This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json) Hash identifier: 4q5V2z7suFsbm49y83x8iNON8uNLHRSt9MbMWKj53yg= Subject key identifier: EE:F5:3E:D6:5D:E9:F0:15:81:E9:82:FA:B0:0D:B4:63:1F:39:33:78 Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Certificate serial: 019B341FA213C21C6901531D889A27B968A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft Manifest number: 116D Signing time: Fri 19 Dec 2025 01:00:46 +0000 Manifest this update: Fri 19 Dec 2025 01:00:46 +0000 Manifest next update: Sat 20 Dec 2025 01:00:46 +0000 Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: SskVM9tTQqRfOu6SHy+d5OKrp+XlDY3xVaXmFjJg4Gs=) 2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=) 3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=) 4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:a2:13:c2:1c:69:01:53:1d:88:9a:27:b9:68:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Validity Not Before: Dec 19 01:00:46 2025 GMT Not After : Dec 20 01:00:46 2025 GMT Subject: CN=eef53ed65de9f01581e982fab00db4631f393378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:7a:67:82:66:dc:c1:4a:22:27:62:28:c4: 36:40:7b:68:c7:8a:1b:06:36:8d:0c:1c:ca:5a:a0: d8:6f:64:f2:b2:99:df:93:20:e2:e4:41:cf:88:cc: 8f:39:ad:7b:f1:bb:b4:73:f1:af:27:c7:24:94:42: b4:10:0d:06:6a:4d:9d:0e:4e:2a:f9:c6:0f:3f:88: 8e:57:fd:ff:47:96:d2:fb:e7:6e:05:f6:05:ce:e8: da:be:dd:5f:55:eb:f5:d0:b5:87:73:91:eb:0a:9a: d6:bd:45:e0:5d:ae:f5:bf:99:ca:2a:01:54:8c:05: e3:7f:42:1d:06:89:f3:22:69:46:7b:ea:81:a6:78: 89:cf:66:82:40:58:d3:9f:01:48:dc:09:46:42:b8: 80:de:dd:79:fc:c2:b8:25:81:97:9c:02:d6:93:2d: e8:90:32:c5:3f:ca:84:1f:a5:96:52:2a:71:29:93: 12:fe:65:5a:fb:93:b1:74:3b:86:4d:ce:b1:0d:e9: 31:dd:86:17:6a:e0:39:ff:7d:81:39:03:b9:44:a9: 0d:67:18:cf:da:c2:2a:48:e5:04:aa:83:ac:a9:6d: ac:00:9c:3f:28:16:79:e6:41:d8:dc:d4:a5:fa:67: 66:ba:38:53:21:1b:dc:38:d6:1f:a0:b9:c2:94:db: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:3E:D6:5D:E9:F0:15:81:E9:82:FA:B0:0D:B4:63:1F:39:33:78 X509v3 Authority Key Identifier: keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1a:52:ac:2d:64:02:2d:51:a5:98:e2:42:93:a9:62:b0:21: 21:10:58:68:68:05:73:d3:13:b4:f1:67:8e:dc:27:d8:6f:25: 84:b5:70:76:d0:1f:a9:85:aa:ea:ee:4f:e7:26:21:60:77:9a: 7d:12:6f:cf:c4:59:d4:c8:3c:26:0c:62:5c:ed:4c:15:d6:56: d0:1b:1a:32:e2:26:c9:6b:9b:4b:7a:69:8a:84:9d:29:ce:52: 65:ff:83:0e:da:c2:6b:ea:b3:a3:01:c0:b2:22:89:c3:11:81: b5:94:49:f5:a1:6d:b8:60:22:da:62:d0:fb:db:49:89:fd:fe: f4:50:41:5e:a4:16:41:bb:82:24:b2:75:2b:ae:4d:a7:b4:9a: b4:5c:70:f6:db:23:f3:c9:d2:a7:ce:95:76:f7:23:5e:1f:f6: 77:b1:f0:b7:8c:da:a9:a6:15:8c:3c:7c:58:b5:65:cc:41:b1: 45:f7:d0:03:40:3c:ab:50:05:44:4a:2e:bf:4e:4d:ab:f8:b2: 76:69:a7:02:50:bb:b4:d9:1b:3d:c5:a0:63:3f:6d:a6:c0:11: ba:0d:21:6c:5a:9d:2a:07:94:96:32:46:6e:bf:42:b1:2c:5c: d0:98:e8:2d:82:08:24:f1:59:17:61:5f:ae:b9:74:d3:1b:2d: ca:05:eb:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H6ITwhxpAVMdiJonuWioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj NjZhZWIwHhcNMjUxMjE5MDEwMDQ2WhcNMjUxMjIwMDEwMDQ2WjAzMTEwLwYDVQQD EyhlZWY1M2VkNjVkZTlmMDE1ODFlOTgyZmFiMDBkYjQ2MzFmMzkzMzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26Z6Z4Jm3MFKIidiKMQ2QHtox4ob BjaNDBzKWqDYb2TyspnfkyDi5EHPiMyPOa178bu0c/GvJ8cklEK0EA0Gak2dDk4q +cYPP4iOV/3/R5bS++duBfYFzujavt1fVev10LWHc5HrCprWvUXgXa71v5nKKgFU jAXjf0IdBonzImlGe+qBpniJz2aCQFjTnwFI3AlGQriA3t15/MK4JYGXnALWky3o kDLFP8qEH6WWUipxKZMS/mVa+5OxdDuGTc6xDekx3YYXauA5/32BOQO5RKkNZxjP 2sIqSOUEqoOsqW2sAJw/KBZ55kHY3NSl+mdmujhTIRvcONYfoLnClNvXUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO71PtZd6fAVgemC+rANtGMfOTN4MB8GA1UdIwQY MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1 LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxpSrC1k Ai1RpZjiQpOpYrAhIRBYaGgFc9MTtPFnjtwn2G8lhLVwdtAfqYWq6u5P5yYhYHea fRJvz8RZ1Mg8JgxiXO1MFdZW0BsaMuImyWubS3ppioSdKc5SZf+DDtrCa+qzowHA siKJwxGBtZRJ9aFtuGAi2mLQ+9tJif3+9FBBXqQWQbuCJLJ1K65Np7SatFxw9tsj 88nSp86VdvcjXh/2d7Hwt4zaqaYVjDx8WLVlzEGxRffQA0A8q1AFREouv05Nq/iy dmmnAlC7tNkbPcWgYz9tpsARug0hbFqdKgeUljJGbr9CsSxc0JjoLYIIJPFZF2Ff rrl00xstygXrxA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:35 2025 by rpki-client