This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft File: 34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json) Hash identifier: cTMgcropj3vShp+1Zpl78GB74D9h1yf2kYabA2hSJjA= Subject key identifier: 5A:E3:27:89:2D:66:21:0A:01:19:7E:53:8B:27:A5:45:41:77:4E:7C Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2 Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2 Certificate serial: 019AF31C7C8DB0C4EFAAF7D6EC21FB892237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft Manifest number: 156B Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=) 2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: nSZ8MnWChh2Nllt0LKNoUOHNyri6ButpL7o2/7s45eo=) 3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=) 4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=) 5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7c:8d:b0:c4:ef:aa:f7:d6:ec:21:fb:89:22:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2 Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=5ae327892d66210a01197e538b27a54541774e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:7f:9b:d2:6b:2d:dc:17:56:8f:cb:c0:e3: cc:90:fe:cd:ec:80:ff:5b:0d:93:67:40:e1:ab:38: f3:61:4c:06:f7:aa:ef:43:59:d1:08:98:ac:73:d4: 0d:6a:60:8b:50:6a:6a:91:99:ae:04:db:b5:98:47: c7:d8:9e:66:53:eb:77:45:c2:ed:c1:95:09:a9:39: 16:c1:81:de:93:8d:4a:81:77:ea:6c:f3:18:3a:82: 82:2b:3e:64:e7:50:29:3b:3b:0b:58:80:ca:1a:f2: dd:a5:2d:22:17:27:f2:ad:54:8d:60:19:8f:75:b9: 28:07:ba:81:ea:8e:18:fb:48:f1:9c:61:36:c8:6a: 45:59:59:e7:11:6b:93:53:b7:93:d9:be:3b:2d:3e: 6c:19:50:9a:a8:d1:74:88:00:3a:c2:38:d8:1d:34: 75:70:38:03:57:30:61:69:ba:0d:8e:e1:ce:06:d5: 0a:03:33:80:72:b9:e7:00:b4:ba:25:02:7c:e3:48: 4c:ca:ed:44:26:99:20:b1:cc:9c:7a:d2:1d:94:90: c1:d9:10:76:67:60:20:84:39:b2:9d:ef:1d:86:c5: 18:51:85:5e:bb:67:01:a1:20:d3:41:6e:65:b7:c7: 9c:54:79:5b:0e:1f:a0:7c:ac:08:b0:3c:8b:fd:30: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:27:89:2D:66:21:0A:01:19:7E:53:8B:27:A5:45:41:77:4E:7C X509v3 Authority Key Identifier: keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ea:0f:d6:93:12:05:db:c3:3b:4e:38:e2:61:73:54:b8:8f: d2:ac:25:a4:78:94:f5:ae:e1:f7:aa:e2:af:fe:79:f7:6f:ae: 46:9b:86:10:51:7a:1f:07:43:61:f1:7b:4c:8f:57:55:e9:cf: 2c:8b:2b:3d:e1:a6:d3:b0:c7:fb:28:0a:2f:ef:2e:e7:be:76: e6:1d:36:75:1a:0d:19:c2:e4:9b:66:4c:6a:a8:33:f5:57:83: 13:d6:b2:11:8c:71:c0:a6:c7:8c:81:60:89:6a:38:10:a6:64: 89:8f:6c:b2:e3:6c:7b:b3:d6:3b:79:71:6a:7c:ef:d2:82:1c: a9:f4:19:a1:92:ad:8f:64:3c:69:a5:c2:01:ca:d7:77:05:50: 3a:b5:55:8c:92:88:fe:0e:69:e9:74:c5:e8:84:ae:87:c8:de: b0:fc:dc:48:a9:cb:78:94:ad:ca:74:f9:b3:69:22:03:22:3f: 68:9e:ee:c6:a1:19:a2:ca:59:9a:42:cb:6b:a9:7f:66:ad:6c: 44:39:1d:c4:12:5b:20:cc:80:82:a7:64:03:1f:96:d8:f2:36: d1:0d:79:f0:ba:cc:ae:99:97:49:07:96:99:c0:77:cb:ae:18: c9:92:b5:80:2a:2d:48:23:da:35:40:46:b9:94:98:df:53:86: 3f:cf:8e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHyNsMTvqvfW7CH7iSI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOGY5NjFjNmVmYmI3ZjljZTc0MjE3YjFkNWRiYjU0ZTk4 MWM2ZjIwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD Eyg1YWUzMjc4OTJkNjYyMTBhMDExOTdlNTM4YjI3YTU0NTQxNzc0ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRN/m9JrLdwXVo/LwOPMkP7N7ID/ Ww2TZ0DhqzjzYUwG96rvQ1nRCJisc9QNamCLUGpqkZmuBNu1mEfH2J5mU+t3RcLt wZUJqTkWwYHek41KgXfqbPMYOoKCKz5k51ApOzsLWIDKGvLdpS0iFyfyrVSNYBmP dbkoB7qB6o4Y+0jxnGE2yGpFWVnnEWuTU7eT2b47LT5sGVCaqNF0iAA6wjjYHTR1 cDgDVzBhaboNjuHOBtUKAzOAcrnnALS6JQJ840hMyu1EJpkgscycetIdlJDB2RB2 Z2AghDmyne8dhsUYUYVeu2cBoSDTQW5lt8ecVHlbDh+gfKwIsDyL/TDPWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrjJ4ktZiEKARl+U4snpUVBd058MB8GA1UdIwQY MBaAFN+Plhxu+7f5znQhex1du1TpgcbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt MjdmMmJjMTYyYTA3LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3 LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheoP1pMS BdvDO0444mFzVLiP0qwlpHiU9a7h96rir/5592+uRpuGEFF6HwdDYfF7TI9XVenP LIsrPeGm07DH+ygKL+8u57525h02dRoNGcLkm2ZMaqgz9VeDE9ayEYxxwKbHjIFg iWo4EKZkiY9ssuNse7PWO3lxanzv0oIcqfQZoZKtj2Q8aaXCAcrXdwVQOrVVjJKI /g5p6XTF6ISuh8jesPzcSKnLeJStynT5s2kiAyI/aJ7uxqEZospZmkLLa6l/Zq1s RDkdxBJbIMyAgqdkAx+W2PI20Q158LrMrpmXSQeWmcB3y64YyZK1gCotSCPaNUBG uZSY31OGP8+OEw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:43 2025 by rpki-client