This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json) Hash identifier: ngE61kM2fsXVMgXC9sWEcHDsXcDBy+qtaRATfJSEdL0= Subject key identifier: 85:A7:D5:BA:BC:3C:69:66:1D:F8:3C:22:FC:C0:9C:32:99:1C:46:E7 Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Certificate serial: 019AF577C6ECDF5B16BAD77771814C1D27D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft Manifest number: 1207 Signing time: Sat 06 Dec 2025 21:00:58 +0000 Manifest this update: Sat 06 Dec 2025 21:00:58 +0000 Manifest next update: Sun 07 Dec 2025 21:00:58 +0000 Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=) 2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=) 3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: rA5IF1R9V6Pmhl467OyuJfYG2fCuc29BzksFWZ+aQ+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:c6:ec:df:5b:16:ba:d7:77:71:81:4c:1d:27:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Validity Not Before: Dec 6 21:00:58 2025 GMT Not After : Dec 7 21:00:58 2025 GMT Subject: CN=85a7d5babc3c69661df83c22fcc09c32991c46e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:5d:75:57:39:2d:1a:c5:66:05:4a:29:cb: 0b:2e:52:10:37:0b:b5:f3:10:72:95:bb:20:d8:90: 16:a1:93:66:45:d4:82:ae:35:79:4d:3a:fd:0a:28: 75:b8:83:75:cf:75:d5:e1:e6:6a:ca:d5:d7:af:0d: 4a:2b:25:0b:dd:a0:77:d1:e5:55:23:08:ce:b6:83: 07:53:5b:2e:be:e3:50:ac:ab:19:5f:98:74:c8:3a: e6:c6:21:93:41:a4:fa:c7:85:cf:50:28:06:a9:06: 77:41:f6:2a:c1:52:31:e7:b5:8a:25:09:b8:b4:52: 23:29:1d:60:2b:2b:a4:31:e4:fa:e3:9d:a5:a4:e3: 41:15:1c:df:a8:5c:7b:12:9a:02:ec:63:29:8f:cf: c2:51:e3:fc:88:9b:5d:62:4c:24:89:43:ce:8c:34: a9:5c:5e:d2:34:ed:1c:b9:aa:78:0e:a4:74:5c:af: c8:d8:39:77:01:d1:56:f4:3f:f7:13:1a:0d:e9:70: d3:42:f3:4d:14:e6:92:2c:e5:52:5b:e7:17:0d:31: 30:34:66:11:23:6d:50:a6:2d:09:6d:fc:79:30:5d: 20:fd:68:3a:d7:d0:7b:44:e8:31:ce:02:fe:c3:cc: 35:da:f1:26:1a:6a:83:cf:46:7d:68:ed:54:8b:ed: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A7:D5:BA:BC:3C:69:66:1D:F8:3C:22:FC:C0:9C:32:99:1C:46:E7 X509v3 Authority Key Identifier: keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7a:6e:37:2e:d3:ef:18:82:b4:9c:e6:4a:9d:c2:9a:72:cf: ca:b3:36:a0:6b:a2:aa:ef:56:00:d5:15:18:93:0b:9c:cc:e8: 9c:c9:ef:8a:65:1c:e7:b0:c2:c0:36:9c:2f:52:fc:09:ad:87: 37:99:98:1a:a0:d7:8a:36:5e:42:a9:cf:d1:e1:ad:24:12:88: a7:fe:b9:cd:19:31:ac:53:8c:0c:27:12:1b:17:9f:28:58:02: 0f:64:09:69:f0:3d:d4:df:ae:4b:6d:28:59:53:c7:e1:17:26: 82:69:ad:9d:3c:8a:18:13:94:41:08:2b:99:fd:8c:8e:a3:d6: 31:3c:d4:bf:2b:ce:60:7e:2c:1d:88:46:a3:01:d7:5f:ab:23: 03:2b:71:3d:fe:54:14:93:59:68:31:00:a4:f3:38:e4:a1:2d: 09:e5:45:09:e5:f9:cf:0a:3b:7c:e7:e3:6b:b4:9d:8a:9a:78: 63:14:0a:d0:b3:8c:f1:a4:33:c1:3f:ad:56:b8:97:c5:6f:a6: 0c:f1:42:e6:e9:76:85:94:ab:4f:58:c9:66:9a:2c:49:b4:a7: 5e:1c:a4:16:d1:cd:87:c0:c7:5a:95:a8:10:c3:e5:9a:c6:b9: 5f:d0:c3:10:26:4e:ff:35:8b:5a:9e:0f:20:e6:08:07:76:f0: b1:1b:80:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8bs31sWutd3cYFMHSfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy YWQ0ODEwHhcNMjUxMjA2MjEwMDU4WhcNMjUxMjA3MjEwMDU4WjAzMTEwLwYDVQQD Eyg4NWE3ZDViYWJjM2M2OTY2MWRmODNjMjJmY2MwOWMzMjk5MWM0NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn1ddVc5LRrFZgVKKcsLLlIQNwu1 8xBylbsg2JAWoZNmRdSCrjV5TTr9Cih1uIN1z3XV4eZqytXXrw1KKyUL3aB30eVV IwjOtoMHU1suvuNQrKsZX5h0yDrmxiGTQaT6x4XPUCgGqQZ3QfYqwVIx57WKJQm4 tFIjKR1gKyukMeT6452lpONBFRzfqFx7EpoC7GMpj8/CUeP8iJtdYkwkiUPOjDSp XF7SNO0cuap4DqR0XK/I2Dl3AdFW9D/3ExoN6XDTQvNNFOaSLOVSW+cXDTEwNGYR I21Qpi0Jbfx5MF0g/Wg619B7ROgxzgL+w8w12vEmGmqDz0Z9aO1Ui+2V7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWn1bq8PGlmHfg8IvzAnDKZHEbnMB8GA1UdIwQY MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt NDA4NThiOTVmY2Y1LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1 LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHpuNy7T 7xiCtJzmSp3CmnLPyrM2oGuiqu9WANUVGJMLnMzonMnvimUc57DCwDacL1L8Ca2H N5mYGqDXijZeQqnP0eGtJBKIp/65zRkxrFOMDCcSGxefKFgCD2QJafA91N+uS20o WVPH4RcmgmmtnTyKGBOUQQgrmf2MjqPWMTzUvyvOYH4sHYhGowHXX6sjAytxPf5U FJNZaDEApPM45KEtCeVFCeX5zwo7fOfja7Sdipp4YxQK0LOM8aQzwT+tVriXxW+m DPFC5ul2hZSrT1jJZposSbSnXhykFtHNh8DHWpWoEMPlmsa5X9DDECZO/zWLWp4P IOYIB3bwsRuAlg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:14:58 2025 by rpki-client