This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft File: NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json) Hash identifier: EzYKYBVVBakx+bXXMEoVrdDhrSz9NRLEatQ+6xw+Mkc= Subject key identifier: 20:03:D6:B5:58:37:D7:13:34:DE:40:A6:DC:DA:E0:50:B3:CF:E4:39 Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Certificate serial: 019AF12CE08566392AFB11950459D50BB188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft Manifest number: 0FF3 Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=) 2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=) 3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=) 4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: UT+kj20/h5gzcd4QtcVZK/cZWXpy51Ko4m0EmALlxKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e0:85:66:39:2a:fb:11:95:04:59:d5:0b:b1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=2003d6b55837d71334de40a6dcdae050b3cfe439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:17:25:d3:b6:0e:cc:23:03:4d:ab:19:cb: 8d:ff:13:3f:25:4f:1d:1f:6f:0d:4d:9e:30:58:70: b3:58:df:a6:b6:41:6d:88:43:4d:20:5a:4c:d7:eb: e0:6e:b1:a5:e0:b0:17:4e:9d:7e:fd:63:cb:ab:8d: ce:a3:15:11:50:ba:b2:6f:5d:6c:d9:56:7f:af:f7: 26:d5:63:e6:8c:bf:90:29:86:9d:1c:83:75:f1:ea: dc:3d:fa:a7:b0:49:e1:6f:c7:0c:cd:ae:88:24:ad: ac:24:67:d9:4d:9c:1a:79:cc:64:d8:d3:99:21:f8: 01:68:4a:64:7a:07:f8:4e:bc:75:6a:c6:2d:77:5d: c4:4b:22:dc:d7:f4:8f:25:c7:3e:dd:da:63:8f:59: eb:e0:43:2c:dc:b0:fd:a2:01:81:ae:97:60:17:79: dd:13:ab:87:c0:fe:fd:b8:b2:4f:fa:79:45:30:2a: 2e:d8:de:7f:86:bb:7e:ab:04:fe:dc:71:ed:82:f9: c5:f9:1b:f6:bc:4d:56:d4:a8:44:51:0b:4e:69:f9: bb:a1:4d:c4:de:93:17:0b:30:28:35:66:f4:a0:11: c4:61:bd:e2:83:01:9c:9d:63:ce:95:18:cf:5a:47: cf:48:40:a7:51:c9:3f:b9:c6:c8:da:85:77:31:f6: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:03:D6:B5:58:37:D7:13:34:DE:40:A6:DC:DA:E0:50:B3:CF:E4:39 X509v3 Authority Key Identifier: keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:88:80:49:41:90:12:e8:09:c1:6c:2c:60:a1:d3:80:a9:e4: d4:a6:e2:f2:fc:93:7a:a9:52:da:cc:67:a9:39:95:99:73:f6: 49:c3:d8:87:fd:a8:ac:c3:b4:35:15:a3:29:ef:e0:c2:a5:ec: f5:81:7f:7b:66:50:e5:23:55:7b:d3:52:7a:94:40:50:a2:07: b6:05:20:30:f9:ee:ab:4b:7e:36:33:63:cc:ef:5c:8f:9f:54: 7d:90:ae:e8:5d:74:d8:69:32:2a:65:70:98:39:0a:2d:8e:7f: 01:98:a0:82:38:ab:a6:9b:c1:52:e4:48:da:8f:7a:5b:49:e3: cd:ec:17:6f:0c:b6:6f:e1:b5:67:bb:d1:ce:10:8c:c6:be:c3: f6:b7:32:02:4f:4a:9e:f9:34:85:21:60:7d:6c:86:fe:95:0b: 41:d8:71:9d:21:79:f9:62:49:47:00:8f:72:36:04:60:d2:ea: 43:26:6e:0a:4d:ef:b7:65:d8:e0:84:91:bf:f0:7c:79:ca:6a: f7:a6:52:f1:36:26:82:13:4a:ff:69:e9:1f:c9:01:70:86:46: 5d:e2:4c:d3:96:43:e0:ad:cf:da:4a:02:87:b3:0f:be:36:0f: ad:ae:60:ff:82:d3:a6:f1:54:44:42:b1:b6:df:d9:4c:f5:3e: 2a:51:db:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOCFZjkq+xGVBFnVC7GIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5 ZDNiYWUwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD EygyMDAzZDZiNTU4MzdkNzEzMzRkZTQwYTZkY2RhZTA1MGIzY2ZlNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IMXJdO2DswjA02rGcuN/xM/JU8d H28NTZ4wWHCzWN+mtkFtiENNIFpM1+vgbrGl4LAXTp1+/WPLq43OoxURULqyb11s 2VZ/r/cm1WPmjL+QKYadHIN18ercPfqnsEnhb8cMza6IJK2sJGfZTZwaecxk2NOZ IfgBaEpkegf4Trx1asYtd13ESyLc1/SPJcc+3dpjj1nr4EMs3LD9ogGBrpdgF3nd E6uHwP79uLJP+nlFMCou2N5/hrt+qwT+3HHtgvnF+Rv2vE1W1KhEUQtOafm7oU3E 3pMXCzAoNWb0oBHEYb3igwGcnWPOlRjPWkfPSECnUck/ucbI2oV3Mfaq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAD1rVYN9cTNN5Aptza4FCzz+Q5MB8GA1UdIwQY MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt ZmJkMzk5YTQ0NzVlLzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoiASUGQ EugJwWwsYKHTgKnk1Kbi8vyTeqlS2sxnqTmVmXP2ScPYh/2orMO0NRWjKe/gwqXs 9YF/e2ZQ5SNVe9NSepRAUKIHtgUgMPnuq0t+NjNjzO9cj59UfZCu6F102GkyKmVw mDkKLY5/AZiggjirppvBUuRI2o96W0njzewXbwy2b+G1Z7vRzhCMxr7D9rcyAk9K nvk0hSFgfWyG/pULQdhxnSF5+WJJRwCPcjYEYNLqQyZuCk3vt2XY4ISRv/B8ecpq 96ZS8TYmghNK/2npH8kBcIZGXeJM05ZD4K3P2koCh7MPvjYPra5g/4LTpvFUREKx tt/ZTPU+KlHbHw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:16 2025 by rpki-client