This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json) Hash identifier: wFbgAkuifhz6y6an0SnoCtIhfBxk9GId9oLx5XWYVd0= Subject key identifier: 38:76:E8:C9:A9:BF:AB:EA:31:81:64:F8:D3:D0:D5:EE:36:6B:A4:E5 Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff Certificate serial: 019AF0F5F6FCA103A1F166E820A62B6D366D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft Manifest number: 017C Signing time: Sat 06 Dec 2025 00:00:42 +0000 Manifest this update: Sat 06 Dec 2025 00:00:42 +0000 Manifest next update: Sun 07 Dec 2025 00:00:42 +0000 Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: 4h29NM6fUL5rCZ/KPfODt+3izCm88U5JJCBJ+kR5jIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f6:fc:a1:03:a1:f1:66:e8:20:a6:2b:6d:36:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff Validity Not Before: Dec 6 00:00:42 2025 GMT Not After : Dec 7 00:00:42 2025 GMT Subject: CN=3876e8c9a9bfabea318164f8d3d0d5ee366ba4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:43:66:a3:5d:07:2e:92:57:fa:e3:5c:3c: 5c:50:90:2c:8f:0b:77:31:99:b3:24:fb:e1:f2:ec: 00:e9:19:1b:b5:75:43:17:26:d2:d6:54:c4:35:25: d2:7b:f9:e3:4e:b7:8a:15:bd:16:0d:d9:c9:29:8b: 44:7f:e3:86:01:46:19:98:91:94:ad:26:eb:93:c4: cb:b8:ce:7a:24:6b:7a:a6:a3:b0:9a:80:86:f0:04: c9:e5:77:af:9c:7f:fa:56:5b:dc:59:98:39:41:f8: 6e:c3:68:a2:1c:1c:2c:f9:8e:6e:68:32:fc:6d:4f: e9:e5:a0:2f:dd:ba:90:0c:c7:81:9a:c6:64:cd:2c: b4:b4:01:9e:37:93:26:86:b2:a3:19:41:42:e1:48: 9e:6c:f8:fe:ba:ae:59:80:83:99:d7:77:20:a4:24: 8e:df:5d:31:3a:30:60:93:db:97:80:f1:9a:70:62: b6:b4:90:23:db:13:00:df:44:f3:ba:71:11:f7:a9: b0:df:ab:60:39:92:cc:9d:10:54:31:89:12:83:5b: c6:c9:48:11:48:16:44:3e:50:89:8e:78:6f:a9:f7: a8:6f:69:a9:1a:64:9c:68:81:67:61:bc:48:9f:a2: a5:09:12:65:47:32:99:4a:11:ad:e0:d3:f7:4f:59: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:76:E8:C9:A9:BF:AB:EA:31:81:64:F8:D3:D0:D5:EE:36:6B:A4:E5 X509v3 Authority Key Identifier: keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f8:96:d8:e2:09:c3:0d:47:d4:52:bb:f3:c9:96:2c:ef:94: 4f:7a:30:5c:0a:44:5e:73:06:42:40:cf:73:a4:9e:cd:7b:b8: c9:a0:86:15:91:10:3e:5c:c2:46:7a:81:7f:13:67:24:66:98: 11:83:c0:f6:d8:ce:91:a7:bc:97:57:f5:cd:f3:00:12:44:c7: 18:16:af:c0:41:62:ba:b3:83:01:be:3e:cc:23:d1:18:7a:4d: d5:7d:dc:a5:9f:ef:f8:f9:9a:28:ed:65:d7:b6:05:cc:fd:81: d8:57:bd:40:b0:35:c6:d0:8a:1c:20:88:8f:95:75:08:c1:7c: 05:5f:8c:b6:82:4f:24:a2:ec:02:60:d1:fa:ff:e4:1a:64:5d: 2a:91:07:f1:65:f4:5b:2a:86:86:90:89:25:be:56:2c:5f:f5: ba:e1:ae:cd:11:4e:a8:e5:1f:be:18:68:ee:1b:e3:22:bf:c3: a7:55:56:0c:26:61:67:b7:ec:91:fd:6a:81:e5:78:c1:79:d1: 48:25:9e:74:e4:12:43:cb:3e:b6:7c:0e:72:08:d3:3a:09:b8: 7f:0a:6f:4a:cd:64:38:b4:2b:09:a0:26:54:fa:16:c4:9f:15: 8b:99:0e:63:f9:a4:00:a5:bd:13:af:ee:fb:57:43:20:03:8b: 9e:de:95:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fb8oQOh8WboIKYrbTZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDEwYzk3NjMzNjVmMzNkNGRlMTEwOTdlZDVlMTlhYzli N2E4ZmYwHhcNMjUxMjA2MDAwMDQyWhcNMjUxMjA3MDAwMDQyWjAzMTEwLwYDVQQD EygzODc2ZThjOWE5YmZhYmVhMzE4MTY0ZjhkM2QwZDVlZTM2NmJhNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqFDZqNdBy6SV/rjXDxcUJAsjwt3 MZmzJPvh8uwA6RkbtXVDFybS1lTENSXSe/njTreKFb0WDdnJKYtEf+OGAUYZmJGU rSbrk8TLuM56JGt6pqOwmoCG8ATJ5XevnH/6VlvcWZg5Qfhuw2iiHBws+Y5uaDL8 bU/p5aAv3bqQDMeBmsZkzSy0tAGeN5MmhrKjGUFC4UiebPj+uq5ZgIOZ13cgpCSO 310xOjBgk9uXgPGacGK2tJAj2xMA30TzunER96mw36tgOZLMnRBUMYkSg1vGyUgR SBZEPlCJjnhvqfeob2mpGmScaIFnYbxIn6KlCRJlRzKZShGt4NP3T1kdqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDh26Mmpv6vqMYFk+NPQ1e42a6TlMB8GA1UdIwQY MBaAFDTRDJdjNl8z1N4RCX7V4ZrJt6j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEt N2Y4Nzg0ZTIxOWU5LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC81N2JjZmYtMTViZS00ZmQ4LWI0OTEtN2Y4Nzg0ZTIxOWU5 LzEvTk5FTWwyTTJYelBVM2hFSmZ0WGhtc20zcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPiW2OIJ ww1H1FK788mWLO+UT3owXApEXnMGQkDPc6SezXu4yaCGFZEQPlzCRnqBfxNnJGaY EYPA9tjOkae8l1f1zfMAEkTHGBavwEFiurODAb4+zCPRGHpN1X3cpZ/v+PmaKO1l 17YFzP2B2Fe9QLA1xtCKHCCIj5V1CMF8BV+MtoJPJKLsAmDR+v/kGmRdKpEH8WX0 WyqGhpCJJb5WLF/1uuGuzRFOqOUfvhho7hvjIr/Dp1VWDCZhZ7fskf1qgeV4wXnR SCWedOQSQ8s+tnwOcgjTOgm4fwpvSs1kOLQrCaAmVPoWxJ8Vi5kOY/mkAKW9E6/u +1dDIAOLnt6VMw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:57 2025 by rpki-client