This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json) Hash identifier: 0gUE9jVcBzg21KObChqNg2FrE5W2qFKs9xxZBD5OsKk= Subject key identifier: 3A:15:E9:53:F6:25:23:E4:9E:C4:1D:80:15:34:A6:6D:FF:20:C5:D6 Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Certificate serial: 019AF3C0144C8BF17C9A6C1F879D4851527C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft Manifest number: 1070 Signing time: Sat 06 Dec 2025 13:00:42 +0000 Manifest this update: Sat 06 Dec 2025 13:00:42 +0000 Manifest next update: Sun 07 Dec 2025 13:00:42 +0000 Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: S4NdZp8MS06jgZSUnUC7FU5Z+ykkfuf0hrnOOOTVp4w=) 2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:14:4c:8b:f1:7c:9a:6c:1f:87:9d:48:51:52:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Validity Not Before: Dec 6 13:00:42 2025 GMT Not After : Dec 7 13:00:42 2025 GMT Subject: CN=3a15e953f62523e49ec41d801534a66dff20c5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:60:8f:c2:ac:93:f7:92:16:fe:6e:ac:2f: 51:c7:a6:42:a1:40:00:65:69:3b:eb:69:10:da:8e: 32:8a:c5:83:b3:11:f8:71:b2:1f:aa:52:5b:7d:93: eb:6a:6e:2f:a4:f6:ae:a7:db:b3:33:81:31:d4:e0: ae:54:5d:60:8c:37:cb:ad:2c:09:74:8f:46:9e:23: 79:8a:14:41:91:95:21:6c:b4:45:46:a0:cf:f2:0e: 28:70:db:8e:24:81:eb:56:fe:1f:4c:ec:44:2e:4c: 7f:b7:0c:7a:b5:77:16:78:e1:e0:14:bc:c1:98:ea: 6d:2c:b5:37:7e:fc:6f:92:a5:67:3e:f5:4c:e8:38: f5:15:a3:c1:74:22:20:5c:a8:1d:a1:ae:c4:f0:cd: 8e:3a:db:29:a8:75:e6:ff:36:f7:01:af:ae:f5:c4: 4c:d7:b9:6b:bf:05:01:4e:0c:60:57:20:f8:7f:07: ad:74:9f:ea:74:43:db:c5:b2:0f:fc:e5:d0:07:ba: fc:29:20:7e:f8:7a:d9:92:d5:eb:c5:c3:c1:ff:37: a1:45:48:94:9e:54:a5:72:f0:6b:94:e9:ea:1f:fd: 4d:4e:f1:5c:21:3d:39:06:d6:1d:e4:f1:cc:74:fa: 67:4f:ef:b0:27:ef:fa:7f:28:c5:0b:be:8d:b1:60: 90:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:15:E9:53:F6:25:23:E4:9E:C4:1D:80:15:34:A6:6D:FF:20:C5:D6 X509v3 Authority Key Identifier: keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:fa:75:26:94:9e:95:31:a7:a8:9e:bd:db:ad:6e:4e:4e:69: e5:b5:41:75:01:ac:20:72:82:91:44:65:a3:1e:f9:1e:d1:36: b6:c3:74:96:53:be:3b:a4:65:e3:6c:50:26:7b:64:d0:cb:c9: 81:23:16:a0:af:3f:4b:f3:ff:23:60:cd:96:cf:e2:f6:c2:77: 16:de:16:0a:21:df:f3:2a:52:f8:1a:6a:fe:da:a2:a5:e0:61: a6:af:b6:77:81:b3:f6:b9:9b:22:96:67:bc:a8:be:2f:43:be: 67:79:74:cc:29:03:e9:38:02:cd:6a:a5:85:71:75:f5:6a:7c: a9:cb:5d:61:d5:b6:3e:1c:be:91:8f:3c:a4:a6:1c:3e:12:a6: 4e:e0:68:71:1b:8d:a6:d5:0b:01:d9:79:1f:08:00:6a:05:85: 13:80:a6:ad:1d:16:01:af:22:ff:ca:1d:f8:df:2f:82:5e:79: d9:9d:2f:79:f8:42:7a:7a:c8:2e:9f:72:bc:50:e2:b6:1a:d7: ee:97:ba:56:6b:29:a1:86:9a:b6:e3:91:61:fa:d4:78:93:de: 71:ac:50:b5:a5:bd:5d:ca:91:d8:2e:e7:f1:58:97:1a:09:1c: 92:6b:7b:2d:99:48:cf:51:20:cb:f9:f3:58:82:01:d4:85:6f: 71:dd:0e:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBRMi/F8mmwfh51IUVJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1 ZjlmYTYwHhcNMjUxMjA2MTMwMDQyWhcNMjUxMjA3MTMwMDQyWjAzMTEwLwYDVQQD EygzYTE1ZTk1M2Y2MjUyM2U0OWVjNDFkODAxNTM0YTY2ZGZmMjBjNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTVgj8Ksk/eSFv5urC9Rx6ZCoUAA ZWk762kQ2o4yisWDsxH4cbIfqlJbfZPram4vpPaup9uzM4Ex1OCuVF1gjDfLrSwJ dI9GniN5ihRBkZUhbLRFRqDP8g4ocNuOJIHrVv4fTOxELkx/twx6tXcWeOHgFLzB mOptLLU3fvxvkqVnPvVM6Dj1FaPBdCIgXKgdoa7E8M2OOtspqHXm/zb3Aa+u9cRM 17lrvwUBTgxgVyD4fwetdJ/qdEPbxbIP/OXQB7r8KSB++HrZktXrxcPB/zehRUiU nlSlcvBrlOnqH/1NTvFcIT05BtYd5PHMdPpnT++wJ+/6fyjFC76NsWCQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoV6VP2JSPknsQdgBU0pm3/IMXWMB8GA1UdIwQY MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPp1JpSe lTGnqJ69261uTk5p5bVBdQGsIHKCkURlox75HtE2tsN0llO+O6Rl42xQJntk0MvJ gSMWoK8/S/P/I2DNls/i9sJ3Ft4WCiHf8ypS+Bpq/tqipeBhpq+2d4Gz9rmbIpZn vKi+L0O+Z3l0zCkD6TgCzWqlhXF19Wp8qctdYdW2Phy+kY88pKYcPhKmTuBocRuN ptULAdl5HwgAagWFE4CmrR0WAa8i/8od+N8vgl552Z0vefhCenrILp9yvFDithrX 7pe6VmspoYaatuORYfrUeJPecaxQtaW9XcqR2C7n8ViXGgkckmt7LZlIz1Egy/nz WIIB1IVvcd0O2A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:03 2025 by rpki-client