This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json) Hash identifier: aV9tdrw6BhLEZWNb/1Qzge6AY/AIAq3Xu5gQFx6vzVw= Subject key identifier: F6:81:79:5C:F8:75:A8:74:9F:E9:29:57:9E:B2:08:92:81:9D:AB:7E Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Certificate serial: 019B495DA64537AF43662A029BFFF10B205B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 04:00:32 +0000 Manifest this update: Tue 23 Dec 2025 04:00:32 +0000 Manifest next update: Wed 24 Dec 2025 04:00:32 +0000 Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: e82NzE5zAstO/j+Xy+RFD5lvF56gPsNWwvQ3Ed16pG0=) 2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=) 3: Gt23A32LNafHLHsemLl1kayh63c.roa (hash: 0agfcNSK+86f7lJTamSexAv7ynwwXj+0r7ubyCpwQQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:a6:45:37:af:43:66:2a:02:9b:ff:f1:0b:20:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Validity Not Before: Dec 23 04:00:32 2025 GMT Not After : Dec 24 04:00:32 2025 GMT Subject: CN=f681795cf875a8749fe929579eb20892819dab7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:ba:50:1b:01:a3:07:05:80:42:b2:9e:1c: c3:d6:c8:53:a4:45:8b:88:77:03:b7:de:44:95:39: 62:4d:b3:3b:59:74:5c:f8:87:91:7c:41:b9:cf:5b: 32:7e:d1:1f:17:b6:f0:4f:d9:42:6c:e0:92:7c:29: 8f:c9:4f:a4:cb:e3:27:c8:95:9e:b1:9c:76:32:df: 74:d5:2b:0e:31:f6:c7:69:c1:a9:43:2d:25:12:27: 6c:4b:04:62:09:36:b2:77:b3:b2:bc:0c:c0:46:e6: dc:5b:70:42:a9:3f:b3:97:70:b5:a6:ee:60:37:39: 79:fe:89:a9:11:7d:39:b0:4e:e0:3a:e7:69:10:b2: ca:c4:30:b3:0c:bd:93:c1:4e:df:f2:dc:40:17:3e: 65:6a:68:2a:19:b5:d7:bf:16:92:ed:6c:b6:40:64: 61:25:c4:e4:00:59:d4:7e:45:0c:f9:da:e1:dc:bd: cc:2f:e5:79:9d:c6:01:17:75:8e:98:d4:f9:08:5c: 18:2d:24:83:18:66:a4:8b:8f:3b:1e:dc:57:ff:0c: e9:99:39:52:5e:76:b0:92:85:83:d3:c2:61:93:6c: 26:15:a7:60:64:df:0b:1e:d3:73:13:f3:09:77:a8: 92:53:64:e5:8e:dd:18:b8:d8:9e:5f:de:9f:05:3e: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:81:79:5C:F8:75:A8:74:9F:E9:29:57:9E:B2:08:92:81:9D:AB:7E X509v3 Authority Key Identifier: keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3d:76:75:85:70:cf:80:ae:11:74:1a:8b:56:49:34:b4:27: 99:19:cd:56:c8:47:e0:65:76:cd:0f:78:e0:b0:3e:51:1f:1c: f1:f5:19:2b:ab:b2:6d:6b:11:91:3f:45:8a:d6:e7:30:72:69: 82:b9:8c:f1:1c:97:bc:37:fc:31:33:38:17:7b:10:cb:a2:9d: 05:69:07:8c:a0:10:c8:fa:f9:93:89:c3:a0:a7:df:1f:61:29: dd:06:39:47:49:84:b5:b7:08:51:79:70:1e:09:a8:aa:de:9e: 0e:ea:c6:d8:b0:87:1e:62:ec:90:3b:f8:74:3a:8b:04:15:d1: 8b:a4:26:9b:c6:54:d8:c2:9d:11:44:0b:ca:d6:b6:84:97:0a: 4e:75:d3:ff:6a:5d:43:4f:ec:10:05:cf:dc:77:d8:a0:63:95: b1:3c:0f:08:60:84:ed:fa:56:51:93:b1:c9:96:ac:24:cd:6b: 28:ae:18:1b:b8:dc:ef:bc:c3:89:4f:2a:ee:77:95:f9:4e:7c: 7d:b7:5f:2d:8b:ab:60:49:aa:43:b7:26:fa:f3:21:01:c0:18: 21:65:a0:15:0b:05:b5:3f:a7:9a:e6:0c:18:24:10:1a:8a:eb: 98:fb:2a:36:67:2d:23:7f:d2:58:bc:24:6d:cc:f0:3c:e8:cc: 8c:a3:f8:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXaZFN69DZioCm//xCyBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj MDE3YzEwHhcNMjUxMjIzMDQwMDMyWhcNMjUxMjI0MDQwMDMyWjAzMTEwLwYDVQQD EyhmNjgxNzk1Y2Y4NzVhODc0OWZlOTI5NTc5ZWIyMDg5MjgxOWRhYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+q6UBsBowcFgEKynhzD1shTpEWL iHcDt95ElTliTbM7WXRc+IeRfEG5z1syftEfF7bwT9lCbOCSfCmPyU+ky+MnyJWe sZx2Mt901SsOMfbHacGpQy0lEidsSwRiCTayd7OyvAzARubcW3BCqT+zl3C1pu5g Nzl5/ompEX05sE7gOudpELLKxDCzDL2TwU7f8txAFz5lamgqGbXXvxaS7Wy2QGRh JcTkAFnUfkUM+drh3L3ML+V5ncYBF3WOmNT5CFwYLSSDGGaki487HtxX/wzpmTlS XnawkoWD08Jhk2wmFadgZN8LHtNzE/MJd6iSU2Tljt0YuNieX96fBT7FVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaBeVz4dah0n+kpV56yCJKBnat+MB8GA1UdIwQY MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2 LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz12dYVw z4CuEXQai1ZJNLQnmRnNVshH4GV2zQ944LA+UR8c8fUZK6uybWsRkT9FitbnMHJp grmM8RyXvDf8MTM4F3sQy6KdBWkHjKAQyPr5k4nDoKffH2Ep3QY5R0mEtbcIUXlw Hgmoqt6eDurG2LCHHmLskDv4dDqLBBXRi6Qmm8ZU2MKdEUQLyta2hJcKTnXT/2pd Q0/sEAXP3HfYoGOVsTwPCGCE7fpWUZOxyZasJM1rKK4YG7jc77zDiU8q7neV+U58 fbdfLYurYEmqQ7cm+vMhAcAYIWWgFQsFtT+nmuYMGCQQGorrmPsqNmctI3/SWLwk bczwPOjMjKP4CQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:57:31 2025 by rpki-client