This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json) Hash identifier: PuuhInqMn6RSgKek1fROCksVzjC6TwsQegvmJELGe4M= Subject key identifier: 70:8B:F8:FB:1A:8B:87:8E:4B:E8:6A:4C:22:D9:2F:FE:7C:42:54:AD Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Certificate serial: 019AF277202D240E2ED048F2D475D6E5DD20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=) 2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: AO9cyVaUERyMlzBSHO5nDV+idCmZ+dsJInXyrMg2lrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:20:2d:24:0e:2e:d0:48:f2:d4:75:d6:e5:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=708bf8fb1a8b878e4be86a4c22d92ffe7c4254ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:38:23:ac:34:7c:d8:6d:5a:f6:97:3e:2a: 53:7f:2d:c9:d2:27:4e:d5:c1:fc:20:96:a1:db:30: 53:fd:29:0c:e7:c0:c3:e9:b9:eb:4a:74:00:41:22: a7:9a:97:30:42:6e:ae:64:69:e4:e7:9d:4f:ba:97: 4b:23:3e:e1:88:eb:69:ec:b1:73:5a:c5:1a:1f:e4: 61:29:07:8f:f4:2d:ed:f0:90:76:a1:d5:f8:18:d4: a7:81:f5:97:04:ec:b4:16:b6:1e:03:77:0a:06:7f: d2:8d:33:80:0d:b6:32:2c:57:c9:18:0e:88:07:4e: 4b:ab:5c:e3:0e:f5:df:ed:75:d2:4b:42:51:e0:cc: 3b:24:6f:fc:e2:c4:b6:15:35:10:8c:2c:b3:e2:34: 50:72:77:85:a9:20:f2:cc:5c:b0:0d:0f:82:18:5c: ef:63:37:02:53:86:27:9e:14:e8:f5:a8:69:ae:dc: fb:54:72:be:42:6a:3e:a9:59:84:61:8d:54:41:77: 84:7d:e0:9e:0d:ed:77:73:33:5d:8e:83:0c:e1:30: a0:77:64:04:5f:b6:40:9e:43:56:5e:14:41:fb:51: 2a:65:a3:ab:5f:d2:d6:92:a0:7b:e1:7d:ac:ae:11: 46:61:8c:32:11:5f:a6:96:c3:73:9a:8e:42:b4:8f: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:F8:FB:1A:8B:87:8E:4B:E8:6A:4C:22:D9:2F:FE:7C:42:54:AD X509v3 Authority Key Identifier: keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:90:b5:a5:6b:cc:06:0d:71:15:97:35:60:53:3f:13:f8:ba: 99:01:5e:b1:d0:48:cc:93:be:e3:25:ee:12:57:17:2b:b9:4d: 0e:5c:f9:d8:2a:e1:f4:30:f4:5d:37:97:4e:9d:59:3f:e0:bc: e6:8b:99:d2:5e:9a:df:b8:d1:66:57:79:45:80:5f:ea:bf:fd: c7:e7:68:ba:7a:c8:a6:66:a5:f9:7a:25:ad:62:6d:33:dd:73: ff:ba:b6:a2:c3:80:62:c0:77:58:37:c7:83:c9:d0:3c:a1:0c: 9f:e1:45:a6:cd:ab:c1:26:cf:ea:a5:bf:b8:66:f5:d1:ab:11: 0c:bf:3b:78:f8:1d:c9:42:76:75:47:c1:6e:5f:b1:ab:cc:71: 2c:78:90:1c:c4:49:8d:6b:df:73:ea:3d:bb:cb:ef:c6:6a:a8: 01:59:92:51:ef:87:0c:70:08:8c:03:91:a7:55:d7:b6:31:b8: a5:99:10:42:10:ed:e4:e5:f0:92:a0:4b:f1:e9:69:d0:30:1f: 98:78:4c:ad:fd:54:f6:d8:61:43:30:1c:d6:80:b9:ab:ab:b4: a5:6b:c5:34:5d:57:63:e8:2f:de:9a:4d:8b:a9:cf:b2:c9:36: 2c:ff:85:bc:97:74:ce:a3:95:1c:45:44:11:fa:b0:1e:5d:96: 92:b7:58:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyAtJA4u0Ejy1HXW5d0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk MDUyOTEwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD Eyg3MDhiZjhmYjFhOGI4NzhlNGJlODZhNGMyMmQ5MmZmZTdjNDI1NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSc4I6w0fNhtWvaXPipTfy3J0idO 1cH8IJah2zBT/SkM58DD6bnrSnQAQSKnmpcwQm6uZGnk551PupdLIz7hiOtp7LFz WsUaH+RhKQeP9C3t8JB2odX4GNSngfWXBOy0FrYeA3cKBn/SjTOADbYyLFfJGA6I B05Lq1zjDvXf7XXSS0JR4Mw7JG/84sS2FTUQjCyz4jRQcneFqSDyzFywDQ+CGFzv YzcCU4YnnhTo9ahprtz7VHK+Qmo+qVmEYY1UQXeEfeCeDe13czNdjoMM4TCgd2QE X7ZAnkNWXhRB+1EqZaOrX9LWkqB74X2srhFGYYwyEV+mlsNzmo5CtI9QwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCL+Psai4eOS+hqTCLZL/58QlStMB8GA1UdIwQY MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt MTBjYmM1OTdhNzFhLzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZC1pWvM Bg1xFZc1YFM/E/i6mQFesdBIzJO+4yXuElcXK7lNDlz52Crh9DD0XTeXTp1ZP+C8 5ouZ0l6a37jRZld5RYBf6r/9x+dounrIpmal+XolrWJtM91z/7q2osOAYsB3WDfH g8nQPKEMn+FFps2rwSbP6qW/uGb10asRDL87ePgdyUJ2dUfBbl+xq8xxLHiQHMRJ jWvfc+o9u8vvxmqoAVmSUe+HDHAIjAORp1XXtjG4pZkQQhDt5OXwkqBL8elp0DAf mHhMrf1U9thhQzAc1oC5q6u0pWvFNF1XY+gv3ppNi6nPssk2LP+FvJd0zqOVHEVE EfqwHl2WkrdYkg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:06 2025 by rpki-client