This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json) Hash identifier: gUIqZ1xMo2DrJ7oEZsak7vLXMVkyQHNHhQvJfVvT6so= Subject key identifier: CC:2B:BA:14:4D:CB:0C:3B:79:D2:DE:5A:E9:9E:AB:CA:2A:19:27:E5 Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49 Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149 Certificate serial: 019B3532739BA84E939D6064863A93ABABFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 06:00:57 +0000 Manifest this update: Fri 19 Dec 2025 06:00:57 +0000 Manifest next update: Sat 20 Dec 2025 06:00:57 +0000 Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: myrN08yfktmIQeDb56F9ZVwSvJ5+tfW90SvsYzpcdXI=) 2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=) 3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=) 4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=) 5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:73:9b:a8:4e:93:9d:60:64:86:3a:93:ab:ab:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149 Validity Not Before: Dec 19 06:00:57 2025 GMT Not After : Dec 20 06:00:57 2025 GMT Subject: CN=cc2bba144dcb0c3b79d2de5ae99eabca2a1927e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:c8:35:26:5a:0b:86:b7:ab:5e:e3:8f:47: 2a:fd:fa:8b:ca:91:2c:db:1c:5a:99:0c:bd:74:5d: 4d:06:9a:a4:56:43:4e:ae:ef:b3:a2:c3:f7:26:62: 08:26:21:e7:1a:95:0d:51:32:f6:52:7e:0b:fc:4c: 0b:32:da:66:9b:9e:88:2e:92:a1:35:14:18:b2:96: a0:36:ac:62:93:79:82:49:90:7b:ff:5b:dd:2e:2a: 6c:21:a9:31:dc:7b:1e:52:43:ae:c6:94:54:b9:f2: 9d:3d:e1:0e:80:51:3c:98:89:e0:e2:db:86:23:b5: 0f:b8:83:fc:5d:97:53:6e:54:b8:64:c4:7a:59:3a: 9a:19:bf:05:9b:cb:74:46:a8:d3:db:78:1d:0d:f8: f0:c3:95:e5:a4:96:5a:58:d5:20:bd:49:d1:c9:19: 04:f0:b5:fc:2f:cc:02:d5:ab:e2:07:2b:0b:70:5d: 20:c7:7b:9c:ea:18:8d:7a:bf:28:f7:27:92:6a:e6: 46:66:21:cb:cc:86:df:07:cb:72:5a:9c:55:7a:f2: 10:38:ee:f8:61:01:c4:1e:06:82:69:c4:e0:74:a2: 92:cb:4d:d3:39:40:43:cc:c9:c0:57:3d:b9:6b:57: 2d:cb:cf:e5:1b:87:43:66:cc:e6:57:15:3f:dc:ae: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:BA:14:4D:CB:0C:3B:79:D2:DE:5A:E9:9E:AB:CA:2A:19:27:E5 X509v3 Authority Key Identifier: keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:89:22:b5:ff:ab:76:3b:59:5a:6c:31:5c:81:25:2a:70:96: 18:c1:e7:77:dd:ad:05:e2:3d:dc:a8:8a:3b:1a:e5:94:5b:4f: 4e:8f:20:a6:41:c2:a2:b4:03:39:c4:9f:60:fd:b4:c2:f0:ee: 31:e2:eb:80:22:4c:64:91:4f:d4:09:e0:f8:50:04:78:1e:78: 44:40:ae:94:07:19:27:dc:e9:50:96:4e:91:fd:bb:97:94:c2: b4:32:05:9b:d5:9f:ed:5c:54:2a:d4:88:2c:18:ac:64:ff:13: f3:9c:10:0f:fe:d7:0f:e9:f8:c2:b5:ef:28:f9:83:94:f4:d4: 7a:82:b9:c7:41:bb:7b:6c:fc:95:92:b2:20:d7:10:fc:e1:95: 91:69:cf:e2:ea:63:35:36:ed:23:f2:60:fa:a6:5a:2f:13:28: f7:fa:4e:35:6a:90:da:a5:e8:8f:7c:13:e2:21:ee:68:d2:d1: 48:4d:2d:62:b2:c1:1a:93:7e:52:b2:09:88:89:72:8f:98:26: 22:92:1a:58:5e:35:4c:be:d4:da:28:cb:d5:4f:35:13:b0:2b: 44:9e:7a:24:6e:6e:5f:3a:15:00:56:25:a1:0d:f5:02:36:d4: 18:40:ef:e2:6a:0b:17:ed:ae:bb:52:44:1d:9e:7d:41:81:cf: d1:78:c9:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MnObqE6TnWBkhjqTq6v+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1 MjQxNDkwHhcNMjUxMjE5MDYwMDU3WhcNMjUxMjIwMDYwMDU3WjAzMTEwLwYDVQQD EyhjYzJiYmExNDRkY2IwYzNiNzlkMmRlNWFlOTllYWJjYTJhMTkyN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9vINSZaC4a3q17jj0cq/fqLypEs 2xxamQy9dF1NBpqkVkNOru+zosP3JmIIJiHnGpUNUTL2Un4L/EwLMtpmm56ILpKh NRQYspagNqxik3mCSZB7/1vdLipsIakx3HseUkOuxpRUufKdPeEOgFE8mIng4tuG I7UPuIP8XZdTblS4ZMR6WTqaGb8Fm8t0RqjT23gdDfjww5XlpJZaWNUgvUnRyRkE 8LX8L8wC1aviBysLcF0gx3uc6hiNer8o9yeSauZGZiHLzIbfB8tyWpxVevIQOO74 YQHEHgaCacTgdKKSy03TOUBDzMnAVz25a1cty8/lG4dDZszmVxU/3K4I+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwruhRNyww7edLeWumeq8oqGSflMB8GA1UdIwQY MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt YTNkZjNiNjljZTVhLzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYkitf+r djtZWmwxXIElKnCWGMHnd92tBeI93KiKOxrllFtPTo8gpkHCorQDOcSfYP20wvDu MeLrgCJMZJFP1Ang+FAEeB54RECulAcZJ9zpUJZOkf27l5TCtDIFm9Wf7VxUKtSI LBisZP8T85wQD/7XD+n4wrXvKPmDlPTUeoK5x0G7e2z8lZKyINcQ/OGVkWnP4upj NTbtI/Jg+qZaLxMo9/pONWqQ2qXoj3wT4iHuaNLRSE0tYrLBGpN+UrIJiIlyj5gm IpIaWF41TL7U2ijL1U81E7ArRJ56JG5uXzoVAFYloQ31AjbUGEDv4moLF+2uu1JE HZ59QYHP0XjJSA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:06 2025 by rpki-client