This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json) Hash identifier: I4FAnprpy2fML+LHQtDGaGtSmOnAqv8V9sXwfsYBIJE= Subject key identifier: 75:73:F5:90:E7:80:93:73:48:B7:A9:26:26:61:85:9F:E9:19:BF:16 Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16 Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16 Certificate serial: 019B3DFE3A8CCD57E2BB96DF651234A6D757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft Manifest number: 1498 Signing time: Sat 20 Dec 2025 23:00:29 +0000 Manifest this update: Sat 20 Dec 2025 23:00:29 +0000 Manifest next update: Sun 21 Dec 2025 23:00:29 +0000 Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: TE3z79d9XYCGuV61EBbORMPx0rseOdvzRnQWG/5OgDM=) 2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:3a:8c:cd:57:e2:bb:96:df:65:12:34:a6:d7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16 Validity Not Before: Dec 20 23:00:29 2025 GMT Not After : Dec 21 23:00:29 2025 GMT Subject: CN=7573f590e780937348b7a9262661859fe919bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:92:a5:5c:7d:0e:7b:85:e2:26:8e:1b:e7: a3:29:5a:9c:1d:db:4c:78:3e:fc:6c:8c:50:91:7f: 25:de:21:06:db:d7:0f:b2:71:93:d7:6c:22:1f:66: 74:93:f0:31:32:4e:8a:46:d3:55:07:5c:d5:db:73: 6a:aa:8f:1c:18:23:e6:54:fc:48:c9:c5:25:f0:9c: 81:e3:9b:26:6c:b3:c7:6a:04:31:45:8e:98:14:03: ca:07:e5:0d:e6:4c:c5:dc:35:39:6b:4a:a8:6f:eb: d7:cb:42:68:b2:48:a2:b1:af:57:80:ef:eb:b5:94: 28:de:32:94:07:34:40:bb:2f:84:3e:12:62:76:68: a7:43:5e:b7:fa:87:fc:20:10:2e:84:90:b3:99:8d: 60:58:53:06:de:5e:23:7f:5d:0d:e6:54:4b:e8:3f: 19:32:55:dd:fc:e8:25:ff:cd:b9:78:2c:d6:2b:a9: 43:e3:71:cf:bb:39:6a:0f:bf:bc:91:98:6a:57:d7: ee:0c:0c:df:5e:aa:9e:63:8e:de:54:dd:fc:87:a6: 39:b6:f7:d8:0f:ee:9c:67:f2:16:05:9f:04:c7:82: 53:8c:b6:23:6d:9c:12:f5:8d:13:00:8a:57:35:9e: e7:ba:c7:c6:aa:4e:9c:2d:d8:77:b3:4c:bb:82:7e: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:73:F5:90:E7:80:93:73:48:B7:A9:26:26:61:85:9F:E9:19:BF:16 X509v3 Authority Key Identifier: keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:79:8a:73:f9:69:bf:00:d8:48:00:8b:f9:0f:f7:62:9a:bb: db:8d:d3:2f:8b:76:20:0d:2b:b1:ed:ea:4c:fd:c3:a2:0a:43: 2c:07:4a:24:66:b0:56:e2:7d:61:f4:42:f3:e8:f2:66:08:3c: df:42:f0:fb:39:21:72:5c:3f:d8:6c:d2:9e:95:2a:d7:0b:4e: b8:78:66:86:cc:f4:45:f1:c6:58:bb:c5:c3:d3:a0:17:37:fb: 54:28:01:e6:25:9b:6b:a5:f5:75:7b:69:1f:32:28:fc:e4:77: 2f:73:db:1b:c4:3f:95:09:5a:c6:52:8c:42:f7:87:5a:d0:e4: b6:30:ad:bb:99:f3:d8:99:63:3d:33:05:db:f3:a7:6b:21:63: cf:8a:22:71:e4:4e:58:df:6d:59:88:06:f4:6e:e0:fa:17:db: b4:4e:47:c2:70:21:ee:ed:b1:21:e5:87:3f:41:ff:21:85:fd: 05:63:a2:e3:31:0f:7f:c4:f9:96:fe:05:5a:04:f5:e5:83:df: 93:d1:de:ed:f5:f3:74:8a:4c:02:0e:df:1e:ea:18:04:f7:fb: 96:bb:85:9f:18:29:47:6d:5a:87:10:2a:83:b3:aa:b6:01:fe: af:b4:4a:14:be:04:fd:c5:b6:ec:dd:19:44:d7:a6:ed:d5:67: fd:e7:9a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/jqMzVfiu5bfZRI0ptdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NjIwNDNhMzFkZDliZDJiN2NiMTg2MjdlYjRiYWMxMTg0 MGNlMTYwHhcNMjUxMjIwMjMwMDI5WhcNMjUxMjIxMjMwMDI5WjAzMTEwLwYDVQQD Eyg3NTczZjU5MGU3ODA5MzczNDhiN2E5MjYyNjYxODU5ZmU5MTliZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot2SpVx9DnuF4iaOG+ejKVqcHdtM eD78bIxQkX8l3iEG29cPsnGT12wiH2Z0k/AxMk6KRtNVB1zV23Nqqo8cGCPmVPxI ycUl8JyB45smbLPHagQxRY6YFAPKB+UN5kzF3DU5a0qob+vXy0Joskiisa9XgO/r tZQo3jKUBzRAuy+EPhJidminQ163+of8IBAuhJCzmY1gWFMG3l4jf10N5lRL6D8Z MlXd/Ogl/825eCzWK6lD43HPuzlqD7+8kZhqV9fuDAzfXqqeY47eVN38h6Y5tvfY D+6cZ/IWBZ8Ex4JTjLYjbZwS9Y0TAIpXNZ7nusfGqk6cLdh3s0y7gn7jUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVz9ZDngJNzSLepJiZhhZ/pGb8WMB8GA1UdIwQY MBaAFDZiBDox3ZvSt8sYYn60usEYQM4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDct ZDliMDdmYmJiYmRiLzEvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDctZDliMDdmYmJiYmRi LzEvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXmKc/lp vwDYSACL+Q/3Ypq7243TL4t2IA0rse3qTP3DogpDLAdKJGawVuJ9YfRC8+jyZgg8 30Lw+zkhclw/2GzSnpUq1wtOuHhmhsz0RfHGWLvFw9OgFzf7VCgB5iWba6X1dXtp HzIo/OR3L3PbG8Q/lQlaxlKMQveHWtDktjCtu5nz2JljPTMF2/OnayFjz4oiceRO WN9tWYgG9G7g+hfbtE5HwnAh7u2xIeWHP0H/IYX9BWOi4zEPf8T5lv4FWgT15YPf k9He7fXzdIpMAg7fHuoYBPf7lruFnxgpR21ahxAqg7OqtgH+r7RKFL4E/cW27N0Z RNem7dVn/eeaZA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:04 2025 by rpki-client