This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json) Hash identifier: OFuTJfskYkoXA//jDV+kHbyNL54O0iUdbr6Oqk3ZrPU= Subject key identifier: A3:9B:99:A2:76:C5:4F:4B:49:28:FE:6A:A1:46:CB:BD:62:B6:16:8B Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Certificate serial: 019B07B4FCE72270B6E77B6BEFB9B3E930E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft Manifest number: 176F Signing time: Wed 10 Dec 2025 10:01:00 +0000 Manifest this update: Wed 10 Dec 2025 10:01:00 +0000 Manifest next update: Thu 11 Dec 2025 10:01:00 +0000 Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: ll/iJ6KTxzU6MmWS8cHzHBseFJyhtcSfjy1ZSz82xlg=) 2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=) 3: Gt23A32LNafHLHsemLl1kayh63c.roa (hash: 0agfcNSK+86f7lJTamSexAv7ynwwXj+0r7ubyCpwQQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b4:fc:e7:22:70:b6:e7:7b:6b:ef:b9:b3:e9:30:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Validity Not Before: Dec 10 10:01:00 2025 GMT Not After : Dec 11 10:01:00 2025 GMT Subject: CN=a39b99a276c54f4b4928fe6aa146cbbd62b6168b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:fc:c2:0d:d9:b3:60:d6:dc:0e:f9:1a:77: c0:40:c1:e4:d3:f1:e4:1d:00:e0:da:d2:05:3a:e0: 5e:1a:4a:bc:3e:34:63:f4:e2:2c:e4:e9:31:8d:8e: 68:31:0c:6a:90:ef:8f:66:93:de:a7:e4:67:d7:b4: 3c:b2:7e:8f:8e:9c:59:11:9d:53:ae:87:3a:3d:4f: 32:da:1e:6d:53:06:ce:7f:01:02:61:bc:c0:71:d4: 21:51:09:45:15:b8:ad:02:e3:6e:9f:d0:7b:4b:f3: 82:1e:43:15:f6:96:b3:78:3e:4c:8f:84:be:c9:86: 9a:df:2c:2f:b9:6d:23:4f:32:fb:11:88:9e:67:45: 4a:e5:dc:8c:f9:08:ed:88:13:cc:07:e6:ec:bd:8c: 78:b9:27:56:d3:31:c4:87:94:c9:84:fa:c7:cd:22: 60:83:52:c4:8f:a2:8f:8b:c9:4f:ac:6b:5c:43:15: 7d:b6:8c:ef:d7:94:32:8e:05:fd:fc:16:b6:d5:d1: a9:ab:b5:18:07:fb:7c:dd:27:08:e3:e0:b4:fa:01: 2a:6c:04:a2:62:c8:d6:d1:26:9e:a7:f7:bb:aa:20: a0:7d:32:5b:d5:16:e5:0a:a1:c1:0a:3b:60:52:08: 4b:97:cd:05:53:13:19:9d:5f:6b:e6:da:71:92:15: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:99:A2:76:C5:4F:4B:49:28:FE:6A:A1:46:CB:BD:62:B6:16:8B X509v3 Authority Key Identifier: keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6f:7a:54:ab:20:87:f9:11:ca:51:19:34:ee:5a:a6:07:4d: 8b:77:4b:df:b0:07:0c:e4:6a:8e:c2:81:ae:38:c8:41:1c:65: 36:84:84:18:33:eb:a0:da:a7:e6:18:65:24:f3:3f:40:29:9c: 79:c0:ed:28:07:cb:d9:32:45:3a:5d:2c:b3:f8:a7:78:57:3b: e7:6a:56:66:b7:e2:f1:b1:9a:6a:5d:fb:e3:4d:61:e7:39:00: 3f:f9:cf:5d:81:e2:70:f7:6d:58:ea:ec:ad:de:24:88:15:3f: 4f:12:84:af:08:4e:a2:06:ee:db:25:02:73:c0:0b:09:47:79: 6d:3d:21:a2:4e:8f:14:30:61:e1:e4:f2:a5:e2:a6:d0:ac:89: 46:b2:01:e9:9c:be:f4:05:3c:d6:b9:7e:00:99:4b:d4:85:97: b4:65:3b:dc:3e:71:86:ee:ea:eb:d4:a0:79:08:17:8a:8e:47: 18:31:76:67:b9:84:5e:34:13:b7:9b:72:8d:23:2e:aa:67:98: 02:e3:8f:d4:6f:69:79:8d:5c:15:79:4d:c9:65:65:b7:d0:00: 8f:da:9b:02:7c:54:8d:b9:a5:fd:cb:2f:f0:9e:8b:57:2f:28: ac:11:c1:b9:35:8c:39:6f:7c:c9:8e:45:e5:52:76:4d:ee:02: ca:2a:0b:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtPznInC253tr77mz6TDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj MDE3YzEwHhcNMjUxMjEwMTAwMTAwWhcNMjUxMjExMTAwMTAwWjAzMTEwLwYDVQQD EyhhMzliOTlhMjc2YzU0ZjRiNDkyOGZlNmFhMTQ2Y2JiZDYyYjYxNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt638wg3Zs2DW3A75GnfAQMHk0/Hk HQDg2tIFOuBeGkq8PjRj9OIs5OkxjY5oMQxqkO+PZpPep+Rn17Q8sn6PjpxZEZ1T roc6PU8y2h5tUwbOfwECYbzAcdQhUQlFFbitAuNun9B7S/OCHkMV9pazeD5Mj4S+ yYaa3ywvuW0jTzL7EYieZ0VK5dyM+QjtiBPMB+bsvYx4uSdW0zHEh5TJhPrHzSJg g1LEj6KPi8lPrGtcQxV9tozv15QyjgX9/Ba21dGpq7UYB/t83ScI4+C0+gEqbASi YsjW0Saep/e7qiCgfTJb1RblCqHBCjtgUghLl80FUxMZnV9r5tpxkhVQZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKObmaJ2xU9LSSj+aqFGy71ithaLMB8GA1UdIwQY MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2 LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADm96VKsg h/kRylEZNO5apgdNi3dL37AHDORqjsKBrjjIQRxlNoSEGDProNqn5hhlJPM/QCmc ecDtKAfL2TJFOl0ss/ineFc752pWZrfi8bGaal37401h5zkAP/nPXYHicPdtWOrs rd4kiBU/TxKErwhOogbu2yUCc8ALCUd5bT0hok6PFDBh4eTypeKm0KyJRrIB6Zy+ 9AU81rl+AJlL1IWXtGU73D5xhu7q69SgeQgXio5HGDF2Z7mEXjQTt5tyjSMuqmeY AuOP1G9peY1cFXlNyWVlt9AAj9qbAnxUjbml/csv8J6LVy8orBHBuTWMOW98yY5F 5VJ2Te4CyioLDA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:18:22 2025 by rpki-client