This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json) Hash identifier: ZLSlVP92z4xajv11AqHoKz3LuFDsvlSVd630qdT7708= Subject key identifier: 7F:8C:A2:79:81:DF:08:74:47:31:02:C6:A8:72:70:87:47:58:6B:98 Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0 Certificate serial: 019AF31D5A2B642FD8F512EAEA8921076924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft Manifest number: 14A1 Signing time: Sat 06 Dec 2025 10:02:58 +0000 Manifest this update: Sat 06 Dec 2025 10:02:58 +0000 Manifest next update: Sun 07 Dec 2025 10:02:58 +0000 Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: g4cmzxFrym3qN5CBH+KWHnEhPr/itYy1t6RB8POJwcc=) 2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=) 3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5a:2b:64:2f:d8:f5:12:ea:ea:89:21:07:69:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0 Validity Not Before: Dec 6 10:02:58 2025 GMT Not After : Dec 7 10:02:58 2025 GMT Subject: CN=7f8ca27981df0874473102c6a872708747586b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:37:be:44:c8:ff:1f:f2:82:9c:c8:bd:df:02: 36:65:01:51:b1:a9:e9:cc:42:e4:fc:09:f8:13:fa: e2:c8:a7:a7:57:b5:a7:df:dd:06:dc:cd:69:ac:cc: 7f:78:ef:06:da:2d:2c:f6:8d:94:d0:57:12:f5:5b: ad:e0:7c:3e:5c:dc:1a:29:32:9a:40:4c:a9:26:96: e0:b8:20:40:ac:c3:42:b5:46:e6:8f:3b:15:a8:09: 7e:ad:95:45:c4:f3:34:db:87:11:92:60:6d:fa:27: d0:ee:cd:34:7f:98:c6:07:19:0b:6f:4b:50:47:89: 2a:89:8a:aa:4a:be:62:23:c5:6e:75:01:16:49:61: 6f:5c:ba:39:ab:b5:4b:cf:20:16:f5:94:f6:bd:7f: fa:6e:ac:7b:04:13:b9:72:b7:05:f2:2a:90:d2:6e: be:fe:18:08:1b:a0:87:28:16:dd:f3:5f:9a:6f:07: d3:f7:ce:e0:6d:22:e4:5c:39:89:2b:4b:53:ec:78: 5e:d1:c7:6b:8f:1d:eb:c6:d5:ef:c6:36:59:2a:dc: b8:5e:14:2f:69:a2:d4:a7:cc:83:bc:67:28:63:1b: 50:87:0c:bb:7c:39:b3:ad:53:a0:88:52:40:38:b9: 0f:73:e5:c1:fd:3c:0e:09:fc:04:01:fd:b6:5e:0e: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:A2:79:81:DF:08:74:47:31:02:C6:A8:72:70:87:47:58:6B:98 X509v3 Authority Key Identifier: keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:20:e6:77:00:e9:4d:8f:dc:77:73:50:34:db:88:07:53:0a: ce:32:53:64:b9:a2:4a:3e:c5:41:55:25:88:39:e0:50:a7:0b: a6:28:10:37:a6:5d:1a:02:fb:43:3a:66:8f:a2:8c:24:bb:71: 4c:91:d7:d8:59:dc:7a:e0:83:cf:03:7c:11:8b:69:ab:c4:ee: da:41:03:a4:5f:5e:11:a1:4f:32:c5:9f:11:1a:0d:2f:eb:24: f1:bf:0b:7a:b9:2f:c0:b7:8c:40:ba:4a:a8:36:fa:5d:d7:14: 5a:a3:cf:9e:d7:bd:6d:6b:7b:10:cd:08:19:90:c7:c4:4b:69: e4:bd:f8:b1:e9:f7:20:27:61:8d:ef:41:61:a3:2c:c2:78:84: c0:21:e1:0c:5c:2b:fe:f2:38:b3:d0:fc:16:99:f4:44:f7:f8: ce:e0:57:0c:98:5a:fe:ee:38:c7:3a:f4:3c:cc:ac:57:9e:d6: 41:38:56:fa:47:a8:8a:c3:c5:3d:59:1d:ab:6d:c2:ab:cd:9c: 0d:f4:46:20:cf:ca:5d:d6:b1:95:db:eb:64:5f:8c:b6:45:cd: 81:aa:0e:98:4e:da:10:71:93:61:ce:43:24:c1:ac:5f:d9:83: 3e:35:ea:4c:e4:f1:e4:37:0d:01:9a:54:f5:5b:a3:43:d2:31: 2c:6e:e3:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVorZC/Y9RLq6okhB2kkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0 ODg2ZTAwHhcNMjUxMjA2MTAwMjU4WhcNMjUxMjA3MTAwMjU4WjAzMTEwLwYDVQQD Eyg3ZjhjYTI3OTgxZGYwODc0NDczMTAyYzZhODcyNzA4NzQ3NTg2Yjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ze+RMj/H/KCnMi93wI2ZQFRsanp zELk/An4E/riyKenV7Wn390G3M1prMx/eO8G2i0s9o2U0FcS9Vut4Hw+XNwaKTKa QEypJpbguCBArMNCtUbmjzsVqAl+rZVFxPM024cRkmBt+ifQ7s00f5jGBxkLb0tQ R4kqiYqqSr5iI8VudQEWSWFvXLo5q7VLzyAW9ZT2vX/6bqx7BBO5crcF8iqQ0m6+ /hgIG6CHKBbd81+abwfT987gbSLkXDmJK0tT7Hhe0cdrjx3rxtXvxjZZKty4XhQv aaLUp8yDvGcoYxtQhwy7fDmzrVOgiFJAOLkPc+XB/TwOCfwEAf22Xg50uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+MonmB3wh0RzECxqhycIdHWGuYMB8GA1UdIwQY MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiDmdwDp TY/cd3NQNNuIB1MKzjJTZLmiSj7FQVUliDngUKcLpigQN6ZdGgL7Qzpmj6KMJLtx TJHX2FnceuCDzwN8EYtpq8Tu2kEDpF9eEaFPMsWfERoNL+sk8b8LerkvwLeMQLpK qDb6XdcUWqPPnte9bWt7EM0IGZDHxEtp5L34sen3ICdhje9BYaMswniEwCHhDFwr /vI4s9D8Fpn0RPf4zuBXDJha/u44xzr0PMysV57WQThW+keoisPFPVkdq23Cq82c DfRGIM/KXdaxldvrZF+MtkXNgaoOmE7aEHGTYc5DJMGsX9mDPjXqTOTx5DcNAZpU 9VujQ9IxLG7jbw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:02 2025 by rpki-client