This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json) Hash identifier: TdDYNeBWgib8EZoCKvCrReWyJK+tS6oFavLJthy1mLY= Subject key identifier: 76:9A:8D:BD:85:E7:2B:FE:84:55:61:B9:AB:AE:EB:9F:7F:CF:71:D9 Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Certificate serial: 019AFD316A143DCA75F5AAE2297C85B8E744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft Manifest number: 138D Signing time: Mon 08 Dec 2025 09:01:05 +0000 Manifest this update: Mon 08 Dec 2025 09:01:05 +0000 Manifest next update: Tue 09 Dec 2025 09:01:05 +0000 Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: mnAzrG042f6b+qE9eWel7jzuElruSBKu6QyyLUwQUEI=) 2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=) 3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:31:6a:14:3d:ca:75:f5:aa:e2:29:7c:85:b8:e7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Validity Not Before: Dec 8 09:01:05 2025 GMT Not After : Dec 9 09:01:05 2025 GMT Subject: CN=769a8dbd85e72bfe845561b9abaeeb9f7fcf71d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:b4:3b:df:ca:da:86:fb:10:73:00:2b:63: 06:a5:e4:f2:90:21:0b:03:8b:d2:b4:27:d7:2c:2d: a4:96:d9:be:01:f6:ad:21:7d:c9:f5:5b:67:d9:68: ac:79:41:4b:a4:c5:f1:b1:07:35:d0:29:f2:73:b7: 01:aa:43:67:3d:cd:46:6a:8b:0d:0e:8c:08:7b:4e: 01:53:d4:0e:dc:13:af:e9:b7:f5:42:d8:4c:e0:01: be:d3:fb:91:43:ab:e6:8e:5d:82:96:aa:b5:b5:70: f4:4a:16:08:ea:d1:3d:ed:43:02:db:0b:e0:4c:7d: 57:f7:ef:21:07:91:11:e8:f6:fc:3b:74:cc:8a:f7: 19:53:28:a5:d3:ec:09:bd:e9:ed:f5:85:6e:b0:e2: 27:02:b1:16:48:8f:b6:d8:b0:31:c0:a9:0f:00:22: 27:ce:03:fa:f9:0b:41:02:41:ec:35:42:28:34:f4: ab:a0:38:f6:bf:bb:a3:56:e7:20:4b:ce:c4:ba:30: 11:4a:12:5d:9b:65:32:36:63:4c:59:bb:0e:b4:51: c8:68:3e:ec:df:c0:85:85:b5:9e:7e:0c:20:89:75: fb:ed:30:36:b4:68:68:9c:61:bc:ce:de:9c:09:73: 8a:dd:3b:e6:cc:6c:52:6a:f0:8a:a7:6f:38:78:0b: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9A:8D:BD:85:E7:2B:FE:84:55:61:B9:AB:AE:EB:9F:7F:CF:71:D9 X509v3 Authority Key Identifier: keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2e:61:11:b3:b4:16:54:5b:fb:f3:6f:95:d0:e8:2a:ad:63: 0f:77:d0:2d:df:e2:f9:97:16:cc:00:38:71:64:23:17:54:2d: 66:d1:fb:db:76:12:c9:4d:53:7a:d7:73:7a:70:f9:ff:a2:0a: 5a:f6:f5:7d:5a:3d:7f:23:ad:ce:6e:18:7e:86:74:d9:b6:88: 33:ae:85:59:35:8a:9b:fe:f2:bb:cb:0f:78:dd:2c:43:5c:e9: 3f:74:94:78:7d:cc:ce:c7:b5:fe:20:bd:f8:d6:a5:39:3a:b1: 23:64:d7:c8:60:b6:f6:44:03:4c:8d:34:a3:9d:12:3f:3e:c6: 9a:67:58:d9:5f:80:93:97:06:47:c8:52:c8:b7:22:48:ee:06: 71:a8:4c:40:38:2a:6c:89:d2:17:39:df:ae:0a:fb:9b:c9:3b: d4:24:36:7e:73:85:17:3f:6d:15:ad:c7:79:cb:0b:ba:ae:55: ad:a4:68:8d:ba:04:30:5d:21:3c:31:f0:3b:cd:bc:2d:f9:24: 2a:d4:c8:16:59:76:d3:b0:95:c0:4f:b2:23:c4:37:56:84:36: 97:cc:1e:be:e1:9a:c5:a2:b8:17:2b:86:0d:fa:70:b1:d2:4a: 52:a6:b3:c5:82:f2:d3:23:22:05:69:ac:47:eb:a7:3a:cc:cd: df:53:85:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9MWoUPcp19ariKXyFuOdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTA0MTU1ZWUzYWNmZTNmZWE4YmJmZWU4NmU5N2M1OGM4 OTkxZjQwHhcNMjUxMjA4MDkwMTA1WhcNMjUxMjA5MDkwMTA1WjAzMTEwLwYDVQQD Eyg3NjlhOGRiZDg1ZTcyYmZlODQ1NTYxYjlhYmFlZWI5ZjdmY2Y3MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn60O9/K2ob7EHMAK2MGpeTykCEL A4vStCfXLC2kltm+AfatIX3J9Vtn2WiseUFLpMXxsQc10Cnyc7cBqkNnPc1GaosN DowIe04BU9QO3BOv6bf1QthM4AG+0/uRQ6vmjl2Clqq1tXD0ShYI6tE97UMC2wvg TH1X9+8hB5ER6Pb8O3TMivcZUyil0+wJvent9YVusOInArEWSI+22LAxwKkPACIn zgP6+QtBAkHsNUIoNPSroDj2v7ujVucgS87EujARShJdm2UyNmNMWbsOtFHIaD7s 38CFhbWefgwgiXX77TA2tGhonGG8zt6cCXOK3TvmzGxSavCKp284eAv8VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaajb2F5yv+hFVhuauu659/z3HZMB8GA1UdIwQY MBaAFN+QQVXuOs/j/qi7/uhul8WMiZH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQt NjQ2N2Y0NGI0M2JmLzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQtNjQ2N2Y0NGI0M2Jm LzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby5hEbO0 FlRb+/NvldDoKq1jD3fQLd/i+ZcWzAA4cWQjF1QtZtH723YSyU1TetdzenD5/6IK Wvb1fVo9fyOtzm4YfoZ02baIM66FWTWKm/7yu8sPeN0sQ1zpP3SUeH3Mzse1/iC9 +NalOTqxI2TXyGC29kQDTI00o50SPz7GmmdY2V+Ak5cGR8hSyLciSO4GcahMQDgq bInSFznfrgr7m8k71CQ2fnOFFz9tFa3HecsLuq5VraRojboEMF0hPDHwO828Lfkk KtTIFll207CVwE+yI8Q3VoQ2l8wevuGaxaK4FyuGDfpwsdJKUqazxYLy0yMiBWms R+unOszN31OFaA== -----END CERTIFICATE-----Generated at Mon Dec 8 17:50:54 2025 by rpki-client