This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json) Hash identifier: uvyMguer4CFE/EeH0TQxMiiNj3s57aemFt+AL/NSi04= Subject key identifier: A1:37:69:03:E1:04:34:54:1C:C7:67:8A:A9:74:F7:09:F3:0F:F6:6B Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Certificate serial: 019AF276F146A09DFBC9A5FAC669969D6ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft Manifest number: 0B37 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=) 2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=) 3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: C6p6qS3T9YurbpveIFp79ZbS5OXbE8QFKnRFoBttBMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f1:46:a0:9d:fb:c9:a5:fa:c6:69:96:9d:6e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=a1376903e10434541cc7678aa974f709f30ff66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:01:9f:56:5e:e5:7c:05:26:4c:ec:f8:95: 98:22:6f:56:65:f5:73:6d:ad:f9:92:2a:07:88:6d: d7:07:82:b1:f6:30:ba:99:b7:6b:43:cf:20:e6:0f: c7:6f:af:e3:b5:23:9e:55:40:4c:f5:a5:dc:b4:d4: 09:bd:06:9e:0c:94:48:48:e2:f7:e9:f1:d1:b2:8f: 37:23:cb:1c:dc:c4:a9:20:65:75:00:c2:19:5c:b7: 14:a5:63:58:63:ca:1f:fa:79:d6:97:77:c9:c1:5a: 56:02:d2:7d:ba:fb:b1:4d:5f:7a:6b:d5:c0:c8:2c: 34:a5:5f:d3:07:b2:d5:8d:ac:b9:84:85:66:b7:6d: 7b:8b:3c:3c:e6:19:ad:57:c9:03:5a:1c:6d:e1:70: 39:f4:46:14:e5:38:5b:55:72:0b:f8:a6:2b:2e:5d: a3:86:13:67:2e:82:ab:97:11:7a:d3:df:a8:9f:e6: 60:0c:b7:d5:3d:8f:c6:00:74:19:1f:3f:81:ba:3f: e8:8d:bf:c4:94:d1:c2:a7:cb:61:29:98:10:ac:35: 27:5f:e4:40:28:96:ae:cd:6e:67:b4:88:5d:6a:9e: 2a:05:fa:3b:14:6d:c2:de:75:27:bf:4d:ee:19:c6: ee:7c:d7:32:cf:95:68:83:c0:4b:1e:d2:98:4a:56: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:37:69:03:E1:04:34:54:1C:C7:67:8A:A9:74:F7:09:F3:0F:F6:6B X509v3 Authority Key Identifier: keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:56:7d:50:97:76:48:2c:8e:c7:4e:7d:f2:9a:8c:da:c5:1f: 17:62:92:e7:b2:6a:f1:c3:8c:66:e1:bf:6b:63:a6:1c:68:01: 10:34:16:6c:41:be:62:e4:b7:10:e0:b0:98:3d:1e:e0:c2:8d: ce:3a:3b:cd:2e:95:69:f1:43:ea:dc:de:fb:79:9f:a8:bd:17: fc:77:25:b3:8f:9d:cf:29:cd:9c:a2:50:32:63:68:3e:96:30: 64:40:8b:68:7e:fd:7c:01:c1:03:70:0c:cc:20:c3:32:59:56: ef:14:b0:a8:02:4d:eb:c0:d2:67:d9:2f:19:a3:16:3c:4d:49: c8:c2:30:aa:a1:5b:1f:e7:43:cc:c0:6d:9f:40:5c:70:da:c1: c0:82:d6:2a:75:c6:42:d1:3b:db:40:a1:2e:12:9c:3e:3b:6b: 9b:45:ef:94:c7:f2:15:ca:f9:01:cf:f2:5c:07:b3:5a:dc:8e: fc:e7:77:18:43:54:a5:1d:c2:5e:dc:b9:84:2d:ff:53:3f:9a: 01:5a:4d:78:ad:c5:a0:37:02:c7:41:79:72:68:2d:0c:cd:ab: 7e:52:a7:ea:3c:27:bc:e6:9d:97:04:7b:95:96:b5:c1:38:d7: ff:6c:49:7d:d0:55:d1:ad:58:80:fd:89:31:68:ed:65:76:0a: 07:60:d8:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvFGoJ37yaX6xmmWnW7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh M2ExODMwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhhMTM3NjkwM2UxMDQzNDU0MWNjNzY3OGFhOTc0ZjcwOWYzMGZmNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDoBn1Ze5XwFJkzs+JWYIm9WZfVz ba35kioHiG3XB4Kx9jC6mbdrQ88g5g/Hb6/jtSOeVUBM9aXctNQJvQaeDJRISOL3 6fHRso83I8sc3MSpIGV1AMIZXLcUpWNYY8of+nnWl3fJwVpWAtJ9uvuxTV96a9XA yCw0pV/TB7LVjay5hIVmt217izw85hmtV8kDWhxt4XA59EYU5ThbVXIL+KYrLl2j hhNnLoKrlxF609+on+ZgDLfVPY/GAHQZHz+Buj/ojb/ElNHCp8thKZgQrDUnX+RA KJauzW5ntIhdap4qBfo7FG3C3nUnv03uGcbufNcyz5Vog8BLHtKYSlYp2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE3aQPhBDRUHMdniql09wnzD/ZrMB8GA1UdIwQY MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt ZDU4YjA5NGRmMDZjLzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFZ9UJd2 SCyOx0598pqM2sUfF2KS57Jq8cOMZuG/a2OmHGgBEDQWbEG+YuS3EOCwmD0e4MKN zjo7zS6VafFD6tze+3mfqL0X/Hcls4+dzynNnKJQMmNoPpYwZECLaH79fAHBA3AM zCDDMllW7xSwqAJN68DSZ9kvGaMWPE1JyMIwqqFbH+dDzMBtn0BccNrBwILWKnXG QtE720ChLhKcPjtrm0XvlMfyFcr5Ac/yXAezWtyO/Od3GENUpR3CXty5hC3/Uz+a AVpNeK3FoDcCx0F5cmgtDM2rflKn6jwnvOadlwR7lZa1wTjX/2xJfdBV0a1YgP2J MWjtZXYKB2DY7w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:58 2025 by rpki-client