This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json) Hash identifier: iYuFuUrIhyvdBLIdeyFc3LdsvtJGoLRLOHalbhrUmaQ= Subject key identifier: 3F:4F:2C:35:7E:F2:61:3D:7F:7E:74:12:76:46:A4:DC:D1:74:85:12 Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74 Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074 Certificate serial: 019AF19A96D0ACBFD7E7D62E672D5D681E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=) 2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=) 3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: de6p3CtGbdX57J6rKXZYkKh7v7zqgDH2JobD2G3Nboc=) 4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:96:d0:ac:bf:d7:e7:d6:2e:67:2d:5d:68:1e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=3f4f2c357ef2613d7f7e74127646a4dcd1748512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:57:c2:fa:a2:d1:70:7d:a7:97:f5:73:a7: 43:41:1a:e2:6e:93:ce:95:90:be:90:de:17:25:1b: b9:f4:f2:24:c2:2d:44:24:e0:9b:0e:e0:32:60:4e: 47:51:3b:4b:4f:fe:2d:eb:10:80:e5:d5:00:8d:30: ec:a4:10:38:a7:d9:eb:76:e5:22:5e:48:5b:d2:6d: 5e:5f:36:d4:fc:b7:04:e7:aa:af:41:19:06:ce:20: 68:9d:31:31:93:70:eb:9d:5e:57:4f:8e:b6:d0:ed: aa:86:f7:ef:2a:d6:af:ec:98:ba:25:e5:a3:e4:e2: 87:4a:62:78:08:a5:c6:ac:53:2d:c9:5c:67:3b:8d: 67:87:5a:77:db:a2:c5:74:b3:f8:96:b5:4e:d1:40: 80:82:f0:79:1d:1e:db:85:8c:2a:40:8f:3c:60:0d: 3c:77:5d:c7:0a:fe:44:f3:30:5f:9a:dd:14:85:4f: 40:5d:1c:77:36:8e:3b:a4:60:3b:f6:35:cd:b5:94: 77:de:29:df:f1:21:33:3b:f0:75:6c:02:8d:1c:f4: d5:a6:04:30:7e:2e:85:18:be:89:10:53:4d:dc:6c: 11:7f:47:64:03:0d:bd:90:d1:4f:b7:96:00:38:2c: c6:c9:61:4c:15:f1:6d:4e:53:81:76:df:73:b7:02: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4F:2C:35:7E:F2:61:3D:7F:7E:74:12:76:46:A4:DC:D1:74:85:12 X509v3 Authority Key Identifier: keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:01:6f:f7:77:8b:d2:f2:22:aa:8c:ec:41:66:9b:69:4a:88: a5:b0:a1:31:56:fc:a0:f0:cd:9c:0b:1a:26:64:ca:a2:98:b2: 65:81:32:39:e1:9e:78:2e:af:ad:df:cf:83:6f:22:ce:21:65: 78:09:ae:1b:86:3a:29:9c:44:18:b4:c6:87:a8:ab:fa:ba:da: 3b:5f:4f:b4:93:d4:15:1d:8a:00:61:ff:57:ea:53:3c:09:a9: 3f:7d:ae:f7:2f:2f:fa:e7:f3:77:7c:6a:7a:61:1d:fc:d2:48: d5:6e:fc:27:0f:95:7c:cb:6f:b1:4c:2c:70:5e:47:84:78:10: 72:14:1f:5f:5c:fe:db:bc:9d:68:4f:56:e4:f3:d3:a6:cb:db: 1b:21:5e:f1:16:e6:42:77:27:28:92:46:86:1d:93:b9:d8:df: f8:db:6e:4e:b6:83:4e:44:0a:7d:99:2c:60:d8:68:ac:14:1e: f0:60:62:63:5c:47:ec:4e:e0:74:b6:49:50:6e:5f:68:3a:c6: b5:8f:c6:d7:32:81:78:af:cd:b1:6c:4d:3e:15:3f:9e:58:ee: 62:6e:e3:e1:1c:59:84:01:4a:6d:98:81:13:22:2a:02:12:4f: 06:e8:2a:74:8f:9f:2c:87:0d:0f:ba:a0:cd:5e:15:ad:80:a2: 11:43:df:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpbQrL/X59YuZy1daB5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NTc0YmU2YWU3NmNkNTIzYjMzNzg3Y2ZiZGI2OTI2NDI2 M2QwNzQwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EygzZjRmMmMzNTdlZjI2MTNkN2Y3ZTc0MTI3NjQ2YTRkY2QxNzQ4NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXJXwvqi0XB9p5f1c6dDQRribpPO lZC+kN4XJRu59PIkwi1EJOCbDuAyYE5HUTtLT/4t6xCA5dUAjTDspBA4p9nrduUi Xkhb0m1eXzbU/LcE56qvQRkGziBonTExk3DrnV5XT4620O2qhvfvKtav7Ji6JeWj 5OKHSmJ4CKXGrFMtyVxnO41nh1p326LFdLP4lrVO0UCAgvB5HR7bhYwqQI88YA08 d13HCv5E8zBfmt0UhU9AXRx3No47pGA79jXNtZR33inf8SEzO/B1bAKNHPTVpgQw fi6FGL6JEFNN3GwRf0dkAw29kNFPt5YAOCzGyWFMFfFtTlOBdt9ztwIO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9PLDV+8mE9f350EnZGpNzRdIUSMB8GA1UdIwQY MBaAFDZXS+auds1SOzN4fPvbaSZCY9B0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZTFkOTQtMTg1NC00NzNkLTg3NTMt MThkZWQ4MGI0YjVkLzEvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83ZTFkOTQtMTg1NC00NzNkLTg3NTMtMThkZWQ4MGI0YjVk LzEvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgFv93eL 0vIiqozsQWabaUqIpbChMVb8oPDNnAsaJmTKopiyZYEyOeGeeC6vrd/Pg28iziFl eAmuG4Y6KZxEGLTGh6ir+rraO19PtJPUFR2KAGH/V+pTPAmpP32u9y8v+ufzd3xq emEd/NJI1W78Jw+VfMtvsUwscF5HhHgQchQfX1z+27ydaE9W5PPTpsvbGyFe8Rbm QncnKJJGhh2Tudjf+NtuTraDTkQKfZksYNhorBQe8GBiY1xH7E7gdLZJUG5faDrG tY/G1zKBeK/NsWxNPhU/nljuYm7j4RxZhAFKbZiBEyIqAhJPBugqdI+fLIcND7qg zV4VrYCiEUPfiw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:04 2025 by rpki-client