This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json) Hash identifier: 5GcimUKaQAZ92+RPxnylGH26n5xKQWdZrqitazDutZQ= Subject key identifier: 8E:59:08:16:8E:A9:A6:B9:53:9D:6F:00:0D:2E:01:E5:5E:CC:EB:53 Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef Certificate serial: 019AF19B20EE6C14EAD75A699ACDB967E68E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: ZhGUGcDRTBm6knUor67cXxA+NlPoVUTfEXq38rgzU0o=) 2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:20:ee:6c:14:ea:d7:5a:69:9a:cd:b9:67:e6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=8e5908168ea9a6b9539d6f000d2e01e55ecceb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:11:a4:95:0a:17:8e:3e:4a:c4:e6:4e:f6: 4e:77:b2:b9:1f:35:b3:88:17:31:fd:62:76:7f:2f: 5d:c8:39:ba:fb:82:c2:0d:8e:4f:41:49:70:34:a8: 36:e2:ed:7d:b6:d9:da:e3:57:b2:fa:fa:03:3d:ad: 62:9c:97:ec:46:7c:25:1b:fe:e1:2d:d1:fa:89:b2: c6:af:f3:89:00:86:ed:73:52:6d:d6:bd:5f:18:f3: d8:1f:1c:64:58:da:a2:77:f6:00:bd:7f:26:3a:de: d6:01:bd:80:0b:2f:c5:18:98:41:43:1b:63:36:22: e2:2a:bf:b5:d1:ec:39:1e:70:1c:9d:10:5c:62:5a: 6c:d9:da:ef:11:a0:83:d7:c5:c8:8a:bf:94:5f:36: 19:05:62:69:66:63:44:4d:21:67:79:2a:06:ff:c4: bd:42:93:74:69:7b:a8:db:84:9f:bf:90:cd:da:e5: 9e:e1:12:5a:d4:d0:09:31:4b:5a:86:b5:ce:d6:02: 99:fa:2d:f0:8d:5e:14:93:68:5d:1e:96:f6:e0:8c: b6:82:a6:03:51:54:32:1a:e1:a8:23:b3:e5:f2:48: a7:23:ea:61:78:30:0b:0a:a0:a6:45:d1:11:04:ab: 5f:34:44:7b:31:b5:d4:d7:a9:5a:e9:ce:1b:28:54: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:59:08:16:8E:A9:A6:B9:53:9D:6F:00:0D:2E:01:E5:5E:CC:EB:53 X509v3 Authority Key Identifier: keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:52:64:7d:65:05:c3:3e:b6:ee:03:c2:cf:b3:e3:19:63:f1: 06:f5:58:ff:b9:b9:56:32:c0:53:67:2c:a0:46:09:81:e6:dd: d0:29:02:79:47:12:a4:e9:5e:bc:fe:b8:3d:89:64:a0:49:63: 19:67:5e:fa:1f:c8:29:4e:32:db:cb:8c:bc:bb:a1:e6:6b:ad: 54:b2:62:0d:f2:71:7d:a9:5b:a0:ad:0a:7d:c3:c4:a0:f9:7f: 7d:37:e1:b5:a5:8d:39:ce:86:16:d6:54:69:bf:3b:0b:10:df: 96:76:14:28:1a:31:93:64:c6:94:04:99:c0:8c:f7:b6:96:23: ad:b3:00:03:66:d0:39:81:db:83:3b:37:5b:d5:56:5b:09:34: 86:31:23:86:8d:d7:b6:5d:69:ec:19:d3:c9:de:83:3f:5e:84: 0d:71:a5:44:9e:2b:87:ae:81:25:64:09:87:f1:da:f9:6d:04: 13:a3:3a:d3:18:46:e2:c9:6b:df:6a:df:3f:29:66:df:d0:ad: e2:2b:48:87:cf:4c:c8:67:94:45:4a:4c:d2:32:a9:d3:8f:28: 5a:54:04:3c:a5:0a:f7:f4:d9:a9:47:d3:6b:c1:e6:3d:90:f8: 59:3d:dc:9b:9c:a5:06:ca:ea:77:ba:c7:e2:8c:ef:4d:67:db: b7:61:1d:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyDubBTq11ppms25Z+aOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl NTE0ZWYwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD Eyg4ZTU5MDgxNjhlYTlhNmI5NTM5ZDZmMDAwZDJlMDFlNTVlY2NlYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooIRpJUKF44+SsTmTvZOd7K5HzWz iBcx/WJ2fy9dyDm6+4LCDY5PQUlwNKg24u19ttna41ey+voDPa1inJfsRnwlG/7h LdH6ibLGr/OJAIbtc1Jt1r1fGPPYHxxkWNqid/YAvX8mOt7WAb2ACy/FGJhBQxtj NiLiKr+10ew5HnAcnRBcYlps2drvEaCD18XIir+UXzYZBWJpZmNETSFneSoG/8S9 QpN0aXuo24Sfv5DN2uWe4RJa1NAJMUtahrXO1gKZ+i3wjV4Uk2hdHpb24Iy2gqYD UVQyGuGoI7Pl8kinI+pheDALCqCmRdERBKtfNER7MbXU16la6c4bKFTDzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5ZCBaOqaa5U51vAA0uAeVezOtTMB8GA1UdIwQY MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt NWQzM2UxOGE2OWEwLzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFJkfWUF wz627gPCz7PjGWPxBvVY/7m5VjLAU2csoEYJgebd0CkCeUcSpOlevP64PYlkoElj GWde+h/IKU4y28uMvLuh5mutVLJiDfJxfalboK0KfcPEoPl/fTfhtaWNOc6GFtZU ab87CxDflnYUKBoxk2TGlASZwIz3tpYjrbMAA2bQOYHbgzs3W9VWWwk0hjEjho3X tl1p7BnTyd6DP16EDXGlRJ4rh66BJWQJh/Ha+W0EE6M60xhG4slr32rfPylm39Ct 4itIh89MyGeURUpM0jKp048oWlQEPKUK9/TZqUfTa8HmPZD4WT3cm5ylBsrqd7rH 4ozvTWfbt2EdxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:30:21 2025 by rpki-client