This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json) Hash identifier: FUfn8ce3EF20XVoDOFoxa0EfcSlqxHh48qAEaHuWhAw= Subject key identifier: 97:63:9E:52:C9:7D:C0:4A:CA:C6:7F:77:1C:C5:CB:92:25:A9:59:C3 Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Certificate serial: 019AF1646D6426ADFB159416687ACA4D94FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft Manifest number: 0E9B Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=) 2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: txgsmqN+YwYmucuiLM3J3Y7VW0QQ/RjMRNhZc/3dYV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6d:64:26:ad:fb:15:94:16:68:7a:ca:4d:94:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=97639e52c97dc04acac67f771cc5cb9225a959c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:95:38:76:e7:c4:39:f4:10:0b:34:28:48:45: 3a:b8:67:28:48:62:65:54:90:5b:ee:51:c4:c2:d5: d7:10:94:aa:7e:e0:c2:0a:71:8a:2d:91:17:5e:62: ad:fc:94:6d:c9:38:74:e5:c8:44:b0:e9:ec:1d:d9: 72:49:b0:8c:be:a6:96:ce:2a:89:d8:9d:5b:4c:fe: 78:8b:c3:b5:71:56:6e:e4:43:0e:d2:9b:c2:5d:70: e7:de:54:8e:d7:4c:f3:f5:63:81:c6:9c:d5:01:ec: 1c:7f:b8:65:85:4d:7e:71:53:ba:64:5a:5d:be:bb: b2:f8:9b:d5:c5:1b:30:6d:54:15:3a:92:09:82:6c: e8:6d:c6:0f:d2:50:3b:76:79:8c:73:3f:ba:db:a2: af:a8:ba:c3:1f:a5:38:3d:d1:66:64:40:12:d0:ff: ff:f8:7d:7e:f8:f3:21:ff:21:c5:e8:35:e7:e3:80: bf:c8:f9:96:61:a4:65:fd:3c:2b:9f:a8:eb:62:fe: 1f:b2:0c:cc:22:1a:b2:0d:87:64:74:26:f6:e0:52: 5a:21:e5:0c:88:63:aa:2d:0a:73:bf:a8:51:20:3b: e8:17:d5:03:32:37:27:22:9f:8a:bc:97:b3:20:7b: cb:5d:46:7e:a1:5f:2d:6c:c3:8b:3c:3b:5d:ab:83: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:9E:52:C9:7D:C0:4A:CA:C6:7F:77:1C:C5:CB:92:25:A9:59:C3 X509v3 Authority Key Identifier: keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b9:7c:2b:05:7a:6c:0f:b7:b7:5a:0c:b9:63:bf:e6:4f:99: 7f:b5:c8:52:8a:cf:8e:7d:75:b4:1a:e5:99:b3:08:42:a6:6b: ef:9e:63:73:ec:3e:b8:33:4f:81:7e:4c:38:14:b7:fa:6d:82: 16:5e:3f:5b:cb:1d:4c:90:30:5d:b7:5b:b7:40:7c:d1:d6:da: b0:aa:43:74:e9:de:7e:01:36:28:43:f3:9b:e3:6d:b3:7e:78: 5a:95:4c:5e:a6:b9:99:cd:1f:67:ea:49:96:93:85:3b:5f:20: de:1c:87:09:c2:22:00:d8:ef:53:de:99:f4:f8:27:67:de:81: 1a:76:f6:1d:be:52:a2:97:ee:00:39:10:09:96:73:f2:d9:12: 82:4b:1c:1f:06:11:39:f3:aa:1f:2a:cc:5b:e8:66:d6:67:d4: 10:df:16:fa:61:b4:09:17:d5:a8:1d:20:28:b5:b4:ae:87:4a: f6:37:3c:c5:c6:3a:ad:8c:85:93:e1:57:32:5a:21:1c:0e:c3: 6f:db:29:ab:9a:7a:67:d0:41:91:82:de:10:fb:8f:8e:84:13: 78:cf:5b:17:1c:75:85:c1:02:f7:87:e7:2c:af:ba:34:4a:75: 0c:c1:96:cd:c1:e1:24:b3:13:cd:d4:77:61:1c:ce:28:48:6b: d4:d4:da:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG1kJq37FZQWaHrKTZT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi NmI3ZjMwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD Eyg5NzYzOWU1MmM5N2RjMDRhY2FjNjdmNzcxY2M1Y2I5MjI1YTk1OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZU4dufEOfQQCzQoSEU6uGcoSGJl VJBb7lHEwtXXEJSqfuDCCnGKLZEXXmKt/JRtyTh05chEsOnsHdlySbCMvqaWziqJ 2J1bTP54i8O1cVZu5EMO0pvCXXDn3lSO10zz9WOBxpzVAewcf7hlhU1+cVO6ZFpd vruy+JvVxRswbVQVOpIJgmzobcYP0lA7dnmMcz+626KvqLrDH6U4PdFmZEAS0P// +H1++PMh/yHF6DXn44C/yPmWYaRl/Twrn6jrYv4fsgzMIhqyDYdkdCb24FJaIeUM iGOqLQpzv6hRIDvoF9UDMjcnIp+KvJezIHvLXUZ+oV8tbMOLPDtdq4PIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdjnlLJfcBKysZ/dxzFy5IlqVnDMB8GA1UdIwQY MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbl8KwV6 bA+3t1oMuWO/5k+Zf7XIUorPjn11tBrlmbMIQqZr755jc+w+uDNPgX5MOBS3+m2C Fl4/W8sdTJAwXbdbt0B80dbasKpDdOnefgE2KEPzm+Nts354WpVMXqa5mc0fZ+pJ lpOFO18g3hyHCcIiANjvU96Z9PgnZ96BGnb2Hb5SopfuADkQCZZz8tkSgkscHwYR OfOqHyrMW+hm1mfUEN8W+mG0CRfVqB0gKLW0rodK9jc8xcY6rYyFk+FXMlohHA7D b9spq5p6Z9BBkYLeEPuPjoQTeM9bFxx1hcEC94fnLK+6NEp1DMGWzcHhJLMTzdR3 YRzOKEhr1NTa0w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:13 2025 by rpki-client