This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json) Hash identifier: EvbjswKCHD0AXE6btBV9yZ50Fc8NxQuWEihGP6coe6U= Subject key identifier: 40:74:9E:9A:CF:A3:F5:E7:3C:08:8A:5A:05:A0:54:58:6E:4F:71:F3 Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Certificate serial: 019AF208F769BE613F74CF6D61EDE40C9772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft Manifest number: 02BB Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: hluRdLa7fTTkwOhykSKbZcqzVkmZDC0WpV0Hk6LQPHc=) 2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=) 3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f7:69:be:61:3f:74:cf:6d:61:ed:e4:0c:97:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=40749e9acfa3f5e73c088a5a05a054586e4f71f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:97:bf:73:41:fe:2d:57:48:96:4f:55:44: 53:fa:6a:5b:92:3c:4f:99:ab:72:a5:ac:5a:ee:22: e2:fa:a8:b9:9e:8f:0c:cc:59:8b:e9:04:ed:d2:f8: 01:23:20:97:a5:ed:a4:f4:68:af:54:79:ef:a9:63: f0:29:21:76:17:88:88:bd:7c:c5:ac:9c:ff:27:45: 29:92:6c:a6:68:2f:05:9b:2c:5a:19:ef:0c:c3:1e: 80:53:14:3d:fe:ff:ed:68:d0:b4:c9:2b:c1:2f:80: 99:a8:83:54:0a:5f:46:2d:01:f9:7a:b0:5d:fa:f2: 3d:f6:7e:c1:51:9d:cc:1b:37:cd:33:7b:b8:34:25: 01:b7:30:ef:98:1e:c0:2e:ba:b8:29:0d:c9:15:6c: d8:aa:b7:16:38:47:e1:ee:1f:94:fe:60:1d:af:29: f0:93:c2:2d:64:74:2f:50:29:23:2f:13:c2:d9:7f: 6a:53:f3:8c:d9:b5:47:3a:35:ab:e2:d5:0e:32:4b: 5f:2d:cf:4d:5a:47:75:f2:f3:40:b8:38:4c:29:6f: 52:79:b2:16:1d:7c:1c:53:b6:69:24:4b:ab:04:38: 05:97:dd:77:28:3b:3c:6f:76:06:9a:8d:98:58:ae: e3:d7:f0:bd:0f:6d:32:f0:63:77:85:58:b0:a2:a3: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:74:9E:9A:CF:A3:F5:E7:3C:08:8A:5A:05:A0:54:58:6E:4F:71:F3 X509v3 Authority Key Identifier: keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:68:c0:f7:b4:4b:c7:bf:16:3f:6a:e8:d4:7c:43:d2:8f:3e: c1:84:fa:d4:55:9b:f3:29:61:e7:3e:d8:a4:f7:d4:61:e5:5d: 13:cb:7b:72:c9:6c:bd:53:2b:75:49:5d:23:ae:eb:4f:0a:c9: b4:71:bc:ba:49:3c:59:42:86:3a:65:c6:bf:a1:aa:86:2d:65: df:72:f3:63:4a:68:c7:41:a9:c9:b7:4b:6e:15:2d:4a:96:91: 10:70:07:3b:37:10:6f:43:e7:07:4c:34:04:7f:83:6a:3a:c4: 53:f2:2f:55:bc:56:94:6c:1c:d7:6e:14:5e:75:1c:8b:1f:ba: 2a:f7:08:46:08:00:41:f6:36:40:52:c1:cd:26:f5:02:88:a3: 74:2b:4f:c6:f7:e0:94:05:ed:ed:27:b6:c9:16:b6:71:60:33: 6c:d5:64:f2:c9:c3:e5:5b:9e:ea:98:4b:69:a1:88:e2:95:49: da:21:19:ec:cb:41:c5:4f:f2:d1:1e:31:b9:c6:23:ed:39:df: c6:cb:3a:3c:50:67:1e:7c:3d:64:78:2b:50:2f:c2:fd:d7:60: 81:cb:66:e6:39:f8:3a:22:9b:08:4a:26:d8:22:22:8f:5a:9a: 00:b5:56:e4:c5:92:c0:2b:80:e1:cf:3c:21:75:90:ca:1b:eb: e6:05:e0:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPdpvmE/dM9tYe3kDJdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw ZjNlZDYwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD Eyg0MDc0OWU5YWNmYTNmNWU3M2MwODhhNWEwNWEwNTQ1ODZlNGY3MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjiXv3NB/i1XSJZPVURT+mpbkjxP matypaxa7iLi+qi5no8MzFmL6QTt0vgBIyCXpe2k9GivVHnvqWPwKSF2F4iIvXzF rJz/J0UpkmymaC8FmyxaGe8Mwx6AUxQ9/v/taNC0ySvBL4CZqINUCl9GLQH5erBd +vI99n7BUZ3MGzfNM3u4NCUBtzDvmB7ALrq4KQ3JFWzYqrcWOEfh7h+U/mAdrynw k8ItZHQvUCkjLxPC2X9qU/OM2bVHOjWr4tUOMktfLc9NWkd18vNAuDhMKW9SebIW HXwcU7ZpJEurBDgFl913KDs8b3YGmo2YWK7j1/C9D20y8GN3hViwoqPURQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB0nprPo/XnPAiKWgWgVFhuT3HzMB8GA1UdIwQY MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2jA97RL x78WP2ro1HxD0o8+wYT61FWb8ylh5z7YpPfUYeVdE8t7cslsvVMrdUldI67rTwrJ tHG8ukk8WUKGOmXGv6Gqhi1l33LzY0pox0GpybdLbhUtSpaREHAHOzcQb0PnB0w0 BH+DajrEU/IvVbxWlGwc124UXnUcix+6KvcIRggAQfY2QFLBzSb1AoijdCtPxvfg lAXt7Se2yRa2cWAzbNVk8snD5Vue6phLaaGI4pVJ2iEZ7MtBxU/y0R4xucYj7Tnf xss6PFBnHnw9ZHgrUC/C/ddggctm5jn4OiKbCEom2CIij1qaALVW5MWSwCuA4c88 IXWQyhvr5gXg4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:17 2025 by rpki-client