This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json) Hash identifier: 1T5ipkXzLQ12b9dbXs0NhWTmABx6aDm2kgsrrvyqIwk= Subject key identifier: 9E:14:C4:86:7C:75:70:F1:0E:79:F8:CD:FD:50:03:0A:98:A2:0D:3A Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Certificate serial: 019B4513D9503D5F723F8C23702CCBDEA524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft Manifest number: 144E Signing time: Mon 22 Dec 2025 08:01:27 +0000 Manifest this update: Mon 22 Dec 2025 08:01:27 +0000 Manifest next update: Tue 23 Dec 2025 08:01:27 +0000 Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: RR9W0EcD1RcWPY9c6hlyN6feS70sur0WGCvu58V6LO0=) 2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:d9:50:3d:5f:72:3f:8c:23:70:2c:cb:de:a5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Validity Not Before: Dec 22 08:01:27 2025 GMT Not After : Dec 23 08:01:27 2025 GMT Subject: CN=9e14c4867c7570f10e79f8cdfd50030a98a20d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:6c:fe:c5:de:1d:37:b0:b7:e0:9d:d6:e6: 50:3c:39:3a:dc:cf:05:18:21:b2:ab:15:6b:7b:04: 0b:4d:24:66:a8:fd:cc:2b:82:29:6c:bb:fc:44:c7: b1:78:4a:ea:e6:19:17:47:57:6c:dc:87:23:6a:a3: 88:8e:37:43:a1:45:bf:a5:73:81:a3:9d:25:62:ca: 23:ce:c8:df:e3:5e:22:56:86:53:a7:85:7d:df:24: a1:83:b4:4d:b0:7f:10:3f:97:11:3d:15:3f:c4:8b: 88:9e:05:cc:06:6a:b8:3a:07:7b:f8:65:49:4c:2d: 46:74:2b:f6:4b:df:51:0b:d2:5d:9e:79:57:3d:e0: 58:7a:66:6c:66:3a:18:db:c2:22:d2:7c:6b:d1:95: a7:d8:11:45:6b:8a:80:67:84:e4:70:5f:2d:89:ab: 8a:6f:df:fb:2d:fc:05:e8:9d:22:27:70:8d:5d:24: 25:02:f7:4e:08:f8:f9:be:cd:a4:04:32:f8:42:f3: 80:a1:3b:ab:6d:6f:35:78:2f:ab:d7:6e:e8:93:76: 97:50:1e:0b:7e:a6:da:d6:d6:9f:c8:3b:b9:b8:6f: c7:f2:73:6f:7b:71:6b:15:67:34:c1:0e:9b:44:e2: 35:15:ad:cf:38:b7:30:e5:af:ce:45:1a:5a:e5:a1: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:14:C4:86:7C:75:70:F1:0E:79:F8:CD:FD:50:03:0A:98:A2:0D:3A X509v3 Authority Key Identifier: keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d3:e8:89:7c:14:bd:fc:a1:10:7b:05:6c:e1:41:97:bb:08: b4:00:c7:dc:f9:8e:bb:3c:0f:9e:33:6f:79:85:87:e2:1d:02: 12:a6:cc:b5:87:0b:83:a5:89:0f:35:51:d3:7c:87:ea:b1:30: 27:3b:a3:2e:59:48:59:39:90:a0:8e:5c:0e:d9:1e:87:da:e3: f3:c6:49:14:c5:60:66:a5:51:d4:b2:40:68:8c:32:0a:87:5c: 8e:45:aa:18:1a:78:67:3c:4f:8d:fd:4c:a7:e8:14:b4:5a:f5: 0e:90:17:b9:b9:26:15:c3:e6:3e:a0:08:bd:47:24:29:4e:41: 09:60:d9:49:cc:44:17:08:6d:f3:c5:09:6f:63:f6:8d:cd:d9: d5:7a:97:95:f0:3b:47:92:75:31:d6:57:62:b4:10:07:3f:bd: a3:61:88:3c:80:76:c6:9e:6c:28:de:6a:aa:1e:9e:a0:91:f1: 30:da:41:f5:28:ae:3e:9f:74:3a:67:1e:80:1d:94:8e:34:bc: 08:77:b9:db:b6:c9:fd:11:6f:1c:95:05:d3:b9:03:32:72:26: 1f:f3:b6:10:03:52:51:91:47:e7:14:b6:ec:ba:5f:7e:e2:a9: a0:11:af:e1:9e:ca:3b:89:2a:c6:6d:8c:a2:fd:57:80:3d:2e: 1e:4f:07:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE9lQPV9yP4wjcCzL3qUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2VhYzRmYTMxM2EyZTc5MmU1NDI2M2NjNjA1ZmYzMTlm MzVjMTkwHhcNMjUxMjIyMDgwMTI3WhcNMjUxMjIzMDgwMTI3WjAzMTEwLwYDVQQD Eyg5ZTE0YzQ4NjdjNzU3MGYxMGU3OWY4Y2RmZDUwMDMwYTk4YTIwZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudhs/sXeHTewt+Cd1uZQPDk63M8F GCGyqxVrewQLTSRmqP3MK4IpbLv8RMexeErq5hkXR1ds3IcjaqOIjjdDoUW/pXOB o50lYsojzsjf414iVoZTp4V93yShg7RNsH8QP5cRPRU/xIuIngXMBmq4Ogd7+GVJ TC1GdCv2S99RC9JdnnlXPeBYemZsZjoY28Ii0nxr0ZWn2BFFa4qAZ4TkcF8tiauK b9/7LfwF6J0iJ3CNXSQlAvdOCPj5vs2kBDL4QvOAoTurbW81eC+r127ok3aXUB4L fqba1tafyDu5uG/H8nNve3FrFWc0wQ6bROI1Fa3POLcw5a/ORRpa5aHD4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4UxIZ8dXDxDnn4zf1QAwqYog06MB8GA1UdIwQY MBaAFN9+rE+jE6LnkuVCY8xgX/MZ81wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYt MmMwY2YyM2I0MjNlLzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYtMmMwY2YyM2I0MjNl LzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtPoiXwU vfyhEHsFbOFBl7sItADH3PmOuzwPnjNveYWH4h0CEqbMtYcLg6WJDzVR03yH6rEw JzujLllIWTmQoI5cDtkeh9rj88ZJFMVgZqVR1LJAaIwyCodcjkWqGBp4ZzxPjf1M p+gUtFr1DpAXubkmFcPmPqAIvUckKU5BCWDZScxEFwht88UJb2P2jc3Z1XqXlfA7 R5J1MdZXYrQQBz+9o2GIPIB2xp5sKN5qqh6eoJHxMNpB9SiuPp90OmcegB2UjjS8 CHe527bJ/RFvHJUF07kDMnImH/O2EANSUZFH5xS27LpffuKpoBGv4Z7KO4kqxm2M ov1XgD0uHk8HuA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:44 2025 by rpki-client