This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json) Hash identifier: JFXm0zuKU6A7Jg3VS6yqZk1Dn6TZu2oyqKp2YM3QXFw= Subject key identifier: 61:83:42:FF:93:C5:B4:66:20:D6:37:20:1B:10:E0:D7:2C:4B:00:F3 Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d Certificate serial: 019AF23FABF9A87295FC08E00D894900D86A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft Manifest number: 0FE0 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: mbZ+vzCHUJU+HMynEd/QvuZ9MPYXUucXKWTFdWPjBYo=) 2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ab:f9:a8:72:95:fc:08:e0:0d:89:49:00:d8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=618342ff93c5b46620d637201b10e0d72c4b00f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:c6:f4:94:15:65:ca:f9:a5:e8:54:4a:23: 44:4e:12:00:ab:67:e3:4a:ac:3e:17:ad:54:5c:7a: 6a:a3:ae:44:ae:e3:e6:af:a5:0d:4d:3c:29:8b:f9: 2e:54:d7:44:19:7a:48:0a:d9:9c:e1:16:68:04:f8: 8b:bc:30:89:45:e9:e3:98:47:9c:25:a7:ed:71:fe: 91:d7:de:e9:d8:ec:58:e6:2f:cd:a1:f3:73:c5:36: bc:0e:e8:e2:bb:32:64:99:1e:af:4e:bd:4b:47:64: 1c:84:84:c8:b8:70:0e:f9:13:4b:4f:cf:29:5b:95: 93:a3:26:ab:61:2a:07:4b:7c:4b:34:cf:f9:6d:db: ee:32:18:6a:fd:2c:fc:fc:91:c4:d5:ce:61:10:f2: 49:fa:d0:3b:00:e2:16:96:20:ad:2b:91:37:a2:cd: 8f:5a:d7:a2:b4:84:b4:14:86:c4:7a:1a:93:43:fb: d2:84:e3:0b:e7:19:aa:2f:b3:97:79:f0:ef:d6:57: 79:e9:04:c5:4c:2f:96:1f:fd:f4:de:e0:78:2c:f8: 4e:33:9a:36:c8:8c:e3:10:14:4c:fc:df:04:10:6a: 15:29:30:4c:41:19:a6:62:77:c9:a7:42:6d:4a:15: 04:c1:e2:fa:04:63:13:79:16:8b:21:0d:ca:c9:cb: a5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:83:42:FF:93:C5:B4:66:20:D6:37:20:1B:10:E0:D7:2C:4B:00:F3 X509v3 Authority Key Identifier: keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:10:ce:34:8b:a0:8c:49:dc:c4:2f:88:83:d4:f3:df:ca:28: c0:3a:b3:eb:fa:39:11:33:f3:ef:d0:b8:ed:1d:48:dd:c5:62: fb:2b:fa:bb:8b:fb:6d:5c:87:9f:e0:d0:21:8b:c3:8a:54:fc: 63:c4:ea:87:ed:f6:7c:b1:43:be:05:5d:2f:cd:03:81:3b:80: cd:1c:cc:06:b2:46:b4:b6:c4:84:ac:c4:fc:4b:79:c2:d5:83: 95:0e:9b:70:fc:be:64:ee:87:91:fd:b9:9b:0b:85:df:47:27: aa:66:da:b3:05:3d:79:03:1e:3a:36:1a:7a:91:f2:11:d5:ac: 37:ef:7e:c2:c6:ea:d5:9e:1a:d9:80:08:48:5c:1a:d4:86:2a: e5:b8:44:b7:bd:c1:a0:d4:74:bd:cf:d8:33:56:e5:77:1f:39: 6d:a4:02:c7:81:b1:1f:b5:67:0b:9d:0f:25:f3:c3:0d:44:37: 4d:12:d3:0b:08:92:01:08:d0:1e:59:6d:3a:21:75:b9:dc:06: 7a:e8:15:fc:98:97:6d:eb:c4:a2:43:a7:96:3d:23:53:7d:79: e2:a8:be:4c:37:2e:3a:ec:df:99:0b:2a:c8:19:9d:1e:64:0b: 4e:3b:74:81:aa:9d:86:38:af:11:27:09:d4:b8:4b:56:a1:04: 99:4a:3f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6v5qHKV/AjgDYlJANhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1M2YxN2Y0YmJiMTkzNDZkYzVhZmMwYzIzNTg3OWZiZTYz NTdjNmQwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD Eyg2MTgzNDJmZjkzYzViNDY2MjBkNjM3MjAxYjEwZTBkNzJjNGIwMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRLG9JQVZcr5pehUSiNEThIAq2fj Sqw+F61UXHpqo65EruPmr6UNTTwpi/kuVNdEGXpICtmc4RZoBPiLvDCJRenjmEec Jaftcf6R197p2OxY5i/NofNzxTa8DujiuzJkmR6vTr1LR2QchITIuHAO+RNLT88p W5WToyarYSoHS3xLNM/5bdvuMhhq/Sz8/JHE1c5hEPJJ+tA7AOIWliCtK5E3os2P WteitIS0FIbEehqTQ/vShOML5xmqL7OXefDv1ld56QTFTC+WH/303uB4LPhOM5o2 yIzjEBRM/N8EEGoVKTBMQRmmYnfJp0JtShUEweL6BGMTeRaLIQ3KyculCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGDQv+TxbRmINY3IBsQ4NcsSwDzMB8GA1UdIwQY MBaAFDU/F/S7sZNG3Fr8DCNYefvmNXxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjct OWZkODRjNzliMGVmLzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjctOWZkODRjNzliMGVm LzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBDONIug jEncxC+Ig9Tz38oowDqz6/o5ETPz79C47R1I3cVi+yv6u4v7bVyHn+DQIYvDilT8 Y8Tqh+32fLFDvgVdL80DgTuAzRzMBrJGtLbEhKzE/Et5wtWDlQ6bcPy+ZO6Hkf25 mwuF30cnqmbaswU9eQMeOjYaepHyEdWsN+9+wsbq1Z4a2YAISFwa1IYq5bhEt73B oNR0vc/YM1bldx85baQCx4GxH7VnC50PJfPDDUQ3TRLTCwiSAQjQHlltOiF1udwG eugV/JiXbevEokOnlj0jU3154qi+TDcuOuzfmQsqyBmdHmQLTjt0gaqdhjivEScJ 1LhLVqEEmUo/1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:30 2025 by rpki-client