This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json) Hash identifier: MCo/A09/fh2mKNcBdJyz5IOHRRuOuI0IkKS5OkJQM8o= Subject key identifier: AD:7B:F8:B3:E9:90:6D:AA:66:B6:39:64:F2:60:AE:15:E6:86:A9:57 Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1 Certificate serial: 019AF088813BFAA55FFB6E5B61607C7A8356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft Manifest number: 10BA Signing time: Fri 05 Dec 2025 22:01:09 +0000 Manifest this update: Fri 05 Dec 2025 22:01:09 +0000 Manifest next update: Sat 06 Dec 2025 22:01:09 +0000 Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: AjuNg0qlTn8Z4+k+iR6oXpDUH+Uufl5uFej+4mXqj7U=) 2: KFGuuWvhGKXdRFWCPjT6bIvxr90.roa (hash: 5mNeMpLOgDP2WV53iNWD9JlTcJDz19nCtSLYypdRdgA=) 3: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=) 4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:81:3b:fa:a5:5f:fb:6e:5b:61:60:7c:7a:83:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1 Validity Not Before: Dec 5 22:01:09 2025 GMT Not After : Dec 6 22:01:09 2025 GMT Subject: CN=ad7bf8b3e9906daa66b63964f260ae15e686a957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:5a:80:ff:81:71:e3:6f:6b:87:a4:d0:54: 94:b2:fe:18:6a:67:28:09:81:fa:36:a7:e2:b1:a3: e4:64:3a:31:a2:35:ee:ad:80:94:d4:8d:7b:e6:76: 48:98:6a:8c:fa:ba:0f:bd:82:c8:48:c6:33:43:b2: ba:52:ef:5f:95:a2:42:07:81:f3:d0:d0:cc:ec:76: 19:13:1d:20:eb:3c:38:2f:67:16:09:95:36:cb:90: fa:92:a9:f3:90:07:f2:e1:67:d2:75:55:fe:5e:62: 18:3d:5e:d7:1f:a4:f6:46:2e:1d:36:9f:ef:2f:47: cc:f8:30:e5:72:87:d4:3e:97:82:49:db:8e:50:57: 39:d4:53:09:36:34:83:5a:b8:1d:7f:35:00:be:d2: ae:c5:1e:0a:a0:0f:61:51:03:52:25:90:39:f1:48: 48:6c:ed:e7:a6:b5:ee:cb:f9:89:22:1d:48:e0:89: f7:0e:03:de:4c:63:2c:35:8a:03:d7:b0:9d:93:5d: a6:07:63:ba:6c:5a:f2:0e:4c:18:00:3c:5b:54:b4: f5:a3:53:5d:68:f7:4e:7b:d1:54:0d:e2:1a:5f:8b: d1:4b:f8:7c:fe:8b:44:b8:50:f8:f7:99:48:5a:3e: e3:d4:3d:c3:d8:ad:d9:ad:cb:77:5e:2b:60:d1:4a: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7B:F8:B3:E9:90:6D:AA:66:B6:39:64:F2:60:AE:15:E6:86:A9:57 X509v3 Authority Key Identifier: keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:df:73:bf:45:bb:06:db:38:7a:15:4d:d4:a1:b9:2a:11:a1: b4:bd:c7:77:52:64:83:0c:df:77:0f:26:21:69:d1:1c:09:54: 58:da:61:5c:cc:60:01:1a:02:f1:6f:84:55:27:40:d4:03:02: f6:d2:99:48:5d:ce:f0:8a:03:59:7c:0e:e0:66:82:21:f8:4f: 4b:43:71:0e:4f:35:51:72:14:5a:15:2e:21:91:cd:d6:69:44: c0:d6:b0:b5:cd:dc:a0:81:76:ac:fc:c5:d5:f1:a9:35:4c:9b: 1e:c5:8d:8b:43:aa:8c:13:45:66:b9:54:45:d3:cf:92:21:ab: c0:00:f8:55:83:bf:8c:ee:fc:15:da:4c:c5:59:a0:28:b8:3c: 4a:0e:3d:59:e3:f1:a0:70:94:66:6e:8a:46:6d:ee:7d:f5:d1: eb:d9:bf:5a:21:33:66:83:27:c3:69:e6:2a:bc:c3:1a:cf:83: 15:0d:2d:d0:4f:b2:90:ad:29:58:6e:8b:bf:d1:99:b3:ce:d2: 2b:03:46:f2:a0:7b:10:11:f7:de:b8:c0:81:5b:0b:82:7b:08: c5:26:cd:d1:41:9e:39:d7:4c:98:ac:f7:65:fc:12:c0:d1:7a: 0a:b9:36:7e:df:fe:e7:5c:7f:fd:21:e9:d3:d6:dd:95:c1:b3: e5:dd:c7:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIE7+qVf+25bYWB8eoNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw NDYyZDEwHhcNMjUxMjA1MjIwMTA5WhcNMjUxMjA2MjIwMTA5WjAzMTEwLwYDVQQD EyhhZDdiZjhiM2U5OTA2ZGFhNjZiNjM5NjRmMjYwYWUxNWU2ODZhOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBtagP+BceNva4ek0FSUsv4Yamco CYH6NqfisaPkZDoxojXurYCU1I175nZImGqM+roPvYLISMYzQ7K6Uu9flaJCB4Hz 0NDM7HYZEx0g6zw4L2cWCZU2y5D6kqnzkAfy4WfSdVX+XmIYPV7XH6T2Ri4dNp/v L0fM+DDlcofUPpeCSduOUFc51FMJNjSDWrgdfzUAvtKuxR4KoA9hUQNSJZA58UhI bO3nprXuy/mJIh1I4In3DgPeTGMsNYoD17Cdk12mB2O6bFryDkwYADxbVLT1o1Nd aPdOe9FUDeIaX4vRS/h8/otEuFD495lIWj7j1D3D2K3Zrct3Xitg0UqWIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK17+LPpkG2qZrY5ZPJgrhXmhqlXMB8GA1UdIwQY MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA399zv0W7 Bts4ehVN1KG5KhGhtL3Hd1Jkgwzfdw8mIWnRHAlUWNphXMxgARoC8W+EVSdA1AMC 9tKZSF3O8IoDWXwO4GaCIfhPS0NxDk81UXIUWhUuIZHN1mlEwNawtc3coIF2rPzF 1fGpNUybHsWNi0OqjBNFZrlURdPPkiGrwAD4VYO/jO78FdpMxVmgKLg8Sg49WePx oHCUZm6KRm3uffXR69m/WiEzZoMnw2nmKrzDGs+DFQ0t0E+ykK0pWG6Lv9GZs87S KwNG8qB7EBH33rjAgVsLgnsIxSbN0UGeOddMmKz3ZfwSwNF6Crk2ft/+51x//SHp 09bdlcGz5d3H7A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:13 2025 by rpki-client