This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: I0IcrGj2zh37Dav0727zuJ9vFcXrZ9pvD18UfbIUpwk= Subject key identifier: D6:F4:C5:28:0C:6B:B1:79:49:AC:19:5E:DF:11:2B:4A:CA:92:40:63 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B1A96E930EF811D1AD836D127BE704501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 17A0 Signing time: Sun 14 Dec 2025 02:00:56 +0000 Manifest this update: Sun 14 Dec 2025 02:00:56 +0000 Manifest next update: Mon 15 Dec 2025 02:00:56 +0000 Files and hashes: 1: 1-PS1jNNnBTwv-jHREhAP6k3ZYVo.roa (hash: VbVgqlFoHkyju8r4K3BXcUNoSiGbG+MwtSpHjzaMklA=) 2: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 3: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: RAJ4DxvSKFZWWrges1UAtuRhorflS2yon3qVbAbRMKQ=) 4: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 5: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 6: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 7: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 8: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=) 10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:e9:30:ef:81:1d:1a:d8:36:d1:27:be:70:45:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Dec 14 02:00:56 2025 GMT Not After : Dec 15 02:00:56 2025 GMT Subject: CN=d6f4c5280c6bb17949ac195edf112b4aca924063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:36:f3:c8:87:96:a6:b2:8c:aa:0f:6a:4a: c5:05:ff:cf:35:f7:1a:fa:da:04:93:27:4e:7b:18: 90:0e:a9:a0:89:3d:a8:68:9d:69:0d:99:8f:c6:2e: ff:ec:13:b7:93:6b:16:79:ab:59:86:21:7d:f6:b7: 68:66:db:28:b4:80:b4:d4:26:10:9e:06:31:80:f7: 99:27:d4:71:84:d3:42:54:7d:c4:a5:2a:df:28:81: 59:8f:79:9b:72:d0:11:9f:0b:38:45:ef:42:6a:74: 99:2f:87:e7:03:40:c0:75:bc:3a:c7:a3:e0:87:2a: 38:ab:79:d7:e5:d9:73:63:47:ae:ef:1a:11:3d:38: 3b:0b:f0:d5:46:1f:2b:92:e1:94:c8:7b:e0:67:b4: 1c:bc:20:e5:c3:bf:7e:a7:33:e7:48:95:c3:e1:f3: bd:ec:60:81:96:62:a9:48:c6:ec:3d:f9:15:14:36: cd:9f:08:94:cb:97:9a:f1:8e:2b:fd:90:9c:d7:2b: f8:b9:23:79:a8:1e:9f:a7:78:0c:a9:ec:94:13:8d: 8c:2a:21:b8:79:35:1e:c9:d3:9c:de:63:8a:f2:3b: 90:f1:a8:26:92:54:49:0a:08:27:10:61:d2:84:61: 38:9e:20:09:25:2f:af:9d:b0:d6:51:e6:45:59:d6: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F4:C5:28:0C:6B:B1:79:49:AC:19:5E:DF:11:2B:4A:CA:92:40:63 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:aa:e6:88:37:01:5d:d6:25:4e:45:93:43:97:bb:70:81:22: 66:9b:ab:e5:a0:a9:95:29:3e:95:74:4b:d6:7f:04:1a:e4:50: 90:39:f9:ad:e2:d0:c1:03:ea:5e:6b:fe:eb:59:07:ca:a7:18: 66:a1:89:ca:3e:54:c1:a9:31:86:69:a8:4b:ff:f3:f0:a3:d1: 3a:ef:97:41:8f:30:53:11:4a:34:ce:00:b9:38:85:b5:d8:97: 3c:e9:1f:4f:f3:8d:2a:8c:12:f3:ac:95:a1:0a:ee:c4:32:b5: ce:8e:f8:36:3e:d2:8e:07:f1:cb:66:97:f7:a2:97:7f:9b:6d: eb:35:63:5b:c5:0b:ad:47:9a:4c:be:22:88:79:5d:af:c4:c7: c9:2f:7a:6c:e3:ed:75:55:90:51:12:0a:fd:8d:89:c0:40:8d: 86:25:cc:6b:aa:d8:ba:07:70:1e:d6:39:bd:e8:03:b4:a4:27: f6:97:94:3b:bb:a0:4d:c4:a8:2a:3a:59:e7:61:12:89:50:3a: c7:6e:d5:56:3c:fb:8b:35:7f:97:3f:bd:27:64:fd:36:72:45: f3:98:20:38:70:2c:8e:b2:13:10:a6:94:62:1f:32:48:f6:f5: b8:4a:b2:17:07:49:70:33:16:f6:aa:e8:9a:e8:7c:ac:e2:06: e7:70:b4:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalukw74EdGtg20Se+cEUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUxMjE0MDIwMDU2WhcNMjUxMjE1MDIwMDU2WjAzMTEwLwYDVQQD EyhkNmY0YzUyODBjNmJiMTc5NDlhYzE5NWVkZjExMmI0YWNhOTI0MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdI288iHlqayjKoPakrFBf/PNfca +toEkydOexiQDqmgiT2oaJ1pDZmPxi7/7BO3k2sWeatZhiF99rdoZtsotIC01CYQ ngYxgPeZJ9RxhNNCVH3EpSrfKIFZj3mbctARnws4Re9CanSZL4fnA0DAdbw6x6Pg hyo4q3nX5dlzY0eu7xoRPTg7C/DVRh8rkuGUyHvgZ7QcvCDlw79+pzPnSJXD4fO9 7GCBlmKpSMbsPfkVFDbNnwiUy5ea8Y4r/ZCc1yv4uSN5qB6fp3gMqeyUE42MKiG4 eTUeydOc3mOK8juQ8agmklRJCggnEGHShGE4niAJJS+vnbDWUeZFWdbrGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb0xSgMa7F5SawZXt8RK0rKkkBjMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKrmiDcB XdYlTkWTQ5e7cIEiZpur5aCplSk+lXRL1n8EGuRQkDn5reLQwQPqXmv+61kHyqcY ZqGJyj5UwakxhmmoS//z8KPROu+XQY8wUxFKNM4AuTiFtdiXPOkfT/ONKowS86yV oQruxDK1zo74Nj7Sjgfxy2aX96KXf5tt6zVjW8ULrUeaTL4iiHldr8THyS96bOPt dVWQURIK/Y2JwECNhiXMa6rYugdwHtY5vegDtKQn9peUO7ugTcSoKjpZ52ESiVA6 x27VVjz7izV/lz+9J2T9NnJF85ggOHAsjrITEKaUYh8ySPb1uEqyFwdJcDMW9qro muh8rOIG53C0WA== -----END CERTIFICATE-----Generated at Sun Dec 14 12:06:58 2025 by rpki-client