This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json) Hash identifier: B+t+zrqoA9zL3rcJCQyeqGZoaZpostkIdbVSkUkHseo= Subject key identifier: FB:97:4B:F1:A7:C1:1C:15:B4:8D:08:9D:F6:99:B8:D0:D8:4A:2D:53 Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24 Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24 Certificate serial: 019AF31B1D387C1121AE5B831317B7486628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 10:00:31 +0000 Manifest this update: Sat 06 Dec 2025 10:00:31 +0000 Manifest next update: Sun 07 Dec 2025 10:00:31 +0000 Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: Mq2riXVW3AmOlGYkS95NfTThVlLe7K0MpCj8uZXkN6M=) 2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1d:38:7c:11:21:ae:5b:83:13:17:b7:48:66:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24 Validity Not Before: Dec 6 10:00:31 2025 GMT Not After : Dec 7 10:00:31 2025 GMT Subject: CN=fb974bf1a7c11c15b48d089df699b8d0d84a2d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:44:36:84:0d:51:e2:30:73:82:69:dd:c1: 8b:db:08:51:0c:b9:2b:bd:5a:d0:2e:e2:7b:c6:84: f1:64:ed:84:b2:07:ce:bd:1f:76:a9:4d:04:2c:b5: 66:22:43:e9:93:5a:ff:b1:cd:28:9f:86:5c:6a:b3: e5:b3:41:bb:b2:f1:a3:40:2c:da:35:c4:f2:fb:f7: 12:e7:a2:17:e8:71:bb:06:1b:90:76:d2:26:02:2d: cf:50:a5:a5:fb:f0:a3:b8:f8:75:e5:21:6e:e0:b1: d2:e6:71:2e:7d:64:22:a2:b8:a5:97:89:f6:4c:e0: 89:3d:91:8a:65:b8:24:85:21:6a:a5:e1:71:4d:6a: c9:f4:15:ce:96:2c:51:14:ba:31:a5:37:34:20:4f: 1b:9b:96:df:6e:e9:e1:30:0c:6c:d8:ea:63:d3:f8: cb:b0:ee:f6:83:1f:68:70:11:90:ec:d7:76:0e:ff: 4a:2e:00:83:58:c2:e6:a4:75:06:9f:72:d7:12:cb: ce:74:d4:53:f9:59:0a:89:dc:4a:21:3e:cc:7e:86: 73:26:b9:42:fe:57:49:23:ae:53:e7:27:da:67:2c: ce:04:06:25:e1:09:72:ca:b1:d0:36:a8:6f:32:1d: 3c:a7:bc:48:c5:68:b2:2d:1e:fc:97:c0:dd:89:1e: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:97:4B:F1:A7:C1:1C:15:B4:8D:08:9D:F6:99:B8:D0:D8:4A:2D:53 X509v3 Authority Key Identifier: keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:39:5f:b7:f0:23:b6:af:44:a6:4c:20:b4:02:e8:27:0e:7c: 89:2d:fd:20:52:51:58:d4:18:32:f3:b5:57:29:52:cb:0f:48: e0:aa:a1:e9:59:cf:9e:2c:7d:8f:01:a1:1a:12:6d:b6:66:a2: 88:6a:4a:c7:2d:ea:c4:28:b3:e9:91:92:7a:08:6b:8e:5d:bf: 84:e8:30:39:f0:74:42:6c:58:27:f8:53:c1:dc:93:ac:97:b1: 25:ed:6a:71:77:36:51:5a:d6:a1:4a:1f:e1:49:64:2c:d0:f7: f4:5d:ec:67:ff:37:de:df:a1:6c:84:70:4d:2d:c1:a6:c3:73: 7c:93:60:3e:73:47:39:8d:c7:8f:9a:34:e7:89:6a:a5:ce:47: 28:fa:be:b7:2f:04:c3:0b:3c:ce:c0:88:26:a4:2f:f7:8d:44: 8e:d9:9f:fb:e1:cd:cc:50:5d:d5:67:cb:09:20:5b:0b:cb:f1: 0c:7e:51:7f:e0:0d:a7:ec:38:5a:cb:8c:3b:a1:42:8a:85:c6: c5:12:55:8f:7c:4e:68:1b:7d:00:d7:d6:71:8f:c4:14:9c:9b: 74:d8:2e:d1:6c:c1:3a:88:10:1b:c1:0b:7d:32:7a:cd:c0:90: 63:be:3e:17:5b:d5:bc:77:3a:62:cd:ee:98:b1:5d:e6:ae:63: d6:1a:c7:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGx04fBEhrluDExe3SGYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YTRjZTUwZDBjZGU0MTU0NzMzMTNiMTFiODU3MTk0MDhm YWJhMjQwHhcNMjUxMjA2MTAwMDMxWhcNMjUxMjA3MTAwMDMxWjAzMTEwLwYDVQQD EyhmYjk3NGJmMWE3YzExYzE1YjQ4ZDA4OWRmNjk5YjhkMGQ4NGEyZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw11ENoQNUeIwc4Jp3cGL2whRDLkr vVrQLuJ7xoTxZO2EsgfOvR92qU0ELLVmIkPpk1r/sc0on4ZcarPls0G7svGjQCza NcTy+/cS56IX6HG7BhuQdtImAi3PUKWl+/CjuPh15SFu4LHS5nEufWQiorill4n2 TOCJPZGKZbgkhSFqpeFxTWrJ9BXOlixRFLoxpTc0IE8bm5bfbunhMAxs2Opj0/jL sO72gx9ocBGQ7Nd2Dv9KLgCDWMLmpHUGn3LXEsvOdNRT+VkKidxKIT7MfoZzJrlC /ldJI65T5yfaZyzOBAYl4QlyyrHQNqhvMh08p7xIxWiyLR78l8DdiR4A5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuXS/GnwRwVtI0InfaZuNDYSi1TMB8GA1UdIwQY MBaAFDWkzlDQzeQVRzMTsRuFcZQI+rokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2It MDNiNjRjMTkxZDRhLzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2ItMDNiNjRjMTkxZDRh LzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDlft/Aj tq9EpkwgtALoJw58iS39IFJRWNQYMvO1VylSyw9I4Kqh6VnPnix9jwGhGhJttmai iGpKxy3qxCiz6ZGSeghrjl2/hOgwOfB0QmxYJ/hTwdyTrJexJe1qcXc2UVrWoUof 4UlkLND39F3sZ/833t+hbIRwTS3BpsNzfJNgPnNHOY3Hj5o054lqpc5HKPq+ty8E wws8zsCIJqQv941Ejtmf++HNzFBd1WfLCSBbC8vxDH5Rf+ANp+w4WsuMO6FCioXG xRJVj3xOaBt9ANfWcY/EFJybdNgu0WzBOogQG8ELfTJ6zcCQY74+F1vVvHc6Ys3u mLFd5q5j1hrH3A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:15 2025 by rpki-client