This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: bUvDERxwBieYf61dxxw4YFsqK5OaTrAGaOjTLU9v/Zs= Subject key identifier: 42:32:BC:4E:CA:55:5C:5F:94:32:89:85:71:97:30:E6:A7:A2:F4:F9 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019AF49BA4F8F91EE3B9CC14AE55C8F3CE77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 175A Signing time: Sat 06 Dec 2025 17:00:32 +0000 Manifest this update: Sat 06 Dec 2025 17:00:32 +0000 Manifest next update: Sun 07 Dec 2025 17:00:32 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: +QMKS/cFT01RKWE6hCjj3KBmkF3C143TaGGQkdE3qM0=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a4:f8:f9:1e:e3:b9:cc:14:ae:55:c8:f3:ce:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Dec 6 17:00:32 2025 GMT Not After : Dec 7 17:00:32 2025 GMT Subject: CN=4232bc4eca555c5f94328985719730e6a7a2f4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:b6:dc:76:82:83:7f:e6:92:98:8d:aa:d4: 8f:06:4c:30:ba:e3:4e:26:ca:eb:98:a3:df:77:ea: 9f:87:52:39:3b:71:59:41:29:97:6b:99:c4:a5:e1: ff:0c:ff:ee:6f:c2:d3:63:a9:56:01:19:a4:a2:66: c8:b6:f7:e9:f6:8a:8f:02:86:62:26:0c:47:a4:36: 82:9f:b6:59:3a:5f:92:06:62:e6:fc:6a:ca:40:26: 6c:59:d5:6d:99:a2:fe:8b:f4:0b:6b:be:cb:66:1b: b6:55:02:df:11:e8:9a:e9:7e:7c:a6:3b:cc:3c:19: de:eb:23:eb:1a:99:6c:4a:a4:58:ab:13:0e:98:67: 4a:07:88:5b:08:d2:fa:34:d4:d5:8c:15:2f:29:97: 2b:93:f4:6f:05:96:ff:7a:2b:cf:a7:1c:32:d7:d1: cf:49:8d:c0:8a:53:96:0b:b8:41:9d:f9:49:49:8d: ee:cc:fc:75:23:83:6b:6c:e3:c0:a8:e5:04:92:ac: c8:fb:60:d1:c2:73:99:c4:ab:d2:f9:ac:cb:32:db: 79:8c:6b:c2:d0:14:af:99:40:52:f2:35:18:8e:ca: 74:9e:d1:8a:9f:aa:5e:e9:cc:fd:3c:1c:67:ed:df: 64:98:ce:a7:e3:46:6c:3d:c5:88:1f:4e:a4:d6:ea: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:32:BC:4E:CA:55:5C:5F:94:32:89:85:71:97:30:E6:A7:A2:F4:F9 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:17:73:4f:0e:2d:92:ef:c0:d3:cf:dc:77:e3:42:87:8a:bb: 0c:dd:44:72:2a:79:ba:9c:05:35:3d:3c:d4:0a:8d:79:b6:91: 85:75:78:e0:ed:d4:41:f5:84:87:9a:48:8a:a4:f1:71:58:54: 82:4c:90:19:cf:b3:d4:cf:10:aa:8d:20:b5:be:ef:e8:ec:64: a7:c5:d9:df:cd:9a:22:1b:05:e1:47:af:82:3e:21:b4:f1:de: 67:6f:e7:e2:0a:a6:d0:b7:98:75:c9:aa:44:80:f3:61:64:df: f5:d6:aa:5d:80:ff:81:36:fa:60:28:a8:6e:81:02:c9:e9:bc: bd:06:fa:d5:ee:db:d0:4e:0c:75:23:48:6d:af:ee:4b:82:ed: 75:28:52:1b:53:50:5f:f2:08:17:2e:7b:1e:5b:c7:3e:b0:98: 6d:02:f7:11:82:d1:f5:82:5e:af:d5:ba:89:64:46:cc:71:51: b5:22:b4:0a:42:21:b1:04:91:ab:db:d5:05:13:0c:00:ca:3c: 1c:f4:15:2b:04:6f:d8:38:cd:f5:0f:21:1b:86:e3:8f:e0:39: d0:90:51:78:f3:77:01:4d:f9:7b:4e:98:bc:06:ba:a7:41:52: 9e:6b:f2:a6:06:90:57:4a:5e:d2:77:c8:46:f1:f4:48:a2:64: df:ab:7c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6T4+R7jucwUrlXI8853MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUxMjA2MTcwMDMyWhcNMjUxMjA3MTcwMDMyWjAzMTEwLwYDVQQD Eyg0MjMyYmM0ZWNhNTU1YzVmOTQzMjg5ODU3MTk3MzBlNmE3YTJmNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB623HaCg3/mkpiNqtSPBkwwuuNO JsrrmKPfd+qfh1I5O3FZQSmXa5nEpeH/DP/ub8LTY6lWARmkombItvfp9oqPAoZi JgxHpDaCn7ZZOl+SBmLm/GrKQCZsWdVtmaL+i/QLa77LZhu2VQLfEeia6X58pjvM PBne6yPrGplsSqRYqxMOmGdKB4hbCNL6NNTVjBUvKZcrk/RvBZb/eivPpxwy19HP SY3AilOWC7hBnflJSY3uzPx1I4NrbOPAqOUEkqzI+2DRwnOZxKvS+azLMtt5jGvC 0BSvmUBS8jUYjsp0ntGKn6pe6cz9PBxn7d9kmM6n40ZsPcWIH06k1up1QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIyvE7KVVxflDKJhXGXMOanovT5MB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERdzTw4t ku/A08/cd+NCh4q7DN1Ecip5upwFNT081AqNebaRhXV44O3UQfWEh5pIiqTxcVhU gkyQGc+z1M8Qqo0gtb7v6Oxkp8XZ382aIhsF4Uevgj4htPHeZ2/n4gqm0LeYdcmq RIDzYWTf9daqXYD/gTb6YCioboECyem8vQb61e7b0E4MdSNIba/uS4LtdShSG1NQ X/IIFy57HlvHPrCYbQL3EYLR9YJer9W6iWRGzHFRtSK0CkIhsQSRq9vVBRMMAMo8 HPQVKwRv2DjN9Q8hG4bjj+A50JBRePN3AU35e06YvAa6p0FSnmvypgaQV0pe0nfI RvH0SKJk36t8ng== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:50 2025 by rpki-client