This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft File: 4336E008jUaNzls3Q1-Z4yPa4Og.mft (raw, json) Hash identifier: EF2Tz6BROtyQJTYI1Ob6QUNmodx4zejO5GaSqHDGKAw= Subject key identifier: 9C:72:76:75:34:77:06:B3:2A:97:D6:69:29:3F:35:EB:BE:DA:5D:87 Authority key identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 Certificate issuer: /CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Certificate serial: 019B5A51EB63310F9264E804244F8C18A896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft Manifest number: 2F Signing time: Fri 26 Dec 2025 11:01:16 +0000 Manifest this update: Fri 26 Dec 2025 11:01:16 +0000 Manifest next update: Sat 27 Dec 2025 11:01:16 +0000 Files and hashes: 1: 4336E008jUaNzls3Q1-Z4yPa4Og.crl (hash: rSOEbJAk1BjxpGDJVLVeISUxgj9DhRm70Pyq1jNWUhY=) 2: iwRA7fz_OPxlNBXZQvMgcTVYc6o.roa (hash: v0Z3qOqbDqbalYmhXR/vbK8ZHbFth7W9VtS2U87YUeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:eb:63:31:0f:92:64:e8:04:24:4f:8c:18:a8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Validity Not Before: Dec 26 11:01:16 2025 GMT Not After : Dec 27 11:01:16 2025 GMT Subject: CN=9c727675347706b32a97d669293f35ebbeda5d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:0e:9e:02:ad:4d:4e:8f:bc:66:86:6e:4f: c6:96:fc:0c:e1:e3:74:60:5e:f3:6f:11:dd:58:db: fe:52:81:ca:a0:7b:ae:a4:a9:e7:c7:83:dc:b9:5d: fd:17:9a:ad:f7:5c:df:55:f3:28:2c:3e:3f:3d:49: 6c:a3:a9:9c:07:a7:1d:97:57:7f:bd:8e:c5:77:67: 0e:42:6f:ea:80:2f:32:89:60:0d:82:84:ea:9a:14: 18:57:42:9f:1c:09:99:60:4a:a6:1c:73:44:ac:ca: b7:dd:d5:2f:c6:34:20:71:72:2e:f9:f3:f2:cb:6b: b0:2b:8c:70:86:b1:a1:fb:dd:3d:6b:e4:2a:ae:2c: 77:e0:11:9a:61:6c:c7:fb:7a:ba:59:8b:a9:6f:3b: 70:15:9d:8a:e6:31:ad:6f:df:4b:44:9a:03:88:b9: 89:59:33:03:47:1a:02:e3:13:ca:15:bc:1a:7e:ad: ef:b0:b8:4e:a9:5a:c7:ab:1c:fc:f5:2b:24:36:a0: d7:6e:a3:be:2e:cf:cb:62:e7:a2:a8:58:f1:a3:f7: c5:de:16:d9:6b:d3:26:24:08:56:a4:ad:20:ec:95: 51:a1:e9:25:75:a6:83:1e:61:bc:1a:13:47:7e:45: 98:80:05:f8:ed:db:8b:90:04:58:61:8f:c9:42:d7: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:72:76:75:34:77:06:B3:2A:97:D6:69:29:3F:35:EB:BE:DA:5D:87 X509v3 Authority Key Identifier: keyid:E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2c:6d:ae:58:a6:24:45:35:99:e4:3b:f8:af:82:77:4b:0a: 33:4f:07:50:1d:2b:8a:98:4e:88:56:2c:09:8f:e4:2e:ec:01: 73:e6:02:1a:df:da:f9:0c:59:51:56:e1:51:69:85:38:9a:da: 42:6a:3b:b4:63:c1:93:e5:24:60:81:9b:bb:94:9b:2f:07:f2: d2:0f:cd:1a:85:a5:24:ba:c6:bf:5b:5a:00:10:18:06:df:9b: 2b:b5:65:ae:1b:29:f2:bd:20:49:a2:5a:9a:a9:d8:64:68:3c: 41:42:a3:9e:80:f9:7c:21:ad:c6:34:4c:63:b1:bd:d2:f7:ed: 3e:b5:7d:e0:3f:3b:27:a4:a6:71:73:b0:37:d5:59:a2:4e:e2: a8:65:6d:2d:41:5f:15:3d:08:a5:75:ca:db:7f:e1:52:c6:bf: 4b:7e:02:9e:b4:ef:a7:c2:5c:e0:1d:d7:72:b9:60:f6:2b:5c: 90:c7:97:ad:46:65:6c:9c:eb:42:bc:1f:1c:09:dc:ff:03:02: 66:25:ae:37:cf:39:cc:58:c1:cd:f2:a9:20:72:7e:cc:0a:82: bb:2f:6d:69:8f:f7:92:c4:70:3c:ac:0b:6d:81:75:6e:44:cb: 83:f8:b6:93:f5:fc:13:92:0e:4c:d3:d8:1f:13:69:aa:36:0c: 95:08:fc:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUetjMQ+SZOgEJE+MGKiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2RmYTEzNGQzYzhkNDY4ZGNlNWIzNzQzNWY5OWUzMjNk YWUwZTgwHhcNMjUxMjI2MTEwMTE2WhcNMjUxMjI3MTEwMTE2WjAzMTEwLwYDVQQD Eyg5YzcyNzY3NTM0NzcwNmIzMmE5N2Q2NjkyOTNmMzVlYmJlZGE1ZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWUOngKtTU6PvGaGbk/GlvwM4eN0 YF7zbxHdWNv+UoHKoHuupKnnx4PcuV39F5qt91zfVfMoLD4/PUlso6mcB6cdl1d/ vY7Fd2cOQm/qgC8yiWANgoTqmhQYV0KfHAmZYEqmHHNErMq33dUvxjQgcXIu+fPy y2uwK4xwhrGh+909a+Qqrix34BGaYWzH+3q6WYupbztwFZ2K5jGtb99LRJoDiLmJ WTMDRxoC4xPKFbwafq3vsLhOqVrHqxz89SskNqDXbqO+Ls/LYueiqFjxo/fF3hbZ a9MmJAhWpK0g7JVRoekldaaDHmG8GhNHfkWYgAX47duLkARYYY/JQtdCzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxydnU0dwazKpfWaSk/Neu+2l2HMB8GA1UdIwQY MBaAFON9+hNNPI1Gjc5bN0NfmeMj2uDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjct NWY0YTcwNzEyYzIzLzEvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjctNWY0YTcwNzEyYzIz LzEvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSxtrlim JEU1meQ7+K+Cd0sKM08HUB0riphOiFYsCY/kLuwBc+YCGt/a+QxZUVbhUWmFOJra Qmo7tGPBk+UkYIGbu5SbLwfy0g/NGoWlJLrGv1taABAYBt+bK7Vlrhsp8r0gSaJa mqnYZGg8QUKjnoD5fCGtxjRMY7G90vftPrV94D87J6SmcXOwN9VZok7iqGVtLUFf FT0IpXXK23/hUsa/S34CnrTvp8Jc4B3Xcrlg9itckMeXrUZlbJzrQrwfHAnc/wMC ZiWuN885zFjBzfKpIHJ+zAqCuy9taY/3ksRwPKwLbYF1bkTLg/i2k/X8E5IOTNPY HxNpqjYMlQj8Eg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:32 2025 by rpki-client