This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json) Hash identifier: Bi7z6sO1n6csQ+2CZOTW2uvFsbXEuijD4TT3ekDN2cI= Subject key identifier: AE:E3:88:BE:78:6A:90:52:B0:C8:08:30:21:ED:0A:90:22:00:EE:C7 Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Certificate serial: 019AF209B29D1F0A8DEBD87C1ADD71AB12D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft Manifest number: 1423 Signing time: Sat 06 Dec 2025 05:01:53 +0000 Manifest this update: Sat 06 Dec 2025 05:01:53 +0000 Manifest next update: Sun 07 Dec 2025 05:01:53 +0000 Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: ORU1O61rx6lHvDiD2gqxfAmcu/wZJfODVTE0zgLw3jU=) 2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b2:9d:1f:0a:8d:eb:d8:7c:1a:dd:71:ab:12:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Validity Not Before: Dec 6 05:01:53 2025 GMT Not After : Dec 7 05:01:53 2025 GMT Subject: CN=aee388be786a9052b0c8083021ed0a902200eec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a1:79:5d:28:9b:51:11:31:9f:e5:bd:4d:31: b0:c1:06:49:fa:99:22:bf:5a:7d:f3:14:55:02:17: ad:75:e3:3d:1e:84:57:18:f2:a0:ae:c4:09:68:2f: 92:a6:6c:88:cb:4f:43:13:55:cc:24:89:a5:3e:69: 1a:20:e3:67:28:69:9a:91:f2:3e:92:7b:0c:a3:8b: c7:4e:ad:f7:d4:c8:9a:a5:84:48:69:e5:88:ea:48: 77:43:ef:1f:24:bc:17:1c:f1:d8:71:65:a0:5c:c6: 85:9c:f0:4e:92:a1:4d:75:84:ab:65:c4:7d:79:b8: 19:f3:11:f0:50:ba:a2:91:21:47:2e:4d:14:a0:ab: 53:ea:0c:fe:9c:d9:b9:bf:c3:a8:03:19:be:4b:b4: db:49:06:a7:d8:60:27:a6:48:1c:92:57:52:88:ae: 79:d0:ec:df:81:30:9a:1c:d8:19:f9:82:bd:e9:10: ac:2c:a3:73:ec:50:9b:c6:35:68:f8:e7:03:33:d3: 9c:d5:10:72:da:7d:96:b8:c0:cc:ea:6b:de:96:7d: 59:28:42:ce:bd:2e:88:1c:82:00:6b:0e:54:15:f2: a2:42:94:bf:25:2c:1a:0e:19:64:89:50:d9:e1:4e: 97:66:e3:7f:d8:15:af:4c:19:70:ef:2d:6a:21:fd: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E3:88:BE:78:6A:90:52:B0:C8:08:30:21:ED:0A:90:22:00:EE:C7 X509v3 Authority Key Identifier: keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:14:26:fd:13:19:bc:34:7b:13:ad:53:85:c1:74:e7:24:4d: 9b:0f:94:4a:66:61:c3:98:e7:df:18:48:eb:71:34:bd:92:ea: 9a:54:9f:b0:c1:e2:3a:b7:12:f3:cc:e7:09:7d:19:d5:86:5b: ef:70:93:e8:1f:2e:90:1e:05:ea:14:90:3c:52:30:21:0e:44: c4:51:52:d8:b8:c7:12:b9:64:03:2f:1d:f6:c5:37:b3:9d:7b: 5d:58:43:b2:d2:70:0d:39:99:c5:7e:66:70:b2:b5:bb:b6:d4: 4e:e9:33:8d:41:12:dc:45:55:15:eb:37:2d:88:5f:c3:4f:28: cb:95:8a:dd:e0:bb:2c:29:e9:ec:4f:5d:82:9c:33:72:e9:51: 6d:9f:b0:ff:12:0d:a1:23:85:40:4d:88:95:70:3b:bb:49:af: 22:1e:a5:3a:b5:1d:ab:88:09:45:13:83:8f:33:f0:fd:32:c2: 11:a4:d4:d0:e8:d0:29:fe:4d:09:6a:67:b7:63:ca:da:1d:83: 20:2d:a9:e1:b3:7e:35:e1:63:64:df:85:5a:21:db:6d:51:55: bb:f6:06:bc:d0:cb:d1:8a:41:6a:ba:90:da:48:d3:41:4a:f3: 6a:d8:c9:95:42:9d:a1:da:c7:1d:53:28:a3:84:ad:ca:46:85: 4f:5f:a9:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbKdHwqN69h8Gt1xqxLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2VhYzRmYTMxM2EyZTc5MmU1NDI2M2NjNjA1ZmYzMTlm MzVjMTkwHhcNMjUxMjA2MDUwMTUzWhcNMjUxMjA3MDUwMTUzWjAzMTEwLwYDVQQD EyhhZWUzODhiZTc4NmE5MDUyYjBjODA4MzAyMWVkMGE5MDIyMDBlZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KF5XSibURExn+W9TTGwwQZJ+pki v1p98xRVAhetdeM9HoRXGPKgrsQJaC+SpmyIy09DE1XMJImlPmkaIONnKGmakfI+ knsMo4vHTq331MiapYRIaeWI6kh3Q+8fJLwXHPHYcWWgXMaFnPBOkqFNdYSrZcR9 ebgZ8xHwULqikSFHLk0UoKtT6gz+nNm5v8OoAxm+S7TbSQan2GAnpkgckldSiK55 0OzfgTCaHNgZ+YK96RCsLKNz7FCbxjVo+OcDM9Oc1RBy2n2WuMDM6mveln1ZKELO vS6IHIIAaw5UFfKiQpS/JSwaDhlkiVDZ4U6XZuN/2BWvTBlw7y1qIf03cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7jiL54apBSsMgIMCHtCpAiAO7HMB8GA1UdIwQY MBaAFN9+rE+jE6LnkuVCY8xgX/MZ81wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYt MmMwY2YyM2I0MjNlLzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYtMmMwY2YyM2I0MjNl LzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRQm/RMZ vDR7E61ThcF05yRNmw+USmZhw5jn3xhI63E0vZLqmlSfsMHiOrcS88znCX0Z1YZb 73CT6B8ukB4F6hSQPFIwIQ5ExFFS2LjHErlkAy8d9sU3s517XVhDstJwDTmZxX5m cLK1u7bUTukzjUES3EVVFes3LYhfw08oy5WK3eC7LCnp7E9dgpwzculRbZ+w/xIN oSOFQE2IlXA7u0mvIh6lOrUdq4gJRRODjzPw/TLCEaTU0OjQKf5NCWpnt2PK2h2D IC2p4bN+NeFjZN+FWiHbbVFVu/YGvNDL0YpBarqQ2kjTQUrzatjJlUKdodrHHVMo o4StykaFT1+pWw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:07 2025 by rpki-client