This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json) Hash identifier: qv8STF+8TOC9FgJGUXaxFFsA8eUjhhecORfsOq2cNSk= Subject key identifier: FF:2F:72:B4:1B:5A:28:8C:ED:52:1E:EF:7D:08:FC:C3:DD:7E:18:B8 Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Certificate serial: 019B2AAE6EB2008C4594EA1D53840DC9367E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft Manifest number: 0F2F Signing time: Wed 17 Dec 2025 05:00:33 +0000 Manifest this update: Wed 17 Dec 2025 05:00:33 +0000 Manifest next update: Thu 18 Dec 2025 05:00:33 +0000 Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=) 2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=) 3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: W+rKusGRL/LPP8mljGgs7iBQegQcgVJ1Q1gxEPbMjas=) 4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:6e:b2:00:8c:45:94:ea:1d:53:84:0d:c9:36:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Validity Not Before: Dec 17 05:00:33 2025 GMT Not After : Dec 18 05:00:33 2025 GMT Subject: CN=ff2f72b41b5a288ced521eef7d08fcc3dd7e18b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:6c:dc:05:1e:ea:87:ec:cc:63:71:3b:f2: f8:cc:fb:16:4c:e3:52:df:ea:fb:56:3a:ce:a0:43: 13:30:34:2f:e1:26:75:19:c8:35:d9:b1:63:da:85: 6f:b6:80:12:c2:94:28:7c:4e:37:61:f7:83:2c:9d: 68:75:cd:e3:40:28:49:e6:63:bf:53:b3:25:d7:f0: f4:ea:a7:d1:d5:3c:b0:67:ee:89:7b:a7:3a:6e:be: c6:7a:84:8f:7a:f6:a5:5d:1c:d2:87:b8:ff:55:e4: 89:3a:1b:4f:59:64:e9:ba:f1:60:3e:12:69:5f:b7: 24:2c:f7:93:e9:c8:b9:21:d2:7d:53:54:82:fa:06: 16:cc:31:c3:a2:80:33:4f:51:d5:61:2d:7c:b3:be: f1:31:0e:6e:d8:8e:0a:11:b9:0e:d5:58:df:35:ca: 63:1b:ca:52:8d:82:2c:ea:3a:04:b1:38:0b:84:82: 19:c0:ad:50:d1:6a:9e:50:49:c3:db:28:dc:80:86: 41:0a:5a:84:40:11:c7:59:60:60:71:f0:5b:41:bf: 08:78:de:d0:de:3f:98:bf:a9:66:85:3d:c2:7a:13: 9a:28:64:5f:d2:7b:a6:8b:3c:df:e5:19:98:7b:e5: e5:e7:04:d5:2b:f2:74:1b:0b:5d:6c:8c:37:f1:99: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2F:72:B4:1B:5A:28:8C:ED:52:1E:EF:7D:08:FC:C3:DD:7E:18:B8 X509v3 Authority Key Identifier: keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:45:d7:d0:34:87:47:3f:b0:22:b5:f4:6e:bd:03:8d:14:74: 63:3d:a3:70:3c:af:e7:18:49:ad:2e:c0:5c:37:1c:ce:f8:d0: 5f:d0:41:cc:b8:b5:cd:94:5f:6d:75:c5:b1:1e:ab:34:4d:55: f7:5f:9f:11:4b:6c:45:2d:5e:5c:6c:93:a8:42:f2:4c:6d:3c: b7:5c:f1:43:06:40:20:93:2a:64:5d:58:c0:13:93:53:cf:54: 4e:b9:87:cf:1f:a1:1e:98:89:59:53:8e:fd:c5:49:23:90:dc: ed:e0:85:da:c7:fc:fa:1f:eb:38:bf:21:c4:58:d8:94:8b:09: 39:67:c7:15:dc:b1:7e:14:76:f6:92:5d:fd:3e:d8:14:52:ac: f2:30:52:6a:ea:54:b6:5a:a2:b6:63:88:35:5b:f2:a7:86:02: 31:f6:12:82:ca:66:fb:ca:c3:08:77:54:a1:95:e7:9c:e0:f1: 06:cf:f4:5c:68:37:cb:e4:9c:4b:da:98:16:29:80:86:48:e3: 79:cb:89:4a:2a:67:20:c7:35:50:a9:e1:e5:fb:ec:5f:4b:73: 20:50:11:a4:e9:70:2a:28:65:db:2f:59:02:35:c5:9d:8c:b6: d5:ad:1e:32:27:ee:e1:86:8c:4d:69:83:63:61:0a:10:2f:c4: f0:9b:50:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrm6yAIxFlOodU4QNyTZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NTMxYzU0YjFlNzk1NmMyY2MzNzFiMjNlMGE3NTU2N2Fh Mjc1MTgwHhcNMjUxMjE3MDUwMDMzWhcNMjUxMjE4MDUwMDMzWjAzMTEwLwYDVQQD EyhmZjJmNzJiNDFiNWEyODhjZWQ1MjFlZWY3ZDA4ZmNjM2RkN2UxOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gts3AUe6ofszGNxO/L4zPsWTONS 3+r7VjrOoEMTMDQv4SZ1Gcg12bFj2oVvtoASwpQofE43YfeDLJ1odc3jQChJ5mO/ U7Ml1/D06qfR1TywZ+6Je6c6br7GeoSPevalXRzSh7j/VeSJOhtPWWTpuvFgPhJp X7ckLPeT6ci5IdJ9U1SC+gYWzDHDooAzT1HVYS18s77xMQ5u2I4KEbkO1VjfNcpj G8pSjYIs6joEsTgLhIIZwK1Q0WqeUEnD2yjcgIZBClqEQBHHWWBgcfBbQb8IeN7Q 3j+Yv6lmhT3CehOaKGRf0numizzf5RmYe+Xl5wTVK/J0GwtdbIw38ZnLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8vcrQbWiiM7VIe730I/MPdfhi4MB8GA1UdIwQY MBaAFDRTHFSx55VsLMNxsj4KdVZ6onUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEt NDkwNjEwM2RiZDE2LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEtNDkwNjEwM2RiZDE2 LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUXX0DSH Rz+wIrX0br0DjRR0Yz2jcDyv5xhJrS7AXDcczvjQX9BBzLi1zZRfbXXFsR6rNE1V 91+fEUtsRS1eXGyTqELyTG08t1zxQwZAIJMqZF1YwBOTU89UTrmHzx+hHpiJWVOO /cVJI5Dc7eCF2sf8+h/rOL8hxFjYlIsJOWfHFdyxfhR29pJd/T7YFFKs8jBSaupU tlqitmOINVvyp4YCMfYSgspm+8rDCHdUoZXnnODxBs/0XGg3y+ScS9qYFimAhkjj ecuJSipnIMc1UKnh5fvsX0tzIFARpOlwKihl2y9ZAjXFnYy21a0eMifu4YaMTWmD Y2EKEC/E8JtQqA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:24 2025 by rpki-client