This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json) Hash identifier: 2rttFlbYnZvtdoAaEkLmcge0gaBs0TuVhuJL0yTuvps= Subject key identifier: 2F:70:3B:4E:8C:F1:A4:71:48:9B:61:14:E6:F6:2C:DF:53:3E:66:D9 Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c Certificate serial: 019AF12DEC5360A2DCBF432940563F2DB359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft Manifest number: 0B01 Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: NR5A18SNuFymPD0br1xGx/5A7JVNcmMB8X1AHc7boCg=) 2: kI_UKMcmunYMY9TjK1VDTbIdCXE.roa (hash: /3d7l1sDA4ix/P9CQv22eTNSFswBDUH2vFeOZFQU5WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ec:53:60:a2:dc:bf:43:29:40:56:3f:2d:b3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=2f703b4e8cf1a471489b6114e6f62cdf533e66d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:7a:d4:83:2b:3a:32:7b:9c:14:df:fb:67: 8a:7d:7a:12:9d:2e:b3:a2:b7:df:04:bf:d7:75:3c: eb:44:93:5c:e5:bf:fa:94:26:e2:6a:e6:ef:9b:e0: ec:00:80:35:8d:f9:f6:2e:2a:25:90:5f:69:48:4d: 0f:89:7e:c1:0d:2e:89:26:07:d9:a0:01:e9:3c:d0: 00:be:f7:50:62:b9:97:c9:b4:af:40:dd:a7:f0:84: e7:03:68:51:b5:52:d1:86:f2:0d:2a:c0:bd:6a:28: 84:4a:0b:ef:95:cc:5f:b8:32:8a:81:e9:33:b7:d5: 2a:df:2f:29:f8:29:10:38:35:5e:15:f3:62:e1:dc: 92:66:c1:09:0c:5a:fb:e5:c4:1d:00:7f:8b:a1:0a: 6a:36:b2:3a:5f:b5:eb:1f:6f:45:03:8f:13:49:41: ac:ce:01:40:fd:3d:a7:f3:96:98:5f:34:48:57:92: c0:42:6a:be:e8:71:c2:f1:2a:7b:c0:d9:73:df:06: ad:9f:67:1b:f7:fc:b0:3d:1a:c9:72:22:23:eb:8d: 7e:6c:c3:1c:6d:57:3e:7d:8d:a3:87:7c:b3:d2:72: e8:96:d5:64:8e:42:73:eb:78:e6:67:c8:6d:19:a9: ed:19:ba:a3:8b:4c:55:2c:68:52:78:c0:b4:5c:23: 7e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:70:3B:4E:8C:F1:A4:71:48:9B:61:14:E6:F6:2C:DF:53:3E:66:D9 X509v3 Authority Key Identifier: keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ae:4a:a9:2e:dd:eb:8c:b6:42:51:61:f1:55:4f:b2:cc:5c: a9:e0:31:68:79:a2:38:e6:3f:70:1a:0c:c8:c4:2c:dd:4d:ca: 30:06:65:f8:37:f7:19:20:bc:32:fe:07:ce:7f:5c:e9:97:99: e2:a3:28:d4:8d:52:6d:38:12:b1:d3:e2:12:20:29:ff:3a:07: 5d:47:ef:13:6e:10:b7:f9:10:5e:55:fb:fd:c9:eb:f4:86:af: c9:db:a3:f2:af:88:7d:a2:6e:94:0f:15:1f:4a:9c:a4:57:58: 9b:c5:35:dc:26:61:a6:e2:45:88:0a:06:38:aa:cc:02:2b:51: 59:e9:f0:4f:8c:33:dc:e3:a1:9d:69:ce:a0:77:a9:6f:12:b3: 22:7f:84:6c:07:d3:84:0c:7e:86:9f:5e:ac:58:1f:f5:4b:29: bf:90:b1:2c:ea:3f:ce:37:31:57:43:d4:8c:1e:30:90:0f:f7: 2a:09:42:66:ec:53:11:d4:6a:36:1c:ef:d5:11:c4:fe:e1:e8: 23:45:c1:81:47:54:70:e7:6a:68:72:08:e6:61:23:81:15:74: b5:62:47:fa:9d:c0:22:27:7c:71:e4:e4:41:58:6a:b1:c8:5c: aa:ca:c2:ee:1f:62:43:26:30:2a:0f:2a:28:e7:60:4c:5b:44: 50:29:e2:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLexTYKLcv0MpQFY/LbNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYjhkOTE0MDUwMmM5ZTAzNTMwNTE4OWJmNjU4MjM0ZGIx NGY1NGMwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD EygyZjcwM2I0ZThjZjFhNDcxNDg5YjYxMTRlNmY2MmNkZjUzM2U2NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWR61IMrOjJ7nBTf+2eKfXoSnS6z orffBL/XdTzrRJNc5b/6lCbiaubvm+DsAIA1jfn2LiolkF9pSE0PiX7BDS6JJgfZ oAHpPNAAvvdQYrmXybSvQN2n8ITnA2hRtVLRhvINKsC9aiiESgvvlcxfuDKKgekz t9Uq3y8p+CkQODVeFfNi4dySZsEJDFr75cQdAH+LoQpqNrI6X7XrH29FA48TSUGs zgFA/T2n85aYXzRIV5LAQmq+6HHC8Sp7wNlz3watn2cb9/ywPRrJciIj641+bMMc bVc+fY2jh3yz0nLoltVkjkJz63jmZ8htGantGbqji0xVLGhSeMC0XCN+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9wO06M8aRxSJthFOb2LN9TPmbZMB8GA1UdIwQY MBaAFN+42RQFAsngNTBRib9lgjTbFPVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgt NDFlNzNjMWViYWUxLzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82MmE5NDctY2ZiOC00ZDNkLWIzMDgtNDFlNzNjMWViYWUx LzEvMzdqWkZBVUN5ZUExTUZHSnYyV0NOTnNVOVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApq5KqS7d 64y2QlFh8VVPssxcqeAxaHmiOOY/cBoMyMQs3U3KMAZl+Df3GSC8Mv4Hzn9c6ZeZ 4qMo1I1SbTgSsdPiEiAp/zoHXUfvE24Qt/kQXlX7/cnr9Iavyduj8q+IfaJulA8V H0qcpFdYm8U13CZhpuJFiAoGOKrMAitRWenwT4wz3OOhnWnOoHepbxKzIn+EbAfT hAx+hp9erFgf9Uspv5CxLOo/zjcxV0PUjB4wkA/3KglCZuxTEdRqNhzv1RHE/uHo I0XBgUdUcOdqaHII5mEjgRV0tWJH+p3AIid8ceTkQVhqschcqsrC7h9iQyYwKg8q KOdgTFtEUCniWw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:28 2025 by rpki-client