This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json) Hash identifier: eATdT0dQy9Gbqy2TjdQLhPM8TYySCvzPWKUVyJmWENE= Subject key identifier: 06:07:B7:53:C7:E2:75:E3:2E:68:5F:32:C8:11:8E:5A:9B:A2:96:55 Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Certificate serial: 019B405C489C9B9C94CECAEB91379A2C22EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft Manifest number: 02D8 Signing time: Sun 21 Dec 2025 10:02:28 +0000 Manifest this update: Sun 21 Dec 2025 10:02:28 +0000 Manifest next update: Mon 22 Dec 2025 10:02:28 +0000 Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: 4IlGz7Cq6vrxqYv9mjfnqF1BYMEttleBB1DlTpQHsMs=) 2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=) 3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:48:9c:9b:9c:94:ce:ca:eb:91:37:9a:2c:22:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Validity Not Before: Dec 21 10:02:28 2025 GMT Not After : Dec 22 10:02:28 2025 GMT Subject: CN=0607b753c7e275e32e685f32c8118e5a9ba29655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:62:90:85:1e:7f:1a:db:81:f5:b2:83:a0: 42:97:3e:bf:44:e6:b8:1b:5f:69:8e:ad:a4:a7:45: 51:b8:0c:6d:fd:fe:96:8f:28:bc:65:ee:8c:91:b1: ee:bf:6c:f2:4a:4e:c4:b9:78:d3:fb:a6:89:0a:99: 3a:c1:22:e8:6f:9e:2e:21:0f:74:6d:e6:d2:0c:e0: b5:de:16:f1:6e:15:f9:4f:1e:cc:4f:23:77:57:e3: 2a:ed:cf:01:d3:2b:a9:c6:9c:1f:3c:ca:e3:38:ac: be:30:2a:20:f4:fc:34:87:7d:33:b4:90:6e:f5:c5: bc:79:62:33:1e:b4:91:a0:9c:c9:13:22:00:10:69: c9:f2:91:7c:90:06:fc:2b:d5:5c:74:18:6b:6c:e8: 52:b3:02:6b:da:89:8f:6a:8c:5b:af:24:a6:33:7d: c9:50:5d:d3:93:d8:2b:8a:a7:b3:76:83:6a:be:ea: 86:56:10:96:ce:dc:ff:cf:c0:b9:63:82:50:35:66: de:62:6e:91:b3:33:48:d3:ec:27:0e:54:2b:1f:08: a4:35:71:ee:4c:77:34:cb:c9:fc:c1:52:c6:17:4d: cc:66:fb:99:01:32:68:ca:01:90:8c:34:8c:49:e3: ad:6b:7d:f9:c6:34:1b:42:57:0a:20:dc:b2:7a:eb: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:07:B7:53:C7:E2:75:E3:2E:68:5F:32:C8:11:8E:5A:9B:A2:96:55 X509v3 Authority Key Identifier: keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:33:6e:d1:b0:02:f3:fd:3b:79:eb:1c:cf:bf:9d:03:10:ca: 0f:7e:1d:a8:2a:8f:56:9c:86:53:02:43:07:e8:8f:57:23:d2: 0e:7b:f0:a0:b8:b6:a3:2d:cd:5e:37:f3:a5:31:0b:5c:f7:ec: 00:42:5c:15:7b:3a:ca:5c:76:24:50:7b:12:2e:47:67:ab:fb: 73:df:e1:2d:19:51:1f:a6:ae:90:85:79:9b:a5:dc:da:33:e0: 10:0b:9f:c9:fb:76:34:85:30:c7:2e:10:d0:08:9a:0f:df:76: 70:24:95:65:f4:fe:55:fa:3d:a1:90:54:f7:2a:88:71:2b:b8: fd:c9:f4:8e:5f:41:3b:e1:06:39:e7:39:5c:7e:87:6e:82:3d: 59:a9:39:b8:d1:11:3e:c6:23:c4:1f:a6:83:90:dd:d9:08:98: cd:e7:96:3b:41:6a:d6:da:80:d9:9c:30:f4:07:ab:c1:bc:26: 40:6b:13:a0:5e:78:d8:28:d1:04:20:a4:94:b2:bf:ad:2c:37: 23:5d:e6:08:f4:26:b4:68:03:75:9a:13:a4:80:db:66:0a:f4: 90:18:34:22:71:2d:a4:74:ee:79:f8:dc:01:91:65:48:f0:bd: f1:5d:cd:04:7a:5c:93:b1:af:50:76:3b:6f:7e:a2:5a:90:42: 54:8d:c8:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXEicm5yUzsrrkTeaLCLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGQ0MDI2ZDI5MGYzMjAxZDI4ZWY2ODRkM2M1YWMxM2M5 NmVjNmQwHhcNMjUxMjIxMTAwMjI4WhcNMjUxMjIyMTAwMjI4WjAzMTEwLwYDVQQD EygwNjA3Yjc1M2M3ZTI3NWUzMmU2ODVmMzJjODExOGU1YTliYTI5NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtBikIUefxrbgfWyg6BClz6/ROa4 G19pjq2kp0VRuAxt/f6Wjyi8Ze6MkbHuv2zySk7EuXjT+6aJCpk6wSLob54uIQ90 bebSDOC13hbxbhX5Tx7MTyN3V+Mq7c8B0yupxpwfPMrjOKy+MCog9Pw0h30ztJBu 9cW8eWIzHrSRoJzJEyIAEGnJ8pF8kAb8K9VcdBhrbOhSswJr2omPaoxbrySmM33J UF3Tk9griqezdoNqvuqGVhCWztz/z8C5Y4JQNWbeYm6RszNI0+wnDlQrHwikNXHu THc0y8n8wVLGF03MZvuZATJoygGQjDSMSeOta335xjQbQlcKINyyeutEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYHt1PH4nXjLmhfMsgRjlqbopZVMB8GA1UdIwQY MBaAFDTdQCbSkPMgHSjvaE08WsE8luxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt ODc4NTA3ZWQ0NmY3LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3 LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDNu0bAC 8/07eescz7+dAxDKD34dqCqPVpyGUwJDB+iPVyPSDnvwoLi2oy3NXjfzpTELXPfs AEJcFXs6ylx2JFB7Ei5HZ6v7c9/hLRlRH6aukIV5m6Xc2jPgEAufyft2NIUwxy4Q 0AiaD992cCSVZfT+Vfo9oZBU9yqIcSu4/cn0jl9BO+EGOec5XH6HboI9Wak5uNER PsYjxB+mg5Dd2QiYzeeWO0Fq1tqA2Zww9AerwbwmQGsToF542CjRBCCklLK/rSw3 I13mCPQmtGgDdZoTpIDbZgr0kBg0InEtpHTuefjcAZFlSPC98V3NBHpck7GvUHY7 b36iWpBCVI3ICw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:30:16 2025 by rpki-client