This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json) Hash identifier: QFhuErobd3lNmU2hAUlquI9Cvm7eggMrZQyN9t9XJMM= Subject key identifier: 29:BC:0B:7A:F4:BA:45:A0:48:98:2C:13:6F:E2:F3:10:99:04:8F:A9 Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace Certificate serial: 019AF1D25C594B0456B9F4F7DFC53B7C289C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft Manifest number: 10C7 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: DglJjsRXwO5I0jjPsxb/6cLXUKZ+9QNQslyJy7sDAlU=) 2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=) 3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5c:59:4b:04:56:b9:f4:f7:df:c5:3b:7c:28:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=29bc0b7af4ba45a048982c136fe2f31099048fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:d4:d4:3a:93:18:be:5a:77:21:40:e2:2e: 36:dc:76:93:29:72:ca:95:12:d4:da:16:6c:27:be: 4b:52:3b:90:f9:ea:37:01:ef:d6:6f:3e:97:a9:1b: ab:11:32:74:c9:5d:3f:c3:ac:4d:f6:60:8c:fe:48: 5e:d7:60:26:b8:24:0c:66:da:59:a3:c3:90:5d:36: 78:63:b6:1f:93:ba:0e:3e:ea:c6:0d:4b:94:48:32: 2a:32:28:71:ef:2d:3a:cb:97:82:87:47:08:89:3c: 66:f2:b1:32:0f:a4:1d:a2:a5:0f:9c:e1:3b:5e:bf: 73:d5:cd:c8:e2:87:df:8f:47:9f:78:a1:d5:1f:bb: 06:03:bb:d7:57:77:97:29:96:1e:5b:5c:15:ab:c8: 8a:79:1c:55:c4:e2:35:6c:7d:d1:ce:e9:0e:5d:99: b6:45:c6:8e:3c:50:be:f9:6f:13:c8:6e:24:78:e9: ae:d8:d1:d0:03:86:00:52:b0:94:d8:57:9d:ac:fe: f0:f4:b9:b5:7c:bf:38:db:76:e2:8d:10:1d:15:64: e0:9e:29:34:49:eb:72:17:e7:08:20:1b:eb:1b:09: b3:e9:e1:86:ad:0f:3d:52:4b:cc:e9:85:4d:13:80: 61:57:0d:8d:f2:85:29:55:f2:90:43:85:55:33:de: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:0B:7A:F4:BA:45:A0:48:98:2C:13:6F:E2:F3:10:99:04:8F:A9 X509v3 Authority Key Identifier: keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5d:cd:e8:67:ef:59:92:15:79:27:3a:8f:f6:56:6e:e1:ec: 16:17:c8:ee:5b:16:0e:4b:ac:c1:0a:e5:19:94:33:ce:0d:23: fb:2f:11:ea:7c:6e:d0:41:11:6e:3b:aa:d6:3c:ea:eb:f8:76: 78:2f:75:92:a3:2a:9f:b3:3d:ff:67:a9:f2:c5:7f:e2:d9:ac: 9e:fe:94:38:82:4a:c1:a2:57:c2:0c:40:1c:54:34:73:14:f5: e6:be:f3:1c:37:b5:18:33:61:e7:ee:d3:fe:40:4e:18:a4:5c: c8:99:e7:4b:43:ef:95:7d:fd:b7:96:3d:b1:7d:d1:3e:07:c0: 23:ff:7e:eb:5e:20:ef:27:3b:22:5d:c9:3d:ab:34:dc:cc:c9: 83:7f:45:ce:2c:9e:9b:ef:84:ff:33:2f:da:e7:1b:51:e9:29: 55:c1:22:0c:77:d3:9f:86:67:31:5b:3f:e7:b4:be:a4:d0:03: c7:cb:fe:7a:95:e5:22:4d:28:77:8c:68:04:49:c0:bb:c8:f1: a4:38:d7:c2:b0:eb:6c:ba:e8:08:ee:0e:e8:67:29:02:29:97: 40:1c:47:68:11:46:d2:82:49:8a:62:4d:46:98:d1:45:2c:43: 21:e9:81:50:9a:8e:4d:32:15:45:c1:fa:e3:39:a4:41:30:2f: 43:3e:57:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lxZSwRWufT338U7fCicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzN2UxNzdmNzY2NjMxNjZjNzUxOTBlMmQyMDkzMzVhNmFh ZTVhY2UwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EygyOWJjMGI3YWY0YmE0NWEwNDg5ODJjMTM2ZmUyZjMxMDk5MDQ4ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjXU1DqTGL5adyFA4i423HaTKXLK lRLU2hZsJ75LUjuQ+eo3Ae/Wbz6XqRurETJ0yV0/w6xN9mCM/khe12AmuCQMZtpZ o8OQXTZ4Y7Yfk7oOPurGDUuUSDIqMihx7y06y5eCh0cIiTxm8rEyD6QdoqUPnOE7 Xr9z1c3I4offj0efeKHVH7sGA7vXV3eXKZYeW1wVq8iKeRxVxOI1bH3RzukOXZm2 RcaOPFC++W8TyG4keOmu2NHQA4YAUrCU2FedrP7w9Lm1fL8423bijRAdFWTgnik0 SetyF+cIIBvrGwmz6eGGrQ89UkvM6YVNE4BhVw2N8oUpVfKQQ4VVM94gqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm8C3r0ukWgSJgsE2/i8xCZBI+pMB8GA1UdIwQY MBaAFIN+F392ZjFmx1GQ4tIJM1pqrlrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjIt OGJhNzY4MDIyNzYzLzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjItOGJhNzY4MDIyNzYz LzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA13N6Gfv WZIVeSc6j/ZWbuHsFhfI7lsWDkuswQrlGZQzzg0j+y8R6nxu0EERbjuq1jzq6/h2 eC91kqMqn7M9/2ep8sV/4tmsnv6UOIJKwaJXwgxAHFQ0cxT15r7zHDe1GDNh5+7T /kBOGKRcyJnnS0PvlX39t5Y9sX3RPgfAI/9+614g7yc7Il3JPas03MzJg39Fziye m++E/zMv2ucbUekpVcEiDHfTn4ZnMVs/57S+pNADx8v+epXlIk0od4xoBEnAu8jx pDjXwrDrbLroCO4O6GcpAimXQBxHaBFG0oJJimJNRpjRRSxDIemBUJqOTTIVRcH6 4zmkQTAvQz5XAA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:50 2025 by rpki-client