This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json) Hash identifier: 05G2Ke9ciwFzYA2+qdBmUx/ZLqT81LtCoz6pBa8BbbQ= Subject key identifier: 7A:25:57:4F:C9:4B:C7:45:DC:C5:14:59:03:85:D8:0A:DA:2C:CF:BD Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc Certificate serial: 019AF1D2225D5AD808B6A34821C8307CF80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft Manifest number: 1148 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: ktw8BKihkHL1ODyNZR3GPQ76woPIRAjlyLnf3cGtRPA=) 2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:22:5d:5a:d8:08:b6:a3:48:21:c8:30:7c:f8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=7a25574fc94bc745dcc514590385d80ada2ccfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:ac:67:cb:3a:cf:27:dd:bd:29:db:1b:a4: 49:32:c7:32:0a:6a:39:c2:bf:21:cd:40:c7:f9:07: 94:e2:d5:c4:12:30:f9:92:66:29:da:4b:7e:94:db: 9a:79:d0:0d:89:02:1b:22:84:b4:dd:51:08:63:7e: d0:ad:2a:46:35:6c:cb:46:90:76:84:73:d5:84:19: 8c:0c:15:99:2b:9f:c0:2a:48:b5:46:53:a5:33:35: 87:8b:da:1b:9a:55:1f:b2:be:eb:c7:79:7f:6c:be: ce:4f:f2:4e:48:06:a2:07:c0:78:b1:be:6a:e2:cd: 0e:cb:5f:3b:a9:fd:c3:36:1c:a8:ce:c9:86:0e:45: 63:be:cf:4d:43:28:94:13:54:6e:bc:7e:72:37:c8: 86:96:e5:49:75:0a:5d:a5:5e:bd:85:56:ac:df:29: 13:c8:68:a2:66:7f:3e:8f:e7:82:36:57:8c:4a:1d: 16:11:e5:7f:2d:f2:7f:dd:5d:54:2d:80:a9:ed:60: a0:7f:c6:cb:72:3a:ca:3b:80:b6:10:b7:04:d9:a6: 9e:68:70:a2:3c:f3:63:6b:de:7b:28:4b:04:d5:6b: 4d:78:30:b7:10:23:ac:47:8a:c9:9e:71:9d:75:8f: a0:66:3d:33:c7:d7:e0:50:50:b8:5c:c5:05:14:b0: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:25:57:4F:C9:4B:C7:45:DC:C5:14:59:03:85:D8:0A:DA:2C:CF:BD X509v3 Authority Key Identifier: keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:cc:40:62:58:a1:a4:8d:07:07:9c:9e:89:95:e8:4e:5e:c8: be:57:4a:3a:b0:ad:f7:c2:82:4c:fe:b2:0e:d7:10:c6:93:0b: 11:4a:a5:83:91:73:1c:f0:09:c5:93:9e:b8:da:6d:3f:89:41: eb:e2:fe:6b:ef:66:f9:b9:2f:0e:b6:fe:5e:86:5b:60:ec:88: a8:5d:77:bf:fa:89:cc:22:ea:f7:80:c8:7a:e2:f6:2c:90:45: 85:24:25:b0:20:4b:74:1e:34:dc:c9:b0:cb:77:65:70:40:21: 0d:b0:5c:0a:47:8b:f0:22:d1:2e:04:6f:26:a3:ae:13:bf:1e: 06:71:dd:7f:3f:30:31:3c:47:95:dc:b9:c4:98:6c:c8:24:28: 31:77:be:0d:da:90:aa:d0:d2:bb:0e:3c:7f:74:ff:b8:9b:66: d7:e9:a2:9c:8f:68:8b:d3:cf:56:09:ff:69:1b:65:b1:3c:6f: 4c:24:18:03:a2:d2:67:73:87:b7:07:f1:6d:16:77:fe:84:f6: 28:b5:27:17:c4:c4:74:43:47:f6:a7:84:66:a9:84:d8:8a:40: a9:5c:b0:da:a3:61:e5:6e:78:16:86:c4:ac:e9:dd:a7:42:c1: ea:f7:3b:1b:e7:35:5c:9a:da:1a:37:35:b7:d4:e6:ee:47:93: a8:2b:e6:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iJdWtgItqNIIcgwfPgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTE4NDVlNjVlNGYwMzk0ZjFlNmMzZmY5ZTc3MzJmNmFh NDZmZGMwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD Eyg3YTI1NTc0ZmM5NGJjNzQ1ZGNjNTE0NTkwMzg1ZDgwYWRhMmNjZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5+sZ8s6zyfdvSnbG6RJMscyCmo5 wr8hzUDH+QeU4tXEEjD5kmYp2kt+lNuaedANiQIbIoS03VEIY37QrSpGNWzLRpB2 hHPVhBmMDBWZK5/AKki1RlOlMzWHi9obmlUfsr7rx3l/bL7OT/JOSAaiB8B4sb5q 4s0Oy187qf3DNhyozsmGDkVjvs9NQyiUE1RuvH5yN8iGluVJdQpdpV69hVas3ykT yGiiZn8+j+eCNleMSh0WEeV/LfJ/3V1ULYCp7WCgf8bLcjrKO4C2ELcE2aaeaHCi PPNja957KEsE1WtNeDC3ECOsR4rJnnGddY+gZj0zx9fgUFC4XMUFFLAOuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHolV0/JS8dF3MUUWQOF2AraLM+9MB8GA1UdIwQY MBaAFN+RhF5l5PA5Tx5sP/nncy9qpG/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQt Zjg5YWI5ZjEyODZjLzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQtZjg5YWI5ZjEyODZj LzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsxAYlih pI0HB5yeiZXoTl7IvldKOrCt98KCTP6yDtcQxpMLEUqlg5FzHPAJxZOeuNptP4lB 6+L+a+9m+bkvDrb+XoZbYOyIqF13v/qJzCLq94DIeuL2LJBFhSQlsCBLdB403Mmw y3dlcEAhDbBcCkeL8CLRLgRvJqOuE78eBnHdfz8wMTxHldy5xJhsyCQoMXe+DdqQ qtDSuw48f3T/uJtm1+minI9oi9PPVgn/aRtlsTxvTCQYA6LSZ3OHtwfxbRZ3/oT2 KLUnF8TEdENH9qeEZqmE2IpAqVyw2qNh5W54FobErOndp0LB6vc7G+c1XJraGjc1 t9Tm7keTqCvmVw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:38 2025 by rpki-client