This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json) Hash identifier: g1UpJ/VZFApLQh0kTUhgEJ/e0e1GSvJsk7C3saHD6GM= Subject key identifier: 3E:B9:5E:BF:9C:41:28:02:24:D8:F5:28:FE:98:7B:71:DB:67:A5:04 Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49 Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149 Certificate serial: 019AF577B790055F1F8A6619CF8B00BDC003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:00:54 +0000 Manifest this update: Sat 06 Dec 2025 21:00:54 +0000 Manifest next update: Sun 07 Dec 2025 21:00:54 +0000 Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: pNWmRxdO8Y13nLatlsr+7ESo333B5CMcMXl2lBqJqJM=) 2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=) 3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=) 4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=) 5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:b7:90:05:5f:1f:8a:66:19:cf:8b:00:bd:c0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149 Validity Not Before: Dec 6 21:00:54 2025 GMT Not After : Dec 7 21:00:54 2025 GMT Subject: CN=3eb95ebf9c41280224d8f528fe987b71db67a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:55:41:93:e1:d5:e1:2f:c8:f0:fd:28:a8: f5:4a:3d:9f:a4:e3:30:82:f6:73:4d:02:34:8e:bd: 0d:c6:ac:ab:75:6e:52:4c:f9:9a:a2:4a:e0:f0:82: fb:da:d1:79:d2:fd:9c:47:3e:43:7b:f0:e8:c6:4e: ca:d1:5f:98:f1:f2:ac:bd:95:6d:61:21:39:d4:f4: 2c:67:4b:ac:a6:3d:5b:50:e5:96:75:10:f1:93:e4: 49:2a:24:fe:bb:42:4e:16:ad:14:c6:3c:08:58:77: c4:b3:e1:cf:34:d3:43:75:73:d7:47:0c:fa:a0:23: 76:ca:0f:83:c9:82:21:9f:87:49:a9:ea:75:c2:f0: a5:12:d7:40:10:17:f8:7d:ac:77:79:6b:84:71:f6: 57:a8:56:4b:7e:7e:c9:97:7c:10:d0:8a:af:0d:39: c1:5b:ae:eb:4b:15:fd:8e:46:1b:2c:ef:60:74:7f: cb:a1:9e:ad:08:7f:75:7a:b2:77:a6:e3:dd:27:20: 35:e8:e4:7a:de:f2:81:00:28:17:7a:f7:44:5b:6e: 62:8e:9c:76:d8:23:2e:0a:cf:30:3f:cf:ba:80:44: a4:ec:53:50:9a:1b:08:15:ab:fd:7a:66:d3:f8:cc: 12:aa:a1:e8:9e:54:7c:de:b2:9d:4c:b7:6f:f2:b9: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B9:5E:BF:9C:41:28:02:24:D8:F5:28:FE:98:7B:71:DB:67:A5:04 X509v3 Authority Key Identifier: keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:dd:b8:b4:4b:6c:b8:a0:6f:9a:ef:f1:fe:d0:d9:ff:84:ef: ea:4e:8b:cd:fa:4d:49:83:4e:c1:c6:ad:72:2b:e5:bc:ee:0b: f1:81:19:7b:ff:3e:0c:0b:b3:1f:8b:76:d8:c4:3e:83:a8:2d: a9:8e:13:9f:33:3f:c6:b9:b4:8b:3c:29:07:0f:b2:ab:ae:6a: de:c7:d6:67:ed:8b:49:20:7e:d5:30:98:a9:73:a2:8b:c3:a1: 02:b8:47:16:17:de:5e:50:d4:6c:7c:ad:e0:8d:d2:c0:cb:a1: 0d:06:39:24:77:76:a8:c0:af:72:dc:eb:f6:6c:5d:fa:e4:53: 8b:e2:b8:e6:23:a9:a4:7a:30:55:f0:4a:f8:35:f0:a7:05:5d: cd:1b:ee:2a:67:c6:e3:87:66:5c:f1:71:89:09:b3:9a:f0:68: 8f:89:e9:9c:9c:c0:9a:4b:b3:82:e3:11:40:e6:81:9c:25:d3: a9:03:ec:58:0b:21:5d:12:57:0f:71:83:9d:d9:e6:c2:32:a6: 85:3d:63:f4:28:80:bd:bc:c6:ca:f0:80:d5:ae:16:3a:2d:71: 91:3b:5c:ae:da:d6:9e:70:99:9d:cd:b2:fd:1f:63:38:9c:7d: be:65:a4:e0:8f:c8:b7:db:2e:95:a3:81:da:1e:21:b7:b5:25: f4:f2:e2:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d7eQBV8fimYZz4sAvcADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1 MjQxNDkwHhcNMjUxMjA2MjEwMDU0WhcNMjUxMjA3MjEwMDU0WjAzMTEwLwYDVQQD EygzZWI5NWViZjljNDEyODAyMjRkOGY1MjhmZTk4N2I3MWRiNjdhNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGlVQZPh1eEvyPD9KKj1Sj2fpOMw gvZzTQI0jr0NxqyrdW5STPmaokrg8IL72tF50v2cRz5De/Doxk7K0V+Y8fKsvZVt YSE51PQsZ0uspj1bUOWWdRDxk+RJKiT+u0JOFq0UxjwIWHfEs+HPNNNDdXPXRwz6 oCN2yg+DyYIhn4dJqep1wvClEtdAEBf4fax3eWuEcfZXqFZLfn7Jl3wQ0IqvDTnB W67rSxX9jkYbLO9gdH/LoZ6tCH91erJ3puPdJyA16OR63vKBACgXevdEW25ijpx2 2CMuCs8wP8+6gESk7FNQmhsIFav9embT+MwSqqHonlR83rKdTLdv8rm/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD65Xr+cQSgCJNj1KP6Ye3HbZ6UEMB8GA1UdIwQY MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt YTNkZjNiNjljZTVhLzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV924tEts uKBvmu/x/tDZ/4Tv6k6LzfpNSYNOwcatcivlvO4L8YEZe/8+DAuzH4t22MQ+g6gt qY4TnzM/xrm0izwpBw+yq65q3sfWZ+2LSSB+1TCYqXOii8OhArhHFhfeXlDUbHyt 4I3SwMuhDQY5JHd2qMCvctzr9mxd+uRTi+K45iOppHowVfBK+DXwpwVdzRvuKmfG 44dmXPFxiQmzmvBoj4npnJzAmkuzguMRQOaBnCXTqQPsWAshXRJXD3GDndnmwjKm hT1j9CiAvbzGyvCA1a4WOi1xkTtcrtrWnnCZnc2y/R9jOJx9vmWk4I/It9sulaOB 2h4ht7Ul9PLinQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:40 2025 by rpki-client