This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json) Hash identifier: dG2vwiQRg1tmL1tFPLY663TwfKGUpRAzXMQHmTf6O1g= Subject key identifier: 5A:D4:6D:83:3C:4B:5E:C2:2D:28:12:16:55:4F:72:21:3D:A8:05:0D Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0 Certificate serial: 019B1E058C4CBC17897AE8F16FB12813E1B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft Manifest number: 0C80 Signing time: Sun 14 Dec 2025 18:00:38 +0000 Manifest this update: Sun 14 Dec 2025 18:00:38 +0000 Manifest next update: Mon 15 Dec 2025 18:00:38 +0000 Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: gQ0YO95pTiVY0zGK/vX2U1JFZ8kd/E4RSwe2GVniNs8=) 2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:8c:4c:bc:17:89:7a:e8:f1:6f:b1:28:13:e1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0 Validity Not Before: Dec 14 18:00:38 2025 GMT Not After : Dec 15 18:00:38 2025 GMT Subject: CN=5ad46d833c4b5ec22d281216554f72213da8050d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:e6:fb:42:b0:a7:e7:53:be:09:0d:b1:48: 5a:e3:15:db:3b:f0:62:f9:20:b5:73:45:60:29:ec: 85:df:32:47:3f:9a:e3:8a:95:19:c4:02:02:ba:2a: 8e:76:dd:73:82:45:83:06:c2:05:64:42:2d:08:3c: d6:bd:f8:d8:0f:12:fd:07:f9:ed:44:ee:7e:71:00: 1b:47:7c:05:30:ea:a0:a3:a3:56:62:96:77:7b:a8: c0:e5:c8:0a:e8:45:af:2e:c3:81:91:c1:a8:a2:90: 84:79:13:9e:13:22:32:c5:ec:b2:ca:61:c3:9f:4a: 39:73:3b:e4:25:4f:52:62:9a:06:91:f3:04:76:44: fa:2f:e0:7b:46:5a:f7:94:5e:d1:bb:c6:16:80:b9: cc:b9:ff:3e:9e:0d:1d:dc:ba:0d:a2:53:29:36:ce: 31:b8:61:e4:11:38:b3:85:93:09:65:c5:c2:1b:80: 79:23:28:f7:c3:4d:6c:c8:4c:fe:3f:ff:08:3d:16: 9b:98:cc:3a:bf:82:d5:8b:83:46:11:78:95:84:bb: 2d:79:e9:18:ff:c2:08:79:7c:6d:fc:1e:3e:8e:76: 56:8b:96:02:ee:66:1e:42:14:68:9c:99:36:bf:ef: 8f:bd:06:8d:ed:fd:8b:35:d0:b9:f2:cb:b5:e9:bc: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D4:6D:83:3C:4B:5E:C2:2D:28:12:16:55:4F:72:21:3D:A8:05:0D X509v3 Authority Key Identifier: keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5a:c4:b9:14:32:8a:b9:8d:4b:3a:d6:fa:01:ba:48:46:10: f1:26:c0:00:f3:65:3a:0e:72:21:8d:d5:3f:f9:e9:b9:21:62: 0f:d1:ac:71:9c:8d:e9:65:10:91:84:96:25:c8:40:fd:84:08: 9e:d0:28:25:e0:e1:13:10:55:53:63:32:e0:57:9a:ec:05:36: fa:53:29:1f:db:64:08:0d:a4:5f:14:77:48:f1:f0:5c:c8:d7: 60:5a:77:82:f2:8b:a9:19:8b:bd:1f:c9:c3:7d:81:f4:ea:46: 2a:b3:b3:be:69:c1:f1:32:0d:82:b9:a8:14:24:45:99:98:4e: 7c:7b:3f:04:7a:bf:9e:0a:82:66:71:cb:fe:76:9f:e3:53:43: c8:a6:05:f3:a6:db:57:0a:29:b4:f6:01:2e:35:d1:42:e0:6f: 25:26:87:18:b5:83:c5:94:19:b0:59:d7:7d:2d:b2:a5:52:e1: 10:7a:12:f8:e5:68:9f:b9:06:9c:63:2d:d7:46:2e:84:54:11: 04:d4:e2:bd:39:05:46:f3:e8:3b:e5:bb:72:48:82:29:38:8a: 5d:e4:5a:98:c5:ec:18:d3:6c:21:73:a9:d9:43:a4:2d:62:17: 11:11:0b:8c:ed:b5:c7:18:9e:b7:26:6e:48:db:7f:d9:68:b1: 75:51:a9:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBYxMvBeJeujxb7EoE+G3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2U3MTY2NDlkYWNiZjZlYTk4NjAyMzUxNGRmZTQwZGYx YTdjZjAwHhcNMjUxMjE0MTgwMDM4WhcNMjUxMjE1MTgwMDM4WjAzMTEwLwYDVQQD Eyg1YWQ0NmQ4MzNjNGI1ZWMyMmQyODEyMTY1NTRmNzIyMTNkYTgwNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstXm+0Kwp+dTvgkNsUha4xXbO/Bi +SC1c0VgKeyF3zJHP5rjipUZxAICuiqOdt1zgkWDBsIFZEItCDzWvfjYDxL9B/nt RO5+cQAbR3wFMOqgo6NWYpZ3e6jA5cgK6EWvLsOBkcGoopCEeROeEyIyxeyyymHD n0o5czvkJU9SYpoGkfMEdkT6L+B7Rlr3lF7Ru8YWgLnMuf8+ng0d3LoNolMpNs4x uGHkETizhZMJZcXCG4B5Iyj3w01syEz+P/8IPRabmMw6v4LVi4NGEXiVhLsteekY /8IIeXxt/B4+jnZWi5YC7mYeQhRonJk2v++PvQaN7f2LNdC58su16by5twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrUbYM8S17CLSgSFlVPciE9qAUNMB8GA1UdIwQY MBaAFN9+cWZJ2sv26phgI1FN/kDfGnzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQt YTY2Mjg5ODUxY2Q5LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQtYTY2Mjg5ODUxY2Q5 LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1rEuRQy irmNSzrW+gG6SEYQ8SbAAPNlOg5yIY3VP/npuSFiD9GscZyN6WUQkYSWJchA/YQI ntAoJeDhExBVU2My4Fea7AU2+lMpH9tkCA2kXxR3SPHwXMjXYFp3gvKLqRmLvR/J w32B9OpGKrOzvmnB8TINgrmoFCRFmZhOfHs/BHq/ngqCZnHL/naf41NDyKYF86bb VwoptPYBLjXRQuBvJSaHGLWDxZQZsFnXfS2ypVLhEHoS+OVon7kGnGMt10YuhFQR BNTivTkFRvPoO+W7ckiCKTiKXeRamMXsGNNsIXOp2UOkLWIXERELjO21xxietyZu SNt/2WixdVGpJw== -----END CERTIFICATE-----Generated at Sun Dec 14 22:58:32 2025 by rpki-client