This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json) Hash identifier: YOLTg4VATg/SR0rOs3Yqn5CToKV/nsAaQt6co+NZ7OM= Subject key identifier: 9B:78:E9:06:01:91:74:72:73:21:85:22:CE:29:0A:66:A7:CF:96:74 Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0 Certificate serial: 019B6956AD465D604BDA8D1BE0EA1C64D1EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft Manifest number: 0CA7 Signing time: Mon 29 Dec 2025 09:00:46 +0000 Manifest this update: Mon 29 Dec 2025 09:00:46 +0000 Manifest next update: Tue 30 Dec 2025 09:00:46 +0000 Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: 3PrqhKsxPVTcXAlWheUGUF/y6SMxnxe9e7cFsXgg6GE=) 2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:56:ad:46:5d:60:4b:da:8d:1b:e0:ea:1c:64:d1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0 Validity Not Before: Dec 29 09:00:46 2025 GMT Not After : Dec 30 09:00:46 2025 GMT Subject: CN=9b78e9060191747273218522ce290a66a7cf9674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:c6:bc:4c:11:3e:72:03:c2:78:8a:f1:38: 76:9c:ae:cb:d9:75:fa:d3:77:76:ad:d0:c4:22:a7: dd:45:85:99:93:cc:f0:a1:cf:7b:94:94:8a:64:6a: 6b:76:96:d1:5c:1b:c3:fe:17:2b:0a:62:a1:5b:2e: 61:0c:39:b7:91:e7:ea:70:f0:db:df:22:42:77:59: 4b:4a:2d:ed:76:df:37:11:45:fb:42:f1:55:2f:76: 96:3c:bf:9b:f9:35:69:d4:d5:2f:c0:93:3a:c8:e8: 3e:41:ee:23:3e:27:dd:6a:d3:65:dd:19:13:74:85: 20:d2:21:a2:90:38:30:05:a5:30:94:ee:88:d8:26: 26:79:dd:de:bd:25:4f:07:f3:0a:51:e3:f2:a7:3d: 78:d8:9a:ed:1e:3f:d8:01:12:a9:b8:6b:41:93:9c: 59:89:75:88:60:1e:56:03:e9:7b:e5:b9:2d:e1:4e: de:72:aa:5d:1c:37:fb:ba:57:07:a2:0c:7f:e7:cc: f7:9a:94:0f:4a:92:90:56:84:b7:1f:db:c3:24:49: da:09:dd:d7:61:34:57:08:54:cb:92:4c:ac:df:94: 57:5b:03:2c:b5:20:9b:27:36:e4:2e:76:81:28:bf: 1d:b5:27:14:5e:06:74:22:70:57:26:73:a7:e9:3b: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:E9:06:01:91:74:72:73:21:85:22:CE:29:0A:66:A7:CF:96:74 X509v3 Authority Key Identifier: keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1d:7d:8a:e9:30:af:66:32:c8:b3:2b:3f:ec:37:35:09:bc: a4:7f:12:97:f7:f9:c8:0b:06:6b:e1:51:58:bb:df:3b:99:04: 51:3a:93:e1:4d:7d:e4:93:d5:b8:a1:84:56:b9:08:9b:96:80: 94:a1:e0:95:95:01:5d:b0:76:61:59:38:f4:3c:83:e2:0f:a3: 9d:dc:6f:af:8b:52:42:d6:f0:c5:21:69:6a:28:b5:23:7e:e0: 9b:83:4c:6a:e6:a5:fe:ec:da:84:d1:06:68:a4:1e:cb:4f:2a: bf:3f:a5:f1:e3:7e:3e:0c:81:54:a0:55:27:92:ad:ce:e0:fb: 97:81:fa:ce:b6:7d:11:d7:a0:6d:40:25:f5:1e:52:48:b9:ca: e7:70:5d:8c:74:e1:9d:38:8a:7e:64:33:e1:9b:14:5c:93:77: bb:d0:d1:07:5f:02:ff:95:bf:3d:4a:0d:8e:c6:a7:61:75:bb: a7:85:09:81:73:18:7f:6a:ae:ef:f9:c9:8b:1d:9b:6e:e0:04: b9:8d:20:42:82:f1:ae:08:da:5e:a0:d5:1c:3f:76:50:50:a1: 4f:b9:a6:f5:82:8d:98:88:79:d2:68:4e:82:cf:41:c4:aa:09: 8c:b5:00:48:8c:97:ac:e3:4e:e8:e8:22:23:ef:ec:f1:df:e1: 8d:56:16:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVq1GXWBL2o0b4OocZNHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2U3MTY2NDlkYWNiZjZlYTk4NjAyMzUxNGRmZTQwZGYx YTdjZjAwHhcNMjUxMjI5MDkwMDQ2WhcNMjUxMjMwMDkwMDQ2WjAzMTEwLwYDVQQD Eyg5Yjc4ZTkwNjAxOTE3NDcyNzMyMTg1MjJjZTI5MGE2NmE3Y2Y5Njc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnnGvEwRPnIDwniK8Th2nK7L2XX6 03d2rdDEIqfdRYWZk8zwoc97lJSKZGprdpbRXBvD/hcrCmKhWy5hDDm3kefqcPDb 3yJCd1lLSi3tdt83EUX7QvFVL3aWPL+b+TVp1NUvwJM6yOg+Qe4jPifdatNl3RkT dIUg0iGikDgwBaUwlO6I2CYmed3evSVPB/MKUePypz142JrtHj/YARKpuGtBk5xZ iXWIYB5WA+l75bkt4U7ecqpdHDf7ulcHogx/58z3mpQPSpKQVoS3H9vDJEnaCd3X YTRXCFTLkkys35RXWwMstSCbJzbkLnaBKL8dtScUXgZ0InBXJnOn6Tt0PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJt46QYBkXRycyGFIs4pCmanz5Z0MB8GA1UdIwQY MBaAFN9+cWZJ2sv26phgI1FN/kDfGnzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQt YTY2Mjg5ODUxY2Q5LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQtYTY2Mjg5ODUxY2Q5 LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx19iukw r2YyyLMrP+w3NQm8pH8Sl/f5yAsGa+FRWLvfO5kEUTqT4U195JPVuKGEVrkIm5aA lKHglZUBXbB2YVk49DyD4g+jndxvr4tSQtbwxSFpaii1I37gm4NMaual/uzahNEG aKQey08qvz+l8eN+PgyBVKBVJ5KtzuD7l4H6zrZ9EdegbUAl9R5SSLnK53BdjHTh nTiKfmQz4ZsUXJN3u9DRB18C/5W/PUoNjsanYXW7p4UJgXMYf2qu7/nJix2bbuAE uY0gQoLxrgjaXqDVHD92UFChT7mm9YKNmIh50mhOgs9BxKoJjLUASIyXrONO6Ogi I+/s8d/hjVYWsw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:18:40 2025 by rpki-client