This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: qvTKJE1IajWuzSnlUc3oBv12CQjFWMDgqtnFn7kGttA= Subject key identifier: CD:78:11:BA:3C:1C:56:64:CA:4B:05:74:10:51:EC:6A:BF:12:94:20 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019AF0511F4CD71EDE5969AC8D55AD8E7F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 064A Signing time: Fri 05 Dec 2025 21:00:39 +0000 Manifest this update: Fri 05 Dec 2025 21:00:39 +0000 Manifest next update: Sat 06 Dec 2025 21:00:39 +0000 Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: nk5Dychxnl1zCT1jpfLWoQjTyYoNjb1g1/DVYu6DsJ8=) 2: 5zBBP6A9yXxPnIT5zZIOxAXnWn8.roa (hash: Tk6h46GooTA/gBtAz3CQBGmG5ai7s8MBzIVWccJFxM0=) 3: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=) 4: DoutZlvm4IbzXZXDTFrxAAquQLg.roa (hash: qnpQEntxymSrGJJO5sN1jep0qMMWrabFq1224NHJCYE=) 5: Jnp54uEZWEbzo5JH40T_lJ9C9Z0.roa (hash: Fnatp1DYGIx3gW9yEtvyiEfpUNIXk3xQmBuqhYqPnxI=) 6: _MqV1XKDHlZayFJD_tebnGvV-5M.roa (hash: d1lgjgsmxlfmAx6agblK/hzEA0kP5WWi8VR1j2Op8bI=) 7: lD6XQXU5XweY3aFaXvtSaxKbUbg.roa (hash: 6ADKjdzYu1CV/1GsWyr07rGlXGz5FE1o4HR8g0+KmZE=) 8: lP4cxO_3lnzQn7Ilwl6gVjJD0IY.roa (hash: uXIKziw38oRnc113zAOQwsWk6faYXtXNQlUgwb8l2ZE=) 9: p0BVO9Af7Thr9z7m6IM96h1DgmA.roa (hash: M3qrJb8kDeOcqJXYvSqGIOSCSmHqLEZFL25U38otuCQ=) 10: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:1f:4c:d7:1e:de:59:69:ac:8d:55:ad:8e:7f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Dec 5 21:00:39 2025 GMT Not After : Dec 6 21:00:39 2025 GMT Subject: CN=cd7811ba3c1c5664ca4b05741051ec6abf129420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:a7:5e:19:f5:52:dc:58:2c:cd:1f:46:6a: f7:44:c6:f0:ec:32:62:79:a3:c0:1a:87:02:18:80: a0:10:f8:33:78:d3:f0:ab:c2:20:31:81:40:e3:e0: 84:58:55:55:53:fd:11:44:f6:a5:31:1f:39:36:46: 99:62:6d:57:1f:3d:1c:ce:dd:3d:1f:72:69:b6:c7: 0a:f3:af:f0:a4:10:9d:2d:7f:41:ea:e1:f8:01:64: ee:b1:63:b5:91:81:8d:28:d6:13:48:83:ed:4f:3c: d8:9f:9b:30:eb:59:be:1c:7f:88:f6:f1:03:81:50: bf:80:6f:0a:32:aa:e9:10:2a:af:b0:09:c1:16:a7: d8:e2:78:6d:67:d3:37:ae:2f:5e:3b:5d:86:93:fe: 79:8d:bb:00:da:20:26:90:e7:60:64:e6:31:05:24: 42:f4:61:87:49:20:14:70:ee:42:d3:66:f7:ac:a4: 16:84:14:c4:27:30:c1:42:7c:dc:3c:19:4d:dc:4b: a0:59:31:bd:91:e6:6c:57:7d:13:ce:c0:51:ae:6c: e5:09:6f:91:5e:b8:87:58:2c:c3:86:6e:ed:70:5f: 11:1f:09:16:6d:9a:46:9c:86:28:ff:d1:41:1c:3c: 78:b6:01:b9:b9:54:69:d8:47:9e:49:25:c0:f8:78: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:78:11:BA:3C:1C:56:64:CA:4B:05:74:10:51:EC:6A:BF:12:94:20 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7a:4f:5c:8e:4d:69:c6:19:f6:2a:9b:34:49:99:6e:bd:89: 95:42:21:57:94:37:53:eb:85:b8:3c:a5:15:57:b8:d9:5b:fe: 6a:04:dc:c2:9f:d4:7c:f5:7f:ca:c5:23:a2:44:80:e9:9b:1f: 9f:8e:9d:06:fb:60:34:a8:18:f5:ad:b2:f5:da:93:ef:05:5e: f3:8b:9a:46:92:f2:90:6d:57:6d:5f:53:7a:6b:78:89:95:d4: bc:84:3a:84:d8:ff:11:0c:f8:aa:9e:56:4d:30:b2:22:a9:91: 90:60:c0:8b:c4:a4:39:0b:fe:d8:64:4d:19:0d:72:d0:7f:f3: 34:f2:f7:81:63:04:89:19:24:e2:02:33:22:21:a8:01:54:3e: 9e:09:0d:58:e9:fb:64:e0:db:8a:90:dc:29:42:bc:7b:00:0f: 0a:21:76:58:de:e1:56:14:4c:a6:ef:5c:78:04:73:2f:70:41: 2f:fa:a9:eb:cf:59:3f:96:8b:bd:7c:1b:f1:80:b1:eb:f1:8e: 11:1e:70:80:10:26:6f:26:6c:88:79:0b:08:6f:6f:56:20:76: 5f:e3:65:8a:f7:bb:b5:e9:c8:d7:d5:80:4e:51:69:c9:e3:92: 87:22:e7:29:43:e3:ac:25:0c:0d:0b:0e:24:2a:22:72:56:7d: c8:b1:bd:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUR9M1x7eWWmsjVWtjn+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjUxMjA1MjEwMDM5WhcNMjUxMjA2MjEwMDM5WjAzMTEwLwYDVQQD EyhjZDc4MTFiYTNjMWM1NjY0Y2E0YjA1NzQxMDUxZWM2YWJmMTI5NDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty6nXhn1UtxYLM0fRmr3RMbw7DJi eaPAGocCGICgEPgzeNPwq8IgMYFA4+CEWFVVU/0RRPalMR85NkaZYm1XHz0czt09 H3JptscK86/wpBCdLX9B6uH4AWTusWO1kYGNKNYTSIPtTzzYn5sw61m+HH+I9vED gVC/gG8KMqrpECqvsAnBFqfY4nhtZ9M3ri9eO12Gk/55jbsA2iAmkOdgZOYxBSRC 9GGHSSAUcO5C02b3rKQWhBTEJzDBQnzcPBlN3EugWTG9keZsV30TzsBRrmzlCW+R XriHWCzDhm7tcF8RHwkWbZpGnIYo/9FBHDx4tgG5uVRp2EeeSSXA+Hg1xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM14Ebo8HFZkyksFdBBR7Gq/EpQgMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXpPXI5N acYZ9iqbNEmZbr2JlUIhV5Q3U+uFuDylFVe42Vv+agTcwp/UfPV/ysUjokSA6Zsf n46dBvtgNKgY9a2y9dqT7wVe84uaRpLykG1XbV9Temt4iZXUvIQ6hNj/EQz4qp5W TTCyIqmRkGDAi8SkOQv+2GRNGQ1y0H/zNPL3gWMEiRkk4gIzIiGoAVQ+ngkNWOn7 ZODbipDcKUK8ewAPCiF2WN7hVhRMpu9ceARzL3BBL/qp689ZP5aLvXwb8YCx6/GO ER5wgBAmbyZsiHkLCG9vViB2X+Nlive7tenI19WATlFpyeOShyLnKUPjrCUMDQsO JCoiclZ9yLG9Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:15 2025 by rpki-client