This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json) Hash identifier: 3Bj7FV9xAyrmYjYbQzVBPZ6pinjN02baK68swT51jVU= Subject key identifier: 3B:2C:70:26:B6:2C:16:FF:E9:45:09:73:70:FB:B9:0C:8E:5C:EA:3E Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Certificate serial: 019B627953FC2719BB7709804BD2B5A0685E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft Manifest number: 1185 Signing time: Sun 28 Dec 2025 01:01:17 +0000 Manifest this update: Sun 28 Dec 2025 01:01:17 +0000 Manifest next update: Mon 29 Dec 2025 01:01:17 +0000 Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: ecK1UlJxqme0ZLqvB9nx2HTNL2RfNH70kPRyryNwrww=) 2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=) 3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=) 4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:53:fc:27:19:bb:77:09:80:4b:d2:b5:a0:68:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Validity Not Before: Dec 28 01:01:17 2025 GMT Not After : Dec 29 01:01:17 2025 GMT Subject: CN=3b2c7026b62c16ffe945097370fbb90c8e5cea3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:ce:e3:ee:0e:3f:3e:8f:54:dd:f0:b8:33: 6e:c5:d3:7f:2b:e6:9c:e1:2c:09:f5:9a:49:65:1a: 92:c5:2b:ed:51:c2:75:79:b3:86:c2:cf:d8:73:7d: e6:10:71:e9:57:35:8a:4a:5c:65:8c:4a:af:c6:aa: 34:84:cd:2b:8f:13:23:88:38:b8:78:cc:dd:83:57: 84:e5:08:a0:97:86:30:50:3e:d1:51:c8:03:07:2a: f7:e3:66:84:69:46:42:ea:2c:32:f0:98:1a:3c:a4: 05:86:e1:e6:1f:a5:4b:06:c7:3c:60:2d:7b:a0:74: 1e:f8:00:76:18:ad:b7:b9:73:1b:4c:7d:3f:cb:68: a9:0b:2e:b8:e8:a3:17:08:c2:66:5f:cd:dc:e2:68: 54:0d:98:1d:62:73:11:f7:51:30:aa:d0:41:76:76: f4:b8:ce:53:d0:59:3a:27:da:a4:a2:43:1d:8d:98: 31:fc:e6:a2:88:80:e1:4d:5f:0d:3d:8d:25:88:9c: 91:85:6a:e7:c1:ec:74:80:d1:0b:a5:80:9a:52:c1: ed:bf:06:e9:21:1b:73:03:b4:b8:54:1f:cc:a9:a7: 6d:a7:62:00:6e:c4:57:67:a8:0d:f6:b2:f7:d1:83: 3c:50:b4:df:5f:90:b4:a5:5c:1d:80:f9:9e:fc:cc: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:70:26:B6:2C:16:FF:E9:45:09:73:70:FB:B9:0C:8E:5C:EA:3E X509v3 Authority Key Identifier: keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:79:f2:fc:74:70:20:cc:58:10:d6:84:b8:df:ac:f2:78:04: 68:2b:a4:2a:48:15:d9:4a:7a:dc:01:63:7c:17:31:78:40:06: b2:9e:ee:98:93:68:a8:09:1b:9e:f3:c9:2c:12:82:ca:49:7d: 55:fa:fe:08:90:c0:1d:5a:98:b2:bf:c8:7c:b2:79:f1:e5:45: f8:3a:a5:25:e6:2e:03:e2:fd:50:e4:11:67:71:39:fa:04:29: be:4a:38:26:fd:41:6d:ff:74:68:66:81:fe:1f:66:fc:5a:3c: 66:50:6e:bd:48:0e:66:00:c4:6f:42:9e:c6:3f:15:0e:6a:3f: db:91:ca:26:db:e4:4e:03:7d:2a:f9:8e:e4:d7:0c:6d:70:59: 21:5a:74:73:c5:c2:f3:b0:6e:46:b4:ca:aa:42:b2:4b:ea:30: af:6e:3b:90:c2:1a:03:45:55:0c:bd:e8:f2:11:d6:84:6a:da: 66:24:e6:4a:98:01:a4:bd:35:4f:f8:97:b7:d6:46:87:e3:2c: f2:7e:47:47:04:ea:f2:0c:49:68:17:8d:5a:52:78:1d:ca:9d: 04:c9:9f:71:5a:1a:70:43:18:74:31:09:74:b9:10:e3:93:22: 3a:2e:0c:2d:7a:a8:4b:5f:c9:7c:75:d6:5c:e3:a7:71:91:b1: bb:b1:ed:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieVP8Jxm7dwmAS9K1oGheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj NjZhZWIwHhcNMjUxMjI4MDEwMTE3WhcNMjUxMjI5MDEwMTE3WjAzMTEwLwYDVQQD EygzYjJjNzAyNmI2MmMxNmZmZTk0NTA5NzM3MGZiYjkwYzhlNWNlYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpPO4+4OPz6PVN3wuDNuxdN/K+ac 4SwJ9ZpJZRqSxSvtUcJ1ebOGws/Yc33mEHHpVzWKSlxljEqvxqo0hM0rjxMjiDi4 eMzdg1eE5Qigl4YwUD7RUcgDByr342aEaUZC6iwy8JgaPKQFhuHmH6VLBsc8YC17 oHQe+AB2GK23uXMbTH0/y2ipCy646KMXCMJmX83c4mhUDZgdYnMR91EwqtBBdnb0 uM5T0Fk6J9qkokMdjZgx/OaiiIDhTV8NPY0liJyRhWrnwex0gNELpYCaUsHtvwbp IRtzA7S4VB/Mqadtp2IAbsRXZ6gN9rL30YM8ULTfX5C0pVwdgPme/MzQ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsscCa2LBb/6UUJc3D7uQyOXOo+MB8GA1UdIwQY MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1 LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHny/HRw IMxYENaEuN+s8ngEaCukKkgV2Up63AFjfBcxeEAGsp7umJNoqAkbnvPJLBKCykl9 Vfr+CJDAHVqYsr/IfLJ58eVF+DqlJeYuA+L9UOQRZ3E5+gQpvko4Jv1Bbf90aGaB /h9m/Fo8ZlBuvUgOZgDEb0Kexj8VDmo/25HKJtvkTgN9KvmO5NcMbXBZIVp0c8XC 87BuRrTKqkKyS+owr247kMIaA0VVDL3o8hHWhGraZiTmSpgBpL01T/iXt9ZGh+Ms 8n5HRwTq8gxJaBeNWlJ4HcqdBMmfcVoacEMYdDEJdLkQ45MiOi4MLXqoS1/JfHXW XOOncZGxu7HtYw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:37 2025 by rpki-client