This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json) Hash identifier: 1nfKWRCOdns45///hjjZbY+eJQjTdFaOufkZoguY+XA= Subject key identifier: 62:21:BB:06:4C:32:62:42:4C:BD:8A:C0:52:E0:E7:85:AF:1C:61:83 Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03 Certificate serial: 019B32D7D54A1A6E1199AC96BB3BDD00B033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft Manifest number: 1226 Signing time: Thu 18 Dec 2025 19:02:44 +0000 Manifest this update: Thu 18 Dec 2025 19:02:44 +0000 Manifest next update: Fri 19 Dec 2025 19:02:44 +0000 Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: IvVU/iFLYT31jhAIZUtG9MMJdWBUyfo00KiPpXSiYEY=) 2: ImSPygzD6VVPadbxl_ihzWnZ-Cs.asa (hash: OiuxxzuWquLDPwjX5ddpIJ5lv8TlhD5un/7U3cQQfPU=) 3: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:d5:4a:1a:6e:11:99:ac:96:bb:3b:dd:00:b0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03 Validity Not Before: Dec 18 19:02:44 2025 GMT Not After : Dec 19 19:02:44 2025 GMT Subject: CN=6221bb064c3262424cbd8ac052e0e785af1c6183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b0:d4:f8:fb:5d:9a:16:f4:01:b8:60:de:87: 94:cf:fc:ff:63:da:34:90:02:56:bb:ed:6e:f3:6d: dc:b2:c7:4f:82:f4:89:f5:07:ef:d3:39:3d:ff:17: bf:80:23:9b:54:d3:8f:0c:6d:a9:cb:51:65:6a:73: 27:26:a6:e3:93:b3:ec:06:85:8d:0c:a6:d2:16:b0: 3d:78:f8:f8:21:78:5f:04:6e:c8:d3:01:80:6f:bf: 19:00:c4:54:5d:14:17:8d:41:84:98:da:f5:47:ae: 65:1c:a4:5e:f8:57:84:55:3b:13:79:df:96:18:dc: 18:4e:20:f1:b1:b1:42:b3:22:08:ed:7c:2e:f8:56: 78:1a:7d:9c:f7:69:b6:a8:8f:00:de:c5:1b:4f:fb: c5:93:a8:34:68:d6:40:b6:7c:21:86:32:1a:15:41: 03:97:22:e7:84:97:69:6b:1e:db:4c:4c:fe:0d:cd: 2e:55:b7:c2:f5:62:c2:4c:83:56:86:9e:63:48:2d: 31:7b:cc:79:2a:24:ad:44:1a:e0:d3:80:22:05:fe: 4b:7c:05:26:3e:e1:79:c6:9a:05:0f:a1:e9:1b:c9: 67:3d:d5:31:15:33:0c:f9:52:a4:42:dd:dc:ae:c7: ad:e5:f1:68:03:e1:0c:d0:f7:32:21:d2:a9:ec:cd: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:BB:06:4C:32:62:42:4C:BD:8A:C0:52:E0:E7:85:AF:1C:61:83 X509v3 Authority Key Identifier: keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:94:72:36:93:c9:56:f7:8a:3e:d3:a4:b4:16:fa:07:9d:19: 70:fc:c3:50:4c:d3:35:2e:24:e5:ab:1a:aa:65:7e:44:1e:11: fb:69:17:76:48:7e:99:40:1d:cb:01:e7:d3:de:35:9a:cc:e4: f1:45:60:bf:bc:0e:fd:83:55:d7:24:22:5f:3c:f3:9b:ee:c8: ac:cf:b3:c0:62:28:b3:2d:53:b5:7d:d4:ff:da:46:fe:22:27: 87:0e:d3:7a:55:c3:15:16:d4:e5:19:85:64:24:92:27:65:91: 3d:1d:db:9a:f9:3b:c7:33:b8:21:87:53:42:ba:fe:dd:37:e1: 2d:81:bb:c6:f4:7e:86:b5:0b:94:26:e1:ac:8e:f0:cd:8b:15: 7a:1f:37:d5:62:30:db:1e:65:d4:69:dc:e2:18:74:c1:81:66: 7e:19:97:35:63:d7:26:8e:c0:2b:f7:fb:c3:81:21:ad:1f:b7: 24:27:6f:6b:c6:35:96:f5:be:93:07:ae:f3:48:6f:10:34:a1: 2e:ba:e7:c9:4c:06:87:e6:35:aa:f7:c6:f5:36:ad:25:46:db: 01:3e:0a:00:23:fc:ff:45:c3:50:27:30:8e:34:0c:d9:73:1e: 4c:e6:ba:b4:2d:28:16:80:41:d5:36:7f:34:18:88:02:22:78: f2:95:75:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy19VKGm4RmayWuzvdALAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2U1ZmYxMjNlYTdkMmU4M2NlMjc1MjBjOTg3ZDAzN2U2 NDlkMDMwHhcNMjUxMjE4MTkwMjQ0WhcNMjUxMjE5MTkwMjQ0WjAzMTEwLwYDVQQD Eyg2MjIxYmIwNjRjMzI2MjQyNGNiZDhhYzA1MmUwZTc4NWFmMWM2MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbDU+Ptdmhb0Abhg3oeUz/z/Y9o0 kAJWu+1u823cssdPgvSJ9Qfv0zk9/xe/gCObVNOPDG2py1FlanMnJqbjk7PsBoWN DKbSFrA9ePj4IXhfBG7I0wGAb78ZAMRUXRQXjUGEmNr1R65lHKRe+FeEVTsTed+W GNwYTiDxsbFCsyII7Xwu+FZ4Gn2c92m2qI8A3sUbT/vFk6g0aNZAtnwhhjIaFUED lyLnhJdpax7bTEz+Dc0uVbfC9WLCTINWhp5jSC0xe8x5KiStRBrg04AiBf5LfAUm PuF5xpoFD6HpG8lnPdUxFTMM+VKkQt3crset5fFoA+EM0PcyIdKp7M2JYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIhuwZMMmJCTL2KwFLg54WvHGGDMB8GA1UdIwQY MBaAFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAt YjMwNDA4OTQ4Y2NlLzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAtYjMwNDA4OTQ4Y2Nl LzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5RyNpPJ VveKPtOktBb6B50ZcPzDUEzTNS4k5asaqmV+RB4R+2kXdkh+mUAdywHn0941mszk 8UVgv7wO/YNV1yQiXzzzm+7IrM+zwGIosy1TtX3U/9pG/iInhw7TelXDFRbU5RmF ZCSSJ2WRPR3bmvk7xzO4IYdTQrr+3TfhLYG7xvR+hrULlCbhrI7wzYsVeh831WIw 2x5l1Gnc4hh0wYFmfhmXNWPXJo7AK/f7w4EhrR+3JCdva8Y1lvW+kweu80hvEDSh LrrnyUwGh+Y1qvfG9TatJUbbAT4KACP8/0XDUCcwjjQM2XMeTOa6tC0oFoBB1TZ/ NBiIAiJ48pV1gw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:57:31 2025 by rpki-client