This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json) Hash identifier: Pkkx9iOLgRwuvu/53K19V4N7mDw/XIsVKNFgk4KFoYk= Subject key identifier: C0:EE:D2:74:87:D6:F6:99:C4:51:99:FE:3F:52:5D:9F:0F:DD:4C:C2 Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Certificate serial: 019AF19B56A514C32910DCA67B2BA8B45BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: imJG9c/pTiuNpi2cJvEv/Rkx7jNcurETfprUAmBkOyE=) 2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=) 3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=) 4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=) 5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:56:a5:14:c3:29:10:dc:a6:7b:2b:a8:b4:5b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=c0eed27487d6f699c45199fe3f525d9f0fdd4cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:1c:9e:bc:34:c2:77:d8:08:42:97:cf:a0: 99:14:70:45:e6:40:69:3a:d7:04:d8:14:7c:62:2f: 36:aa:d9:4c:f1:81:0d:3d:37:d9:07:68:6e:2f:c7: 79:9c:ae:fc:11:34:a1:93:d5:60:05:97:bb:f5:41: 3d:24:0b:35:4d:2f:95:0a:75:41:c8:92:4c:33:c3: f7:23:3e:ac:9a:4e:45:29:32:b9:a6:2b:1a:0f:2e: ea:fc:98:d4:49:b3:35:c7:c0:20:6f:08:2e:ae:28: 15:ef:03:22:f1:ee:ad:3a:a9:d4:1b:d9:c5:56:a5: c5:98:be:7a:9b:27:5b:60:3c:3a:b9:85:0f:fb:7f: 09:3f:48:6f:dc:fe:ee:ba:14:d5:4c:33:94:e2:5e: 7f:a9:ee:18:14:d1:9a:16:06:f0:c4:a7:51:7c:2f: d4:f2:f0:40:ab:4b:2a:7d:f6:2b:45:c9:93:8b:21: 35:3d:02:96:a7:7a:d2:5e:26:66:5b:17:12:a4:b8: e8:42:66:2f:49:fc:f0:f4:d7:8f:21:2c:6d:8c:02: df:6c:1b:6c:b1:f2:d0:3f:09:d5:14:cc:05:d3:53: 74:c7:59:4b:75:44:22:e5:8c:0e:be:c9:30:6d:b0: f1:21:12:af:48:cc:90:dd:26:98:61:a6:0f:ce:a7: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:D2:74:87:D6:F6:99:C4:51:99:FE:3F:52:5D:9F:0F:DD:4C:C2 X509v3 Authority Key Identifier: keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7f:80:36:05:7c:d2:85:58:54:58:76:07:06:52:5a:d6:82: 59:c9:39:d5:c8:0b:05:ee:05:a3:9d:1f:b6:d8:73:8e:94:e5: 1b:c2:0c:f6:92:2e:54:9d:25:44:24:72:eb:4c:50:05:f1:38: 2f:4e:f5:c2:8d:76:82:d3:e6:24:9b:65:37:14:d3:9d:30:e0: db:3c:18:9d:4b:50:65:b2:3e:20:d4:e1:d0:b8:08:a4:55:fa: 40:10:cc:1a:71:ea:84:17:1f:a8:97:3a:97:ee:3d:92:52:25: d2:a5:f8:5d:87:79:f2:60:b7:a1:86:2a:fc:d5:88:0c:67:25: 8d:51:8e:54:4d:91:b0:83:23:9e:fc:7b:7b:a8:08:ab:ac:3f: 12:ca:5f:e2:21:55:fb:c3:e6:a6:46:30:01:51:97:9f:cc:bf: 87:91:e8:c6:29:ae:c0:ed:bc:0a:10:5f:81:f3:6e:71:97:e6: 11:83:c3:a8:63:b3:ca:48:87:8c:52:35:75:9e:61:48:1d:6a: b8:18:ff:cb:e6:56:fb:00:49:89:46:e1:ce:a4:98:ad:42:cd: e0:6b:44:f2:7e:61:30:14:cb:9c:15:fc:7a:31:eb:83:de:2d: 91:cc:24:32:53:61:d6:c0:5f:da:0c:34:8d:78:f1:e5:f0:f6: 37:94:dd:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1alFMMpENymeyuotFvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWFlNjQ2ZWEzNGFkMjY4OGFjYTJmZGQxYTZmMzM0MDM1 NjQ5NWUwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD EyhjMGVlZDI3NDg3ZDZmNjk5YzQ1MTk5ZmUzZjUyNWQ5ZjBmZGQ0Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Icnrw0wnfYCEKXz6CZFHBF5kBp OtcE2BR8Yi82qtlM8YENPTfZB2huL8d5nK78ETShk9VgBZe79UE9JAs1TS+VCnVB yJJMM8P3Iz6smk5FKTK5pisaDy7q/JjUSbM1x8AgbwgurigV7wMi8e6tOqnUG9nF VqXFmL56mydbYDw6uYUP+38JP0hv3P7uuhTVTDOU4l5/qe4YFNGaFgbwxKdRfC/U 8vBAq0sqffYrRcmTiyE1PQKWp3rSXiZmWxcSpLjoQmYvSfzw9NePISxtjALfbBts sfLQPwnVFMwF01N0x1lLdUQi5YwOvskwbbDxIRKvSMyQ3SaYYaYPzqfQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDu0nSH1vaZxFGZ/j9SXZ8P3UzCMB8GA1UdIwQY MBaAFDRa5kbqNK0miKyi/dGm8zQDVkleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMt ZjQ5MTIwYmVkNTFjLzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMtZjQ5MTIwYmVkNTFj LzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3+ANgV8 0oVYVFh2BwZSWtaCWck51cgLBe4Fo50ftthzjpTlG8IM9pIuVJ0lRCRy60xQBfE4 L071wo12gtPmJJtlNxTTnTDg2zwYnUtQZbI+INTh0LgIpFX6QBDMGnHqhBcfqJc6 l+49klIl0qX4XYd58mC3oYYq/NWIDGcljVGOVE2RsIMjnvx7e6gIq6w/Espf4iFV +8PmpkYwAVGXn8y/h5HoximuwO28ChBfgfNucZfmEYPDqGOzykiHjFI1dZ5hSB1q uBj/y+ZW+wBJiUbhzqSYrULN4GtE8n5hMBTLnBX8ejHrg94tkcwkMlNh1sBf2gw0 jXjx5fD2N5Tdlw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:48:55 2025 by rpki-client