This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json) Hash identifier: PUnToEVHaOAtxaI5r3++h/I69lezu62f8mLPyIqCo0Q= Subject key identifier: DC:53:9B:59:86:11:47:FA:74:44:3A:75:ED:E3:1F:22:FE:92:69:76 Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Certificate serial: 019AF31CF8806CBD500FAEB658B7D82E3B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft Manifest number: 02B0 Signing time: Sat 06 Dec 2025 10:02:32 +0000 Manifest this update: Sat 06 Dec 2025 10:02:32 +0000 Manifest next update: Sun 07 Dec 2025 10:02:32 +0000 Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: a9fniuFZbQ7ZKS+V9YIyZaYwTot7KU/+cECjZf4/NDs=) 2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=) 3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f8:80:6c:bd:50:0f:ae:b6:58:b7:d8:2e:3b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Validity Not Before: Dec 6 10:02:32 2025 GMT Not After : Dec 7 10:02:32 2025 GMT Subject: CN=dc539b59861147fa74443a75ede31f22fe926976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:eb:61:00:38:95:84:25:21:31:a7:6c:30: f9:40:87:60:1f:09:0f:e0:87:23:51:31:55:c4:5e: f6:b2:9b:d0:87:8d:72:fd:60:db:56:9d:fa:7e:8b: cd:a7:c5:43:7f:f3:6b:07:d5:b3:f7:5c:28:67:c0: bf:18:a1:8a:05:30:6e:33:13:ca:45:f5:9c:18:0b: a8:57:80:4a:6f:57:33:fb:7d:88:6b:68:05:8f:b5: 4d:bf:7e:86:24:ca:1b:f4:66:a0:42:af:46:98:c3: 86:c6:cd:6a:59:88:a5:b4:4a:5e:b8:dc:16:27:3b: f1:d5:f5:48:b4:8f:ed:c9:90:a9:03:bb:01:11:2c: 8f:3d:cb:bf:2f:6e:e1:56:44:eb:3c:55:9e:50:6c: 74:d6:27:4e:1b:ee:6f:6d:68:83:37:58:a6:62:4e: 58:80:ca:f1:40:18:49:ee:6d:31:21:77:bb:32:f1: 06:0b:8a:3f:21:35:32:fc:c2:89:a7:54:77:8b:75: 35:13:fd:ee:e0:a4:e8:c5:2e:c0:df:eb:1e:f3:c5: c4:69:ca:f6:7a:8d:19:64:4c:7d:66:b8:69:a7:69: db:42:87:b9:20:fd:3a:e0:e4:3c:58:1d:47:86:30: 83:1a:3b:29:20:f1:1c:91:b9:70:a9:25:cf:fb:73: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:9B:59:86:11:47:FA:74:44:3A:75:ED:E3:1F:22:FE:92:69:76 X509v3 Authority Key Identifier: keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c0:b5:02:c2:56:94:ab:9c:5f:51:09:9a:22:cd:8e:22:8f: 70:49:d7:60:0b:2b:19:57:63:cb:9f:cd:03:fc:f7:f8:4a:fe: 7b:88:a3:e0:8d:e1:5e:7d:1b:06:b4:9b:e7:e5:55:80:7e:9e: 51:4b:18:e7:46:a0:fa:67:3e:25:7a:24:22:79:c7:9b:ac:97: 98:bd:09:cb:f4:fd:d7:17:f3:e7:51:e8:3c:c6:37:40:60:e6: f5:85:13:ef:ac:a6:91:1e:96:d7:8f:02:72:a9:90:a1:0a:c9: 11:3b:0a:92:a9:3a:c4:f6:21:f3:64:0d:81:cf:81:b7:c5:8a: 53:6e:6d:a1:a6:23:ae:ca:90:9f:0d:09:dc:34:8c:17:0a:12: 9f:bb:d5:e1:a2:6c:86:60:a1:57:fd:77:73:68:72:58:70:7e: 73:14:05:d3:49:74:48:f7:45:41:a4:f0:43:85:c7:3d:f9:97: a4:29:56:a4:ab:da:1e:94:99:04:5c:bd:8b:97:7f:e3:dd:c4: 11:55:12:4d:9d:4b:28:c0:0a:16:db:c7:de:24:f6:87:a7:f9: 38:e5:6d:ab:0c:d9:b4:85:d1:d6:09:cc:ce:84:12:bc:31:e5: e4:c2:a9:bb:11:72:29:f9:b1:e9:b0:fd:d6:b6:8b:6a:6d:98: 4f:df:9c:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPiAbL1QD662WLfYLjsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGQ0MDI2ZDI5MGYzMjAxZDI4ZWY2ODRkM2M1YWMxM2M5 NmVjNmQwHhcNMjUxMjA2MTAwMjMyWhcNMjUxMjA3MTAwMjMyWjAzMTEwLwYDVQQD EyhkYzUzOWI1OTg2MTE0N2ZhNzQ0NDNhNzVlZGUzMWYyMmZlOTI2OTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCDrYQA4lYQlITGnbDD5QIdgHwkP 4IcjUTFVxF72spvQh41y/WDbVp36fovNp8VDf/NrB9Wz91woZ8C/GKGKBTBuMxPK RfWcGAuoV4BKb1cz+32Ia2gFj7VNv36GJMob9GagQq9GmMOGxs1qWYiltEpeuNwW Jzvx1fVItI/tyZCpA7sBESyPPcu/L27hVkTrPFWeUGx01idOG+5vbWiDN1imYk5Y gMrxQBhJ7m0xIXe7MvEGC4o/ITUy/MKJp1R3i3U1E/3u4KToxS7A3+se88XEacr2 eo0ZZEx9Zrhpp2nbQoe5IP064OQ8WB1HhjCDGjspIPEckblwqSXP+3N/AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxTm1mGEUf6dEQ6de3jHyL+kml2MB8GA1UdIwQY MBaAFDTdQCbSkPMgHSjvaE08WsE8luxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt ODc4NTA3ZWQ0NmY3LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3 LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMC1AsJW lKucX1EJmiLNjiKPcEnXYAsrGVdjy5/NA/z3+Er+e4ij4I3hXn0bBrSb5+VVgH6e UUsY50ag+mc+JXokInnHm6yXmL0Jy/T91xfz51HoPMY3QGDm9YUT76ymkR6W148C cqmQoQrJETsKkqk6xPYh82QNgc+Bt8WKU25toaYjrsqQnw0J3DSMFwoSn7vV4aJs hmChV/13c2hyWHB+cxQF00l0SPdFQaTwQ4XHPfmXpClWpKvaHpSZBFy9i5d/493E EVUSTZ1LKMAKFtvH3iT2h6f5OOVtqwzZtIXR1gnMzoQSvDHl5MKpuxFyKfmx6bD9 1raLam2YT9+cHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:00 2025 by rpki-client