This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json) Hash identifier: SnTNvmET5kGBmZ1bmd/d/SzpnknY9J/zHge/HPOJKq0= Subject key identifier: 05:EC:3C:2A:F6:CF:09:31:B6:98:23:1B:0D:43:C9:F0:34:E0:6D:40 Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c Certificate serial: 019B5976E224F855B200E055D414B52011B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft Manifest number: 0B37 Signing time: Fri 26 Dec 2025 07:02:01 +0000 Manifest this update: Fri 26 Dec 2025 07:02:01 +0000 Manifest next update: Sat 27 Dec 2025 07:02:01 +0000 Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: Y4PPbeXEZNIpwZBso0rEOUg2luqZgh08dkdyKD00jls=) 2: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e2:24:f8:55:b2:00:e0:55:d4:14:b5:20:11:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c Validity Not Before: Dec 26 07:02:01 2025 GMT Not After : Dec 27 07:02:01 2025 GMT Subject: CN=05ec3c2af6cf0931b698231b0d43c9f034e06d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:d8:aa:ac:f3:6e:3d:e8:a9:5d:bf:da:5d: 08:7f:65:14:cc:54:be:19:7a:2f:2e:60:6c:ae:bc: cc:26:7a:98:dc:7d:6d:a3:ad:0d:cc:4d:3f:4a:44: 01:dd:d6:c0:f0:1a:30:37:4c:2c:19:0d:7d:fd:f7: 5d:a3:62:a7:f9:4b:98:e6:21:8a:f5:40:26:c3:c2: e3:0c:25:e1:13:05:5f:42:91:78:ca:18:82:74:3c: 4c:3c:9e:8c:4b:38:01:0a:c8:7d:ac:62:9d:ad:1c: 15:0f:28:70:50:b6:98:84:dc:26:ec:9b:a2:85:ed: 99:67:c2:84:c9:7f:e5:45:ef:34:c6:39:7d:5f:25: 91:e8:f8:e1:dd:fe:b5:0e:67:9b:7f:e2:9e:8b:19: 0c:fc:1f:ea:91:08:a7:9c:1e:f1:0c:c7:49:55:3a: 99:48:94:01:b3:7f:f2:9e:62:dc:84:b3:29:8b:d9: 41:0a:ab:64:f2:9e:40:3b:34:02:e9:16:04:96:3b: 22:46:2c:b6:fd:4f:b9:cf:17:3c:2b:2f:2e:10:81: 2b:1c:4a:9f:b9:d7:28:03:9e:1f:c4:38:43:d1:c6: 4f:3c:07:cb:13:99:72:3e:aa:3e:32:88:37:3a:59: f5:07:f4:37:57:86:84:69:0b:50:83:ba:56:16:27: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EC:3C:2A:F6:CF:09:31:B6:98:23:1B:0D:43:C9:F0:34:E0:6D:40 X509v3 Authority Key Identifier: keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:ef:10:af:af:80:3f:ac:41:0c:94:23:57:30:ef:71:10: 9d:8c:fb:4d:c8:1b:89:9c:73:88:1b:aa:bc:2d:34:ae:3d:1d: 5d:c2:f5:34:4e:55:75:92:6d:e1:bf:7e:6d:b4:c5:f1:f6:a7: 25:bc:8c:4a:b5:19:04:78:e5:63:8e:d6:46:bc:d4:0d:f8:ce: a8:a3:6e:a4:92:9d:be:8a:88:aa:b0:fb:af:0e:37:cf:ab:1f: 5f:3c:b1:96:09:33:6e:17:35:f5:36:a2:40:5e:3e:52:0d:82: 48:bb:4e:a4:6c:26:dc:55:44:9a:36:6b:37:61:92:e9:23:b3: 32:49:ec:92:13:13:40:87:19:5d:70:4d:22:66:68:d7:c4:6b: ad:df:cc:fb:e5:13:d7:2e:91:e8:6a:52:d7:a6:cd:b4:c7:a1: 19:9a:44:90:4d:38:26:3b:72:75:bc:c9:03:71:d2:65:b9:dc: 26:1a:9d:0b:e8:6b:f1:4a:8f:96:61:cf:c5:23:51:f1:04:fe: ca:f1:8f:eb:56:6f:91:b2:7c:31:18:7c:29:99:ee:0c:56:f2: 20:05:e1:9a:8d:2f:08:e8:97:84:07:f9:b9:b6:99:cf:4c:68: fc:8e:f7:6b:ba:1d:ea:ed:b4:7f:39:4f:a1:ed:01:2b:23:b4: 84:73:d2:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduIk+FWyAOBV1BS1IBGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYjhkOTE0MDUwMmM5ZTAzNTMwNTE4OWJmNjU4MjM0ZGIx NGY1NGMwHhcNMjUxMjI2MDcwMjAxWhcNMjUxMjI3MDcwMjAxWjAzMTEwLwYDVQQD EygwNWVjM2MyYWY2Y2YwOTMxYjY5ODIzMWIwZDQzYzlmMDM0ZTA2ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRzYqqzzbj3oqV2/2l0If2UUzFS+ GXovLmBsrrzMJnqY3H1to60NzE0/SkQB3dbA8BowN0wsGQ19/fddo2Kn+UuY5iGK 9UAmw8LjDCXhEwVfQpF4yhiCdDxMPJ6MSzgBCsh9rGKdrRwVDyhwULaYhNwm7Jui he2ZZ8KEyX/lRe80xjl9XyWR6Pjh3f61Dmebf+KeixkM/B/qkQinnB7xDMdJVTqZ SJQBs3/ynmLchLMpi9lBCqtk8p5AOzQC6RYEljsiRiy2/U+5zxc8Ky8uEIErHEqf udcoA54fxDhD0cZPPAfLE5lyPqo+Mog3Oln1B/Q3V4aEaQtQg7pWFicYlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXsPCr2zwkxtpgjGw1DyfA04G1AMB8GA1UdIwQY MBaAFN+42RQFAsngNTBRib9lgjTbFPVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgt NDFlNzNjMWViYWUxLzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgtNDFlNzNjMWViYWUx LzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJXvEK+v gD+sQQyUI1cw73EQnYz7TcgbiZxziBuqvC00rj0dXcL1NE5VdZJt4b9+bbTF8fan JbyMSrUZBHjlY47WRrzUDfjOqKNupJKdvoqIqrD7rw43z6sfXzyxlgkzbhc19Tai QF4+Ug2CSLtOpGwm3FVEmjZrN2GS6SOzMknskhMTQIcZXXBNImZo18Rrrd/M++UT 1y6R6GpS16bNtMehGZpEkE04JjtydbzJA3HSZbncJhqdC+hr8UqPlmHPxSNR8QT+ yvGP61ZvkbJ8MRh8KZnuDFbyIAXhmo0vCOiXhAf5ubaZz0xo/I73a7od6u20fzlP oe0BKyO0hHPSqA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:31 2025 by rpki-client