This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json) Hash identifier: yRMrS37ZnqvrLs3sWXXCNDHjt919WewZ4/L4I5BAm2Q= Subject key identifier: C2:D5:53:F9:9E:8F:22:47:97:75:3A:4A:12:F4:2E:90:17:EE:8F:32 Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Certificate serial: 019AF540BF93C3FB6EE4CFFB86491724CE2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft Manifest number: 0373 Signing time: Sat 06 Dec 2025 20:00:52 +0000 Manifest this update: Sat 06 Dec 2025 20:00:52 +0000 Manifest next update: Sun 07 Dec 2025 20:00:52 +0000 Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: TfU31aGydMh0zg9dmEGo8fCQ0n/dcq7oGeYgDdFbG34=) 2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:bf:93:c3:fb:6e:e4:cf:fb:86:49:17:24:ce:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Validity Not Before: Dec 6 20:00:52 2025 GMT Not After : Dec 7 20:00:52 2025 GMT Subject: CN=c2d553f99e8f224797753a4a12f42e9017ee8f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:51:09:75:ee:e2:e2:86:e2:89:f2:5e:68:c2: d3:35:dc:45:34:1e:e4:70:15:fe:a9:cf:b2:68:e5: 35:f3:a6:9c:89:9d:2b:ef:ec:89:7a:08:ee:20:7f: 6f:6a:39:7c:0f:77:56:f4:66:91:9e:9e:64:e9:4d: e4:cd:7a:67:27:a2:19:a7:e5:32:02:45:dc:e3:37: 7d:7c:cb:ac:f1:bd:61:26:2a:b3:b4:a2:d8:16:09: 50:62:71:ce:bb:b4:8f:6c:b6:9c:37:4f:97:f8:22: 6d:d6:2d:21:7e:2f:d8:7a:1d:2e:27:17:c8:74:c0: 92:79:26:f8:3b:f0:2f:05:ec:fd:10:a1:e7:6e:98: eb:29:19:d9:6e:f0:2d:ee:8b:fe:2e:54:9d:20:2d: 7e:68:d0:37:b4:00:aa:97:d7:db:7f:97:76:45:35: fe:9c:77:d0:12:b9:76:e0:f3:bb:bb:71:f6:ea:f9: 13:f2:cd:d3:14:2d:0f:6c:0b:6f:1f:43:1a:60:8e: 4b:98:18:56:73:be:8d:61:b1:3e:10:07:4b:ff:66: e7:d2:f3:a0:71:0a:42:0c:d0:ca:43:9a:6d:72:4c: 2d:86:bb:83:32:c8:4b:fa:68:fb:50:a1:d6:65:64: 70:5e:e5:6d:3d:4e:f9:9d:51:fe:43:ef:bf:30:8f: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:53:F9:9E:8F:22:47:97:75:3A:4A:12:F4:2E:90:17:EE:8F:32 X509v3 Authority Key Identifier: keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:49:16:e8:78:9e:33:76:83:d1:5d:d9:53:e2:70:55:ad:28: b1:b3:b4:1f:c6:02:a3:20:d6:bd:48:7e:61:08:0c:3a:cf:8b: de:a3:52:01:e0:03:a8:bf:41:a2:52:4e:b2:54:5b:30:66:1a: 08:b3:f4:79:9d:06:2d:79:9c:e9:af:09:57:b9:19:13:ed:6b: d1:8a:71:0e:4d:06:7c:b4:fe:ab:a7:02:6f:7b:4c:a0:7a:df: ba:a0:ba:59:e1:45:a1:53:a8:2e:03:6e:4a:c1:f8:6a:65:b8: ec:a1:2f:71:45:18:22:23:5b:cf:78:f7:39:a6:b8:15:f6:ca: e1:58:af:38:c3:00:3b:df:9b:37:78:5f:4a:a2:ca:88:e8:61: bb:a4:31:16:10:28:82:90:62:ba:a4:6e:4e:2e:92:81:2e:cc: 67:26:67:b6:f0:ab:5d:37:22:33:72:14:c8:55:ad:83:73:4f: 03:2e:ec:47:6f:b1:35:ee:d3:1e:55:27:2d:22:48:46:6f:e1: 45:68:d3:5c:27:69:2f:f8:80:ca:17:7e:8a:4a:bd:1c:e0:7b: 31:7b:67:18:b4:1f:29:73:a8:cf:19:83:3f:db:6f:29:1f:5d: 49:3b:be:83:35:14:30:7b:69:ee:46:9f:3b:c2:f9:7e:fd:0f: e5:f2:0c:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QL+Tw/tu5M/7hkkXJM4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YmUyYWE5YjRmYmY5MDcxNWViY2M5MDUzNGY5ZDJkNTRm N2RhNDMwHhcNMjUxMjA2MjAwMDUyWhcNMjUxMjA3MjAwMDUyWjAzMTEwLwYDVQQD EyhjMmQ1NTNmOTllOGYyMjQ3OTc3NTNhNGExMmY0MmU5MDE3ZWU4ZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFEJde7i4obiifJeaMLTNdxFNB7k cBX+qc+yaOU186aciZ0r7+yJegjuIH9vajl8D3dW9GaRnp5k6U3kzXpnJ6IZp+Uy AkXc4zd9fMus8b1hJiqztKLYFglQYnHOu7SPbLacN0+X+CJt1i0hfi/Yeh0uJxfI dMCSeSb4O/AvBez9EKHnbpjrKRnZbvAt7ov+LlSdIC1+aNA3tACql9fbf5d2RTX+ nHfQErl24PO7u3H26vkT8s3TFC0PbAtvH0MaYI5LmBhWc76NYbE+EAdL/2bn0vOg cQpCDNDKQ5ptckwthruDMshL+mj7UKHWZWRwXuVtPU75nVH+Q++/MI+AEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLVU/mejyJHl3U6ShL0LpAX7o8yMB8GA1UdIwQY MBaAFDW+Kqm0+/kHFevMkFNPnS1U99pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgt Y2I5ZjA0YzFlMTU0LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgtY2I5ZjA0YzFlMTU0 LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkkW6Hie M3aD0V3ZU+JwVa0osbO0H8YCoyDWvUh+YQgMOs+L3qNSAeADqL9BolJOslRbMGYa CLP0eZ0GLXmc6a8JV7kZE+1r0YpxDk0GfLT+q6cCb3tMoHrfuqC6WeFFoVOoLgNu SsH4amW47KEvcUUYIiNbz3j3Oaa4FfbK4VivOMMAO9+bN3hfSqLKiOhhu6QxFhAo gpBiuqRuTi6SgS7MZyZntvCrXTciM3IUyFWtg3NPAy7sR2+xNe7THlUnLSJIRm/h RWjTXCdpL/iAyhd+ikq9HOB7MXtnGLQfKXOozxmDP9tvKR9dSTu+gzUUMHtp7kaf O8L5fv0P5fIMIw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:03:54 2025 by rpki-client