This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: i+Uz5a2hS/gkpqN8RhvU7FNGRZSEZD66XQ4w/N8c3wc= Subject key identifier: B5:F7:BD:2B:A8:98:5C:BC:98:82:C6:6F:EB:87:C5:CA:30:92:1C:91 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019B058F5F3B62EE0106D7393303B9AEB4F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 0655 Signing time: Wed 10 Dec 2025 00:00:40 +0000 Manifest this update: Wed 10 Dec 2025 00:00:40 +0000 Manifest next update: Thu 11 Dec 2025 00:00:40 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: LWKznLVYsqL9ozzheRxcgqi3Z/JTK2oro8pbZbc1vp0=) 2: 5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa (hash: Tk6h46GooTA/gBtAz3CQBGmG5ai7s8MBzIVWccJFxM0=) 3: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 4: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 5: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 6: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 7: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 8: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 9: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 10: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:8f:5f:3b:62:ee:01:06:d7:39:33:03:b9:ae:b4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Dec 10 00:00:40 2025 GMT Not After : Dec 11 00:00:40 2025 GMT Subject: CN=b5f7bd2ba8985cbc9882c66feb87c5ca30921c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6e:20:16:36:a7:87:cd:44:c4:77:f4:2b:e0: 65:c6:a1:c2:47:4a:ec:79:47:f1:f1:cf:ee:f5:55: e5:8c:97:01:db:e6:9e:34:8f:bd:59:b5:35:fa:59: 85:25:3a:9d:c1:59:b9:b1:1c:96:1f:20:67:12:a7: 45:72:6f:12:2f:63:13:55:cf:5a:14:de:e7:b6:8b: c1:6b:1b:a7:47:d8:75:10:ef:0c:90:af:e9:0d:34: f2:29:93:c0:60:59:91:43:bf:23:7d:3b:b3:60:03: 9d:25:f8:14:af:5d:d3:84:22:3e:97:1d:7d:4f:51: 22:74:6a:87:46:6b:34:e4:c7:04:10:47:ec:da:80: cc:4a:60:f8:5c:8d:9d:ab:3b:a7:68:1b:44:62:c6: 38:86:48:17:d3:ef:ac:c3:d8:c7:09:1d:77:d0:90: 8b:54:7e:b7:9e:2b:d0:5f:51:c6:45:cf:52:4f:9e: 82:fe:6b:9b:77:8c:39:ee:b6:63:b7:92:fb:d0:e4: af:3f:b1:6c:76:a9:73:dd:af:92:9c:13:e7:6e:b8: f0:71:1b:60:b8:09:78:5f:06:f4:9f:d2:f2:ef:e9: ed:00:6d:8a:e1:db:8d:53:32:fe:6c:61:fa:af:6f: d7:92:c6:2b:97:b9:84:6b:fd:6c:cc:47:e9:d7:8d: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F7:BD:2B:A8:98:5C:BC:98:82:C6:6F:EB:87:C5:CA:30:92:1C:91 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a1:d7:9f:c7:33:cd:cf:8d:81:2f:5b:b4:a2:f4:53:6f:7e: 72:41:30:53:8f:22:b7:8d:6c:73:df:0d:27:4a:a6:74:e3:25: c1:ec:46:85:d8:29:9c:3c:ca:29:50:cc:21:e8:dd:35:3a:4a: 32:d3:e1:3b:0d:d0:72:5a:b7:3e:46:b7:2b:8a:64:db:72:ef: f6:97:e0:85:55:6b:fe:4f:57:2b:c2:4b:8e:3d:6f:fd:cb:4f: ac:f2:fa:8d:80:05:a4:41:ac:90:7f:2f:9e:a8:ee:d5:fd:c7: 06:83:9f:0b:96:78:9e:30:ee:f1:a0:27:08:40:e6:6d:4e:8d: 8c:c8:b7:58:f8:10:e2:31:f2:14:9b:dc:95:83:62:fd:77:9d: f3:86:57:6d:7a:4d:11:e3:2f:ce:e6:86:33:b3:e5:ad:f2:eb: 2f:73:06:b1:95:92:fe:74:5f:21:a2:95:31:52:70:dc:4b:6a: 2c:0e:bb:37:9f:96:4b:ef:39:6c:00:54:ac:4d:e1:5d:32:80: 94:4f:e6:df:4e:dc:e4:36:9d:c9:7e:23:d7:69:76:0b:8a:11: d6:76:b0:c3:6a:4a:98:98:54:25:d9:3a:0f:2d:f8:f3:3f:26: 40:90:0b:28:9a:25:45:53:f9:24:7f:ed:53:85:37:5e:27:30: 60:50:1c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFj187Yu4BBtc5MwO5rrT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUxMjEwMDAwMDQwWhcNMjUxMjExMDAwMDQwWjAzMTEwLwYDVQQD EyhiNWY3YmQyYmE4OTg1Y2JjOTg4MmM2NmZlYjg3YzVjYTMwOTIxYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk24gFjanh81ExHf0K+BlxqHCR0rs eUfx8c/u9VXljJcB2+aeNI+9WbU1+lmFJTqdwVm5sRyWHyBnEqdFcm8SL2MTVc9a FN7ntovBaxunR9h1EO8MkK/pDTTyKZPAYFmRQ78jfTuzYAOdJfgUr13ThCI+lx19 T1EidGqHRms05McEEEfs2oDMSmD4XI2dqzunaBtEYsY4hkgX0++sw9jHCR130JCL VH63nivQX1HGRc9ST56C/mubd4w57rZjt5L70OSvP7Fsdqlz3a+SnBPnbrjwcRtg uAl4Xwb0n9Ly7+ntAG2K4duNUzL+bGH6r2/XksYrl7mEa/1szEfp140QuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLX3vSuomFy8mILGb+uHxcowkhyRMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6HXn8cz zc+NgS9btKL0U29+ckEwU48it41sc98NJ0qmdOMlwexGhdgpnDzKKVDMIejdNTpK MtPhOw3Qclq3Pka3K4pk23Lv9pfghVVr/k9XK8JLjj1v/ctPrPL6jYAFpEGskH8v nqju1f3HBoOfC5Z4njDu8aAnCEDmbU6NjMi3WPgQ4jHyFJvclYNi/Xed84ZXbXpN EeMvzuaGM7PlrfLrL3MGsZWS/nRfIaKVMVJw3EtqLA67N5+WS+85bABUrE3hXTKA lE/m307c5DadyX4j12l2C4oR1naww2pKmJhUJdk6Dy348z8mQJALKJolRVP5JH/t U4U3XicwYFAc5g== -----END CERTIFICATE-----Generated at Wed Dec 10 05:33:34 2025 by rpki-client