf:fe:62:31:7e:13: 57:d1:fd:1d:4a:51:04:d0:33:45:29:bb:5c:3d:5e:6d:9b:36: 3b:7b:43:19:17:c4:63:3a:d1:28:20:57:2b:00:72:14:83:d0: 2e:9c:85:7e:12:2f:1d:1f:36:97:81:52:b1:34:ed:7c:2c:04: 5b:7f:9a:aa:c8:b0:a6:94:81:a4:89:75:d1:9c:30:ef:91:90: 8f:6c:a7:08:05:03:19:e3:9e:ba:90:b4:8f:d5:68:2d:6c:4e: 45:42:6a:58:21:cb:a9:7b:7d:18:96:07:95:ec:ba:9e:42:9f: 2d:93:da:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo+/lfzEbPqn0Hhv5WIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi Njc0MGYwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EyhiZWVkMDUzZGZjNWY5YmE0NDRhOGM3ZjRlZjM0NTU5NjBkZWI4Nzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvngCgd5tMrI0L+zBflQQyHrL4hFx m2l+mjkvwnKIcMWdcO1u82WW78XcVaPeMUbCnigkn6tRApPTBPEhRfnCM+6iObLA o4DVETMUFX76efwahjELWjIlk4dznz1FXMWFFnf8WNHIraQaVuDRAVgHUPTyHTGR 5WJzdAteUbK7LDoA2dHkbGANocIsg05lTjp2CJMGIbGK+s7Dc38d0qyQHTterop+ LqdfZzF+BdD7hcsoT0RbNtZUfe++qsHThATUm7ecHSF2SoMStY21yuPuvICdghb0 S9c7PxeLZEveQW52XKM0my8lOQFMAQA8zGAHPWv9k4Dl70H0MEpkqsyRrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7tBT38X5ukRKjH9O80VZYN64d5MB8GA1UdIwQY MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0 LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7Xo5bVC gZgPupN76DXDgIHNZT3UlI7fBZEloWvGeSrqji2doYtSTnfcoGbesC+QeR9kS7SS /8Sh6Zo6rNvVOOKQ2N7DL1ypM36tPQHSHUNcQVEY6A3xI1bjSKTp15L00gUeg1wN 6aFlesa9aY840rivwOnzue4kuIzeiNCa+w3lKK2lTgLvOAucz/5iMX4TV9H9HUpR BNAzRSm7XD1ebZs2O3tDGRfEYzrRKCBXKwByFIPQLpyFfhIvHR82l4FSsTTtfCwE W3+aqsiwppSBpIl10Zww75GQj2ynCAUDGeOeupC0j9VoLWxORUJqWCHLqXt9GJYH ley6nkKfLZPaAg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:44 2025 by rpki-client