This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json) Hash identifier: gEn0c2mi5dG7TqSvuhdxgacqu39HDTJw51TX2yxLs3E= Subject key identifier: 9D:CA:7B:2C:60:CD:06:7C:50:42:53:4A:72:C2:E2:2D:4A:A7:D0:C6 Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd Certificate serial: 019AF088A36A81143EEDEAE90762DA237879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft Manifest number: 0E56 Signing time: Fri 05 Dec 2025 22:01:17 +0000 Manifest this update: Fri 05 Dec 2025 22:01:17 +0000 Manifest next update: Sat 06 Dec 2025 22:01:17 +0000 Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: m03D6Vhu7IioYzbpSzU0qL6TeuG1Vbr4S8j2Hoo2Tt8=) 2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a3:6a:81:14:3e:ed:ea:e9:07:62:da:23:78:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd Validity Not Before: Dec 5 22:01:17 2025 GMT Not After : Dec 6 22:01:17 2025 GMT Subject: CN=9dca7b2c60cd067c5042534a72c2e22d4aa7d0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:e1:22:fc:f1:27:2a:af:1f:04:c0:1b:62: cd:0f:5c:74:4b:c3:5f:10:11:5e:63:61:b3:05:bf: a9:b1:a1:16:8e:d9:06:24:8c:0c:11:06:1d:07:95: 8f:f5:1a:89:d7:83:6a:6a:ca:7b:b6:70:c6:ed:4b: 37:10:92:f9:70:7f:d2:6f:52:cd:4e:99:49:50:8f: e6:16:5d:9d:39:73:e0:58:60:c6:86:39:6e:b6:11: eb:26:ff:54:67:f9:e2:ba:29:fb:0f:7c:d1:0d:90: dc:db:02:ab:cd:99:26:3a:b6:5b:fb:bc:c4:b4:44: bb:37:b8:8c:2c:bc:91:85:16:bb:c8:95:65:5f:1c: 70:83:0e:09:2b:c0:14:6a:e6:37:3a:a3:13:38:08: 20:2a:0d:cb:0b:f4:f5:6f:49:d5:ce:69:88:76:f2: 3e:e7:7e:55:f5:de:d9:1c:ee:4b:da:ce:e7:09:6f: 54:cd:58:84:5f:0d:af:06:54:1b:37:43:4f:31:29: 9f:9e:d2:11:bc:34:d5:49:78:73:c3:a8:cf:0b:96: 34:52:8b:25:a5:66:ce:23:43:9b:f4:1a:08:33:f1: 02:40:38:17:b9:18:df:45:4b:bd:b3:12:55:30:d3: 92:00:24:65:d0:76:8e:84:cb:18:7f:0c:48:f2:3d: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CA:7B:2C:60:CD:06:7C:50:42:53:4A:72:C2:E2:2D:4A:A7:D0:C6 X509v3 Authority Key Identifier: keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9f:7c:b6:33:7a:2b:a2:87:65:2b:89:26:a4:6e:b4:b1:d1: a7:40:bc:5a:a4:65:b3:ee:6e:fd:ca:23:bc:9e:df:1a:aa:8b: e4:18:2d:54:b8:e3:f7:38:e7:31:74:bb:56:63:5a:ad:3c:eb: 07:ab:2f:3c:a8:58:da:e8:60:da:3f:a0:45:2e:11:aa:00:c6: bd:51:a9:37:82:e1:9b:c5:d6:1e:d1:07:e0:95:f4:db:a7:63: a0:6b:2f:57:08:46:3d:f6:58:ca:e9:93:91:f5:a0:c8:ed:9f: e4:9c:eb:78:08:c8:7c:4a:e3:e8:ea:df:28:5e:3c:23:f5:06: 3d:32:3c:65:8f:e1:37:9f:79:cf:77:bf:87:7f:96:49:6d:8a: 6a:b4:38:37:d0:0e:e0:36:6f:9a:8f:d2:a8:9d:2b:a2:dc:f2: 6c:b4:89:cf:46:c9:1a:5b:97:06:11:27:71:cb:4c:3b:a6:96: 34:ca:96:f5:9c:63:45:23:4a:54:1a:51:09:29:a4:75:dd:a9: fb:08:76:49:75:c4:52:b9:fa:01:56:06:42:46:a5:94:da:4b: a2:a7:c3:b6:17:24:88:94:5b:ab:19:5c:67:4e:1c:30:82:d4: 32:a6:6d:f0:d7:3f:c6:b8:30:43:68:9d:ba:07:41:79:74:66: 97:09:07:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKNqgRQ+7erpB2LaI3h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYTI0ZjgyOThiZTE4YzhhNjlmMTgxMjhmMDY0ZTcwMDNl MWQzZGQwHhcNMjUxMjA1MjIwMTE3WhcNMjUxMjA2MjIwMTE3WjAzMTEwLwYDVQQD Eyg5ZGNhN2IyYzYwY2QwNjdjNTA0MjUzNGE3MmMyZTIyZDRhYTdkMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZLhIvzxJyqvHwTAG2LND1x0S8Nf EBFeY2GzBb+psaEWjtkGJIwMEQYdB5WP9RqJ14Nqasp7tnDG7Us3EJL5cH/Sb1LN TplJUI/mFl2dOXPgWGDGhjluthHrJv9UZ/niuin7D3zRDZDc2wKrzZkmOrZb+7zE tES7N7iMLLyRhRa7yJVlXxxwgw4JK8AUauY3OqMTOAggKg3LC/T1b0nVzmmIdvI+ 535V9d7ZHO5L2s7nCW9UzViEXw2vBlQbN0NPMSmfntIRvDTVSXhzw6jPC5Y0Uosl pWbOI0Ob9BoIM/ECQDgXuRjfRUu9sxJVMNOSACRl0HaOhMsYfwxI8j0/twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3KeyxgzQZ8UEJTSnLC4i1Kp9DGMB8GA1UdIwQY MBaAFN+iT4KYvhjIpp8YEo8GTnAD4dPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZKUGdwaS1HTWltbnhnU2p3Wk9jQVBoMDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMWZlNGQtYWI1YS00MDcxLWJhMmEt ZDVhMDZkOGFiOTg0LzEvMzZKUGdwaS1HTWltbnhnU2p3Wk9jQVBoMDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMWZlNGQtYWI1YS00MDcxLWJhMmEtZDVhMDZkOGFiOTg0 LzEvMzZKUGdwaS1HTWltbnhnU2p3Wk9jQVBoMDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJ98tjN6 K6KHZSuJJqRutLHRp0C8WqRls+5u/cojvJ7fGqqL5BgtVLjj9zjnMXS7VmNarTzr B6svPKhY2uhg2j+gRS4RqgDGvVGpN4Lhm8XWHtEH4JX026djoGsvVwhGPfZYyumT kfWgyO2f5JzreAjIfErj6OrfKF48I/UGPTI8ZY/hN595z3e/h3+WSW2KarQ4N9AO 4DZvmo/SqJ0rotzybLSJz0bJGluXBhEncctMO6aWNMqW9ZxjRSNKVBpRCSmkdd2p +wh2SXXEUrn6AVYGQkallNpLoqfDthckiJRbqxlcZ04cMILUMqZt8Nc/xrgwQ2id ugdBeXRmlwkHIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:48 2025 by rpki-client