This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json) Hash identifier: 4z+6zZcUzW6G9czsyFhQa/b+KTacNDzOMU2zo6J3aBc= Subject key identifier: BB:E0:AE:08:A9:CE:D2:11:7C:64:34:AD:09:26:AA:B3:D4:E2:1B:BC Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd Certificate serial: 019B115D23E91F531E1E0914870D624127E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft Manifest number: 0E67 Signing time: Fri 12 Dec 2025 07:01:15 +0000 Manifest this update: Fri 12 Dec 2025 07:01:15 +0000 Manifest next update: Sat 13 Dec 2025 07:01:15 +0000 Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: kJLDgjcWBYYrBJ141hYnzeEIIdbMPyG1Trcrf3ZlkVc=) 2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:23:e9:1f:53:1e:1e:09:14:87:0d:62:41:27:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd Validity Not Before: Dec 12 07:01:15 2025 GMT Not After : Dec 13 07:01:15 2025 GMT Subject: CN=bbe0ae08a9ced2117c6434ad0926aab3d4e21bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:86:1a:cb:b6:b3:3c:1f:09:16:d7:58:8d:a9: c1:d8:f4:e4:25:99:e3:b1:13:78:30:af:c3:d4:44: 73:68:97:c6:55:9a:23:1b:5a:f7:08:96:00:4e:a8: 3a:d9:00:f0:09:2d:a8:e3:52:1d:9e:8a:59:ed:56: 70:de:04:22:c2:e4:49:dc:a5:02:a0:73:f2:fd:71: 66:d2:e6:2a:00:3a:0d:ab:85:7e:1d:dc:dc:54:e1: d3:8c:d0:71:7c:af:e7:39:59:57:d0:ae:fe:36:a3: c7:ae:a9:b6:24:cb:f1:6b:c4:71:57:ad:fa:ea:3d: d3:2c:46:38:22:b9:7c:2c:e1:23:42:01:f9:de:8b: ef:8d:f4:42:be:33:e2:ce:e1:08:ee:b1:c3:a4:66: 79:ed:73:5c:ec:98:95:93:2d:6f:e2:f6:91:22:f3: 1e:2b:af:d2:22:97:6d:d2:da:27:19:be:c5:7d:26: 9f:21:f3:75:ad:cf:a0:1a:9e:9b:f5:b6:75:60:b5: e8:27:1d:95:dc:26:b2:ac:7d:30:cf:0e:cd:8f:8c: 46:24:14:7d:ec:57:e0:e6:90:6e:dc:86:da:4f:2e: 6e:90:03:4a:55:81:41:fd:8a:47:ff:3c:f2:38:c1: b1:00:4b:a1:a7:c7:5f:bd:f6:35:aa:ad:cf:6a:de: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:AE:08:A9:CE:D2:11:7C:64:34:AD:09:26:AA:B3:D4:E2:1B:BC X509v3 Authority Key Identifier: keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ef:53:a6:4f:2a:c0:ec:03:ed:80:e3:de:ed:30:ad:c9:46: cb:9d:cb:a3:24:2a:53:53:7b:b1:f4:0f:5d:26:11:17:55:36: 4b:06:91:d1:9f:d3:24:d0:d0:c2:eb:ec:da:a3:a2:8c:c6:09: 02:4c:19:79:c1:3d:dd:9c:11:e3:9d:b5:5d:b6:89:61:a5:de: b9:7d:3d:9b:31:fc:a7:63:51:18:7f:b9:07:a3:29:0b:1b:8d: 90:a8:eb:75:d5:6f:cb:78:20:ea:e3:41:c0:d2:2c:4c:93:5f: 92:27:50:c3:ea:d6:18:db:8e:68:6a:35:46:07:3a:92:20:17: 78:af:7b:57:c5:ea:a1:72:7c:4d:16:61:bf:33:25:aa:0e:36: 02:ee:9e:88:bc:46:55:99:13:1c:36:9c:2b:02:74:b4:1f:a8: f9:ae:85:f7:b1:de:57:39:72:8c:39:e0:81:81:1c:e7:2a:87: da:bf:bd:10:0d:e6:c1:eb:3d:6f:00:02:54:68:c4:c2:0a:94: 67:a4:ef:49:9c:54:ff:57:5d:fb:7c:de:cc:a7:f9:7c:7d:9e: e6:c8:af:17:3a:a1:73:18:db:c9:0d:7a:f5:d4:af:c3:80:24: d8:fb:bb:38:50:47:83:30:b4:c2:0e:5e:3c:64:b4:cd:c2:80: e5:51:ee:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXSPpH1MeHgkUhw1iQSfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYTI0ZjgyOThiZTE4YzhhNjlmMTgxMjhmMDY0ZTcwMDNl MWQzZGQwHhcNMjUxMjEyMDcwMTE1WhcNMjUxMjEzMDcwMTE1WjAzMTEwLwYDVQQD EyhiYmUwYWUwOGE5Y2VkMjExN2M2NDM0YWQwOTI2YWFiM2Q0ZTIxYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IYay7azPB8JFtdYjanB2PTkJZnj sRN4MK/D1ERzaJfGVZojG1r3CJYATqg62QDwCS2o41IdnopZ7VZw3gQiwuRJ3KUC oHPy/XFm0uYqADoNq4V+HdzcVOHTjNBxfK/nOVlX0K7+NqPHrqm2JMvxa8RxV636 6j3TLEY4Irl8LOEjQgH53ovvjfRCvjPizuEI7rHDpGZ57XNc7JiVky1v4vaRIvMe K6/SIpdt0tonGb7FfSafIfN1rc+gGp6b9bZ1YLXoJx2V3CayrH0wzw7Nj4xGJBR9 7Ffg5pBu3IbaTy5ukANKVYFB/YpH/zzyOMGxAEuhp8dfvfY1qq3Pat5XyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvgrgipztIRfGQ0rQkmqrPU4hu8MB8GA1UdIwQY MBaAFN+iT4KYvhjIpp8YEo8GTnAD4dPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZKUGdwaS1HTWltbnhnU2p3Wk9jQVBoMDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMWZlNGQtYWI1YS00MDcxLWJhMmEt ZDVhMDZkOGFiOTg0LzEvMzZKUGdwaS1HTWltbnhnU2p3Wk9jQVBoMDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMWZlNGQtYWI1YS00MDcxLWJhMmEtZDVhMDZkOGFiOTg0 LzEvMzZKUGdwaS1HTWltbnhnU2p3Wk9jQVBoMDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAke9Tpk8q wOwD7YDj3u0wrclGy53LoyQqU1N7sfQPXSYRF1U2SwaR0Z/TJNDQwuvs2qOijMYJ AkwZecE93ZwR4521XbaJYaXeuX09mzH8p2NRGH+5B6MpCxuNkKjrddVvy3gg6uNB wNIsTJNfkidQw+rWGNuOaGo1Rgc6kiAXeK97V8XqoXJ8TRZhvzMlqg42Au6eiLxG VZkTHDacKwJ0tB+o+a6F97HeVzlyjDnggYEc5yqH2r+9EA3mwes9bwACVGjEwgqU Z6TvSZxU/1dd+3zezKf5fH2e5sivFzqhcxjbyQ169dSvw4Ak2Pu7OFBHgzC0wg5e PGS0zcKA5VHuOg== -----END CERTIFICATE-----Generated at Fri Dec 12 09:10:29 2025 by rpki-client