This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json) Hash identifier: RUfJh+PaZTxjvlCNaWJIYrMVGSu6U+9jRvZEjrS2QVg= Subject key identifier: 47:36:58:18:46:E3:BC:38:64:2E:49:AA:CA:B7:DF:5B:E0:BC:1E:EE Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Certificate serial: 019AF49C08ED6A226ADAEBC70BC4166942BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft Manifest number: 0F13 Signing time: Sat 06 Dec 2025 17:00:57 +0000 Manifest this update: Sat 06 Dec 2025 17:00:57 +0000 Manifest next update: Sun 07 Dec 2025 17:00:57 +0000 Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=) 2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=) 3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: G6pZWQ/KFBvHpcGXOm2DmUyYousiWtKWjXWIrKPzTi0=) 4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:08:ed:6a:22:6a:da:eb:c7:0b:c4:16:69:42:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Validity Not Before: Dec 6 17:00:57 2025 GMT Not After : Dec 7 17:00:57 2025 GMT Subject: CN=4736581846e3bc38642e49aacab7df5be0bc1eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:c9:d9:19:31:b2:86:54:54:0c:e5:b8:4e: fe:a2:88:2d:c4:d9:fc:16:a6:75:1d:78:36:85:69: 70:6a:0a:42:fd:95:07:d3:67:a9:86:3b:8e:8e:4d: 22:0c:7a:87:ea:4f:10:20:a1:27:bc:05:76:7b:5a: 27:a2:9b:35:82:21:31:a4:fc:13:a8:ce:4b:d8:cd: b6:5f:ea:70:8b:b7:7d:7e:f3:39:80:1a:75:25:df: 67:49:4e:6c:82:2d:c9:48:98:57:c2:89:12:80:ba: 6d:de:b7:05:0b:51:ea:08:a7:22:c2:21:d5:ca:14: 1f:65:dc:d1:77:ba:14:64:aa:86:7b:e3:0b:72:89: a8:7b:e8:9d:4a:d4:c5:ad:03:27:59:0b:d8:c2:db: f1:2f:29:a6:88:aa:cd:79:01:10:03:2c:1a:58:7b: 57:45:44:13:e2:f1:e9:70:18:48:62:24:04:df:9e: 8d:e8:1e:52:ad:e1:db:cd:51:f5:c9:ac:42:9a:44: 0e:6f:56:39:03:5b:a2:23:68:9a:aa:f9:9e:91:49: 8f:4c:48:46:f6:7b:ca:b7:18:0f:12:67:b1:3b:c5: 46:a6:28:e8:48:6b:14:36:6a:a4:42:13:c5:0c:ba: 71:3b:4e:25:d2:d6:5e:d0:13:40:21:5f:fe:08:68: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:36:58:18:46:E3:BC:38:64:2E:49:AA:CA:B7:DF:5B:E0:BC:1E:EE X509v3 Authority Key Identifier: keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ef:e9:d4:28:b8:14:b8:e8:7f:59:11:d8:ce:b0:e4:83:fa: d7:d6:86:dc:9c:25:cb:2c:f6:ae:4e:ce:69:85:09:7c:3f:ee: 68:4c:eb:9d:50:9d:1d:04:ab:21:c0:af:d9:b5:06:e3:9f:e2: 5d:b2:6f:6f:f1:fb:0f:b4:78:9a:f7:81:9d:fa:47:d3:5b:02: 50:c6:ac:0b:62:90:eb:d1:df:f0:14:8c:92:fd:8b:4e:ef:a0: f7:9d:ae:43:ae:11:1d:64:ad:f1:80:60:42:7e:77:09:e4:d2: c2:ae:bf:8e:11:b1:27:8b:61:2b:c7:79:ee:42:1f:be:1e:cd: 33:5a:ca:f9:8f:ef:38:e4:da:43:02:ff:be:f5:bb:22:a7:99: b4:18:b4:49:e6:6c:e0:b6:33:5d:65:6c:8b:14:25:e6:5a:ef: 32:df:08:96:db:cd:da:26:c4:76:7e:4c:1c:a2:45:92:e7:39: 45:69:36:59:5d:e8:b0:c0:db:f2:27:9a:5c:3a:84:19:e6:d7: 0e:ed:42:64:33:41:4f:e9:34:13:86:68:af:c6:28:c2:8e:3b: 2d:d0:94:c4:ca:1c:e6:68:0d:ba:d3:23:b2:6b:a1:c8:6f:d7: 47:5f:24:e4:63:93:4a:b0:0f:0c:0b:b9:5a:c6:d1:0e:e5:d0: ba:dc:fb:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAjtaiJq2uvHC8QWaUK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NTMxYzU0YjFlNzk1NmMyY2MzNzFiMjNlMGE3NTU2N2Fh Mjc1MTgwHhcNMjUxMjA2MTcwMDU3WhcNMjUxMjA3MTcwMDU3WjAzMTEwLwYDVQQD Eyg0NzM2NTgxODQ2ZTNiYzM4NjQyZTQ5YWFjYWI3ZGY1YmUwYmMxZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulHJ2RkxsoZUVAzluE7+oogtxNn8 FqZ1HXg2hWlwagpC/ZUH02ephjuOjk0iDHqH6k8QIKEnvAV2e1onops1giExpPwT qM5L2M22X+pwi7d9fvM5gBp1Jd9nSU5sgi3JSJhXwokSgLpt3rcFC1HqCKciwiHV yhQfZdzRd7oUZKqGe+MLcomoe+idStTFrQMnWQvYwtvxLymmiKrNeQEQAywaWHtX RUQT4vHpcBhIYiQE356N6B5SreHbzVH1yaxCmkQOb1Y5A1uiI2iaqvmekUmPTEhG 9nvKtxgPEmexO8VGpijoSGsUNmqkQhPFDLpxO04l0tZe0BNAIV/+CGhjjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc2WBhG47w4ZC5Jqsq331vgvB7uMB8GA1UdIwQY MBaAFDRTHFSx55VsLMNxsj4KdVZ6onUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEt NDkwNjEwM2RiZDE2LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEtNDkwNjEwM2RiZDE2 LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvu/p1Ci4 FLjof1kR2M6w5IP619aG3Jwlyyz2rk7OaYUJfD/uaEzrnVCdHQSrIcCv2bUG45/i XbJvb/H7D7R4mveBnfpH01sCUMasC2KQ69Hf8BSMkv2LTu+g952uQ64RHWSt8YBg Qn53CeTSwq6/jhGxJ4thK8d57kIfvh7NM1rK+Y/vOOTaQwL/vvW7IqeZtBi0SeZs 4LYzXWVsixQl5lrvMt8IltvN2ibEdn5MHKJFkuc5RWk2WV3osMDb8ieaXDqEGebX Du1CZDNBT+k0E4Zor8Yowo47LdCUxMoc5mgNutMjsmuhyG/XR18k5GOTSrAPDAu5 WsbRDuXQutz7HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:13 2025 by rpki-client