This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json) Hash identifier: iqSSWA1wT7AwJtG3Nxk0hy4/YyLIPwOx6FHX0bM+73Q= Subject key identifier: D6:63:A2:C3:EF:D4:80:EE:C6:44:71:3E:29:3F:2D:3E:DE:4C:92:88 Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df Certificate serial: 019AF1641DD5FF9EB08A7F8BEAD7EFF4ABE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft Manifest number: 0F66 Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: xTBV+YoasRlAS2ct7uAk5LX2Rb6FY78/JaqiZgZvv4Q=) 2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1d:d5:ff:9e:b0:8a:7f:8b:ea:d7:ef:f4:ab:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=d663a2c3efd480eec644713e293f2d3ede4c9288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:ca:35:22:1f:d3:b0:26:4a:38:91:a6:1e: 23:b6:83:b1:b1:b0:2c:2f:17:af:86:94:56:a1:7e: 16:1b:21:28:04:b0:79:3f:53:8b:3a:b8:b7:97:90: 9a:8d:95:15:01:e9:59:ff:4e:61:cd:9e:dc:89:b7: db:8a:bd:0e:a6:84:0f:9a:02:42:18:1b:ba:3b:b6: 2b:e3:3c:b6:97:2f:42:7c:96:76:20:0e:cf:ae:cc: 29:21:c5:1d:f6:64:8e:65:ee:8e:6f:43:0e:25:3b: 23:02:d7:ed:10:f5:70:ea:14:bb:bf:13:5a:d1:02: 26:62:89:88:6f:31:ba:29:ed:ae:20:bb:ac:3b:32: 56:aa:ae:ee:60:ec:b9:6a:a1:0a:ef:68:94:86:92: 13:88:3b:1f:6d:53:2f:05:ea:5c:20:df:99:82:45: 92:43:a4:59:4c:91:35:63:7d:e0:cf:22:eb:63:64: 9f:71:3e:99:6b:65:4d:37:77:a1:75:56:7d:4d:c5: 55:22:de:68:3d:34:81:8b:bc:77:c8:4b:a2:67:eb: 06:c0:b8:38:c7:c1:e9:39:e6:f8:6b:ea:42:7a:4e: 55:d4:0b:ba:d9:b5:37:72:ae:ff:37:dd:62:02:e8: 14:0b:fc:4c:83:5a:0f:57:51:3e:da:8a:fc:55:ed: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:63:A2:C3:EF:D4:80:EE:C6:44:71:3E:29:3F:2D:3E:DE:4C:92:88 X509v3 Authority Key Identifier: keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:eb:d1:d4:2a:37:e1:e9:f9:fa:46:e9:0a:19:55:6d:49:98: b0:1e:4f:9a:d7:5c:cc:66:e2:a4:dc:ce:f2:e9:5b:52:3b:22: 68:9e:ce:e0:6d:ad:92:a2:8d:fd:dc:5e:8e:2d:c2:5f:4c:47: 2e:ba:19:83:7e:3c:2e:ea:9d:dd:22:08:ae:7b:62:96:bf:90: 67:ef:25:96:72:0b:c4:54:1c:e0:22:c3:15:7d:cf:f8:a4:e9: 31:53:3e:07:b2:6c:ee:aa:31:93:78:de:8c:55:0b:ae:0f:e8: da:c9:89:8b:18:d2:47:f4:50:dd:7f:c5:8f:0d:40:75:17:a3: 89:b8:04:a3:09:36:4d:3d:7f:8e:36:dc:1c:d5:69:b4:2a:9c: 77:dc:9e:47:98:68:f0:44:43:35:c2:ba:30:ea:dc:f4:1b:7e: 3d:fa:d1:10:3c:70:1c:9f:fa:b8:5c:e7:3b:3e:d0:b1:e6:ea: f6:2e:64:f5:9b:0a:ee:e0:92:9a:52:b1:b1:61:23:64:83:d9: 54:62:c1:a9:22:8d:5b:64:9d:eb:56:61:21:ef:89:63:29:d3: 61:b2:ca:4f:c5:97:ff:ea:f3:39:5c:4f:db:7f:88:0d:bd:24: 19:21:f3:63:a2:10:f9:31:93:62:dc:98:40:74:fe:fb:fc:24: 6b:d9:5a:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZB3V/56win+L6tfv9KvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDEyMzQzYTYyZjNmMDliNTVjZGJjMDFlNzVjMzgyMTJh MjM1ZGYwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD EyhkNjYzYTJjM2VmZDQ4MGVlYzY0NDcxM2UyOTNmMmQzZWRlNGM5Mjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLzKNSIf07AmSjiRph4jtoOxsbAs LxevhpRWoX4WGyEoBLB5P1OLOri3l5CajZUVAelZ/05hzZ7cibfbir0OpoQPmgJC GBu6O7Yr4zy2ly9CfJZ2IA7PrswpIcUd9mSOZe6Ob0MOJTsjAtftEPVw6hS7vxNa 0QImYomIbzG6Ke2uILusOzJWqq7uYOy5aqEK72iUhpITiDsfbVMvBepcIN+ZgkWS Q6RZTJE1Y33gzyLrY2SfcT6Za2VNN3ehdVZ9TcVVIt5oPTSBi7x3yEuiZ+sGwLg4 x8HpOeb4a+pCek5V1Au62bU3cq7/N91iAugUC/xMg1oPV1E+2or8Ve1qWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZjosPv1IDuxkRxPik/LT7eTJKIMB8GA1UdIwQY MBaAFDQBI0OmLz8JtVzbwB51w4ISojXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWIt MzJkMmJkZDRiYmIxLzEvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWItMzJkMmJkZDRiYmIx LzEvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuvR1Co3 4en5+kbpChlVbUmYsB5PmtdczGbipNzO8ulbUjsiaJ7O4G2tkqKN/dxeji3CX0xH LroZg348Luqd3SIIrntilr+QZ+8llnILxFQc4CLDFX3P+KTpMVM+B7Js7qoxk3je jFULrg/o2smJixjSR/RQ3X/Fjw1AdRejibgEowk2TT1/jjbcHNVptCqcd9yeR5ho 8ERDNcK6MOrc9Bt+PfrREDxwHJ/6uFznOz7Qsebq9i5k9ZsK7uCSmlKxsWEjZIPZ VGLBqSKNW2Sd61ZhIe+JYynTYbLKT8WX/+rzOVxP23+IDb0kGSHzY6IQ+TGTYtyY QHT++/wka9laPA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:07 2025 by rpki-client