This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json) Hash identifier: V+PjtkQw6cc+PTudShewXcC1TBZC8MpTKxmqRbDugeQ= Subject key identifier: 7F:FB:46:9D:C5:8F:10:15:53:42:3C:0B:76:84:29:BF:AD:02:D5:65 Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25 Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325 Certificate serial: 019AF12EA4A3E7BDF7466F9F7142A68EBBD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: Lec2k6Ofbln+GAdYDu65+EJ1ELfIME+r25QleutHcyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a4:a3:e7:bd:f7:46:6f:9f:71:42:a6:8e:bb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=7ffb469dc58f101553423c0b768429bfad02d565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:ad:67:d0:9f:94:af:68:94:28:a1:a3:47: b1:cd:38:02:22:a0:2b:b8:0b:99:bd:51:02:a3:65: d1:f6:41:9c:3b:56:18:5c:98:26:c9:f9:fc:7c:46: 20:0c:95:62:c1:4b:92:f0:29:c7:2d:bf:ea:53:cd: b3:82:28:e7:b1:04:c2:5c:0b:b3:80:2b:ca:4e:a9: ef:d1:0f:ff:48:26:20:cb:d6:50:37:72:bf:e4:c8: 17:8a:fc:6f:ac:31:1c:39:f0:d1:40:19:7b:c5:17: 97:bc:8a:fa:d3:80:2e:b1:bc:b2:75:d3:3b:f0:cd: 8a:f9:49:b9:fc:8f:e9:9b:d2:b4:1b:5e:65:d5:43: 7a:bc:26:e7:1a:bd:52:75:bd:65:74:b0:65:05:d9: 8b:b1:1d:d5:ed:da:b9:32:d4:ff:5d:22:59:88:3c: 2e:05:c9:cb:b4:10:23:8b:d9:e8:23:62:85:06:ac: 6b:6d:62:c4:d7:f1:f9:70:73:8a:75:eb:54:c8:8e: 93:e1:68:b0:61:d2:e6:92:b8:59:a5:4a:10:bf:8f: 2b:94:d8:81:cf:aa:b3:0e:17:fd:c7:17:fe:df:05: 99:1b:b1:fe:a1:4f:68:26:7d:4b:f6:73:13:b0:90: 4a:8a:fb:2f:40:09:25:1c:0b:26:7f:59:46:b3:f4: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FB:46:9D:C5:8F:10:15:53:42:3C:0B:76:84:29:BF:AD:02:D5:65 X509v3 Authority Key Identifier: keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:e6:73:85:21:a5:65:f5:1b:a7:02:25:67:f6:db:b4:e8: f0:4b:94:1d:2b:e1:39:7a:f2:65:65:c7:56:be:02:56:4b:5e: a0:b0:0c:ed:7c:8e:bc:b4:07:fd:dd:24:07:11:b1:65:2b:ce: a5:ba:50:9e:bd:ec:6e:46:c2:58:5a:12:98:9b:45:fb:8c:6f: ca:09:13:5f:92:b0:5f:c9:f1:09:a3:7d:15:a8:a5:5a:89:4f: cf:53:b0:74:53:7f:03:58:67:65:e0:85:f2:a1:28:1a:56:fc: e1:35:fd:92:e0:bd:f0:80:d2:b3:b4:4f:86:ab:c6:a0:b7:1d: 31:fe:5b:1a:db:c5:19:1c:20:61:91:e9:ae:87:83:96:57:a2: 37:86:d0:94:6a:64:36:af:c3:25:c5:72:81:14:21:ee:fe:ee: a2:77:c4:5a:c5:ab:37:a0:16:cc:86:7d:4e:2c:78:77:62:73: f9:4f:70:a1:5c:06:99:10:c2:67:42:ac:c3:fc:7d:d2:9a:45: e0:ee:23:76:7e:61:85:87:99:fa:f4:c9:28:00:55:64:ea:fb: 6e:fc:08:bd:7b:0a:e5:ab:aa:1b:de:9c:88:d9:77:6d:1d:43: 76:11:3c:f0:3d:45:64:1e:1a:5a:7d:b4:dd:e9:49:2c:ea:15: be:34:47:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqSj5733Rm+fcUKmjrvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWE5NjM4MDk3MTRkMTEwM2I2NDYwZDlkMGUxNGExMmU4 NTAzMjUwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD Eyg3ZmZiNDY5ZGM1OGYxMDE1NTM0MjNjMGI3Njg0MjliZmFkMDJkNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtqtZ9CflK9olCiho0exzTgCIqAr uAuZvVECo2XR9kGcO1YYXJgmyfn8fEYgDJViwUuS8CnHLb/qU82zgijnsQTCXAuz gCvKTqnv0Q//SCYgy9ZQN3K/5MgXivxvrDEcOfDRQBl7xReXvIr604AusbyyddM7 8M2K+Um5/I/pm9K0G15l1UN6vCbnGr1Sdb1ldLBlBdmLsR3V7dq5MtT/XSJZiDwu BcnLtBAji9noI2KFBqxrbWLE1/H5cHOKdetUyI6T4WiwYdLmkrhZpUoQv48rlNiB z6qzDhf9xxf+3wWZG7H+oU9oJn1L9nMTsJBKivsvQAklHAsmf1lGs/R9gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/7Rp3FjxAVU0I8C3aEKb+tAtVlMB8GA1UdIwQY MBaAFN+aljgJcU0RA7ZGDZ0OFKEuhQMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgt ZjMwOTZhMDI0ZTI5LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81MTQxYWEtMThkOS00ZDM0LTgyNzgtZjMwOTZhMDI0ZTI5 LzEvMzVxV09BbHhUUkVEdGtZTm5RNFVvUzZGQXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeLmc4Uh pWX1G6cCJWf227To8EuUHSvhOXryZWXHVr4CVkteoLAM7XyOvLQH/d0kBxGxZSvO pbpQnr3sbkbCWFoSmJtF+4xvygkTX5KwX8nxCaN9FailWolPz1OwdFN/A1hnZeCF 8qEoGlb84TX9kuC98IDSs7RPhqvGoLcdMf5bGtvFGRwgYZHproeDlleiN4bQlGpk Nq/DJcVygRQh7v7uonfEWsWrN6AWzIZ9Tix4d2Jz+U9woVwGmRDCZ0Ksw/x90ppF 4O4jdn5hhYeZ+vTJKABVZOr7bvwIvXsK5auqG96ciNl3bR1DdhE88D1FZB4aWn20 3elJLOoVvjRH5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:22 2025 by rpki-client