This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft File: 35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json) Hash identifier: NqBnDZ3R77yhoBXGy1vKu+yN7CThV37qSfRqWUEwmhg= Subject key identifier: EC:95:D8:1F:11:82:88:B4:E8:17:96:46:A1:26:98:80:C6:08:51:60 Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Certificate serial: 019B32D7AE9DD94FAED2FD6669CA19DBF8AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft Manifest number: 10B4 Signing time: Thu 18 Dec 2025 19:02:34 +0000 Manifest this update: Thu 18 Dec 2025 19:02:34 +0000 Manifest next update: Fri 19 Dec 2025 19:02:34 +0000 Files and hashes: 1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: 2D/EcthN26ZS8uxW+qYr+KX6p79AvHKEcqUNa1gu1U0=) 2: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=) 3: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=) 4: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:ae:9d:d9:4f:ae:d2:fd:66:69:ca:19:db:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Validity Not Before: Dec 18 19:02:34 2025 GMT Not After : Dec 19 19:02:34 2025 GMT Subject: CN=ec95d81f118288b4e8179646a1269880c6085160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:eb:90:2e:fc:05:35:fb:c6:c9:dd:05:35: d9:0e:f2:c1:73:01:ce:32:87:d2:b0:4c:c0:80:dd: 08:b8:bb:13:d8:79:93:04:f4:18:04:af:5f:7b:0c: a4:fd:9c:6c:1d:ea:c3:36:a0:6e:08:95:37:e8:bd: e0:bd:84:15:6d:8c:cf:7d:53:68:92:2c:5b:70:e3: 1f:27:b8:d6:c6:84:d9:e8:41:5a:7a:8f:36:40:8a: bd:f3:69:da:6d:9b:7a:d7:6a:6f:c7:e7:01:7f:7b: a2:69:d5:76:9a:81:7f:da:19:6e:d9:29:7c:2e:f5: 24:c3:ac:3f:b8:d4:ac:86:de:2b:ae:50:a0:cf:f4: 7d:56:91:bb:01:3b:7d:75:d5:58:e9:fa:a5:fe:66: d6:c7:e4:9d:a3:00:2d:f2:f7:45:72:bb:43:ff:21: 92:3d:15:d4:33:a3:b2:52:00:28:26:cf:61:ad:14: 5c:13:b2:4b:3d:f8:28:04:ff:9e:a9:72:fa:3c:87: df:19:38:24:81:bb:76:f3:92:80:78:0d:58:37:12: 7c:f5:84:57:92:bf:40:eb:82:12:ad:8d:8f:db:0f: 7b:7f:02:57:b3:0b:33:05:b9:23:d0:50:3c:6a:bb: ce:0d:cd:91:62:77:5a:f5:ff:c4:7e:3a:94:e1:33: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:D8:1F:11:82:88:B4:E8:17:96:46:A1:26:98:80:C6:08:51:60 X509v3 Authority Key Identifier: keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:cb:b4:0c:4c:02:18:17:50:51:5a:40:6b:b9:c1:72:60:98: 65:36:4f:b3:ab:d2:3e:ee:b5:80:80:91:6c:4e:79:45:38:6d: 42:5d:b7:45:a1:4d:c6:d2:c9:03:0a:4a:2c:79:6d:51:c2:cf: 7b:0b:7d:8b:e5:94:05:ba:f5:81:07:df:24:b4:06:2f:44:fe: db:13:5b:52:f5:6d:72:79:a7:bf:32:17:e6:93:78:43:df:c6: 5b:c9:95:d6:9c:7d:97:0f:45:23:f6:e9:5b:76:ac:20:05:ea: 65:46:5d:86:98:26:7e:fa:13:8a:4d:e6:59:14:7e:fd:96:64: db:d8:f7:60:c4:31:4c:95:8e:f6:2c:eb:cf:3d:07:59:a3:95: 7e:89:4c:ba:3f:9d:73:a8:af:41:23:e6:23:d3:29:6d:b7:14: ed:ec:46:ba:3f:f4:89:46:0b:55:87:17:6e:ce:a0:1c:fc:74: c8:df:44:dd:6d:0e:16:b3:13:13:17:77:f4:84:9c:19:33:72: 53:31:54:f0:a8:e9:82:d9:0e:bb:24:03:45:9a:df:8f:03:39: e1:62:84:c2:25:a0:4a:06:00:54:ab:57:2b:e9:2a:56:ce:67: 3f:05:0f:94:7b:a2:ef:29:f8:61:20:f9:aa:46:42:44:46:b6: 4a:5d:43:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy166d2U+u0v1macoZ2/itMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3 ZWIxNjkwHhcNMjUxMjE4MTkwMjM0WhcNMjUxMjE5MTkwMjM0WjAzMTEwLwYDVQQD EyhlYzk1ZDgxZjExODI4OGI0ZTgxNzk2NDZhMTI2OTg4MGM2MDg1MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz87rkC78BTX7xsndBTXZDvLBcwHO MofSsEzAgN0IuLsT2HmTBPQYBK9fewyk/ZxsHerDNqBuCJU36L3gvYQVbYzPfVNo kixbcOMfJ7jWxoTZ6EFaeo82QIq982nabZt612pvx+cBf3uiadV2moF/2hlu2Sl8 LvUkw6w/uNSsht4rrlCgz/R9VpG7ATt9ddVY6fql/mbWx+SdowAt8vdFcrtD/yGS PRXUM6OyUgAoJs9hrRRcE7JLPfgoBP+eqXL6PIffGTgkgbt285KAeA1YNxJ89YRX kr9A64ISrY2P2w97fwJXswszBbkj0FA8arvODc2RYnda9f/EfjqU4TMD/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyV2B8Rgoi06BeWRqEmmIDGCFFgMB8GA1UdIwQY MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt MjhjYjNiYmYwNWFlLzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8u0DEwC GBdQUVpAa7nBcmCYZTZPs6vSPu61gICRbE55RThtQl23RaFNxtLJAwpKLHltUcLP ewt9i+WUBbr1gQffJLQGL0T+2xNbUvVtcnmnvzIX5pN4Q9/GW8mV1px9lw9FI/bp W3asIAXqZUZdhpgmfvoTik3mWRR+/ZZk29j3YMQxTJWO9izrzz0HWaOVfolMuj+d c6ivQSPmI9MpbbcU7exGuj/0iUYLVYcXbs6gHPx0yN9E3W0OFrMTExd39IScGTNy UzFU8KjpgtkOuyQDRZrfjwM54WKEwiWgSgYAVKtXK+kqVs5nPwUPlHui7yn4YSD5 qkZCREa2Sl1DOg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:05:33 2025 by rpki-client