This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json) Hash identifier: 7OTTuKjsZsEja51J11F79WsftKwbCav99nVUdIg0b7w= Subject key identifier: E4:9F:47:B7:D4:58:89:39:19:13:DE:A4:E9:0C:5C:D4:53:59:C2:9B Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43 Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43 Certificate serial: 019B59E4433D9B9EAD57D51704CED4F1BA1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft Manifest number: 10A3 Signing time: Fri 26 Dec 2025 09:01:30 +0000 Manifest this update: Fri 26 Dec 2025 09:01:30 +0000 Manifest next update: Sat 27 Dec 2025 09:01:30 +0000 Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: 9pC53cv4b3KFgpdtl8uuIp1V/SDea5g/wEXpMuZysGo=) 2: NZtS_yd4-bo9e2cvGKzyKvYI3pE.roa (hash: +rJHNNOfAgRLW2AYZ2GQZ4sJIXJPzKob0SOJ3Knzwec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:43:3d:9b:9e:ad:57:d5:17:04:ce:d4:f1:ba:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43 Validity Not Before: Dec 26 09:01:30 2025 GMT Not After : Dec 27 09:01:30 2025 GMT Subject: CN=e49f47b7d45889391913dea4e90c5cd45359c29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:7d:ed:fd:4c:c1:73:29:e9:a8:ea:c6:4c: 07:a4:c8:a0:90:f2:1c:9a:a1:50:31:00:1a:3f:7f: 15:ae:f7:31:41:bc:04:e3:d9:b9:15:35:c4:46:7a: 40:6a:3c:dd:ef:00:c3:5d:74:4f:c2:0e:9a:82:8a: f9:03:b6:4a:fa:fc:3d:c7:d1:66:69:67:1d:a4:29: 18:18:42:b1:a4:44:23:70:ca:ba:b4:54:59:30:f8: d8:f0:5b:84:db:8f:40:cb:90:cf:37:02:83:84:4e: a1:1e:74:4f:21:36:95:0e:11:f5:a4:b7:89:5f:4e: 86:dc:80:f2:29:be:1e:81:f3:39:65:46:79:5c:37: b6:d7:98:0b:4b:bb:8d:e8:ca:34:78:74:4e:d9:cc: 11:d9:40:d8:d8:77:15:8c:41:ae:3a:8e:82:90:08: 94:e8:43:0f:3d:69:1c:f9:d4:ff:e5:4a:b8:a4:99: 86:ec:08:14:02:d7:bc:e8:7f:4c:18:ca:c7:2e:9e: f2:f3:7b:31:31:93:78:9c:54:15:9a:b9:c2:5a:dd: d3:16:6e:a4:1f:d3:6f:2f:89:9a:bf:c5:18:ae:03: ed:90:fa:b7:ed:49:4d:0e:2a:57:81:0a:0d:5c:05: a4:07:d3:4b:50:3e:b1:10:f0:ad:4e:d7:9f:8b:d6: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9F:47:B7:D4:58:89:39:19:13:DE:A4:E9:0C:5C:D4:53:59:C2:9B X509v3 Authority Key Identifier: keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b6:13:ab:2a:c7:39:43:ca:75:9b:6f:ff:51:12:fb:67:17: 32:5e:05:95:2d:1a:7d:10:4a:72:87:a0:2b:e8:54:be:fa:76: 22:29:e7:ab:0c:80:89:ea:ef:09:2f:f1:c5:08:93:49:32:19: da:1b:f1:d9:a7:51:90:37:74:ff:0d:3d:15:3d:48:e5:30:62: 59:f5:05:0b:a9:68:3e:18:bc:a9:12:b3:2d:21:5d:5a:ff:ee: 11:fd:d2:06:f7:ee:1f:f8:57:21:dd:6e:2c:58:6c:8c:a0:a1: b5:81:85:e2:a8:8d:67:f2:9c:d9:e5:ba:5c:e5:02:59:63:48: 09:2b:fa:58:e0:b4:d0:3a:9d:eb:2c:25:bd:c1:bd:c9:ee:e7: 9b:20:31:40:d5:2a:44:e1:33:10:32:ca:6d:28:ce:f6:de:e0: 26:76:f8:3d:6e:88:c4:3b:22:c1:02:88:89:47:45:05:fc:ea: 95:e0:91:1c:3e:8a:9a:cb:20:4d:4d:4c:9c:96:72:53:46:28: 28:57:76:bb:34:45:f3:be:c9:a2:bf:4b:03:0b:d7:34:54:db: 59:5a:f1:eb:76:00:b0:25:e5:12:4c:67:f2:88:77:e3:80:9e: dd:93:86:9d:f6:c6:82:3f:b8:b7:bd:b6:02:e2:68:1d:85:f4: d5:90:c4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EM9m56tV9UXBM7U8bodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYjFmNmUwMDE1M2E0OTE4NjExYjE0YjZiMDNmNjgxMmVk ODhhNDMwHhcNMjUxMjI2MDkwMTMwWhcNMjUxMjI3MDkwMTMwWjAzMTEwLwYDVQQD EyhlNDlmNDdiN2Q0NTg4OTM5MTkxM2RlYTRlOTBjNWNkNDUzNTljMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1st97f1MwXMp6ajqxkwHpMigkPIc mqFQMQAaP38VrvcxQbwE49m5FTXERnpAajzd7wDDXXRPwg6agor5A7ZK+vw9x9Fm aWcdpCkYGEKxpEQjcMq6tFRZMPjY8FuE249Ay5DPNwKDhE6hHnRPITaVDhH1pLeJ X06G3IDyKb4egfM5ZUZ5XDe215gLS7uN6Mo0eHRO2cwR2UDY2HcVjEGuOo6CkAiU 6EMPPWkc+dT/5Uq4pJmG7AgUAte86H9MGMrHLp7y83sxMZN4nFQVmrnCWt3TFm6k H9NvL4mav8UYrgPtkPq37UlNDipXgQoNXAWkB9NLUD6xEPCtTtefi9a3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSfR7fUWIk5GRPepOkMXNRTWcKbMB8GA1UdIwQY MBaAFN+x9uABU6SRhhGxS2sD9oEu2IpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEt ODEwNjI3ZmIyNjcxLzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEtODEwNjI3ZmIyNjcx LzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrYTqyrH OUPKdZtv/1ES+2cXMl4FlS0afRBKcoegK+hUvvp2IinnqwyAiervCS/xxQiTSTIZ 2hvx2adRkDd0/w09FT1I5TBiWfUFC6loPhi8qRKzLSFdWv/uEf3SBvfuH/hXId1u LFhsjKChtYGF4qiNZ/Kc2eW6XOUCWWNICSv6WOC00Dqd6ywlvcG9ye7nmyAxQNUq ROEzEDLKbSjO9t7gJnb4PW6IxDsiwQKIiUdFBfzqleCRHD6KmssgTU1MnJZyU0Yo KFd2uzRF877Jor9LAwvXNFTbWVrx63YAsCXlEkxn8oh344Ce3ZOGnfbGgj+4t722 AuJoHYX01ZDEpA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client