This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json) Hash identifier: fX+KS0TN6HtIQU742gTPVgdXoP66pw3VzXQ9gbol+uM= Subject key identifier: 30:46:AD:8F:C5:12:59:46:65:86:5F:26:69:FC:97:1C:AE:03:3E:BD Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6 Certificate serial: 019AF2772781A4E2BC2A422E053BD3C590E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft Manifest number: 0BF0 Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: J+oa1D4fPW/sPOwZwUzQeTrQWHVY1r6FZdnXPMH2VZE=) 2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:27:81:a4:e2:bc:2a:42:2e:05:3b:d3:c5:90:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6 Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=3046ad8fc512594665865f2669fc971cae033ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:bc:3a:10:5b:78:37:5a:af:39:3c:ba:6d: a6:9e:0d:8a:83:8e:53:38:fc:97:15:30:e6:28:43: cf:31:2f:9c:73:7b:bb:e9:54:64:ac:79:17:a7:7f: ff:de:df:cd:ee:28:c7:a8:04:77:1f:5d:a8:59:b9: 97:cf:be:49:04:14:7d:e7:cf:af:d8:12:ff:20:24: 76:af:41:bc:66:5d:96:da:78:98:45:69:79:5d:27: ac:6a:00:8d:b7:13:4c:1a:34:6b:9c:fa:ed:d2:af: 43:60:a3:24:4f:e1:18:0e:a3:97:72:50:66:a0:29: 0a:76:74:ff:d9:f2:c0:55:02:a8:f0:63:ad:85:b4: d4:59:fd:50:40:0f:8c:9a:e5:b2:39:bf:e6:ee:72: ec:ad:03:04:9e:8e:a3:3a:38:53:6d:2a:a7:39:bb: be:f1:d4:8e:04:d5:84:2b:f1:6a:43:5c:5a:a7:80: ce:64:32:14:c3:fa:17:11:79:05:18:02:cd:50:cd: 97:79:c1:75:5c:3d:91:f4:1d:4e:d2:10:de:5e:09: 7b:42:4b:8b:89:80:af:26:61:9c:68:d7:60:26:e7: da:f6:66:fb:55:0d:6f:30:da:4b:d7:82:b9:d9:83: 51:90:a7:12:02:bf:0d:78:7f:97:64:66:18:ac:0b: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:46:AD:8F:C5:12:59:46:65:86:5F:26:69:FC:97:1C:AE:03:3E:BD X509v3 Authority Key Identifier: keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:97:2c:87:25:77:4b:3a:3b:f0:b0:ca:49:9f:04:e4:94:86: f9:c8:8e:2b:b4:d5:dc:35:23:09:5c:ff:7a:55:7e:af:e2:40: 97:a2:58:ef:8c:17:c7:88:66:de:87:55:05:ca:41:37:c4:b8: 0c:51:f8:a6:80:93:61:9d:ff:ba:2b:5b:c8:e0:81:3c:db:f0: 3b:b2:9d:c8:c4:29:31:d4:d9:f9:01:86:4f:70:70:87:bf:eb: eb:6e:51:91:fd:ff:7f:ff:63:b3:39:18:9f:29:6e:5c:57:ce: 21:98:13:12:66:74:81:83:79:a4:c8:61:84:c5:d0:a1:1a:a8: b1:3d:d9:a2:8b:0d:b4:30:ba:72:33:09:76:fa:f2:26:26:46: b6:60:a0:f7:77:ff:e8:52:67:ba:21:67:c5:7c:18:8a:6a:52: 20:fd:23:89:fb:c6:f1:3a:6f:3f:98:b4:08:56:b5:5c:e6:76: 77:c8:c8:32:26:d4:a8:e0:66:ce:66:b1:09:2d:73:af:d9:97: a9:08:7f:45:91:e7:e7:09:d2:16:62:2f:09:fe:97:bb:f6:e9: 3b:75:ff:81:3b:65:7a:dd:97:94:48:5a:20:88:1e:3b:81:41: 58:6f:e2:4e:e3:11:7b:25:af:d2:44:67:b9:7e:ca:31:1f:81: 83:bb:84:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyeBpOK8KkIuBTvTxZDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj NDE5ZDYwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD EygzMDQ2YWQ4ZmM1MTI1OTQ2NjU4NjVmMjY2OWZjOTcxY2FlMDMzZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw+8OhBbeDdarzk8um2mng2Kg45T OPyXFTDmKEPPMS+cc3u76VRkrHkXp3//3t/N7ijHqAR3H12oWbmXz75JBBR958+v 2BL/ICR2r0G8Zl2W2niYRWl5XSesagCNtxNMGjRrnPrt0q9DYKMkT+EYDqOXclBm oCkKdnT/2fLAVQKo8GOthbTUWf1QQA+MmuWyOb/m7nLsrQMEno6jOjhTbSqnObu+ 8dSOBNWEK/FqQ1xap4DOZDIUw/oXEXkFGALNUM2XecF1XD2R9B1O0hDeXgl7QkuL iYCvJmGcaNdgJufa9mb7VQ1vMNpL14K52YNRkKcSAr8NeH+XZGYYrAtO/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBGrY/FEllGZYZfJmn8lxyuAz69MB8GA1UdIwQY MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4 LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZcshyV3 Szo78LDKSZ8E5JSG+ciOK7TV3DUjCVz/elV+r+JAl6JY74wXx4hm3odVBcpBN8S4 DFH4poCTYZ3/uitbyOCBPNvwO7KdyMQpMdTZ+QGGT3Bwh7/r625Rkf3/f/9jszkY nyluXFfOIZgTEmZ0gYN5pMhhhMXQoRqosT3ZoosNtDC6cjMJdvryJiZGtmCg93f/ 6FJnuiFnxXwYimpSIP0jifvG8TpvP5i0CFa1XOZ2d8jIMibUqOBmzmaxCS1zr9mX qQh/RZHn5wnSFmIvCf6Xu/bpO3X/gTtlet2XlEhaIIgeO4FBWG/iTuMReyWv0kRn uX7KMR+Bg7uETQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:46 2025 by rpki-client