This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json) Hash identifier: vFt2KQ9vDxrYBm4hPAjsARgTMbXXF5yBSoKSYagc6nQ= Subject key identifier: 77:2D:F4:D5:4A:63:BB:7F:DF:F0:76:C1:E3:3D:75:77:55:7E:94:E8 Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25 Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325 Certificate serial: 019B46272859C77ABF5B38F1A5175FE85A2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft Manifest number: 0E72 Signing time: Mon 22 Dec 2025 13:02:09 +0000 Manifest this update: Mon 22 Dec 2025 13:02:09 +0000 Manifest next update: Tue 23 Dec 2025 13:02:09 +0000 Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: H4ukaP7wMiOerP4BgS6KpUnHD/sQFWdR9s0AiihO1uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:28:59:c7:7a:bf:5b:38:f1:a5:17:5f:e8:5a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325 Validity Not Before: Dec 22 13:02:09 2025 GMT Not After : Dec 23 13:02:09 2025 GMT Subject: CN=772df4d54a63bb7fdff076c1e33d7577557e94e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c5:58:9f:72:b5:3d:1d:96:7f:ee:c1:cc:6e: 90:3a:ac:da:d4:ea:e5:2d:60:c3:e8:4a:a0:d2:9c: 32:b3:5a:dd:e7:be:a8:2e:03:c7:1b:bb:99:ad:cb: 02:26:74:e9:bb:8e:74:61:67:97:6e:d6:8b:75:c0: 0f:75:31:ca:54:bc:42:2b:4d:6c:df:43:e4:00:45: b3:cf:94:77:d2:2d:a1:d6:74:e5:f3:60:07:43:f3: 64:ac:26:af:29:36:43:a8:f3:a5:6c:8a:fe:17:62: 30:7e:3d:54:3f:bf:41:f9:ca:d3:88:2b:75:a8:88: 82:f4:60:3f:ab:95:63:43:59:85:d3:39:85:2b:69: 75:ca:c5:1a:c9:dc:5e:52:ca:d7:2b:d4:fe:60:5c: d4:20:d8:90:45:48:49:6c:98:f8:96:e0:c7:b0:85: 59:7a:91:36:98:07:80:f4:f5:02:67:f5:b2:39:8c: 38:bd:53:a8:9a:37:e3:72:b0:71:22:06:b8:3b:d7: 55:15:50:02:8c:07:05:c0:2c:b7:cc:97:1e:e4:a7: ec:b0:09:f5:67:9b:29:30:71:68:4c:2a:55:5c:d0: e0:d1:95:ca:5c:05:6b:b8:19:99:aa:95:5e:92:b1: e3:06:26:ed:23:d2:1b:04:63:dc:20:a3:7d:47:72: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:F4:D5:4A:63:BB:7F:DF:F0:76:C1:E3:3D:75:77:55:7E:94:E8 X509v3 Authority Key Identifier: keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a1:13:af:e7:45:de:a4:42:0e:a3:0d:25:c4:2a:0d:a4:98: 52:2f:b0:7f:9e:bb:1d:76:1b:14:04:80:3d:d2:df:c1:c3:c5: 19:f4:34:eb:22:08:f3:ea:6d:69:17:20:d1:d7:2e:6b:36:1e: 7a:8d:40:6c:3e:63:4a:c3:61:5e:c4:8d:92:fa:76:6f:25:db: 61:83:04:59:53:6d:ca:d8:2e:c3:cc:86:1f:92:62:c6:46:ae: 1e:27:64:47:87:52:5a:61:29:e5:9d:f1:da:ae:5b:c5:71:92: 72:33:9d:4b:39:d4:53:b0:a8:06:0c:ab:ff:23:22:bb:3c:b1: 5f:f6:36:42:9d:8d:e0:8d:0d:dc:1c:0a:9e:a0:34:2a:3a:d1: b5:55:d6:1b:f4:16:b2:b0:a7:d8:81:36:64:da:ee:4a:74:03: 74:65:2b:57:d9:0a:b8:c1:2e:27:ce:dc:d6:93:b5:93:73:cc: e1:cf:1c:72:64:7c:6a:cd:69:9b:24:01:71:66:71:9b:0f:87: 5f:53:19:2f:bd:29:45:5b:fe:03:75:3e:a7:3e:fa:03:71:40: 72:1c:aa:62:d9:89:dc:2a:e1:8f:9d:c3:bd:3a:fb:31:7c:7b: 5b:35:18:55:5b:9a:e6:f0:32:0a:1f:76:24:7e:ed:cf:77:5e: 3a:75:e9:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJyhZx3q/WzjxpRdf6FoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWE5NjM4MDk3MTRkMTEwM2I2NDYwZDlkMGUxNGExMmU4 NTAzMjUwHhcNMjUxMjIyMTMwMjA5WhcNMjUxMjIzMTMwMjA5WjAzMTEwLwYDVQQD Eyg3NzJkZjRkNTRhNjNiYjdmZGZmMDc2YzFlMzNkNzU3NzU1N2U5NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78VYn3K1PR2Wf+7BzG6QOqza1Orl LWDD6Eqg0pwys1rd576oLgPHG7uZrcsCJnTpu450YWeXbtaLdcAPdTHKVLxCK01s 30PkAEWzz5R30i2h1nTl82AHQ/NkrCavKTZDqPOlbIr+F2Iwfj1UP79B+crTiCt1 qIiC9GA/q5VjQ1mF0zmFK2l1ysUaydxeUsrXK9T+YFzUINiQRUhJbJj4luDHsIVZ epE2mAeA9PUCZ/WyOYw4vVOomjfjcrBxIga4O9dVFVACjAcFwCy3zJce5KfssAn1 Z5spMHFoTCpVXNDg0ZXKXAVruBmZqpVekrHjBibtI9IbBGPcIKN9R3IsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHct9NVKY7t/3/B2weM9dXdVfpToMB8GA1UdIwQY MBaAFN+aljgJcU0RA7ZGDZ0OFKEuhQMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgt ZjMwOTZhMDI0ZTI5LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgtZjMwOTZhMDI0ZTI5 LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaETr+dF 3qRCDqMNJcQqDaSYUi+wf567HXYbFASAPdLfwcPFGfQ06yII8+ptaRcg0dcuazYe eo1AbD5jSsNhXsSNkvp2byXbYYMEWVNtytguw8yGH5JixkauHidkR4dSWmEp5Z3x 2q5bxXGScjOdSznUU7CoBgyr/yMiuzyxX/Y2Qp2N4I0N3BwKnqA0KjrRtVXWG/QW srCn2IE2ZNruSnQDdGUrV9kKuMEuJ87c1pO1k3PM4c8ccmR8as1pmyQBcWZxmw+H X1MZL70pRVv+A3U+pz76A3FAchyqYtmJ3Crhj53DvTr7MXx7WzUYVVua5vAyCh92 JH7tz3deOnXp5g== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:25 2025 by rpki-client