This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json) Hash identifier: cXAcDILeq7Fy0L1rqfqXMWha8hslYKJBjYZI3+AOL1Y= Subject key identifier: 29:54:1B:FF:43:06:15:8E:AC:51:0F:67:E8:5F:3E:28:48:67:4F:16 Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94 Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94 Certificate serial: 019B3EDA3F98C929B8B75218F2C6FD31F504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft Manifest number: 0FF1 Signing time: Sun 21 Dec 2025 03:00:49 +0000 Manifest this update: Sun 21 Dec 2025 03:00:49 +0000 Manifest next update: Mon 22 Dec 2025 03:00:49 +0000 Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: /+Fv0jrTWP9cqDlSXZw5pTpQoC2xy+S44iR/oUaXrgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:3f:98:c9:29:b8:b7:52:18:f2:c6:fd:31:f5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94 Validity Not Before: Dec 21 03:00:49 2025 GMT Not After : Dec 22 03:00:49 2025 GMT Subject: CN=29541bff4306158eac510f67e85f3e2848674f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:20:2b:e3:8e:1d:31:93:d6:9d:83:14:99: 30:43:40:b3:bc:97:d7:f7:2c:9e:02:f1:9a:21:e8: c8:f8:f3:53:33:5c:45:f2:7e:51:c6:92:ae:07:ca: e5:9c:e5:44:39:d5:43:81:c7:eb:fe:61:3a:6f:78: 1e:52:9f:75:7d:77:9b:7c:26:5c:b4:a1:0e:6e:97: f4:d9:08:bd:f3:06:72:1a:46:78:85:7c:d8:3a:78: 10:3e:02:54:4b:89:48:05:6d:59:65:ec:01:89:0e: 7d:09:aa:6d:66:a3:f5:4c:80:dc:ce:28:5d:d7:7a: 12:f9:78:11:28:5c:43:ae:61:b3:2c:cb:13:06:b7: 1a:25:89:1b:d8:f9:5d:54:e8:63:8a:ab:3b:d1:3f: ec:a8:3d:b8:7b:6e:8b:17:49:be:f2:59:fd:04:68: 58:33:17:f0:3e:37:6c:f6:93:8d:63:75:e7:38:17: 85:de:34:ec:38:ad:2d:aa:ce:11:68:c6:8e:d2:88: 64:a9:6b:34:f0:14:dd:2c:c7:3a:b6:37:dc:b0:47: a1:a0:54:92:3c:26:17:76:f2:ce:65:be:31:96:89: 1a:73:40:4f:5d:7a:fb:79:9e:32:ba:14:65:4e:a6: 76:73:ef:72:1c:f1:d2:f1:ec:71:d8:f7:e9:51:70: 9f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:54:1B:FF:43:06:15:8E:AC:51:0F:67:E8:5F:3E:28:48:67:4F:16 X509v3 Authority Key Identifier: keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c2:35:80:cf:bf:25:7a:39:2a:44:82:42:01:a3:4c:ac:eb: 91:42:fb:dc:bd:bc:c3:c1:20:99:45:1d:28:fa:93:55:37:df: d2:2f:2f:2f:19:f4:27:18:7b:99:3e:5b:01:a2:7b:91:ec:6b: 1e:8a:9d:3f:e4:5a:2d:b0:73:36:f1:aa:e1:75:ab:ae:97:8b: e5:14:47:e7:62:03:56:e4:49:83:e7:4c:d3:f5:8e:7d:8b:d4: d0:d5:e3:36:cb:2d:19:69:f8:11:17:76:ef:2c:71:97:3a:0f: 82:83:d4:d4:73:d2:c7:06:2c:77:3b:dd:5b:90:d8:29:66:04: db:35:50:60:c4:80:1c:e2:32:2a:45:fb:07:28:8b:e7:29:1c: 5e:7e:4d:79:cb:cf:ca:0f:de:f3:fc:a1:b2:2d:11:79:1f:b4: 6e:57:21:21:fb:28:39:4a:9a:7c:4b:3e:b8:34:ed:83:e3:0a: 70:79:d2:4b:33:39:b7:e1:73:2c:23:3d:fe:23:ce:9a:ff:76: 7b:ff:6f:26:25:93:96:e0:e7:1d:5e:7d:7c:e2:b5:37:4c:db: 1f:4d:a4:47:a4:8d:65:20:fb:e5:37:e9:05:ce:81:63:7a:d1: ad:80:a2:d1:e0:11:78:84:bf:52:0c:27:5e:ef:8b:8a:81:10: 7a:52:17:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2j+YySm4t1IY8sb9MfUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmN2U1ZWJkNmZhNDY5YzVlMzcwYmZjMTA2YzRkNGFhZDFl MWRiOTQwHhcNMjUxMjIxMDMwMDQ5WhcNMjUxMjIyMDMwMDQ5WjAzMTEwLwYDVQQD EygyOTU0MWJmZjQzMDYxNThlYWM1MTBmNjdlODVmM2UyODQ4Njc0ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsUgK+OOHTGT1p2DFJkwQ0CzvJfX 9yyeAvGaIejI+PNTM1xF8n5RxpKuB8rlnOVEOdVDgcfr/mE6b3geUp91fXebfCZc tKEObpf02Qi98wZyGkZ4hXzYOngQPgJUS4lIBW1ZZewBiQ59CaptZqP1TIDczihd 13oS+XgRKFxDrmGzLMsTBrcaJYkb2PldVOhjiqs70T/sqD24e26LF0m+8ln9BGhY MxfwPjds9pONY3XnOBeF3jTsOK0tqs4RaMaO0ohkqWs08BTdLMc6tjfcsEehoFSS PCYXdvLOZb4xlokac0BPXXr7eZ4yuhRlTqZ2c+9yHPHS8exx2PfpUXCfvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClUG/9DBhWOrFEPZ+hfPihIZ08WMB8GA1UdIwQY MBaAFH9+Xr1vpGnF43C/wQbE1KrR4duUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjM1ZXZXLWthY1hqY0xfQkJzVFVxdEhoMjVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jM2U4ZWQtNTk3YS00ODVhLTk0YTMt OTgyY2ZiMzU5YWVlLzEvZjM1ZXZXLWthY1hqY0xfQkJzVFVxdEhoMjVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jM2U4ZWQtNTk3YS00ODVhLTk0YTMtOTgyY2ZiMzU5YWVl LzEvZjM1ZXZXLWthY1hqY0xfQkJzVFVxdEhoMjVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8I1gM+/ JXo5KkSCQgGjTKzrkUL73L28w8EgmUUdKPqTVTff0i8vLxn0Jxh7mT5bAaJ7kexr HoqdP+RaLbBzNvGq4XWrrpeL5RRH52IDVuRJg+dM0/WOfYvU0NXjNsstGWn4ERd2 7yxxlzoPgoPU1HPSxwYsdzvdW5DYKWYE2zVQYMSAHOIyKkX7ByiL5ykcXn5NecvP yg/e8/yhsi0ReR+0blchIfsoOUqafEs+uDTtg+MKcHnSSzM5t+FzLCM9/iPOmv92 e/9vJiWTluDnHV59fOK1N0zbH02kR6SNZSD75TfpBc6BY3rRrYCi0eAReIS/Ugwn Xu+LioEQelIX7Q== -----END CERTIFICATE-----Generated at Sun Dec 21 08:48:06 2025 by rpki-client