This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json) Hash identifier: ohlRtjJwn6Oy2d+DfO9GQmX+54+4yQuQgqEC63AizZY= Subject key identifier: F0:C7:CC:90:94:D2:E9:2A:77:7D:1B:76:1F:0E:E8:75:B5:A7:A4:58 Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Certificate serial: 019AF12D19D692FECE7FE99032F5CE6E00C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft Manifest number: 1092 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: evN+pPL+U2doHtsqgL/9c+bGLQ+UVIxnc/Kthfy0CH0=) 2: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=) 3: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=) 4: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:19:d6:92:fe:ce:7f:e9:90:32:f5:ce:6e:00:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=f0c7cc9094d2e92a777d1b761f0ee875b5a7a458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:e7:c2:1c:6a:03:83:45:a4:a1:30:98:97: 48:b1:32:ce:98:87:fc:75:fc:5b:cb:fb:c3:cb:b5: 46:fa:74:be:e0:d5:1f:b0:a2:f7:4f:51:43:4c:f3: f7:85:9d:2a:76:7a:6b:72:5a:ca:54:ce:65:53:bd: f3:13:a6:f5:c0:89:8e:64:50:3b:d9:98:1e:95:e9: e0:13:39:9c:13:24:7e:9d:e2:35:38:06:8a:f7:7a: 07:5c:98:90:52:27:9a:d1:34:5d:40:c4:90:d4:f8: d9:df:45:89:8b:68:c9:bd:81:e3:31:be:80:e6:5f: 2f:13:51:2f:68:2e:3c:fa:de:b1:5e:72:17:47:ef: 98:2f:3e:b1:c1:06:96:a4:eb:1f:8c:7f:32:cc:af: f7:9f:20:46:8c:bc:b1:21:f5:45:f9:5d:b5:f2:24: 18:6e:ee:f7:1e:9e:3d:3e:36:07:56:ca:3f:e5:47: ba:9a:64:fb:de:96:3c:be:6e:c4:04:9b:7e:14:a7: d4:47:12:7d:cc:31:1a:55:e0:c3:94:b5:c4:48:0a: 84:93:ca:a2:97:a6:d9:57:f0:b1:98:90:d2:ff:7a: e9:94:c7:d5:39:a4:cd:4e:f2:fd:12:26:d3:35:77: 7b:c8:e1:55:4a:01:3e:61:c7:04:23:66:53:7d:a9: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C7:CC:90:94:D2:E9:2A:77:7D:1B:76:1F:0E:E8:75:B5:A7:A4:58 X509v3 Authority Key Identifier: keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:03:f6:21:1d:e1:6a:d0:d6:a7:4f:3c:33:74:2a:1b:06:7a: 94:a4:90:24:6d:e6:9e:05:1d:71:e1:56:c8:28:ce:81:33:e5: 13:c6:f6:b3:62:29:0c:69:fa:da:11:1f:0c:03:e5:49:9a:05: 70:83:ea:78:b3:6c:be:32:79:cc:f5:b7:72:c4:7a:51:97:23: f4:92:50:8f:6e:ea:6a:60:20:86:67:bc:b2:a6:79:8e:ec:4b: 35:41:61:25:b4:0d:3c:50:3e:98:3d:9a:c0:7a:ec:bf:cc:23: 64:b7:c0:86:de:2d:0c:23:a9:29:30:bc:48:3d:5b:5e:9a:22: 11:5e:21:88:7a:70:30:eb:86:80:cd:00:ff:ea:9b:bf:67:9c: 54:b1:9b:a7:95:db:ee:66:b2:10:9c:08:b7:12:c3:39:a8:29: 95:5a:d4:d2:7e:47:14:99:d8:fe:76:00:da:c3:4f:f3:9c:99: 13:e6:f0:f9:c9:90:00:fd:2e:6c:c3:27:9e:94:6c:c0:3e:48: a0:b3:1c:a0:b8:a1:7c:fa:29:71:47:4d:90:eb:af:f5:78:dd: 71:34:85:b1:b1:62:c3:58:52:1a:97:92:d2:25:16:b6:1e:61: 04:be:bf:3e:f8:28:71:ae:a7:54:7f:a5:7e:ee:41:a6:21:2d: 19:19:b0:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRnWkv7Of+mQMvXObgDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3 ZWIxNjkwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD EyhmMGM3Y2M5MDk0ZDJlOTJhNzc3ZDFiNzYxZjBlZTg3NWI1YTdhNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMTnwhxqA4NFpKEwmJdIsTLOmIf8 dfxby/vDy7VG+nS+4NUfsKL3T1FDTPP3hZ0qdnprclrKVM5lU73zE6b1wImOZFA7 2ZgelengEzmcEyR+neI1OAaK93oHXJiQUiea0TRdQMSQ1PjZ30WJi2jJvYHjMb6A 5l8vE1EvaC48+t6xXnIXR++YLz6xwQaWpOsfjH8yzK/3nyBGjLyxIfVF+V218iQY bu73Hp49PjYHVso/5Ue6mmT73pY8vm7EBJt+FKfURxJ9zDEaVeDDlLXESAqEk8qi l6bZV/CxmJDS/3rplMfVOaTNTvL9EibTNXd7yOFVSgE+YccEI2ZTfamdjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDHzJCU0ukqd30bdh8O6HW1p6RYMB8GA1UdIwQY MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt MjhjYjNiYmYwNWFlLzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAP2IR3h atDWp088M3QqGwZ6lKSQJG3mngUdceFWyCjOgTPlE8b2s2IpDGn62hEfDAPlSZoF cIPqeLNsvjJ5zPW3csR6UZcj9JJQj27qamAghme8sqZ5juxLNUFhJbQNPFA+mD2a wHrsv8wjZLfAht4tDCOpKTC8SD1bXpoiEV4hiHpwMOuGgM0A/+qbv2ecVLGbp5Xb 7mayEJwItxLDOagplVrU0n5HFJnY/nYA2sNP85yZE+bw+cmQAP0ubMMnnpRswD5I oLMcoLihfPopcUdNkOuv9XjdcTSFsbFiw1hSGpeS0iUWth5hBL6/Pvgoca6nVH+l fu5BpiEtGRmwUw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:54 2025 by rpki-client