This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json) Hash identifier: wBx8W0YE0Bcnvz4lUBullBTjvJFO3yM5oU+bml9gLFs= Subject key identifier: 8D:36:76:B6:EE:5B:FE:1B:4E:92:1A:74:57:9C:C5:7D:06:42:38:AC Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Certificate serial: 019B3BD8F51F83A37399F9C24AE7D332C62F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 13:00:32 +0000 Manifest this update: Sat 20 Dec 2025 13:00:32 +0000 Manifest next update: Sun 21 Dec 2025 13:00:32 +0000 Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: hNS9MsNod0E+hZ/i/3X5UzEGkIOq1P4hjJVi4UUQma4=) 2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=) 3: Gt23A32LNafHLHsemLl1kayh63c.roa (hash: 0agfcNSK+86f7lJTamSexAv7ynwwXj+0r7ubyCpwQQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:f5:1f:83:a3:73:99:f9:c2:4a:e7:d3:32:c6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1 Validity Not Before: Dec 20 13:00:32 2025 GMT Not After : Dec 21 13:00:32 2025 GMT Subject: CN=8d3676b6ee5bfe1b4e921a74579cc57d064238ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:dc:25:8c:92:de:16:c7:7a:07:57:8f:c1: 5b:b2:b7:d1:b8:ef:50:cd:73:90:3e:64:5b:91:72: ea:f1:b5:2e:8d:b7:45:ca:cd:f6:81:1c:e7:3b:55: e7:6b:8e:ce:d2:22:3d:3b:84:81:a9:80:52:6a:ee: 1e:47:5d:94:fe:e2:55:89:01:18:2e:f3:6f:2b:34: d9:8f:7c:f8:a7:4c:ba:b6:ca:98:77:cb:80:1d:e8: 8f:5f:10:d2:e9:36:d8:db:2a:c4:0b:38:37:62:d6: c4:d8:9e:ab:f0:46:50:b7:fa:04:29:ea:f5:94:b5: 77:fd:01:50:eb:1c:d9:56:63:aa:7f:df:50:34:ca: ee:cf:78:ac:f1:61:34:f7:2c:7d:02:cc:37:6e:6f: e6:d0:ae:f8:78:a0:6e:81:95:7b:a8:d9:fe:05:71: 36:ee:7f:b0:98:05:6f:85:d7:8b:d3:56:8e:d6:17: 39:4c:c3:f0:ff:92:3d:61:7c:2a:c5:49:90:71:98: 93:df:b1:e8:d0:99:65:e1:4e:77:11:78:be:38:da: 39:14:ae:7c:4d:1c:10:c6:b3:ce:67:e1:8d:07:10: 46:6a:61:86:6a:1c:e1:c7:b7:b8:dc:fe:74:7e:1e: f6:e7:57:95:24:e9:66:42:c1:a2:c9:2a:f9:8d:21: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:36:76:B6:EE:5B:FE:1B:4E:92:1A:74:57:9C:C5:7D:06:42:38:AC X509v3 Authority Key Identifier: keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:19:26:85:9d:90:c1:ab:a2:f5:2a:46:1f:40:05:0f:22:4f: b5:e0:7f:54:a6:11:db:09:e1:63:9e:a2:9f:e6:c3:63:4c:43: 14:92:5a:ed:30:9c:a6:e4:b3:5f:f5:f6:41:46:09:32:53:30: c9:05:89:5c:6e:e9:78:66:41:45:b8:dd:9e:28:b4:6c:fb:09: 7b:a6:ea:6e:e6:f9:c5:7b:7d:b3:80:d3:74:01:72:ba:01:c5: 53:df:6d:ef:a6:84:f3:49:b1:91:75:41:14:79:02:c2:da:b6: f7:5e:22:64:9b:74:a9:f5:95:6e:8d:2f:49:2e:40:69:f3:73: 49:08:b2:09:dd:93:92:ce:cd:f8:17:62:03:b9:66:27:08:c0: 9b:b0:95:92:34:76:e5:fb:74:9f:3b:7d:12:7f:b1:e4:3d:5c: 1c:f8:79:dd:d9:af:c8:a9:fb:94:95:40:6a:13:82:e7:63:a5: eb:a8:1c:eb:92:dc:f2:9c:52:f8:86:6e:23:02:39:8b:74:54: 2f:ec:96:89:eb:2a:bb:31:e8:30:50:65:1c:5c:c9:b3:c6:40: 40:81:98:d4:64:8d:02:1a:70:7c:7e:76:62:06:a0:10:00:9c: 49:1f:62:03:6f:f1:62:61:fa:25:29:e6:b3:16:42:65:72:e1: 9b:f8:2c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72PUfg6NzmfnCSufTMsYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj MDE3YzEwHhcNMjUxMjIwMTMwMDMyWhcNMjUxMjIxMTMwMDMyWjAzMTEwLwYDVQQD Eyg4ZDM2NzZiNmVlNWJmZTFiNGU5MjFhNzQ1NzljYzU3ZDA2NDIzOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qPcJYyS3hbHegdXj8FbsrfRuO9Q zXOQPmRbkXLq8bUujbdFys32gRznO1Xna47O0iI9O4SBqYBSau4eR12U/uJViQEY LvNvKzTZj3z4p0y6tsqYd8uAHeiPXxDS6TbY2yrECzg3YtbE2J6r8EZQt/oEKer1 lLV3/QFQ6xzZVmOqf99QNMruz3is8WE09yx9Asw3bm/m0K74eKBugZV7qNn+BXE2 7n+wmAVvhdeL01aO1hc5TMPw/5I9YXwqxUmQcZiT37Ho0Jll4U53EXi+ONo5FK58 TRwQxrPOZ+GNBxBGamGGahzhx7e43P50fh7251eVJOlmQsGiySr5jSGl1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI02drbuW/4bTpIadFecxX0GQjisMB8GA1UdIwQY MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2 LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABkmhZ2Q waui9SpGH0AFDyJPteB/VKYR2wnhY56in+bDY0xDFJJa7TCcpuSzX/X2QUYJMlMw yQWJXG7peGZBRbjdnii0bPsJe6bqbub5xXt9s4DTdAFyugHFU99t76aE80mxkXVB FHkCwtq2914iZJt0qfWVbo0vSS5AafNzSQiyCd2Tks7N+BdiA7lmJwjAm7CVkjR2 5ft0nzt9En+x5D1cHPh53dmvyKn7lJVAahOC52Ol66gc65Lc8pxS+IZuIwI5i3RU L+yWiesquzHoMFBlHFzJs8ZAQIGY1GSNAhpwfH52YgagEACcSR9iA2/xYmH6JSnm sxZCZXLhm/gsxA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:39 2025 by rpki-client