This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json) Hash identifier: zvAG7i3SjLjtoXb1d6NQWX/MVx2zyIM7qLgiwwr9ZqQ= Subject key identifier: A1:EB:C8:9E:79:31:01:B2:DA:0A:33:AA:A8:AE:52:99:3B:CE:5A:E2 Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Certificate serial: 019B17CDE2F6DDA08D7F3C0CC57D53B45879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft Manifest number: 10A6 Signing time: Sat 13 Dec 2025 13:02:07 +0000 Manifest this update: Sat 13 Dec 2025 13:02:07 +0000 Manifest next update: Sun 14 Dec 2025 13:02:07 +0000 Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: 7Tlob+fik6VqZdV4XZvjLsY1f/0BD5onsSd6ONhiBRY=) 2: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=) 3: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=) 4: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cd:e2:f6:dd:a0:8d:7f:3c:0c:c5:7d:53:b4:58:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Validity Not Before: Dec 13 13:02:07 2025 GMT Not After : Dec 14 13:02:07 2025 GMT Subject: CN=a1ebc89e793101b2da0a33aaa8ae52993bce5ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:4f:b0:f9:74:1a:b9:83:0c:91:34:a7:f5: 6b:00:72:4f:c6:69:2c:02:ca:d7:db:5b:ed:70:7d: 7f:a1:72:5f:db:c2:e9:1a:8f:f8:02:d6:41:4f:7d: 2c:34:39:fa:56:e1:6e:59:db:dc:01:a7:62:bf:95: 42:ff:a3:11:c5:46:d4:ce:7a:ad:fb:b1:fd:2f:b9: 99:80:c4:91:67:80:c2:ac:e0:53:5f:f8:ff:6a:49: 5a:f7:e0:8f:6d:2e:78:e4:d3:0c:ea:df:03:07:a6: 6c:8c:3c:30:42:93:6a:e9:37:bb:d0:4a:9f:83:47: 26:ad:6e:46:2b:d1:1d:93:62:06:3e:86:74:03:a5: 85:e2:61:da:84:92:f0:de:5b:8e:e9:c6:d2:43:4c: 4b:29:7e:e7:55:a5:2f:8d:81:ef:ac:49:98:57:20: 84:56:91:ef:4f:df:37:9d:8e:2f:a2:66:cf:b0:19: 6e:1d:8b:99:7c:08:f4:97:b7:a3:ce:66:a2:6f:96: db:e8:2b:b7:79:91:90:03:84:54:9a:1a:ed:15:7b: 9c:2a:77:e5:c4:74:3f:da:7c:a7:28:13:e1:63:b4: 12:31:79:73:d0:3f:c2:3b:79:62:01:97:a2:33:c1: 20:6d:53:32:2d:bf:cd:1b:c1:98:a1:dd:76:c2:1b: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EB:C8:9E:79:31:01:B2:DA:0A:33:AA:A8:AE:52:99:3B:CE:5A:E2 X509v3 Authority Key Identifier: keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:11:77:72:1c:fa:44:75:b1:d9:27:25:10:0b:2a:4f:cf:12: 90:cf:59:31:fe:6f:de:e7:c9:83:38:89:91:cc:cf:b0:12:18: de:01:70:96:4f:e4:58:36:44:09:24:a7:00:8b:86:14:d6:f6: 21:a8:9e:2d:d8:f8:a8:98:6e:fa:5e:86:9a:05:02:07:a2:53: e8:20:23:5c:1b:74:29:20:eb:b2:dd:e9:29:20:30:2d:f4:ed: 2d:6e:3e:83:2a:5b:31:8c:49:06:7b:0d:8b:85:33:20:cb:e8: 65:23:2c:1b:68:c5:e0:5c:91:c1:28:da:3a:db:2a:26:c6:e6: ec:18:ad:2b:1c:0a:36:39:f5:2d:69:75:48:c7:ec:3f:a9:9b: 2f:22:25:ca:04:d8:26:45:39:59:71:58:ad:83:bc:24:f2:25: 31:ec:1f:e9:5a:44:dd:f6:d0:e1:ee:b1:d0:de:3e:bf:6f:4c: 93:72:74:83:73:19:ba:be:26:95:cc:8f:61:5b:3b:8c:80:dd: 68:81:8e:96:75:85:d5:5f:5d:b8:e3:11:67:3c:6e:52:0b:49: 06:6b:a5:8c:c8:85:e5:56:9d:68:ad:5c:ca:2a:1d:f5:6e:43: a2:fb:e4:79:81:df:ea:14:e7:fb:c3:e9:83:8d:ae:30:52:59: 66:c9:fe:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzeL23aCNfzwMxX1TtFh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3 ZWIxNjkwHhcNMjUxMjEzMTMwMjA3WhcNMjUxMjE0MTMwMjA3WjAzMTEwLwYDVQQD EyhhMWViYzg5ZTc5MzEwMWIyZGEwYTMzYWFhOGFlNTI5OTNiY2U1YWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JdPsPl0GrmDDJE0p/VrAHJPxmks AsrX21vtcH1/oXJf28LpGo/4AtZBT30sNDn6VuFuWdvcAadiv5VC/6MRxUbUznqt +7H9L7mZgMSRZ4DCrOBTX/j/akla9+CPbS545NMM6t8DB6ZsjDwwQpNq6Te70Eqf g0cmrW5GK9Edk2IGPoZ0A6WF4mHahJLw3luO6cbSQ0xLKX7nVaUvjYHvrEmYVyCE VpHvT983nY4vombPsBluHYuZfAj0l7ejzmaib5bb6Cu3eZGQA4RUmhrtFXucKnfl xHQ/2nynKBPhY7QSMXlz0D/CO3liAZeiM8EgbVMyLb/NG8GYod12whsYfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHryJ55MQGy2gozqqiuUpk7zlriMB8GA1UdIwQY MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt MjhjYjNiYmYwNWFlLzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRF3chz6 RHWx2SclEAsqT88SkM9ZMf5v3ufJgziJkczPsBIY3gFwlk/kWDZECSSnAIuGFNb2 IaieLdj4qJhu+l6GmgUCB6JT6CAjXBt0KSDrst3pKSAwLfTtLW4+gypbMYxJBnsN i4UzIMvoZSMsG2jF4FyRwSjaOtsqJsbm7BitKxwKNjn1LWl1SMfsP6mbLyIlygTY JkU5WXFYrYO8JPIlMewf6VpE3fbQ4e6x0N4+v29Mk3J0g3MZur4mlcyPYVs7jIDd aIGOlnWF1V9duOMRZzxuUgtJBmuljMiF5VadaK1cyiod9W5DovvkeYHf6hTn+8Pp g42uMFJZZsn+Kg== -----END CERTIFICATE-----Generated at Sat Dec 13 15:10:22 2025 by rpki-client