This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json) Hash identifier: ozcoA/U0SFihjY8JYlwm5tcoJkCEP0inL4pkEQicimk= Subject key identifier: 12:8B:33:08:5D:E2:81:5F:EF:92:7B:05:E0:4E:59:80:91:59:41:6B Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643 Certificate serial: 019AF208D3E88E4915488D2C4725A7EDDB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft Manifest number: 02CC Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=) 2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: awuq64yvDOMM7QHSswAX1ut8cRoGgZJfYYgcrEmuT/E=) 3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:e8:8e:49:15:48:8d:2c:47:25:a7:ed:db:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=128b33085de2815fef927b05e04e59809159416b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:b3:c5:65:1a:67:2d:cd:fe:cd:54:af:2f: eb:4d:f1:69:0f:d3:f0:45:4c:e2:34:1b:18:3a:07: 40:45:98:e8:5a:ee:50:75:4e:b7:98:46:6c:f1:3a: 83:85:ee:c0:8f:e1:20:15:3e:13:e7:20:d5:af:25: 43:ac:38:95:4f:dc:cd:09:a3:b2:ba:40:21:0f:a6: 7c:55:25:b7:7e:6b:be:a0:8b:cc:27:3e:32:7d:07: fc:59:e7:a9:9d:f3:71:94:74:16:48:71:d9:a1:f8: 75:d6:ab:95:06:a2:72:1f:ec:62:7e:5d:26:90:fc: 57:e0:9b:53:2d:08:95:cb:f6:b1:ce:16:76:1d:78: 4f:16:75:a6:f7:56:41:6e:56:78:ed:96:3a:5b:e4: cb:3d:cc:89:55:4e:ac:6a:76:04:63:87:db:c7:fe: 80:f5:97:9a:d3:b9:3a:1f:bd:d8:65:9c:f2:09:b3: 80:a5:76:c8:15:2e:b1:39:81:c9:44:d8:4d:d4:82: 65:fe:75:eb:cf:e7:16:58:d4:f4:3e:60:ed:2f:8c: c0:8c:0b:83:66:9e:86:e2:ba:8f:65:9f:21:29:0f: 99:c1:60:57:9d:3b:08:00:7a:e5:54:84:ba:6c:84: c0:a0:a1:b5:ec:83:75:5b:00:53:0a:37:e0:d2:9c: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8B:33:08:5D:E2:81:5F:EF:92:7B:05:E0:4E:59:80:91:59:41:6B X509v3 Authority Key Identifier: keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c0:0b:24:2e:56:18:53:15:e1:e3:f3:c0:a4:7e:c7:4c:5b: a7:9d:e7:53:18:8b:26:12:0e:d7:de:46:e4:d6:b4:2b:b6:00: ef:03:b3:65:9c:e2:4d:3e:d4:73:b9:b1:41:29:4f:10:24:1d: 20:69:5d:c8:8a:c1:af:ed:94:41:0a:1f:51:c5:ae:fb:84:6a: d1:3c:5c:a0:00:be:2c:31:0f:3e:3a:8e:e2:a6:bb:3e:51:b3: 6a:7a:46:7a:e1:ae:3b:f0:ce:28:f2:d1:f4:c1:fa:cb:4c:f3: 04:4b:d9:fd:da:fc:53:0c:df:a2:41:8c:65:80:42:88:c3:98: 5c:15:0f:88:5d:bf:d4:67:2e:e7:ea:59:b9:de:4e:60:e0:7f: 90:e1:59:9c:00:44:cb:e9:60:ed:d0:b6:b7:a1:e6:45:2d:21: 65:dc:5c:d7:bd:4c:c4:eb:2b:15:b2:ba:4e:6c:e9:66:3d:46: 20:7a:a6:e5:df:95:ee:36:63:bc:cc:e3:5e:e7:d8:d5:5a:15: 3f:a5:4e:7b:eb:16:48:7c:96:f5:97:57:47:44:83:ea:79:81: c3:6e:16:ca:d7:99:14:af:c2:a7:db:09:da:fe:4e:e8:06:d7: 3e:dd:dc:fc:40:a3:d2:6c:99:df:a4:1e:4f:e1:59:9a:48:3e: 52:87:17:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNPojkkVSI0sRyWn7dtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky NGY2NDMwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EygxMjhiMzMwODVkZTI4MTVmZWY5MjdiMDVlMDRlNTk4MDkxNTk0MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3mzxWUaZy3N/s1Ury/rTfFpD9Pw RUziNBsYOgdARZjoWu5QdU63mEZs8TqDhe7Aj+EgFT4T5yDVryVDrDiVT9zNCaOy ukAhD6Z8VSW3fmu+oIvMJz4yfQf8WeepnfNxlHQWSHHZofh11quVBqJyH+xifl0m kPxX4JtTLQiVy/axzhZ2HXhPFnWm91ZBblZ47ZY6W+TLPcyJVU6sanYEY4fbx/6A 9Zea07k6H73YZZzyCbOApXbIFS6xOYHJRNhN1IJl/nXrz+cWWNT0PmDtL4zAjAuD Zp6G4rqPZZ8hKQ+ZwWBXnTsIAHrlVIS6bITAoKG17IN1WwBTCjfg0pzhFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKLMwhd4oFf75J7BeBOWYCRWUFrMB8GA1UdIwQY MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0 LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMALJC5W GFMV4ePzwKR+x0xbp53nUxiLJhIO195G5Na0K7YA7wOzZZziTT7Uc7mxQSlPECQd IGldyIrBr+2UQQofUcWu+4Rq0TxcoAC+LDEPPjqO4qa7PlGzanpGeuGuO/DOKPLR 9MH6y0zzBEvZ/dr8UwzfokGMZYBCiMOYXBUPiF2/1Gcu5+pZud5OYOB/kOFZnABE y+lg7dC2t6HmRS0hZdxc171MxOsrFbK6TmzpZj1GIHqm5d+V7jZjvMzjXufY1VoV P6VOe+sWSHyW9ZdXR0SD6nmBw24WyteZFK/Cp9sJ2v5O6AbXPt3c/ECj0myZ36Qe T+FZmkg+UocXJg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:26 2025 by rpki-client