This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json) Hash identifier: Nqp0+4iVL+bTANW9qk5ar5wy5u7hdwRsucV4uvdgjlo= Subject key identifier: A5:E2:B2:A8:AA:C4:B0:D4:3F:91:81:36:5E:77:56:85:FB:72:89:92 Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0 Certificate serial: 019AF50AA4856CBEABD582EA2A7A96B69AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 19:01:46 +0000 Manifest this update: Sat 06 Dec 2025 19:01:46 +0000 Manifest next update: Sun 07 Dec 2025 19:01:46 +0000 Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: 2NNlxjJ1m5+E8xinh+TSV1SAVZwPvk2d6WugZ6f2z9o=) 2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=) 3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a4:85:6c:be:ab:d5:82:ea:2a:7a:96:b6:9a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0 Validity Not Before: Dec 6 19:01:46 2025 GMT Not After : Dec 7 19:01:46 2025 GMT Subject: CN=a5e2b2a8aac4b0d43f9181365e775685fb728992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:77:01:3c:34:c1:9d:74:fa:f7:29:66:f2: 77:4c:f6:fe:7e:0c:8c:41:3b:a5:6b:9e:91:36:4b: 97:16:a1:8c:a5:61:1c:b6:0c:e8:1c:bc:48:03:67: 8e:7b:50:7c:b9:15:77:2b:51:b0:e2:2b:6a:e4:4b: 38:03:e6:72:96:1e:5d:fe:63:da:e0:55:ca:7d:11: 80:c9:3d:de:e6:d5:f6:63:a0:87:70:ea:92:7b:bd: eb:7e:1b:c4:a6:7e:84:2b:4f:d9:55:7d:cd:29:29: 62:02:16:15:0d:e4:40:7b:1d:56:09:d6:e1:f0:94: c3:0e:0f:81:5d:0e:1f:22:cd:b7:3a:2d:d7:68:bb: 25:6f:9a:cb:46:ea:f5:e7:ac:8d:a5:bf:13:5f:79: 49:ef:75:00:28:ca:29:f9:92:4c:c7:57:ab:59:e9: 55:61:f2:72:2e:ef:16:24:2e:7f:03:66:03:83:be: f2:1c:14:0e:6d:6c:32:cb:08:8c:e4:a9:13:39:27: 91:f0:9f:21:10:e9:9e:f5:fa:b3:b0:cb:13:ac:20: 47:6c:f5:13:a3:b7:10:d1:a2:b7:64:f9:b9:67:71: 72:73:a0:0b:db:5e:29:f2:56:7e:87:b5:ec:57:3c: 3e:35:5e:de:77:36:23:29:4c:f9:35:7e:5b:0a:3f: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E2:B2:A8:AA:C4:B0:D4:3F:91:81:36:5E:77:56:85:FB:72:89:92 X509v3 Authority Key Identifier: keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:87:08:3b:27:18:0b:02:6b:5e:52:18:ed:0b:51:67:f6:23: 51:70:4b:fa:a1:c1:45:90:fd:ba:41:d0:73:d4:1e:8c:70:3f: a9:b5:84:fc:f1:20:4e:f0:a5:c7:2c:3a:0c:3d:69:f7:10:5d: c8:56:5f:66:59:35:e3:03:64:89:db:17:c7:8c:a9:4f:d4:75: 55:f5:03:59:df:f0:3d:f2:9f:07:2e:b3:ec:23:ec:18:d4:31: 6c:6d:33:38:44:e8:4d:de:d0:81:8f:a8:42:d3:ca:e4:57:48: 5d:4e:bf:ac:5c:4f:d6:2c:16:49:d6:c5:a1:41:2d:43:55:fb: aa:3a:09:68:a6:24:38:9b:6d:a2:80:ef:b7:ea:f5:36:fb:af: fa:f4:9c:be:d5:fb:20:3b:1c:71:c3:ea:c0:83:3d:80:5f:15: 15:31:15:0e:2c:0c:fe:6b:d9:e6:34:9e:e2:0c:27:fd:d2:28: 34:ce:ed:52:a3:36:e1:c6:0f:48:34:7b:28:62:f3:9a:0a:53: fb:66:09:2b:cc:2d:65:fc:a9:84:e0:a5:4b:e5:60:98:0d:60: a4:c3:26:09:42:ba:ca:ea:0a:36:4e:fa:15:87:13:89:c7:7b: 72:65:b9:d8:b5:79:16:1b:1b:f3:90:ae:2c:8f:58:44:0c:88: f6:1b:fb:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqSFbL6r1YLqKnqWtprJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0 ODg2ZTAwHhcNMjUxMjA2MTkwMTQ2WhcNMjUxMjA3MTkwMTQ2WjAzMTEwLwYDVQQD EyhhNWUyYjJhOGFhYzRiMGQ0M2Y5MTgxMzY1ZTc3NTY4NWZiNzI4OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGV3ATw0wZ10+vcpZvJ3TPb+fgyM QTula56RNkuXFqGMpWEctgzoHLxIA2eOe1B8uRV3K1Gw4itq5Es4A+Zylh5d/mPa 4FXKfRGAyT3e5tX2Y6CHcOqSe73rfhvEpn6EK0/ZVX3NKSliAhYVDeRAex1WCdbh 8JTDDg+BXQ4fIs23Oi3XaLslb5rLRur156yNpb8TX3lJ73UAKMop+ZJMx1erWelV YfJyLu8WJC5/A2YDg77yHBQObWwyywiM5KkTOSeR8J8hEOme9fqzsMsTrCBHbPUT o7cQ0aK3ZPm5Z3Fyc6AL214p8lZ+h7XsVzw+NV7edzYjKUz5NX5bCj8yRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXisqiqxLDUP5GBNl53VoX7comSMB8GA1UdIwQY MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYcIOycY CwJrXlIY7QtRZ/YjUXBL+qHBRZD9ukHQc9QejHA/qbWE/PEgTvClxyw6DD1p9xBd yFZfZlk14wNkidsXx4ypT9R1VfUDWd/wPfKfBy6z7CPsGNQxbG0zOEToTd7QgY+o QtPK5FdIXU6/rFxP1iwWSdbFoUEtQ1X7qjoJaKYkOJttooDvt+r1Nvuv+vScvtX7 IDscccPqwIM9gF8VFTEVDiwM/mvZ5jSe4gwn/dIoNM7tUqM24cYPSDR7KGLzmgpT +2YJK8wtZfyphOClS+VgmA1gpMMmCUK6yuoKNk76FYcTicd7cmW52LV5Fhsb85Cu LI9YRAyI9hv7VQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:13 2025 by rpki-client