This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json) Hash identifier: yIIB1V/XxcKmNY2yBKKG1CkU2GiKKrhsDTqLVzuUcXY= Subject key identifier: 10:0F:08:B9:69:EA:9D:C0:4B:01:8E:C5:B4:57:19:6A:4F:50:F9:16 Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Certificate serial: 019AF19BA50CA5C4C5A92C9CAB2E78AC34E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft Manifest number: 1387 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: fAEr3IXQH7DDNRlIdsJngysxqx/h0+Rjs70+7eGg1i4=) 2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=) 3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a5:0c:a5:c4:c5:a9:2c:9c:ab:2e:78:ac:34:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=100f08b969ea9dc04b018ec5b457196a4f50f916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:b3:74:4a:66:19:12:38:f4:a0:08:c4:a2: 3a:92:01:7e:b8:a9:a9:a0:08:87:6b:6e:07:d0:57: d4:ab:76:d1:10:8d:3b:f5:e1:9f:05:40:b8:0a:dc: 6b:85:fc:a4:bd:9d:87:b1:51:7e:b9:d5:ac:71:0d: 73:1e:e4:8f:04:a9:ee:4b:f0:a8:2b:65:a6:04:c3: 20:a1:26:43:cd:a6:cb:5d:ca:82:be:dc:4b:24:0c: d9:c1:60:80:16:22:a2:bb:dc:ee:db:95:9e:8b:ae: 8a:44:97:e0:98:b9:1a:48:1b:d7:57:c0:9e:96:61: 50:89:fc:90:85:e6:cf:ef:02:38:05:c3:f7:47:4b: b7:21:cd:66:73:6d:e2:e7:4c:b5:38:b7:5b:f4:81: 63:fd:30:04:33:f2:9c:fc:20:76:77:e7:d0:ed:4f: eb:d2:97:93:f2:c1:96:c8:6e:fa:e4:9a:e8:36:7d: c6:d0:03:58:99:06:da:b1:7d:78:8c:f2:75:f4:85: 36:a7:45:c0:d6:21:57:ba:9a:fa:06:56:11:89:13: a4:02:57:7a:c8:71:3c:d3:7f:cf:91:44:91:c9:dd: f0:c9:00:54:8b:40:ff:72:da:89:66:73:1c:7d:53: d8:33:7f:e6:a6:03:6b:4d:fd:b9:55:96:5a:a8:ab: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0F:08:B9:69:EA:9D:C0:4B:01:8E:C5:B4:57:19:6A:4F:50:F9:16 X509v3 Authority Key Identifier: keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2d:bf:eb:4c:3d:dc:7a:b9:a5:1b:24:24:a6:ef:e7:e7:91: 65:36:06:ed:b4:a3:ce:43:d5:b5:38:bf:6d:94:0a:b0:97:0d: 9c:dc:21:cf:91:c7:f2:c2:49:93:c0:ee:cc:69:26:2b:04:97: da:df:d7:18:3b:5c:d5:96:09:74:f4:5d:b4:3c:55:55:81:92: 89:23:f8:46:3a:90:09:cd:2f:47:be:ad:98:82:49:0b:be:47: 3f:b5:6e:e7:cf:e6:7d:b1:97:bf:fb:da:fc:c8:44:c8:5a:3f: 36:15:2b:66:b8:c6:22:c7:9b:35:d2:45:4a:55:61:27:95:b8: 36:75:bb:c1:02:70:a7:68:72:04:18:8c:af:e1:35:e3:8a:a3: e8:e0:6d:77:ad:03:35:62:86:51:33:a3:8d:ee:df:44:d1:3a: 6b:b8:0b:d7:ea:56:59:28:3d:f6:da:93:66:38:0b:55:b0:b6: da:0c:88:db:9f:a9:89:58:cb:08:ac:4f:e0:d4:ba:dd:7c:c0: 60:95:17:6a:51:d5:2c:10:fd:28:13:5f:08:64:65:fe:a6:a1: fa:2a:6f:69:ed:3e:37:00:27:0b:2b:4f:6f:0a:6a:52:fb:2c: a3:18:8e:76:95:6e:b9:07:07:a5:29:95:88:f6:c0:0f:e7:77: 0f:7b:c9:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6UMpcTFqSycqy54rDTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTA0MTU1ZWUzYWNmZTNmZWE4YmJmZWU4NmU5N2M1OGM4 OTkxZjQwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD EygxMDBmMDhiOTY5ZWE5ZGMwNGIwMThlYzViNDU3MTk2YTRmNTBmOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N2zdEpmGRI49KAIxKI6kgF+uKmp oAiHa24H0FfUq3bREI079eGfBUC4CtxrhfykvZ2HsVF+udWscQ1zHuSPBKnuS/Co K2WmBMMgoSZDzabLXcqCvtxLJAzZwWCAFiKiu9zu25Wei66KRJfgmLkaSBvXV8Ce lmFQifyQhebP7wI4BcP3R0u3Ic1mc23i50y1OLdb9IFj/TAEM/Kc/CB2d+fQ7U/r 0peT8sGWyG765JroNn3G0ANYmQbasX14jPJ19IU2p0XA1iFXupr6BlYRiROkAld6 yHE803/PkUSRyd3wyQBUi0D/ctqJZnMcfVPYM3/mpgNrTf25VZZaqKuaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAPCLlp6p3ASwGOxbRXGWpPUPkWMB8GA1UdIwQY MBaAFN+QQVXuOs/j/qi7/uhul8WMiZH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQt NjQ2N2Y0NGI0M2JmLzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQtNjQ2N2Y0NGI0M2Jm LzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWS2/60w9 3Hq5pRskJKbv5+eRZTYG7bSjzkPVtTi/bZQKsJcNnNwhz5HH8sJJk8DuzGkmKwSX 2t/XGDtc1ZYJdPRdtDxVVYGSiSP4RjqQCc0vR76tmIJJC75HP7Vu58/mfbGXv/va /MhEyFo/NhUrZrjGIsebNdJFSlVhJ5W4NnW7wQJwp2hyBBiMr+E144qj6OBtd60D NWKGUTOjje7fRNE6a7gL1+pWWSg99tqTZjgLVbC22gyI25+piVjLCKxP4NS63XzA YJUXalHVLBD9KBNfCGRl/qah+ipvae0+NwAnCytPbwpqUvssoxiOdpVuuQcHpSmV iPbAD+d3D3vJBA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:56 2025 by rpki-client