This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json) Hash identifier: PIQ84YvicVR2IVGGf2OspZ5YBEMPxFmnGbpjioFzQCc= Subject key identifier: 93:E1:F8:F0:81:18:24:C4:9E:A6:C7:19:E3:CE:F1:53:3F:63:BC:56 Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019AF3890DCEFC01172A7391920C982DBDEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft Manifest number: 03E0 Signing time: Sat 06 Dec 2025 12:00:36 +0000 Manifest this update: Sat 06 Dec 2025 12:00:36 +0000 Manifest next update: Sun 07 Dec 2025 12:00:36 +0000 Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: h/IRC9bPQb0zcYMjpPDx6hGcr3Rnu/cEX3zI2huZF50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0d:ce:fc:01:17:2a:73:91:92:0c:98:2d:bd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Dec 6 12:00:36 2025 GMT Not After : Dec 7 12:00:36 2025 GMT Subject: CN=93e1f8f0811824c49ea6c719e3cef1533f63bc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:ea:4e:7f:8c:59:37:0a:ae:a4:4d:0c:56: ae:e9:ab:db:b9:6e:f7:1d:6e:1d:1f:0d:d1:a7:05: f4:6e:01:84:23:2f:df:33:1f:f5:ae:77:27:d1:70: e8:7f:8e:0f:51:3c:ce:95:67:ee:ee:e0:9b:c2:2c: 94:95:bb:88:e8:9e:a6:a7:36:4c:83:16:b0:47:2a: 60:8c:11:d6:3d:dd:d3:48:22:3f:ab:62:5d:7b:ac: 12:45:1c:7b:17:99:f3:39:16:3d:61:ca:93:bc:c4: 88:a3:f6:30:5f:40:83:c6:ce:75:45:9e:0f:9c:2c: b3:62:13:3d:7f:41:cd:28:9a:2f:57:af:e6:07:07: f0:d7:e7:99:f7:e8:3a:f5:87:32:c5:4d:ad:13:71: 63:ce:1b:19:19:18:58:3c:79:2d:98:1e:02:ed:3c: 8c:b8:25:a5:10:25:27:e0:34:b4:70:1f:96:fa:0b: 79:48:06:bc:d7:34:06:32:6a:b6:6f:08:2e:9b:5a: f5:0f:d5:43:79:40:00:5b:ac:90:d4:0a:02:89:eb: 2c:f7:d6:95:09:79:4a:7e:62:0e:09:74:94:a0:84: 07:3c:35:d2:07:76:b4:c0:4b:7d:71:6b:cd:fa:14: 94:54:23:e3:b0:69:e1:12:4e:26:ca:14:da:3b:2a: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E1:F8:F0:81:18:24:C4:9E:A6:C7:19:E3:CE:F1:53:3F:63:BC:56 X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:35:0b:aa:da:57:ee:ae:5d:de:cd:d7:ae:82:7e:f3:c3:79: 6c:24:e1:79:2d:72:fc:be:04:04:34:13:54:da:15:25:5b:bc: e2:0d:16:6f:41:39:55:1b:63:65:a6:18:8b:8f:f4:62:d0:69: 4b:29:cf:8b:c1:d6:48:da:ae:ac:f0:c9:b6:52:01:a7:d2:4f: 44:b7:b8:66:67:e4:18:ef:1b:dc:24:bc:bc:4f:95:a5:7b:eb: a8:b0:c0:d2:45:2b:56:6c:8d:a1:c2:68:01:51:01:80:01:d4: 15:86:ee:8f:b8:a1:3d:83:4c:4e:78:aa:73:85:9b:70:fc:47: a2:a4:ab:32:7c:d8:be:34:5b:15:2a:62:9f:c7:07:3b:41:3c: 84:93:a3:ff:cc:56:6b:c9:b5:fb:da:5b:30:a1:2f:2e:a8:f0: 4c:5a:62:75:6e:dd:cc:71:26:70:1b:41:97:e7:69:18:21:7f: e3:29:ea:9f:c5:28:45:79:1c:61:30:a9:ec:b5:11:60:a9:61: 3c:71:50:fe:81:49:12:e9:a9:30:a9:b2:51:01:fe:41:51:41: 05:67:f2:c0:9c:8a:1f:19:15:9c:fa:aa:fd:1c:33:f3:1f:d5: fb:5e:c6:06:88:87:c7:3f:ff:25:75:4b:47:6d:c5:88:fd:2d: cc:ab:2d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQ3O/AEXKnORkgyYLb3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjUxMjA2MTIwMDM2WhcNMjUxMjA3MTIwMDM2WjAzMTEwLwYDVQQD Eyg5M2UxZjhmMDgxMTgyNGM0OWVhNmM3MTllM2NlZjE1MzNmNjNiYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc7qTn+MWTcKrqRNDFau6avbuW73 HW4dHw3RpwX0bgGEIy/fMx/1rncn0XDof44PUTzOlWfu7uCbwiyUlbuI6J6mpzZM gxawRypgjBHWPd3TSCI/q2Jde6wSRRx7F5nzORY9YcqTvMSIo/YwX0CDxs51RZ4P nCyzYhM9f0HNKJovV6/mBwfw1+eZ9+g69YcyxU2tE3FjzhsZGRhYPHktmB4C7TyM uCWlECUn4DS0cB+W+gt5SAa81zQGMmq2bwgum1r1D9VDeUAAW6yQ1AoCiess99aV CXlKfmIOCXSUoIQHPDXSB3a0wEt9cWvN+hSUVCPjsGnhEk4myhTaOyqwFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPh+PCBGCTEnqbHGePO8VM/Y7xWMB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTULqtpX 7q5d3s3XroJ+88N5bCTheS1y/L4EBDQTVNoVJVu84g0Wb0E5VRtjZaYYi4/0YtBp SynPi8HWSNqurPDJtlIBp9JPRLe4ZmfkGO8b3CS8vE+VpXvrqLDA0kUrVmyNocJo AVEBgAHUFYbuj7ihPYNMTniqc4WbcPxHoqSrMnzYvjRbFSpin8cHO0E8hJOj/8xW a8m1+9pbMKEvLqjwTFpidW7dzHEmcBtBl+dpGCF/4ynqn8UoRXkcYTCp7LURYKlh PHFQ/oFJEumpMKmyUQH+QVFBBWfywJyKHxkVnPqq/Rwz8x/V+17GBoiHxz//JXVL R23FiP0tzKstXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:47 2025 by rpki-client