This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json) Hash identifier: bL0TDJV6wHRd4soWuZKmNQthYe9Qmy6RPb6SKgpbpcY= Subject key identifier: F2:52:07:B2:AA:6D:C0:61:43:C3:3D:68:DF:35:00:0A:79:A7:62:C9 Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Certificate serial: 019AF276A5FE8E06D43E4337AA4ADA9FEF09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft Manifest number: 114B Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: 0yXc7kRr6E2h7SCbkF+uk7+vdMlZrUYPquod+wsslk4=) 2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=) 3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=) 4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a5:fe:8e:06:d4:3e:43:37:aa:4a:da:9f:ef:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=f25207b2aa6dc06143c33d68df35000a79a762c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:e7:90:7b:e4:d3:9e:97:98:2c:ce:55:9c: a9:86:7e:54:50:7e:b5:51:20:89:72:77:09:fc:1d: 40:8d:a0:6b:cc:0e:27:f2:12:7b:95:5f:f8:e1:cb: 87:2a:df:68:4d:eb:bd:25:7e:5f:bd:6a:0a:83:16: 25:9a:f8:72:ce:a7:ae:f8:5e:e8:ac:6d:74:28:e0: ce:d5:b5:9b:4e:76:60:7c:96:17:0d:c7:53:9b:24: 10:d5:25:a9:50:41:ca:35:f6:36:ec:c5:9a:19:c6: bb:57:7c:f5:77:76:5e:ff:1e:15:ef:68:d9:3e:e3: 15:07:7e:3d:03:83:e9:9d:53:4c:08:d4:a6:20:c6: d9:ab:ac:61:49:db:b2:ae:6d:b4:9c:cd:5b:0d:51: 8a:97:96:f3:4d:7e:18:c0:53:44:39:96:58:ca:90: 44:e7:c0:4b:20:e7:54:74:da:6a:34:49:ff:12:58: b8:56:76:9d:64:f9:f7:c3:18:56:b6:bc:9e:b6:7d: 45:0d:c2:1a:d3:79:3d:43:ee:43:48:f9:21:66:d7: df:8a:cd:de:ed:09:2a:90:6b:c0:05:3b:84:3b:83: e8:d1:bd:6c:8d:65:29:3d:de:8a:68:da:06:cf:17: 7e:d2:ea:99:44:ec:02:7c:9f:33:87:1b:5d:30:cc: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:07:B2:AA:6D:C0:61:43:C3:3D:68:DF:35:00:0A:79:A7:62:C9 X509v3 Authority Key Identifier: keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:18:89:e3:68:aa:c6:04:75:47:10:71:9f:90:72:80:be:b8: 2b:54:49:79:42:1c:71:72:c6:03:ef:40:c8:12:80:22:02:32: de:9b:40:cf:01:c4:d7:e2:a6:f0:cd:be:1f:fe:08:32:48:3a: 9a:ef:22:3d:13:01:35:ae:4e:52:65:3c:85:0d:27:78:69:5b: cc:a3:4d:c7:12:c8:40:80:d8:8b:ad:91:00:ce:0a:91:7f:b6: e6:6c:5e:27:77:35:eb:04:64:d0:da:71:32:d8:88:1e:09:a8: 28:98:14:01:94:65:eb:dd:e2:cc:d8:33:e4:c2:2b:b3:26:36: 3d:d6:b2:22:d2:aa:05:f4:6c:d8:7c:18:b7:fe:e7:2b:26:5a: 69:87:88:fc:a9:20:a6:f3:1d:e4:b6:31:ce:d7:ec:54:56:66: dc:0a:95:cd:f7:3e:13:7c:8d:c1:0b:ad:b7:07:93:6b:54:62: 14:eb:b4:cc:9e:54:ec:bc:70:91:d7:ca:29:eb:0f:64:63:59: 3d:65:f7:60:94:bb:83:4f:87:d0:ea:b1:e0:34:5f:0c:2e:57: 58:2b:a2:6e:50:b5:77:7a:40:49:c6:e7:d4:9f:29:2c:90:a8: 53:d1:b0:fb:5f:80:91:6a:17:2d:9c:5a:15:16:6e:d7:b9:fb: 26:a6:1f:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqX+jgbUPkM3qkran+8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj NjZhZWIwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD EyhmMjUyMDdiMmFhNmRjMDYxNDNjMzNkNjhkZjM1MDAwYTc5YTc2MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOfnkHvk056XmCzOVZyphn5UUH61 USCJcncJ/B1AjaBrzA4n8hJ7lV/44cuHKt9oTeu9JX5fvWoKgxYlmvhyzqeu+F7o rG10KODO1bWbTnZgfJYXDcdTmyQQ1SWpUEHKNfY27MWaGca7V3z1d3Ze/x4V72jZ PuMVB349A4PpnVNMCNSmIMbZq6xhSduyrm20nM1bDVGKl5bzTX4YwFNEOZZYypBE 58BLIOdUdNpqNEn/Eli4VnadZPn3wxhWtryetn1FDcIa03k9Q+5DSPkhZtffis3e 7QkqkGvABTuEO4Po0b1sjWUpPd6KaNoGzxd+0uqZROwCfJ8zhxtdMMx+cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJSB7KqbcBhQ8M9aN81AAp5p2LJMB8GA1UdIwQY MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1 LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBiJ42iq xgR1RxBxn5BygL64K1RJeUIccXLGA+9AyBKAIgIy3ptAzwHE1+Km8M2+H/4IMkg6 mu8iPRMBNa5OUmU8hQ0neGlbzKNNxxLIQIDYi62RAM4KkX+25mxeJ3c16wRk0Npx MtiIHgmoKJgUAZRl693izNgz5MIrsyY2PdayItKqBfRs2HwYt/7nKyZaaYeI/Kkg pvMd5LYxztfsVFZm3AqVzfc+E3yNwQuttweTa1RiFOu0zJ5U7LxwkdfKKesPZGNZ PWX3YJS7g0+H0Oqx4DRfDC5XWCuiblC1d3pAScbn1J8pLJCoU9Gw+1+AkWoXLZxa FRZu17n7JqYf9g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:48:52 2025 by rpki-client