This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json) Hash identifier: krbuqF+qbpGLU/sicnjC+mZo/xSUoanLmr8ExUX2prI= Subject key identifier: AF:42:D1:2E:8A:EC:6F:0E:FA:BE:B8:A2:FA:89:06:5D:F0:C2:9D:ED Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91 Certificate serial: 019AF49C7E2B8C62E6A458817B10029F8DBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft Manifest number: 07C4 Signing time: Sat 06 Dec 2025 17:01:27 +0000 Manifest this update: Sat 06 Dec 2025 17:01:27 +0000 Manifest next update: Sun 07 Dec 2025 17:01:27 +0000 Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: rAaenG23/S+Jtb9cOl1DZIz2a2YVvOEt0yYr8wlalh4=) 2: ieIY7b0KhvQU4QgMPfI50NN4QnY.roa (hash: 5XIl/Vpt8manbA7AG4mG7L9mNTT0fdofSZrC08n/ke4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:7e:2b:8c:62:e6:a4:58:81:7b:10:02:9f:8d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91 Validity Not Before: Dec 6 17:01:27 2025 GMT Not After : Dec 7 17:01:27 2025 GMT Subject: CN=af42d12e8aec6f0efabeb8a2fa89065df0c29ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:37:12:42:45:a7:9f:59:09:8c:b4:87:e1: 44:67:4b:f8:38:9c:a1:91:c6:fe:b0:81:4b:8d:fb: 60:12:ba:4b:7a:0c:f3:4d:48:fc:22:7e:3e:15:bc: b6:90:14:2c:2a:24:d5:ef:55:c0:da:27:f8:6f:97: 3b:ab:53:f9:aa:fc:fc:b0:9f:c3:4d:37:c6:42:5a: 73:2c:82:29:a1:ec:3e:fb:bc:93:0c:36:ad:28:96: 52:54:c5:b2:81:c9:ea:32:cf:2a:df:05:56:cb:df: b8:78:55:89:26:77:86:5b:9d:64:11:4c:18:bc:59: 87:a1:ae:f7:8a:63:74:32:0c:21:84:d1:cd:45:aa: 4f:bf:9d:f9:cd:02:3a:2f:5b:fb:cc:aa:52:0f:67: 0f:eb:33:cb:9e:71:04:6d:de:66:48:4b:2f:05:df: 23:ba:50:c4:86:b3:a8:d6:06:08:a0:8e:ad:6b:58: 8e:8d:eb:67:9a:c8:28:ad:cd:c8:01:ba:0f:e3:01: 8d:48:ca:33:ff:6b:02:be:90:d7:37:9a:ac:d4:13: a4:70:fe:ae:41:55:c8:63:46:61:3c:b3:ba:59:af: 28:45:29:38:2e:7a:e5:30:f1:65:77:22:90:7b:7e: 5d:dd:a3:00:8a:c4:42:6c:6d:b4:05:1a:45:83:39: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:42:D1:2E:8A:EC:6F:0E:FA:BE:B8:A2:FA:89:06:5D:F0:C2:9D:ED X509v3 Authority Key Identifier: keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:94:ff:36:d0:c3:94:2d:d2:13:f8:c1:d1:f5:4a:54:ee:98: 0e:d2:a4:01:b2:d7:6b:cd:5b:57:ea:84:c1:e6:d2:9c:f9:17: a1:f4:c5:7b:71:2a:0e:a1:2e:43:7d:2c:51:40:e7:9f:1a:75: c6:07:b0:9e:b9:10:44:b7:e8:fa:a0:b5:d5:34:44:60:81:af: 28:28:fc:5b:82:0c:18:3b:12:4f:44:f1:79:de:53:8a:f8:d0: d0:d2:34:25:8b:f1:c3:17:f9:61:3e:93:b1:92:87:df:8b:2e: 47:33:a0:ce:c4:06:32:f9:07:3b:86:ea:81:3b:6e:8b:0c:40: 96:a2:13:bd:b7:55:2e:5b:54:42:5a:cf:69:db:6a:d7:6f:9d: 1f:92:98:a4:32:b4:70:27:a5:41:d3:7a:e5:58:fd:f8:1b:72: c1:81:d9:bb:cd:f4:50:eb:bb:98:5c:45:06:36:77:ff:40:06: b0:57:8c:6e:4a:5f:a6:5c:c4:3d:ee:60:b9:55:03:29:6c:68: 61:b3:cc:5a:79:6a:be:5a:46:a7:56:d6:4c:fd:29:cf:cf:a3: e1:b1:c0:17:b2:aa:c6:f8:6c:2c:bf:4e:f1:71:c6:7f:55:d0: 88:40:d0:f2:7d:66:90:c3:d6:3c:5b:28:ec:6d:ea:1b:03:ed: 84:8d:e1:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nH4rjGLmpFiBexACn42/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOTg1OWI3MGVhNDUwZTEzYWRhODcyNGMwZWI2YmVlY2M4 ZGFhOTEwHhcNMjUxMjA2MTcwMTI3WhcNMjUxMjA3MTcwMTI3WjAzMTEwLwYDVQQD EyhhZjQyZDEyZThhZWM2ZjBlZmFiZWI4YTJmYTg5MDY1ZGYwYzI5ZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxg3EkJFp59ZCYy0h+FEZ0v4OJyh kcb+sIFLjftgErpLegzzTUj8In4+Fby2kBQsKiTV71XA2if4b5c7q1P5qvz8sJ/D TTfGQlpzLIIpoew++7yTDDatKJZSVMWygcnqMs8q3wVWy9+4eFWJJneGW51kEUwY vFmHoa73imN0MgwhhNHNRapPv535zQI6L1v7zKpSD2cP6zPLnnEEbd5mSEsvBd8j ulDEhrOo1gYIoI6ta1iOjetnmsgorc3IAboP4wGNSMoz/2sCvpDXN5qs1BOkcP6u QVXIY0ZhPLO6Wa8oRSk4LnrlMPFldyKQe35d3aMAisRCbG20BRpFgzn+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9C0S6K7G8O+r64ovqJBl3wwp3tMB8GA1UdIwQY MBaAFPKYWbcOpFDhOtqHJMDra+7MjaqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUt M2RmNDdiNjIwZDYwLzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUtM2RmNDdiNjIwZDYw LzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJT/NtDD lC3SE/jB0fVKVO6YDtKkAbLXa81bV+qEwebSnPkXofTFe3EqDqEuQ30sUUDnnxp1 xgewnrkQRLfo+qC11TREYIGvKCj8W4IMGDsST0Txed5TivjQ0NI0JYvxwxf5YT6T sZKH34suRzOgzsQGMvkHO4bqgTtuiwxAlqITvbdVLltUQlrPadtq12+dH5KYpDK0 cCelQdN65Vj9+BtywYHZu830UOu7mFxFBjZ3/0AGsFeMbkpfplzEPe5guVUDKWxo YbPMWnlqvlpGp1bWTP0pz8+j4bHAF7KqxvhsLL9O8XHGf1XQiEDQ8n1mkMPWPFso 7G3qGwPthI3h/g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:11 2025 by rpki-client