This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json) Hash identifier: RegYrxPi9suxzlX3p6whHCDyLD0nJVenKqpQi6m0LIs= Subject key identifier: 06:42:C3:61:EE:04:59:62:0B:F6:81:B2:3B:A1:9E:19:22:28:71:7A Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74 Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74 Certificate serial: 019AF38900AAC2363064A0E9B2F0ACFB9526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft Manifest number: 0280 Signing time: Sat 06 Dec 2025 12:00:33 +0000 Manifest this update: Sat 06 Dec 2025 12:00:33 +0000 Manifest next update: Sun 07 Dec 2025 12:00:33 +0000 Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: NEGg/07xtEhDmyL5A64h68bTUjfR/Hkt/NlS+JMMr6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:00:aa:c2:36:30:64:a0:e9:b2:f0:ac:fb:95:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74 Validity Not Before: Dec 6 12:00:33 2025 GMT Not After : Dec 7 12:00:33 2025 GMT Subject: CN=0642c361ee0459620bf681b23ba19e192228717a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:dc:4c:d6:e0:47:18:4d:4c:c0:2c:bf:c9: 24:38:58:19:0c:a2:b6:9a:2b:a6:10:a9:e2:a5:3a: 3e:09:82:d4:01:db:cc:7e:ee:0c:f8:4b:03:e2:37: 02:d0:b1:db:d9:47:01:09:37:e6:f9:e7:14:86:88: 29:89:a8:5d:17:cc:33:80:04:1c:55:df:ef:b1:11: 6f:09:53:5e:f3:3a:39:c3:5b:17:d0:c0:43:15:d7: d1:c1:14:d0:b2:e5:c9:d7:f7:33:05:ed:a6:bc:06: 84:6e:48:98:da:2e:e9:83:7b:5e:00:22:5d:20:97: 5d:65:a6:c5:d6:70:3c:88:ee:af:eb:bd:8f:e5:28: fc:8a:de:72:13:f3:c1:b8:44:e8:fd:af:44:b5:c3: 90:f3:fe:02:60:6b:ac:f4:3c:fb:35:bc:5c:7f:dc: a2:56:88:73:a9:60:80:40:2d:23:4e:7d:70:b8:c6: 46:7c:d7:61:3d:3f:23:bb:61:20:c1:e5:60:ed:91: 63:a0:3b:35:c3:97:ea:92:a1:21:6a:90:6e:3f:b1: 64:03:25:10:68:1f:00:a9:da:21:5e:0f:26:c1:e8: 2d:17:f1:41:14:9e:ef:62:b7:2d:a4:d8:2d:a1:6c: 4e:0c:be:62:90:3a:3a:57:40:3d:f7:e4:d4:19:1d: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:42:C3:61:EE:04:59:62:0B:F6:81:B2:3B:A1:9E:19:22:28:71:7A X509v3 Authority Key Identifier: keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:80:5f:cd:45:de:39:8a:cf:1e:8b:dc:20:19:78:06:c5:9c: 0c:e3:06:db:3f:d7:54:f9:7c:02:3c:c4:26:fd:1b:de:16:e1: 94:31:99:35:3a:21:c0:ff:8f:dd:a7:52:ec:09:c2:de:7d:a3: 27:88:6a:c5:1b:ca:51:a3:cf:1d:1f:fd:89:da:57:d9:03:f2: c3:18:da:ff:ae:6b:79:ce:7c:e1:31:4b:b4:21:13:80:0a:a0: 17:04:68:89:78:c4:96:c0:d2:e2:23:c5:f4:82:07:cb:f4:c2: 44:c5:00:7f:33:6d:ea:71:fc:18:ad:51:3f:d4:0f:d6:bf:17: bc:4c:f4:af:1b:fa:09:67:e3:71:20:4c:9c:b1:58:91:32:72: 9b:84:5d:50:4f:dd:37:c6:8d:6e:06:89:c0:e0:c4:0c:e8:92: 07:90:50:62:b5:db:05:55:70:f8:1b:da:e1:3c:4d:50:07:d8: f8:f6:ee:c1:de:0b:66:e9:04:15:2a:dd:45:44:f9:c4:25:72: 9e:75:f9:3c:f3:5c:9b:16:c8:b2:b8:26:30:db:f6:fb:bf:db: 50:9f:b7:33:35:14:b9:0c:d4:42:39:f8:8a:88:d6:7f:36:bf: 5e:3b:90:70:bb:16:ab:ed:fb:80:db:6c:92:ac:f4:f3:1c:4b: e7:fc:15:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQCqwjYwZKDpsvCs+5UmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VkMDU0OWY1YjM1ZGFmYTc0ZDkwYjA0NjgyMDAxNzg1 NDVkNzQwHhcNMjUxMjA2MTIwMDMzWhcNMjUxMjA3MTIwMDMzWjAzMTEwLwYDVQQD EygwNjQyYzM2MWVlMDQ1OTYyMGJmNjgxYjIzYmExOWUxOTIyMjg3MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ALcTNbgRxhNTMAsv8kkOFgZDKK2 miumEKnipTo+CYLUAdvMfu4M+EsD4jcC0LHb2UcBCTfm+ecUhogpiahdF8wzgAQc Vd/vsRFvCVNe8zo5w1sX0MBDFdfRwRTQsuXJ1/czBe2mvAaEbkiY2i7pg3teACJd IJddZabF1nA8iO6v672P5Sj8it5yE/PBuETo/a9EtcOQ8/4CYGus9Dz7Nbxcf9yi VohzqWCAQC0jTn1wuMZGfNdhPT8ju2EgweVg7ZFjoDs1w5fqkqEhapBuP7FkAyUQ aB8AqdohXg8mwegtF/FBFJ7vYrctpNgtoWxODL5ikDo6V0A99+TUGR3qXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZCw2HuBFliC/aBsjuhnhkiKHF6MB8GA1UdIwQY MBaAFDXO0FSfWzXa+nTZCwRoIAF4VF10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODIt ZWZjMTJhOWZkNmUxLzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODItZWZjMTJhOWZkNmUx LzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroBfzUXe OYrPHovcIBl4BsWcDOMG2z/XVPl8AjzEJv0b3hbhlDGZNTohwP+P3adS7AnC3n2j J4hqxRvKUaPPHR/9idpX2QPywxja/65rec584TFLtCETgAqgFwRoiXjElsDS4iPF 9IIHy/TCRMUAfzNt6nH8GK1RP9QP1r8XvEz0rxv6CWfjcSBMnLFYkTJym4RdUE/d N8aNbgaJwODEDOiSB5BQYrXbBVVw+Bva4TxNUAfY+Pbuwd4LZukEFSrdRUT5xCVy nnX5PPNcmxbIsrgmMNv2+7/bUJ+3MzUUuQzUQjn4iojWfza/XjuQcLsWq+37gNts kqz08xxL5/wVxw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:26:56 2025 by rpki-client