This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json) Hash identifier: 9c9Fswv/SxJVZFIUYLA86l14ZEqRWNzyvfhkYt3HpRI= Subject key identifier: C5:57:05:6A:FD:37:94:90:51:90:1E:77:F2:E0:66:9C:9E:75:EA:C6 Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d Certificate serial: 019AF209584F23319B94B60CB9C7128C133A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft Manifest number: 1023 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: 0b3PnhOlCQ9rxCt/5Hu8uzDRwcmxce+vdj6c0umo1HU=) 2: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (hash: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=) 3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:58:4f:23:31:9b:94:b6:0c:b9:c7:12:8c:13:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=c557056afd37949051901e77f2e0669c9e75eac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:1a:0b:3f:75:da:ad:b9:bd:63:f0:b3:a6: b4:22:d3:f9:f4:65:be:94:67:ed:94:b1:2a:05:e9: c2:19:95:6e:b7:98:e2:88:2f:ae:71:fd:63:86:fb: bc:35:8c:7e:32:68:62:ef:78:ed:0a:6b:0c:6d:ef: 43:8d:41:61:35:1e:5f:19:61:96:f0:96:79:f2:f5: 1d:10:5b:2f:7d:3a:3d:97:16:ef:57:41:f6:68:e6: d7:25:51:24:d9:a9:e0:d2:01:9b:05:b6:a9:3c:a3: 57:52:11:f7:80:08:da:d7:1a:75:a4:02:d5:68:7b: 44:a1:94:7a:49:e5:28:a3:95:85:51:a4:d7:68:bd: e1:4f:ff:fc:7e:f9:f9:8f:f0:2c:92:75:15:03:5d: 1c:be:90:37:1b:a6:da:46:f2:4b:d7:68:09:23:b5: 20:ab:6b:01:a4:ea:fe:c2:0c:6b:9c:51:7b:a9:b4: fe:bd:1c:20:d6:7d:04:a8:b1:e1:29:96:be:59:2f: 51:99:18:da:75:43:0f:0a:38:10:8f:64:ff:e3:02: a7:e5:a8:61:b0:06:94:27:e3:75:70:a9:8e:d1:97: 74:81:0a:05:c7:ee:57:80:53:4b:7b:4e:d4:14:44: 37:45:25:3a:12:77:f5:9c:a4:15:93:77:14:e0:ae: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:05:6A:FD:37:94:90:51:90:1E:77:F2:E0:66:9C:9E:75:EA:C6 X509v3 Authority Key Identifier: keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:47:a6:7a:69:04:dd:4e:da:80:25:50:94:cf:5a:93:e0:c9: 76:22:f7:74:b8:3d:31:8a:ac:08:f3:a4:d5:32:bd:79:30:ae: d3:66:7a:e1:df:06:b5:41:15:db:9d:c1:38:f4:04:4d:d0:b8: b9:b4:84:3e:0d:12:6a:71:9d:4f:af:21:fd:b2:8b:80:88:2b: 17:5b:de:64:26:7f:aa:ae:4b:97:ce:a9:bd:18:bc:95:ab:e0: 7a:2a:f3:d2:03:33:8b:fc:dc:3f:65:fd:10:d8:4f:f0:fa:e3: 39:88:88:40:38:a6:6a:d0:91:eb:fa:3b:24:46:d9:1b:b6:ca: 4b:7b:10:c3:7d:0b:f8:02:fd:5c:f1:d8:4a:38:9f:43:24:38: d4:c2:7e:69:cd:de:f1:73:b0:7d:37:a1:0f:00:cf:c1:86:7f: ea:83:2e:59:24:79:db:78:d6:80:0a:88:17:cc:86:4d:e1:28: 65:ce:7d:2a:e4:46:71:a7:6d:4e:19:44:fb:1c:8f:fc:71:f5: 73:bd:d7:b1:d7:9a:01:19:43:35:e8:2d:a9:51:c4:bd:7a:d0: 5b:39:28:1c:2e:58:23:77:dc:b2:8f:19:5f:05:ad:eb:84:45: 94:55:e5:7c:01:a3:fe:ef:2c:7c:00:f6:f1:7c:1b:a8:c6:f3: eb:32:76:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVhPIzGblLYMuccSjBM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWM3YjU2MDdjNTM2NjU3ZmQ1NzQ4ZjZmNjViMjRhYzEy ZWIxN2QwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EyhjNTU3MDU2YWZkMzc5NDkwNTE5MDFlNzdmMmUwNjY5YzllNzVlYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtekaCz912q25vWPws6a0ItP59GW+ lGftlLEqBenCGZVut5jiiC+ucf1jhvu8NYx+Mmhi73jtCmsMbe9DjUFhNR5fGWGW 8JZ58vUdEFsvfTo9lxbvV0H2aObXJVEk2ang0gGbBbapPKNXUhH3gAja1xp1pALV aHtEoZR6SeUoo5WFUaTXaL3hT//8fvn5j/AsknUVA10cvpA3G6baRvJL12gJI7Ug q2sBpOr+wgxrnFF7qbT+vRwg1n0EqLHhKZa+WS9RmRjadUMPCjgQj2T/4wKn5ahh sAaUJ+N1cKmO0Zd0gQoFx+5XgFNLe07UFEQ3RSU6Enf1nKQVk3cU4K7jMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVXBWr9N5SQUZAed/LgZpyederGMB8GA1UdIwQY MBaAFDUce1YHxTZlf9V0j29lskrBLrF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMt NjUxNzA3YzkxZmQzLzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMtNjUxNzA3YzkxZmQz LzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEememkE 3U7agCVQlM9ak+DJdiL3dLg9MYqsCPOk1TK9eTCu02Z64d8GtUEV253BOPQETdC4 ubSEPg0SanGdT68h/bKLgIgrF1veZCZ/qq5Ll86pvRi8lavgeirz0gMzi/zcP2X9 ENhP8PrjOYiIQDimatCR6/o7JEbZG7bKS3sQw30L+AL9XPHYSjifQyQ41MJ+ac3e 8XOwfTehDwDPwYZ/6oMuWSR523jWgAqIF8yGTeEoZc59KuRGcadtThlE+xyP/HH1 c73XsdeaARlDNegtqVHEvXrQWzkoHC5YI3fcso8ZXwWt64RFlFXlfAGj/u8sfAD2 8XwbqMbz6zJ2bw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:16 2025 by rpki-client