This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json) Hash identifier: ZoM3onWKqcW4fHJUpdK1x4Stv/6czKEkf+iqNDQy5xo= Subject key identifier: F7:13:50:20:E1:F0:35:F7:E6:62:A3:21:C7:69:BD:0F:F2:54:81:E8 Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49 Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149 Certificate serial: 019AF38949071E0DBB0C9C65E0A7B6EB2AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: 6DnshXUdIapqgkvlbTZ9cYnR931+hY9GgEPB0plXnao=) 2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=) 3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=) 4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=) 5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:49:07:1e:0d:bb:0c:9c:65:e0:a7:b6:eb:2a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=f7135020e1f035f7e662a321c769bd0ff25481e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:f0:00:89:60:b5:bd:9f:de:77:5a:18:34: a3:d7:90:b4:f1:66:f4:2a:cd:41:c5:24:31:55:f4: bb:b4:75:db:a6:be:66:43:01:08:a4:6e:99:7d:e3: 8d:21:9d:70:00:61:ee:d5:7e:26:c0:73:d2:0c:4e: 64:ce:97:59:e4:d1:5a:9e:ef:fd:22:1a:ea:21:df: 70:08:b5:1b:b0:fe:7f:55:86:3d:33:15:3c:ab:b0: b4:bf:4a:3a:14:dc:38:22:c9:f6:e2:d6:cd:50:3f: dd:8a:62:99:75:a3:d6:fb:88:23:75:11:21:42:f8: 7c:a4:1c:7f:52:56:3c:23:d3:12:0b:e9:ed:03:36: 67:8d:ac:52:75:c9:bc:4b:74:86:d6:9c:63:54:a5: 19:b6:22:0d:69:3a:57:e2:f1:77:a1:c7:2c:a5:43: 11:68:05:0e:38:f7:d2:9a:a0:bd:dd:7f:22:11:f5: bc:22:57:6b:3e:6c:ae:9b:c0:60:b3:29:22:91:5c: 50:57:d2:53:df:b7:69:32:04:86:93:df:c1:17:7f: 1a:57:20:c4:9e:08:b4:a4:49:37:18:a7:de:d6:76: 77:fd:4b:dd:bc:c5:f2:4f:ca:69:05:1b:e8:d9:7a: 6e:cf:4c:8b:dd:2d:c6:a1:f2:2f:ba:6f:de:c3:88: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:50:20:E1:F0:35:F7:E6:62:A3:21:C7:69:BD:0F:F2:54:81:E8 X509v3 Authority Key Identifier: keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dd:c7:30:1b:18:37:21:64:03:76:69:7d:1d:25:fd:c6:e2: 45:32:23:39:59:dc:06:d7:87:42:f1:82:1c:bc:39:e9:df:d1: bb:bb:cb:96:3c:0f:b8:46:f3:15:4d:d0:3b:ae:dc:52:05:6d: bd:c4:02:ff:19:aa:b2:48:57:41:e6:5c:60:d2:71:70:a4:75: fe:b9:aa:c3:cb:a0:96:c5:ac:a4:d0:99:7a:5e:6b:ce:43:63: 11:73:33:da:2c:e0:23:ef:9b:0a:d6:6c:33:2a:c9:86:90:e3: 01:bc:66:39:bf:8b:a9:ab:7e:6e:80:20:10:f1:01:06:6d:99: f2:39:a9:4a:52:27:bd:0a:f0:0e:f9:ff:29:df:b3:9b:f5:a0: 2b:e1:99:d8:01:d0:98:8b:85:35:0b:85:42:68:3e:39:00:ae: 94:ca:78:5a:ab:a5:31:3c:22:b2:90:68:8f:d2:89:db:77:f6: c9:ce:32:7d:bb:d2:a3:4a:68:ff:9c:e8:e0:21:fd:c4:1f:b3: c5:9e:99:5a:1e:3f:ba:e0:b2:ea:0b:02:88:33:6f:2e:46:7a: d3:86:e0:13:41:89:16:8f:1a:f4:98:09:84:a8:9f:47:f1:af: 05:3e:f6:f9:9a:8a:2d:26:be:f4:83:b1:1c:e3:8c:ea:62:4e: f5:bb:af:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUkHHg27DJxl4Ke26yqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1 MjQxNDkwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhmNzEzNTAyMGUxZjAzNWY3ZTY2MmEzMjFjNzY5YmQwZmYyNTQ4MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEHwAIlgtb2f3ndaGDSj15C08Wb0 Ks1BxSQxVfS7tHXbpr5mQwEIpG6ZfeONIZ1wAGHu1X4mwHPSDE5kzpdZ5NFanu/9 IhrqId9wCLUbsP5/VYY9MxU8q7C0v0o6FNw4Isn24tbNUD/dimKZdaPW+4gjdREh Qvh8pBx/UlY8I9MSC+ntAzZnjaxSdcm8S3SG1pxjVKUZtiINaTpX4vF3occspUMR aAUOOPfSmqC93X8iEfW8IldrPmyum8BgsykikVxQV9JT37dpMgSGk9/BF38aVyDE ngi0pEk3GKfe1nZ3/UvdvMXyT8ppBRvo2Xpuz0yL3S3GofIvum/ew4jr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcTUCDh8DX35mKjIcdpvQ/yVIHoMB8GA1UdIwQY MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt YTNkZjNiNjljZTVhLzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOt3HMBsY NyFkA3ZpfR0l/cbiRTIjOVncBteHQvGCHLw56d/Ru7vLljwPuEbzFU3QO67cUgVt vcQC/xmqskhXQeZcYNJxcKR1/rmqw8uglsWspNCZel5rzkNjEXMz2izgI++bCtZs MyrJhpDjAbxmOb+Lqat+boAgEPEBBm2Z8jmpSlInvQrwDvn/Kd+zm/WgK+GZ2AHQ mIuFNQuFQmg+OQCulMp4WqulMTwispBoj9KJ23f2yc4yfbvSo0po/5zo4CH9xB+z xZ6ZWh4/uuCy6gsCiDNvLkZ604bgE0GJFo8a9JgJhKifR/GvBT72+ZqKLSa+9IOx HOOM6mJO9buvPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:19:21 2025 by rpki-client