This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json) Hash identifier: OUjctjvvshasZI+UUcOHrH3roulRGYhZlMT6S/vrS0c= Subject key identifier: 4D:5F:90:89:E8:F7:B0:A4:BB:74:17:CF:F0:74:B8:26:2B:AC:05:79 Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d Certificate serial: 019AF19ADD037BBCE2D0706FF18F59D1E53A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft Manifest number: 1035 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=) 2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: aXZTo7SrXAazqwUvSOCzIQFT6KLTYVXYGBYqCHmYWL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:dd:03:7b:bc:e2:d0:70:6f:f1:8f:59:d1:e5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=4d5f9089e8f7b0a4bb7417cff074b8262bac0579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:de:de:4e:f7:55:4a:c3:46:3f:58:53:ad:2f: 4f:65:48:54:f3:2b:b3:9b:55:fd:f2:23:ad:21:fc: 97:76:9e:3a:0d:35:5b:42:a5:c5:80:48:d8:1b:dc: 88:36:49:f4:45:4e:0a:ab:b3:38:f4:a4:b7:b0:dc: 31:93:99:4c:9e:26:a2:de:83:b8:8d:ce:9c:b2:87: d4:d2:9c:d6:d5:64:e3:4a:e5:17:61:0d:7b:a5:ab: 16:87:8e:b3:e4:de:55:2d:a3:9d:db:50:b2:65:bd: e7:f9:9b:0b:95:bc:86:55:31:3a:2e:c5:f7:a8:3d: cb:a3:10:6c:37:13:38:3f:13:d2:fb:5b:a5:1e:46: 1c:1c:df:17:72:b5:05:08:3f:78:f9:44:40:4f:c2: c8:85:f9:9c:16:b2:bc:2a:24:69:b9:9d:d2:67:4b: a4:d2:85:ee:fd:58:f7:62:2f:f0:22:7b:99:6c:9f: ad:9c:c2:dd:56:ea:63:60:0b:09:01:11:9c:d3:61: 91:d0:e3:4d:68:10:0d:03:c1:3a:b3:65:31:b3:ce: 85:6a:d5:ae:0d:db:0a:d3:4a:24:6b:73:80:c7:78: 41:2e:a1:c1:7c:ec:78:8a:6c:55:48:9c:36:8a:b3: 78:59:61:51:d2:18:2c:3a:23:9d:9b:a5:3f:46:c8: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5F:90:89:E8:F7:B0:A4:BB:74:17:CF:F0:74:B8:26:2B:AC:05:79 X509v3 Authority Key Identifier: keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:2b:cb:67:23:b2:ad:12:4c:63:78:89:4f:d4:27:18:d2: f3:82:69:de:6a:01:3b:5d:f9:5f:84:89:72:63:8a:ad:8e:96: 26:76:a7:c6:33:8b:df:d1:a7:81:dd:40:33:9c:2f:80:0c:c7: 6c:0e:59:13:69:9b:95:41:e8:9a:32:98:2e:95:be:1a:fd:7e: 77:33:d3:3c:9c:22:df:06:04:7c:46:ef:cf:59:fb:52:a0:87: 11:e2:ef:ff:77:3c:5c:32:20:04:0c:91:b0:e4:4f:ad:d0:07: 70:fc:40:6f:0e:14:68:9b:5f:17:c8:e5:84:81:da:9a:40:ce: 9d:a6:dc:83:dc:59:3d:b5:70:4c:e0:06:35:db:23:72:ee:95: 01:e8:be:e6:e2:76:c7:4a:91:33:7a:87:8d:45:a7:9c:0e:75: b2:61:66:73:64:a3:af:24:40:d1:ea:3d:78:be:f3:a6:04:35: 22:de:34:cc:e7:ae:cc:0a:94:9d:dc:1b:4f:c4:5d:59:11:5f: 4e:01:bd:54:fb:a9:42:2f:5d:d1:d9:c1:c3:59:d7:94:36:6b: a8:ab:51:4e:ad:00:ae:e8:7e:57:40:e7:ff:9b:a1:4a:ce:8b: 3f:fb:98:39:73:9d:92:df:b2:c8:c3:38:66:d0:ef:9b:0a:aa: 7a:59:0c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt0De7zi0HBv8Y9Z0eU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjRlODBiNGNhZDRlNTBiNzg4ZWRmMTY5NzY3MTJkZWVm ZjZjMGQwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD Eyg0ZDVmOTA4OWU4ZjdiMGE0YmI3NDE3Y2ZmMDc0YjgyNjJiYWMwNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N7eTvdVSsNGP1hTrS9PZUhU8yuz m1X98iOtIfyXdp46DTVbQqXFgEjYG9yINkn0RU4Kq7M49KS3sNwxk5lMniai3oO4 jc6csofU0pzW1WTjSuUXYQ17pasWh46z5N5VLaOd21CyZb3n+ZsLlbyGVTE6LsX3 qD3LoxBsNxM4PxPS+1ulHkYcHN8XcrUFCD94+URAT8LIhfmcFrK8KiRpuZ3SZ0uk 0oXu/Vj3Yi/wInuZbJ+tnMLdVupjYAsJARGc02GR0ONNaBANA8E6s2Uxs86FatWu DdsK00oka3OAx3hBLqHBfOx4imxVSJw2irN4WWFR0hgsOiOdm6U/Rsi+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1fkIno97Cku3QXz/B0uCYrrAV5MB8GA1UdIwQY MBaAFJ306AtMrU5Qt4jt8Wl2cS3u/2wNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMt YzlmYzVmNDUyOTk1LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMtYzlmYzVmNDUyOTk1 LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtQry2cj sq0STGN4iU/UJxjS84Jp3moBO135X4SJcmOKrY6WJnanxjOL39Gngd1AM5wvgAzH bA5ZE2mblUHomjKYLpW+Gv1+dzPTPJwi3wYEfEbvz1n7UqCHEeLv/3c8XDIgBAyR sORPrdAHcPxAbw4UaJtfF8jlhIHamkDOnabcg9xZPbVwTOAGNdsjcu6VAei+5uJ2 x0qRM3qHjUWnnA51smFmc2SjryRA0eo9eL7zpgQ1It40zOeuzAqUndwbT8RdWRFf TgG9VPupQi9d0dnBw1nXlDZrqKtRTq0Aruh+V0Dn/5uhSs6LP/uYOXOdkt+yyMM4 ZtDvmwqqelkM2A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:19 2025 by rpki-client