This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json) Hash identifier: 0UlbfS3AsyTLSmK9RkwOpKx+BzkkWiwkqvi9vWTfsPY= Subject key identifier: 21:86:6F:75:01:77:F5:92:55:82:31:FB:40:EB:3E:30:68:E4:52:47 Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d Certificate serial: 019B2BF910E54BC34EC165807DDDE02858AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft Manifest number: 1041 Signing time: Wed 17 Dec 2025 11:01:41 +0000 Manifest this update: Wed 17 Dec 2025 11:01:41 +0000 Manifest next update: Thu 18 Dec 2025 11:01:41 +0000 Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: 5Up+ao2JzSghE+JdpIO80RVnZNOHv7vZGE+PDTzHO5o=) 2: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (hash: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=) 3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:10:e5:4b:c3:4e:c1:65:80:7d:dd:e0:28:58:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d Validity Not Before: Dec 17 11:01:41 2025 GMT Not After : Dec 18 11:01:41 2025 GMT Subject: CN=21866f750177f592558231fb40eb3e3068e45247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:52:8b:a5:8c:b3:27:0d:d2:68:2b:57:37: 44:a4:44:22:73:79:fd:5b:13:93:28:13:20:7f:2e: ea:52:66:e1:06:78:7e:15:1c:12:54:87:d9:66:78: 50:60:47:6f:04:fb:77:d9:7a:f8:c0:4f:70:0e:9f: 4f:b2:2b:d7:53:1a:d3:0e:04:45:b7:ea:33:4f:c8: 8f:91:26:7a:4f:f3:c0:4d:91:40:4a:e2:b6:a7:f9: 0c:8f:23:6e:2c:97:53:b4:d6:87:a9:24:ba:a1:e7: a8:11:09:45:40:22:4d:c2:84:4c:7c:0a:71:cc:d6: 0d:4f:51:b8:56:f7:36:36:fc:05:e0:a5:fa:44:9a: 43:f2:19:30:d6:89:bb:d5:2f:5b:9b:20:b5:84:2e: 67:67:9b:af:77:3d:40:8c:57:66:1d:ed:91:c0:1a: e6:6c:e1:06:0e:34:26:95:a8:4c:be:33:d1:23:96: 3e:36:eb:ba:41:0f:d6:b0:b9:1c:8a:30:5e:89:ed: de:f7:cc:31:fb:6e:42:ca:9a:7a:63:90:fd:5d:3c: 09:ce:76:ca:cc:dc:97:fd:e9:99:eb:78:e6:3e:39: 1a:1d:2c:ef:57:b8:51:71:7b:fa:ff:29:b7:b6:6c: 85:38:4c:61:d9:da:79:5a:52:08:3d:a8:01:a0:55: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:86:6F:75:01:77:F5:92:55:82:31:FB:40:EB:3E:30:68:E4:52:47 X509v3 Authority Key Identifier: keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:11:2b:c0:31:73:a5:0b:b4:5f:8c:48:27:62:f2:70:8f:6f: 5f:12:62:b2:1b:5a:82:bd:25:4a:e1:2e:bd:3a:b4:93:8a:d8: 12:3d:c8:be:43:18:9e:27:13:60:ec:6b:0d:78:61:ed:99:e8: 29:01:9a:72:2e:3c:19:81:f6:94:09:ff:99:05:7c:79:47:86: a7:90:f6:d8:57:05:8e:38:26:bb:21:9f:b9:bf:1b:1c:69:56: e3:22:27:fb:f1:d5:bc:b4:5e:93:2f:80:f3:66:d5:a3:9f:10: 7c:2c:14:2f:67:d6:2c:8d:7d:4d:3d:00:ff:71:3d:99:f4:f8: f4:32:4f:12:fd:ff:a8:dd:f3:c9:ff:83:9d:60:e6:42:83:e6: 66:63:e8:28:e8:bb:12:34:2e:27:83:d1:a3:e4:f1:67:f5:99: 9f:b7:ef:ee:64:27:57:79:1b:2c:4e:23:43:44:e1:a4:d4:ae: 85:8e:99:43:56:6b:d7:56:50:9c:cd:d2:24:ef:33:a8:75:0d: c8:1a:4c:5f:b0:9d:b2:92:94:5f:b6:c6:45:b9:70:41:9f:9e: a0:3a:a5:43:be:67:c9:98:59:57:fe:f1:c4:5d:22:af:a3:68: ec:18:c4:74:95:5b:e1:84:d0:d8:03:c1:8d:16:15:f4:c4:7d: d4:de:22:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+RDlS8NOwWWAfd3gKFiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWM3YjU2MDdjNTM2NjU3ZmQ1NzQ4ZjZmNjViMjRhYzEy ZWIxN2QwHhcNMjUxMjE3MTEwMTQxWhcNMjUxMjE4MTEwMTQxWjAzMTEwLwYDVQQD EygyMTg2NmY3NTAxNzdmNTkyNTU4MjMxZmI0MGViM2UzMDY4ZTQ1MjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqndSi6WMsycN0mgrVzdEpEQic3n9 WxOTKBMgfy7qUmbhBnh+FRwSVIfZZnhQYEdvBPt32Xr4wE9wDp9PsivXUxrTDgRF t+ozT8iPkSZ6T/PATZFASuK2p/kMjyNuLJdTtNaHqSS6oeeoEQlFQCJNwoRMfApx zNYNT1G4Vvc2NvwF4KX6RJpD8hkw1om71S9bmyC1hC5nZ5uvdz1AjFdmHe2RwBrm bOEGDjQmlahMvjPRI5Y+Nuu6QQ/WsLkcijBeie3e98wx+25Cypp6Y5D9XTwJznbK zNyX/emZ63jmPjkaHSzvV7hRcXv6/ym3tmyFOExh2dp5WlIIPagBoFVlEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGGb3UBd/WSVYIx+0DrPjBo5FJHMB8GA1UdIwQY MBaAFDUce1YHxTZlf9V0j29lskrBLrF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMt NjUxNzA3YzkxZmQzLzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMtNjUxNzA3YzkxZmQz LzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxErwDFz pQu0X4xIJ2LycI9vXxJishtagr0lSuEuvTq0k4rYEj3IvkMYnicTYOxrDXhh7Zno KQGaci48GYH2lAn/mQV8eUeGp5D22FcFjjgmuyGfub8bHGlW4yIn+/HVvLReky+A 82bVo58QfCwUL2fWLI19TT0A/3E9mfT49DJPEv3/qN3zyf+DnWDmQoPmZmPoKOi7 EjQuJ4PRo+TxZ/WZn7fv7mQnV3kbLE4jQ0ThpNSuhY6ZQ1Zr11ZQnM3SJO8zqHUN yBpMX7CdspKUX7bGRblwQZ+eoDqlQ75nyZhZV/7xxF0ir6No7BjEdJVb4YTQ2APB jRYV9MR91N4ivw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:03:39 2025 by rpki-client