This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json) Hash identifier: +6K/HJdQ7SGTM3pdzEbDhfb1GAVGmLnm+1PEB+cGaHs= Subject key identifier: B7:E7:78:60:19:96:4C:87:98:8F:77:E5:7E:A8:10:D6:62:A7:C3:56 Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Certificate serial: 019B1CF32D2F4E444D44589F384BC210BF76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft Manifest number: 1161 Signing time: Sun 14 Dec 2025 13:00:57 +0000 Manifest this update: Sun 14 Dec 2025 13:00:57 +0000 Manifest next update: Mon 15 Dec 2025 13:00:57 +0000 Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: johLqpa7k++Ft/IY6P/1eCqewGJnrSEGjx+7ZkdnrHE=) 2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=) 3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=) 4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:2d:2f:4e:44:4d:44:58:9f:38:4b:c2:10:bf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Validity Not Before: Dec 14 13:00:57 2025 GMT Not After : Dec 15 13:00:57 2025 GMT Subject: CN=b7e7786019964c87988f77e57ea810d662a7c356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:20:11:a1:ac:f8:2c:b9:20:87:f0:5c:46: 92:05:72:3c:50:58:df:26:5b:85:0f:42:0d:ae:e0: f2:b0:56:7e:1f:30:74:d5:50:56:64:ea:1d:31:06: 14:c5:8b:29:d4:46:56:37:42:18:90:97:50:42:32: 80:13:fd:05:36:44:2c:15:de:64:b7:d9:9a:89:13: 8f:4c:46:5a:37:d1:4d:72:98:8d:5d:5b:5d:3f:39: 4d:6a:9b:de:b8:cd:66:0d:0b:87:c8:8e:0a:22:8d: c0:63:bb:7d:f5:6f:a7:8b:35:cb:20:5f:a2:49:33: c5:61:4b:e6:d1:fa:9b:ca:88:9b:90:24:7c:1d:f9: 11:2f:8c:ca:b8:61:7b:90:44:97:dc:d8:48:54:87: 01:74:01:eb:81:d8:e9:5b:2f:54:ca:76:6e:93:e9: 4b:cf:3a:26:6f:be:f8:09:fd:6f:06:5a:48:d3:12: d8:1c:7a:7b:9b:e8:5e:32:c8:28:6a:3d:64:cb:98: a1:96:8d:45:c0:e3:67:29:a4:1a:25:a5:c9:a3:d1: 6e:07:eb:a9:8a:80:9a:a8:e7:c5:0b:a1:35:b1:2f: 5c:c7:95:3e:ed:41:f7:6d:b1:ba:26:94:4e:6e:5e: 70:ba:ed:be:db:29:3c:b2:bb:e7:f3:03:9d:1c:3d: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E7:78:60:19:96:4C:87:98:8F:77:E5:7E:A8:10:D6:62:A7:C3:56 X509v3 Authority Key Identifier: keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6b:2a:52:93:65:9d:49:a3:b4:9a:4f:1d:87:56:28:48:b5: 5a:2a:b4:8d:df:b0:b3:ed:1c:d3:48:07:59:7a:48:e9:5f:d9: ff:b4:13:e6:4d:5c:a6:00:9d:42:1b:38:bc:2c:d3:0a:23:10: 7d:06:2d:eb:34:d0:23:82:78:4f:7f:8a:5d:a7:c1:92:8a:cd: fc:54:f5:7c:19:6f:96:ad:a7:49:6d:4f:11:73:6e:f7:ff:86: 99:13:16:5b:e0:c0:5a:a4:bc:68:a8:4f:cc:c5:c5:18:4b:85: 08:67:c2:f8:d5:67:e9:05:62:8f:cc:b5:11:38:f2:55:b1:f9: 03:70:f3:18:3b:0e:7e:7f:4b:f2:6f:44:0f:36:01:2e:2e:79: 7e:4b:28:62:9a:1b:89:7f:88:8e:27:03:13:05:78:6f:02:4a: dc:4c:a6:17:52:6d:ad:0a:8d:69:cd:fb:07:27:6b:69:65:cd: f0:13:af:ed:d4:fe:42:77:d8:1c:f7:04:37:e6:f7:a5:8a:ce: 28:24:fb:90:f2:e2:36:fe:b0:a3:76:9c:8f:da:15:f3:24:95: de:7e:cd:6f:50:59:28:04:6f:43:ce:46:db:9e:12:d2:16:1d: de:f2:05:f9:58:40:af:d5:75:21:fa:6e:0f:5b:c8:a5:46:ff: cb:62:9d:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8y0vTkRNRFifOEvCEL92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj NjZhZWIwHhcNMjUxMjE0MTMwMDU3WhcNMjUxMjE1MTMwMDU3WjAzMTEwLwYDVQQD EyhiN2U3Nzg2MDE5OTY0Yzg3OTg4Zjc3ZTU3ZWE4MTBkNjYyYTdjMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIQgEaGs+Cy5IIfwXEaSBXI8UFjf JluFD0INruDysFZ+HzB01VBWZOodMQYUxYsp1EZWN0IYkJdQQjKAE/0FNkQsFd5k t9maiROPTEZaN9FNcpiNXVtdPzlNapveuM1mDQuHyI4KIo3AY7t99W+nizXLIF+i STPFYUvm0fqbyoibkCR8HfkRL4zKuGF7kESX3NhIVIcBdAHrgdjpWy9UynZuk+lL zzomb774Cf1vBlpI0xLYHHp7m+heMsgoaj1ky5ihlo1FwONnKaQaJaXJo9FuB+up ioCaqOfFC6E1sS9cx5U+7UH3bbG6JpRObl5wuu2+2yk8srvn8wOdHD1AnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfneGAZlkyHmI935X6oENZip8NWMB8GA1UdIwQY MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1 LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmsqUpNl nUmjtJpPHYdWKEi1Wiq0jd+ws+0c00gHWXpI6V/Z/7QT5k1cpgCdQhs4vCzTCiMQ fQYt6zTQI4J4T3+KXafBkorN/FT1fBlvlq2nSW1PEXNu9/+GmRMWW+DAWqS8aKhP zMXFGEuFCGfC+NVn6QVij8y1ETjyVbH5A3DzGDsOfn9L8m9EDzYBLi55fksoYpob iX+IjicDEwV4bwJK3EymF1JtrQqNac37BydraWXN8BOv7dT+QnfYHPcEN+b3pYrO KCT7kPLiNv6wo3acj9oV8ySV3n7Nb1BZKARvQ85G254S0hYd3vIF+VhAr9V1Ifpu D1vIpUb/y2KdsA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:36:56 2025 by rpki-client