This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json) Hash identifier: +Ody4W1GEWC9jjJTK5ew7HfIu6/kRy+xD3IOPRSCp0M= Subject key identifier: CF:6B:8A:52:B7:55:B9:6E:97:5E:7E:4B:27:A5:3A:F8:42:54:90:F7 Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f Certificate serial: 019AF42E1679103C208F5A06B649F0BA5988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft Manifest number: 0D5E Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: VZDS4MlijPyYX6UZrh9V1fM/USLXzsAF3JJV4LcP9Kw=) 2: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (hash: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:16:79:10:3c:20:8f:5a:06:b6:49:f0:ba:59:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=cf6b8a52b755b96e975e7e4b27a53af8425490f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:26:b3:85:ed:2c:6d:cf:0e:8e:3c:fa:b1: 90:1a:51:b8:9c:4c:23:4b:28:81:05:7b:1d:8d:fb: 09:0b:2d:c2:33:7f:ed:43:4e:76:d8:1b:60:85:97: 90:be:3c:6b:3a:38:06:0b:f3:0c:fb:3b:22:c8:26: 10:53:cc:1b:12:5a:d4:3f:0d:6e:a5:5d:28:01:42: d5:ba:99:ff:9b:45:c2:23:2d:85:75:ee:86:1d:53: c1:fd:4c:b8:31:19:34:40:d3:0c:4d:d9:32:e1:14: c9:8e:7d:d3:15:bf:03:83:cc:04:8d:22:9f:b0:d1: cd:dd:9c:ac:5d:38:f4:c7:fd:5a:07:f8:87:ec:00: 60:07:8c:9c:9d:88:93:43:fa:8a:0c:2a:78:f3:ad: 89:a7:b5:ee:65:d0:9f:2f:1f:a1:b7:82:72:ac:98: a8:ad:5d:6a:c3:71:06:61:d2:26:39:fb:98:9e:33: 4c:52:2d:85:b9:0b:81:19:84:81:8f:7e:29:c3:44: e9:b5:97:9b:20:c3:ae:8b:9f:33:ec:67:e6:bc:ea: a8:d9:ec:0d:a0:da:5c:66:15:4d:d6:1b:66:e4:55: 7a:99:08:8b:86:5e:1d:88:a1:ed:4a:ea:5c:9f:63: 42:73:1c:3c:8a:99:ae:66:a9:1a:dd:14:e0:fc:b9: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:8A:52:B7:55:B9:6E:97:5E:7E:4B:27:A5:3A:F8:42:54:90:F7 X509v3 Authority Key Identifier: keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:89:17:3c:b5:06:bf:c1:23:23:ac:9d:90:e9:e5:6f:1e:fd: b8:60:e5:16:e5:5e:7a:12:02:ac:e7:c3:0b:17:11:30:17:25: 7a:a6:12:98:51:d6:71:5f:75:5d:a0:db:fe:23:f8:e4:cc:13: 9a:66:a1:b9:69:ba:0c:bf:bc:6a:72:67:11:4f:6b:9e:cb:5f: 67:d4:34:57:94:d6:e8:2b:64:89:0c:2d:ac:78:a5:b0:33:d5: 26:d7:64:71:8c:7a:21:5c:d1:8e:f7:84:85:fe:10:81:b6:80: 49:16:39:de:be:5f:c5:d3:71:a4:a9:99:91:53:22:0f:f8:69: 46:0c:98:b2:1e:9d:be:ae:d9:bd:35:55:e2:fc:d3:8c:b6:da: a6:29:5d:6a:59:9c:19:0c:0f:45:96:8d:82:16:2d:92:1e:d4: 4d:f5:6d:40:f6:82:b9:66:09:b3:64:8e:00:fa:93:a2:6e:8d: 6a:ad:94:46:37:80:5e:22:6a:05:4d:95:d8:62:d0:2f:9a:7e: 49:55:9d:3e:93:89:11:12:50:c5:76:5d:e0:62:17:20:95:dc: 3f:d7:3f:21:86:b1:27:7d:a3:92:cc:22:de:8a:f9:ee:c4:4a: 49:c0:63:16:57:6a:2d:93:e6:06:5f:fe:43:f5:bd:3d:f9:0a: e6:a4:59:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhZ5EDwgj1oGtknwulmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYWJkMTQyZTg5NDE2ODg4M2NlNDUyMjczMTdmOWZhNTAy MjE5NGYwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD EyhjZjZiOGE1MmI3NTViOTZlOTc1ZTdlNGIyN2E1M2FmODQyNTQ5MGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujoms4XtLG3PDo48+rGQGlG4nEwj SyiBBXsdjfsJCy3CM3/tQ0522BtghZeQvjxrOjgGC/MM+zsiyCYQU8wbElrUPw1u pV0oAULVupn/m0XCIy2Fde6GHVPB/Uy4MRk0QNMMTdky4RTJjn3TFb8Dg8wEjSKf sNHN3ZysXTj0x/1aB/iH7ABgB4ycnYiTQ/qKDCp4862Jp7XuZdCfLx+ht4JyrJio rV1qw3EGYdImOfuYnjNMUi2FuQuBGYSBj34pw0TptZebIMOui58z7GfmvOqo2ewN oNpcZhVN1htm5FV6mQiLhl4diKHtSupcn2NCcxw8ipmuZqka3RTg/LnHQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9rilK3Vblul15+SyelOvhCVJD3MB8GA1UdIwQY MBaAFN+r0ULolBaIg85FInMX+fpQIhlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQt M2E4YWM0ZGMzZWVmLzEvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQtM2E4YWM0ZGMzZWVm LzEvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIkXPLUG v8EjI6ydkOnlbx79uGDlFuVeehICrOfDCxcRMBcleqYSmFHWcV91XaDb/iP45MwT mmahuWm6DL+8anJnEU9rnstfZ9Q0V5TW6CtkiQwtrHilsDPVJtdkcYx6IVzRjveE hf4QgbaASRY53r5fxdNxpKmZkVMiD/hpRgyYsh6dvq7ZvTVV4vzTjLbapildalmc GQwPRZaNghYtkh7UTfVtQPaCuWYJs2SOAPqTom6Naq2URjeAXiJqBU2V2GLQL5p+ SVWdPpOJERJQxXZd4GIXIJXcP9c/IYaxJ32jkswi3or57sRKScBjFldqLZPmBl/+ Q/W9PfkK5qRZSg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:14 2025 by rpki-client