This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json) Hash identifier: T9OtsK88Zn9DAsfRC0j5Lllkr6U7Bp3ZoZGHTx92WTc= Subject key identifier: CE:61:37:EB:06:83:B8:55:55:38:B1:35:7C:ED:B0:F9:09:68:DD:47 Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Certificate serial: 019AF3898B0A1F7C83A082381433FD282C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 12:01:08 +0000 Manifest this update: Sat 06 Dec 2025 12:01:08 +0000 Manifest next update: Sun 07 Dec 2025 12:01:08 +0000 Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=) 2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: 7w8aI+RrLFyFIr8QsJ35Xv+2L1VdJE7ObyXDZlZOjbM=) 3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8b:0a:1f:7c:83:a0:82:38:14:33:fd:28:2c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Validity Not Before: Dec 6 12:01:08 2025 GMT Not After : Dec 7 12:01:08 2025 GMT Subject: CN=ce6137eb0683b8555538b1357cedb0f90968dd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:ab:41:65:29:58:5b:da:3c:7d:a5:cf:9b: b5:6b:ac:6f:4f:89:78:9f:5a:7f:e1:34:f3:70:ea: 09:dd:f3:c2:fd:24:7f:e3:c9:4c:1d:76:14:4a:c8: 52:05:71:9f:e3:34:cf:bc:e9:2d:06:2a:a7:dd:d4: d5:95:02:51:64:ba:bf:b9:d2:15:3b:d7:d2:46:ba: ce:13:06:89:dc:f6:38:82:8b:6d:90:da:35:49:ab: 4e:d8:46:3f:91:bd:be:f6:1d:38:f9:70:4f:19:72: c0:2b:30:a9:cb:3b:f6:c2:21:4d:33:ff:b2:66:6b: 6e:43:df:ad:f5:1a:d0:52:81:a7:2a:3d:a5:1d:11: 48:90:fb:4f:b4:04:07:7b:2a:45:ed:fc:49:bf:d0: b9:77:c9:52:e0:43:56:97:7f:5f:41:7a:1e:b4:ce: 33:b5:1d:2b:54:55:48:6e:3a:34:3e:75:8d:ca:73: 34:c5:dd:81:63:10:a8:eb:ff:93:ab:4a:45:b8:fd: c1:52:1c:3e:20:02:a6:85:76:2d:00:00:c2:f7:2a: bb:90:e0:ce:c9:47:aa:e1:88:31:4f:ff:b9:2d:b4: 78:a4:0b:f8:5d:03:2a:6a:52:28:74:36:6e:d4:4a: ae:47:07:23:12:42:e7:ca:c7:5a:d6:4c:77:93:7b: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:37:EB:06:83:B8:55:55:38:B1:35:7C:ED:B0:F9:09:68:DD:47 X509v3 Authority Key Identifier: keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:05:a0:28:18:ed:1b:d2:cc:88:86:aa:ab:a8:df:ae:a9:95: b5:79:3a:00:04:de:56:cd:a6:58:b5:88:39:27:f6:c2:17:8d: 9c:15:8d:06:b2:56:7f:f7:c4:f2:06:ae:08:af:22:56:76:26: a7:16:0a:d8:09:7e:fe:cc:1e:f7:c4:ca:93:22:8a:f2:f3:db: cb:16:30:c4:12:81:4f:4c:32:73:f1:fa:75:58:e0:ed:1b:80: 3e:9c:9f:10:f7:b1:13:cd:0c:38:1f:14:32:03:ed:b5:54:35: f0:a8:5d:65:d9:fc:8a:56:86:a9:2b:1c:be:ef:a2:27:86:fe: d7:b0:4e:47:18:be:25:cb:ea:b8:74:0d:17:5b:8a:20:b6:38: 09:e5:ea:1b:1d:11:51:a5:0b:e6:91:b3:b8:4c:c3:8d:b9:06: 33:c0:24:56:f0:db:78:8b:9f:a3:43:84:8f:5a:8a:a4:94:68: 73:61:0c:a7:60:0e:3c:ae:55:f4:7f:c8:a6:af:1d:d8:3f:0e: f1:67:00:e8:6b:2f:44:b3:2c:df:59:d3:33:f4:29:66:2d:2e: dc:4a:79:72:fe:f6:79:c3:2f:9e:e3:a7:1c:95:cb:0f:73:59: 77:71:76:16:48:18:5e:db:df:81:f4:3f:c9:1a:ae:be:4d:b9: c4:1d:76:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYsKH3yDoII4FDP9KCwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi MTM0M2YwHhcNMjUxMjA2MTIwMTA4WhcNMjUxMjA3MTIwMTA4WjAzMTEwLwYDVQQD EyhjZTYxMzdlYjA2ODNiODU1NTUzOGIxMzU3Y2VkYjBmOTA5NjhkZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWqrQWUpWFvaPH2lz5u1a6xvT4l4 n1p/4TTzcOoJ3fPC/SR/48lMHXYUSshSBXGf4zTPvOktBiqn3dTVlQJRZLq/udIV O9fSRrrOEwaJ3PY4gottkNo1SatO2EY/kb2+9h04+XBPGXLAKzCpyzv2wiFNM/+y ZmtuQ9+t9RrQUoGnKj2lHRFIkPtPtAQHeypF7fxJv9C5d8lS4ENWl39fQXoetM4z tR0rVFVIbjo0PnWNynM0xd2BYxCo6/+Tq0pFuP3BUhw+IAKmhXYtAADC9yq7kODO yUeq4YgxT/+5LbR4pAv4XQMqalIodDZu1EquRwcjEkLnysda1kx3k3t9qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5hN+sGg7hVVTixNXztsPkJaN1HMB8GA1UdIwQY MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt Y2I3Y2JjYTdjMWUwLzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAWgKBjt G9LMiIaqq6jfrqmVtXk6AATeVs2mWLWIOSf2wheNnBWNBrJWf/fE8gauCK8iVnYm pxYK2Al+/swe98TKkyKK8vPbyxYwxBKBT0wyc/H6dVjg7RuAPpyfEPexE80MOB8U MgPttVQ18KhdZdn8ilaGqSscvu+iJ4b+17BORxi+JcvquHQNF1uKILY4CeXqGx0R UaUL5pGzuEzDjbkGM8AkVvDbeIufo0OEj1qKpJRoc2EMp2AOPK5V9H/Ipq8d2D8O 8WcA6GsvRLMs31nTM/QpZi0u3Ep5cv72ecMvnuOnHJXLD3NZd3F2FkgYXtvfgfQ/ yRquvk25xB12eg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:08 2025 by rpki-client