This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json) Hash identifier: x45XLrCLOh8Sne/ATftLfLkFTYzLlrAIYYlGfEBwmtU= Subject key identifier: 64:76:E9:96:C9:7C:0F:5D:9D:E8:7F:56:37:2F:2C:FE:5D:9B:3E:9C Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2 Certificate serial: 019AF19B996D6E8D7BDCA3C0DFF9969ED5BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=) 2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: 9SgJuzPDw8+l573hZIDww8cPxb3w4Z+NHHO51tzJoDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:99:6d:6e:8d:7b:dc:a3:c0:df:f9:96:9e:d5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=6476e996c97c0f5d9de87f56372f2cfe5d9b3e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d7:5a:b0:20:7e:5e:8c:3c:e9:41:cc:31:b3: 4d:bc:29:a6:19:f8:7f:ee:0b:08:69:6a:07:81:96: bd:80:3f:8d:1d:36:fa:0d:0b:6e:47:f7:e1:86:1d: 1d:37:c5:e7:7e:d0:d0:c4:04:f9:32:83:4f:0e:0f: 5b:2e:88:9a:2f:ce:f8:8b:36:9e:6b:9e:6b:dd:8e: 2c:7b:c5:d6:de:cb:af:10:16:6f:4c:95:f2:2b:ee: 15:69:87:94:25:51:34:af:b6:cb:b3:73:d1:b7:70: cc:2c:78:72:a4:3c:b9:2a:9c:32:be:57:17:58:80: 6d:1f:60:fd:53:ba:8b:ff:97:ef:35:b2:b9:9d:45: 63:f6:fe:25:54:95:e8:1f:d1:30:ff:f8:b6:91:4a: bf:e5:38:0e:84:72:85:b9:85:57:0d:a5:33:a6:5b: 67:1c:00:0c:e6:e1:6b:38:7a:cd:60:dd:b7:65:39: 8c:fd:d4:3c:f7:28:d4:e7:d4:2a:2e:93:4f:95:c4: e7:9a:86:e2:e6:25:6f:c9:45:c8:13:b8:1b:cc:dc: b7:05:88:b7:d8:bf:6c:10:22:d2:5a:ed:ba:b6:e1: 0d:a5:9e:56:6d:08:81:d8:81:57:a1:23:58:c2:c0: 88:43:0a:4c:c7:15:42:05:7a:56:fe:e5:fc:c6:9a: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:76:E9:96:C9:7C:0F:5D:9D:E8:7F:56:37:2F:2C:FE:5D:9B:3E:9C X509v3 Authority Key Identifier: keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2c:ba:84:98:d4:3e:99:2a:cc:01:64:d3:2d:d4:28:7a:5b: 45:a6:84:7e:22:c9:e6:c6:a0:e5:c6:ef:cf:fc:3b:fd:de:ac: db:f6:fe:31:b4:94:0a:b6:2d:8e:13:6f:16:53:12:e7:47:25: 96:6a:fd:0c:b6:cc:41:aa:e7:f8:e4:00:7f:aa:2f:8c:05:12: 6c:db:78:fe:3d:ec:6b:0e:d9:ad:d9:bc:9d:1a:24:87:5e:bf: 61:5e:7e:64:b4:30:26:1c:7d:de:92:40:27:70:ac:05:61:94: 3f:cd:ed:98:43:29:40:a3:6c:eb:bf:ff:6a:fd:d4:fc:a0:a5: e3:82:0e:62:1b:cf:36:49:fb:a1:5b:f1:a4:b1:19:9a:1a:75: 12:65:76:62:c4:16:84:38:99:f2:bd:20:06:57:0a:11:aa:4e: 18:e1:90:cb:f7:3f:c9:b5:be:22:8e:a6:eb:fb:28:ec:bb:dd: 1b:78:1a:10:e8:76:96:98:35:b1:04:c5:c0:4a:63:30:36:19: ab:37:c3:66:1c:71:31:33:80:b7:4f:d9:c5:d8:45:37:71:60: 89:91:69:67:c2:a5:52:da:ef:94:85:54:62:e5:52:17:e6:cd: 8d:66:7d:f8:2f:6c:4f:f5:68:df:41:d8:9e:83:c0:ab:96:69: 51:0e:e4:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5ltbo173KPA3/mWntW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl NDE2YzIwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg2NDc2ZTk5NmM5N2MwZjVkOWRlODdmNTYzNzJmMmNmZTVkOWIzZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ddasCB+Xow86UHMMbNNvCmmGfh/ 7gsIaWoHgZa9gD+NHTb6DQtuR/fhhh0dN8XnftDQxAT5MoNPDg9bLoiaL874izae a55r3Y4se8XW3suvEBZvTJXyK+4VaYeUJVE0r7bLs3PRt3DMLHhypDy5KpwyvlcX WIBtH2D9U7qL/5fvNbK5nUVj9v4lVJXoH9Ew//i2kUq/5TgOhHKFuYVXDaUzpltn HAAM5uFrOHrNYN23ZTmM/dQ89yjU59QqLpNPlcTnmobi5iVvyUXIE7gbzNy3BYi3 2L9sECLSWu26tuENpZ5WbQiB2IFXoSNYwsCIQwpMxxVCBXpW/uX8xpo2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR26ZbJfA9dneh/VjcvLP5dmz6cMB8GA1UdIwQY MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1 LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiy6hJjU PpkqzAFk0y3UKHpbRaaEfiLJ5sag5cbvz/w7/d6s2/b+MbSUCrYtjhNvFlMS50cl lmr9DLbMQarn+OQAf6ovjAUSbNt4/j3saw7Zrdm8nRokh16/YV5+ZLQwJhx93pJA J3CsBWGUP83tmEMpQKNs67//av3U/KCl44IOYhvPNkn7oVvxpLEZmhp1EmV2YsQW hDiZ8r0gBlcKEapOGOGQy/c/ybW+Io6m6/so7LvdG3gaEOh2lpg1sQTFwEpjMDYZ qzfDZhxxMTOAt0/ZxdhFN3FgiZFpZ8KlUtrvlIVUYuVSF+bNjWZ9+C9sT/Vo30HY noPAq5ZpUQ7k6g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:24 2025 by rpki-client