This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json) Hash identifier: Aq4s6j9tF/xE4T4FA5fIuIJuIM2B9w/nZahCkhy9f3E= Subject key identifier: D7:67:B3:81:68:6C:F8:E0:2F:FE:F0:C1:82:88:14:02:95:64:4B:DE Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f Certificate serial: 019B3D9086A73E4D097022F3744C501267CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft Manifest number: 0D84 Signing time: Sat 20 Dec 2025 21:00:40 +0000 Manifest this update: Sat 20 Dec 2025 21:00:40 +0000 Manifest next update: Sun 21 Dec 2025 21:00:40 +0000 Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: IGmQEUru7jbvXLKQ6fZNh7FasiYxG5aluJD1PB8rCcI=) 2: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (hash: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:86:a7:3e:4d:09:70:22:f3:74:4c:50:12:67:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f Validity Not Before: Dec 20 21:00:40 2025 GMT Not After : Dec 21 21:00:40 2025 GMT Subject: CN=d767b381686cf8e02ffef0c18288140295644bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:ca:31:ec:6b:d7:da:6c:9a:bb:ff:a3:a8: 55:44:df:70:fc:17:80:ab:cd:41:62:2c:59:5e:32: 15:b3:8f:f6:ab:e5:7e:35:4a:e1:9b:c7:0b:c0:51: 6c:87:8c:8c:78:83:f1:9b:19:5d:0c:ad:f3:fd:aa: 27:81:75:dd:21:a1:93:36:ea:b6:b6:a8:cd:1f:c4: c9:74:bf:56:a7:87:3e:ac:92:2a:57:d7:cd:d7:21: 79:36:b5:ec:85:e6:e0:8a:63:23:07:03:4a:b7:c0: c8:f4:cd:b3:07:71:db:76:fd:86:1d:b8:f7:54:18: 83:ca:66:3c:bb:0a:d5:bc:ee:e0:46:d9:33:c5:01: 3f:cc:58:3b:27:b1:89:28:be:8c:93:b8:43:aa:5d: 9d:77:77:d6:91:17:e1:d3:22:2d:b3:63:d5:02:af: 73:bf:61:8e:0c:24:b8:68:31:0e:01:20:28:e4:d3: 31:05:30:95:aa:6e:48:84:3c:e0:27:4b:8b:72:ee: 69:dc:5b:3f:bc:94:23:ba:55:c6:bb:65:34:e1:76: a0:f0:76:66:1d:18:a2:7a:35:c1:b9:57:2a:68:ac: 8d:11:ce:54:02:3e:fc:fa:95:43:bd:92:f4:1d:94: 80:b6:88:bf:5f:83:30:54:75:7d:c2:00:1d:bf:83: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:B3:81:68:6C:F8:E0:2F:FE:F0:C1:82:88:14:02:95:64:4B:DE X509v3 Authority Key Identifier: keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:96:e3:39:36:e7:3f:f7:d7:05:0c:35:98:39:38:23:bc:64: fe:57:eb:9c:28:c7:99:44:96:1c:19:a4:19:a6:f7:7b:7f:67: fc:b5:be:fb:1d:fa:5d:bc:df:ff:84:bb:16:ca:b6:33:be:de: 97:97:c4:28:fd:a2:f9:4f:80:f6:31:ec:cf:e6:4b:dc:55:e9: 0d:de:08:53:d9:b9:f2:b6:b8:1b:61:89:dd:5d:c3:b7:e8:44: ee:d7:ae:02:02:c5:ae:10:5f:19:5c:f5:89:d4:64:bd:10:b7: dc:2e:cd:26:77:c5:d8:bc:df:e8:e9:ff:a8:64:77:38:84:dc: d2:a4:c0:aa:ac:b6:68:da:61:5d:3b:02:36:d3:e7:e9:31:b7: 53:0a:32:0e:d9:17:78:4d:a6:a4:9b:ce:ab:e3:12:6f:d9:d5: b4:5f:5b:98:fd:bd:a6:b3:f2:01:34:aa:2a:26:34:af:42:c4: 10:c9:6b:79:23:da:27:94:84:e6:fd:52:c3:3e:c3:88:a9:f0: 4e:ca:47:1d:52:f6:4c:e2:89:17:d6:ea:5b:83:70:c0:d3:fc: 62:d1:4f:98:46:e0:4c:df:5e:c3:02:21:c7:80:c0:cb:4d:39: e8:b0:63:92:fb:6f:0e:61:ae:5c:1f:3e:b6:73:b7:94:73:b4: 09:d4:67:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kIanPk0JcCLzdExQEmfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYWJkMTQyZTg5NDE2ODg4M2NlNDUyMjczMTdmOWZhNTAy MjE5NGYwHhcNMjUxMjIwMjEwMDQwWhcNMjUxMjIxMjEwMDQwWjAzMTEwLwYDVQQD EyhkNzY3YjM4MTY4NmNmOGUwMmZmZWYwYzE4Mjg4MTQwMjk1NjQ0YmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuurKMexr19psmrv/o6hVRN9w/BeA q81BYixZXjIVs4/2q+V+NUrhm8cLwFFsh4yMeIPxmxldDK3z/aongXXdIaGTNuq2 tqjNH8TJdL9Wp4c+rJIqV9fN1yF5NrXshebgimMjBwNKt8DI9M2zB3Hbdv2GHbj3 VBiDymY8uwrVvO7gRtkzxQE/zFg7J7GJKL6Mk7hDql2dd3fWkRfh0yIts2PVAq9z v2GODCS4aDEOASAo5NMxBTCVqm5IhDzgJ0uLcu5p3Fs/vJQjulXGu2U04Xag8HZm HRiiejXBuVcqaKyNEc5UAj78+pVDvZL0HZSAtoi/X4MwVHV9wgAdv4NdnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdns4FobPjgL/7wwYKIFAKVZEveMB8GA1UdIwQY MBaAFN+r0ULolBaIg85FInMX+fpQIhlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQt M2E4YWM0ZGMzZWVmLzEvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQtM2E4YWM0ZGMzZWVm LzEvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5bjOTbn P/fXBQw1mDk4I7xk/lfrnCjHmUSWHBmkGab3e39n/LW++x36Xbzf/4S7Fsq2M77e l5fEKP2i+U+A9jHsz+ZL3FXpDd4IU9m58ra4G2GJ3V3Dt+hE7teuAgLFrhBfGVz1 idRkvRC33C7NJnfF2Lzf6On/qGR3OITc0qTAqqy2aNphXTsCNtPn6TG3UwoyDtkX eE2mpJvOq+MSb9nVtF9bmP29prPyATSqKiY0r0LEEMlreSPaJ5SE5v1Swz7DiKnw TspHHVL2TOKJF9bqW4NwwNP8YtFPmEbgTN9ewwIhx4DAy0056LBjkvtvDmGuXB8+ tnO3lHO0CdRnhg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:26:13 2025 by rpki-client