This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json) Hash identifier: GLT+0PaZZj5RmVCRbrsjcvUQ2jppqJzy8bR0EsHNdX8= Subject key identifier: 4C:2E:E3:CE:0A:D3:09:9F:06:0C:A2:29:8E:E3:F8:BB:24:40:8F:B4 Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa Certificate serial: 019AF2097A2F45F8E61148EB64C2FB1A12F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft Manifest number: 0D23 Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: A78ciWMI6IouAG9kWN7GH/WlE9R7LQ8AUP8OpefaCjY=) 2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7a:2f:45:f8:e6:11:48:eb:64:c2:fb:1a:12:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=4c2ee3ce0ad3099f060ca2298ee3f8bb24408fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:46:e6:89:d9:aa:8a:b4:45:11:dc:fb:c2: f9:c1:b2:31:38:da:ba:4b:ea:23:1d:2e:b7:61:96: 79:61:a5:b3:b7:ea:ce:1d:c7:05:a0:ca:b8:d9:3b: 14:dc:ab:59:84:fc:0d:d3:95:6b:f4:03:79:ad:37: f1:9b:f6:fe:76:2e:fe:7f:c2:65:7f:25:03:85:27: a0:2a:be:e0:92:0d:7b:df:9b:5e:b2:13:e7:d1:ad: e8:6c:d8:30:1a:f0:d9:aa:51:03:9b:bb:bc:00:7e: f6:eb:6e:20:d0:bc:18:ad:3c:6d:8e:17:cc:8b:49: 7e:87:d7:9b:1e:38:0c:d0:eb:e6:42:43:3f:21:84: 9a:d2:f9:d1:fc:2f:db:5d:6e:e1:83:17:73:9a:10: b6:36:80:64:35:06:f9:86:08:f6:e2:96:8c:b1:dc: 67:e2:b6:f8:05:53:2c:f6:ff:86:aa:b6:50:11:ed: 62:b7:1e:4e:25:93:b6:d6:31:f4:8f:b3:be:e7:98: 68:76:6a:fb:64:63:ce:57:4c:b3:cc:1d:0c:7f:ce: 44:30:9c:fd:a2:39:cd:bf:aa:fa:4a:90:74:52:70: d5:f9:55:ea:71:d4:b6:04:d5:2e:38:49:57:3c:6b: a9:f8:43:fd:af:73:e7:bd:06:34:e1:db:50:f4:8f: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:E3:CE:0A:D3:09:9F:06:0C:A2:29:8E:E3:F8:BB:24:40:8F:B4 X509v3 Authority Key Identifier: keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:55:0e:b9:ce:db:4c:41:51:5d:04:c8:79:70:54:b5:82:c0: b8:6b:a7:f4:d8:97:7e:35:66:f3:13:6b:f7:f9:ae:8e:fc:dc: a1:c9:3e:45:7a:07:10:f8:ee:46:25:db:ef:a2:62:46:4e:3a: 81:f4:24:fd:7b:6b:1c:37:1a:7a:54:3c:a8:f5:58:ef:6a:4e: 63:10:ea:2b:dc:64:70:1b:2d:8e:a1:5a:be:f5:bc:d3:0c:6e: fd:da:08:5b:df:a2:7b:5b:08:c1:bc:d7:da:d7:ae:6d:05:f7: 69:e1:fc:a8:e5:39:7c:74:07:83:6c:e6:4c:65:78:91:b4:04: 11:93:11:29:8a:9c:95:72:6a:5c:24:ba:77:ab:90:16:44:c7: d4:f5:b0:b0:9a:e2:8d:c8:0e:c1:ae:50:e6:ea:60:3b:1d:6b: 95:29:79:94:cb:e8:c1:18:fb:3a:04:a5:d5:df:c3:2a:67:07: 54:a7:18:03:c0:95:d0:bb:4c:2e:d2:50:45:1a:c7:ea:5b:6a: be:47:23:86:74:8c:5e:0d:9e:9e:1a:fb:8a:f4:4b:ad:dc:bc: 4d:29:1a:3a:00:c6:4f:50:de:ee:9d:45:98:2f:14:7a:30:b8: 5b:94:c0:47:73:7c:57:04:d6:e0:2a:e0:e4:0d:df:e1:44:8b: 0e:f9:7a:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXovRfjmEUjrZML7GhLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OGNmOTc3OWE5MmVmZTk3NTQzYjIyYTM0N2I4MWMyZWFh NWJiZmEwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD Eyg0YzJlZTNjZTBhZDMwOTlmMDYwY2EyMjk4ZWUzZjhiYjI0NDA4ZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw9G5onZqoq0RRHc+8L5wbIxONq6 S+ojHS63YZZ5YaWzt+rOHccFoMq42TsU3KtZhPwN05Vr9AN5rTfxm/b+di7+f8Jl fyUDhSegKr7gkg1735teshPn0a3obNgwGvDZqlEDm7u8AH72624g0LwYrTxtjhfM i0l+h9ebHjgM0OvmQkM/IYSa0vnR/C/bXW7hgxdzmhC2NoBkNQb5hgj24paMsdxn 4rb4BVMs9v+GqrZQEe1itx5OJZO21jH0j7O+55hodmr7ZGPOV0yzzB0Mf85EMJz9 ojnNv6r6SpB0UnDV+VXqcdS2BNUuOElXPGup+EP9r3PnvQY04dtQ9I9ntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwu484K0wmfBgyiKY7j+LskQI+0MB8GA1UdIwQY MBaAFDSM+Xeaku/pdUOyKjR7gcLqpbv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3Zjkt Yzk4MTlhNDEwYTdhLzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3ZjktYzk4MTlhNDEwYTdh LzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVUOuc7b TEFRXQTIeXBUtYLAuGun9NiXfjVm8xNr9/mujvzcock+RXoHEPjuRiXb76JiRk46 gfQk/XtrHDcaelQ8qPVY72pOYxDqK9xkcBstjqFavvW80wxu/doIW9+ie1sIwbzX 2teubQX3aeH8qOU5fHQHg2zmTGV4kbQEEZMRKYqclXJqXCS6d6uQFkTH1PWwsJri jcgOwa5Q5upgOx1rlSl5lMvowRj7OgSl1d/DKmcHVKcYA8CV0LtMLtJQRRrH6ltq vkcjhnSMXg2enhr7ivRLrdy8TSkaOgDGT1De7p1FmC8UejC4W5TAR3N8VwTW4Crg 5A3f4USLDvl6+g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:03 2025 by rpki-client