This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json) Hash identifier: 7da7qd+bmKsatwCMqlTWDMAKrwcZUujzVY2fehMbbqk= Subject key identifier: F0:B2:49:02:FC:E2:34:3D:B4:77:55:72:08:0F:F6:F8:AB:5A:A1:2D Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03 Certificate serial: 019AF1D255CB54F87E8349A1D1D98133E4B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft Manifest number: 1204 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: aEYu3XMFdtIHHT0Gxnp63uMvsVYMvBAmwE0ncciQwgg=) 2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:55:cb:54:f8:7e:83:49:a1:d1:d9:81:33:e4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=f0b24902fce2343db4775572080ff6f8ab5aa12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:b3:5e:d7:bf:40:75:3b:c5:51:9c:8b:4f: ed:4c:bc:e3:f0:ad:8c:43:bb:d8:fc:cd:0e:74:3d: 45:bf:ef:28:60:5a:c2:9a:8b:5c:df:0c:28:c8:ad: de:ef:78:a4:b8:57:72:cf:20:7c:9e:c3:74:be:ce: 45:df:a7:cf:fd:1d:c5:f3:63:f8:c1:92:b0:7f:22: 44:26:cd:bf:1b:0e:ca:8d:7d:a7:79:44:17:35:7c: 39:f2:f4:8a:6a:1c:6c:0a:60:54:eb:20:09:8a:67: 38:a2:56:8e:68:5b:d4:61:85:b8:ac:fe:16:7b:f6: 5f:b5:75:6e:81:ef:ad:ca:be:ef:e1:4a:53:05:eb: 78:7d:9f:d3:21:74:e8:e1:b4:c5:70:32:a7:2d:a1: 01:82:f3:3a:0a:4e:32:33:c9:1f:25:32:50:00:c0: f5:74:8b:1b:9f:0c:86:56:86:18:c6:0f:bb:d0:76: 0b:08:62:8d:75:c5:25:05:c7:cc:5a:1b:2d:5a:15: 01:94:0e:4a:d2:5b:dc:6e:0e:21:61:a9:16:56:87: b5:19:ea:a6:20:2d:4d:25:aa:26:28:3d:7d:0b:3d: ac:a9:1a:9f:e0:f4:7a:b6:2d:92:8e:f3:e3:61:14: 0b:36:61:e8:4f:26:02:40:d5:c5:5a:e0:98:52:9d: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B2:49:02:FC:E2:34:3D:B4:77:55:72:08:0F:F6:F8:AB:5A:A1:2D X509v3 Authority Key Identifier: keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4d:ed:6e:6d:f9:32:fd:84:90:bf:28:34:c9:b6:ec:79:79: de:e2:10:c0:0e:c0:8e:52:c6:f1:7c:7e:f4:a6:4a:1c:d5:74: 97:73:8a:22:ff:33:2b:5c:c9:f1:2a:aa:73:61:23:a1:f7:8f: e0:1d:c0:60:4e:21:aa:9f:92:6a:97:e9:01:57:8f:12:e1:8b: 42:71:a9:1d:fd:98:5e:95:00:1b:5c:1e:17:14:ec:95:8a:ce: 50:54:be:f9:90:91:60:8e:da:86:04:fa:88:39:b2:9c:9b:c0: 0f:c4:4d:44:8a:a0:5a:ca:2a:9e:3b:aa:a2:1e:eb:45:98:22: 67:1b:d0:a2:6e:db:ad:47:e4:95:34:9d:a4:0a:3f:05:08:0f: ef:8c:52:3c:59:5f:d9:1e:fa:69:e3:39:4a:c1:06:ca:53:8b: 9a:ad:43:07:cb:79:ae:6b:d0:02:a7:c2:c6:e6:bf:d2:70:b4: e3:65:96:14:aa:75:e5:c6:cd:02:43:cd:b7:58:82:98:da:77: cf:ea:8d:09:69:9e:6b:38:5a:83:88:9e:fa:a8:6d:39:50:ca: 56:e9:46:fc:7b:e8:c1:d3:fc:25:06:e3:1b:66:b0:1b:6f:a0: e4:3b:4c:db:17:7f:21:64:ab:9d:ae:94:14:2c:93:2e:8d:81: bb:96:54:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lXLVPh+g0mh0dmBM+S4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2U1ZmYxMjNlYTdkMmU4M2NlMjc1MjBjOTg3ZDAzN2U2 NDlkMDMwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EyhmMGIyNDkwMmZjZTIzNDNkYjQ3NzU1NzIwODBmZjZmOGFiNWFhMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRyzXte/QHU7xVGci0/tTLzj8K2M Q7vY/M0OdD1Fv+8oYFrCmotc3wwoyK3e73ikuFdyzyB8nsN0vs5F36fP/R3F82P4 wZKwfyJEJs2/Gw7KjX2neUQXNXw58vSKahxsCmBU6yAJimc4olaOaFvUYYW4rP4W e/ZftXVuge+tyr7v4UpTBet4fZ/TIXTo4bTFcDKnLaEBgvM6Ck4yM8kfJTJQAMD1 dIsbnwyGVoYYxg+70HYLCGKNdcUlBcfMWhstWhUBlA5K0lvcbg4hYakWVoe1Geqm IC1NJaomKD19Cz2sqRqf4PR6ti2SjvPjYRQLNmHoTyYCQNXFWuCYUp2xdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCySQL84jQ9tHdVcggP9virWqEtMB8GA1UdIwQY MBaAFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAt YjMwNDA4OTQ4Y2NlLzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kZmMxMGMtZjg4OS00NTVhLTgyYTAtYjMwNDA4OTQ4Y2Nl LzEvNDM1ZjhTUHFmUzZEemlkU0RKaDlBMzVrblFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXE3tbm35 Mv2EkL8oNMm27Hl53uIQwA7AjlLG8Xx+9KZKHNV0l3OKIv8zK1zJ8Sqqc2EjofeP 4B3AYE4hqp+SapfpAVePEuGLQnGpHf2YXpUAG1weFxTslYrOUFS++ZCRYI7ahgT6 iDmynJvAD8RNRIqgWsoqnjuqoh7rRZgiZxvQom7brUfklTSdpAo/BQgP74xSPFlf 2R76aeM5SsEGylOLmq1DB8t5rmvQAqfCxua/0nC042WWFKp15cbNAkPNt1iCmNp3 z+qNCWmeazhag4ie+qhtOVDKVulG/HvowdP8JQbjG2awG2+g5DtM2xd/IWSrna6U FCyTLo2Bu5ZU5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:48 2025 by rpki-client