This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json) Hash identifier: WzzHxo45pcwXdSSzl0fjF5K2SuXWg5nbVDQWaUatFro= Subject key identifier: 39:00:82:EB:4D:4C:70:06:99:DF:81:EC:1B:16:32:FB:8B:D6:03:BD Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Certificate serial: 019B2C2F680A2B40709821E226A21FAC9694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft Manifest number: 11E3 Signing time: Wed 17 Dec 2025 12:01:02 +0000 Manifest this update: Wed 17 Dec 2025 12:01:02 +0000 Manifest next update: Thu 18 Dec 2025 12:01:02 +0000 Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: EuciG0DHmrI5DhMhyop/IvrKHD0tuz00yMOZKeQH5bM=) 2: SgjnIjuq3AeuRbPMRDHnDCjAALI.roa (hash: Pfy5puiab8wDSE6eVbJ+tlKeXTAJeJMbBe/7aBk5Ysw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:68:0a:2b:40:70:98:21:e2:26:a2:1f:ac:96:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Validity Not Before: Dec 17 12:01:02 2025 GMT Not After : Dec 18 12:01:02 2025 GMT Subject: CN=390082eb4d4c700699df81ec1b1632fb8bd603bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:27:b3:c8:f4:66:67:8a:ca:f9:16:80:e7: 5e:77:1b:0f:0e:96:df:e4:76:f1:58:28:ef:fc:5b: 9a:ab:73:22:3f:2c:61:8d:40:2f:30:55:92:35:cb: 35:fa:e3:b5:38:12:0a:3d:c6:70:a3:f5:0b:cb:50: b3:2e:53:3a:9c:6b:18:71:9b:37:b2:b9:29:7f:f0: 2b:6e:53:96:66:29:7d:4c:37:a4:e8:6e:89:5d:9a: 76:88:ae:7a:0b:d9:ff:02:81:58:4a:ba:09:af:17: 88:19:ee:20:bb:e9:de:d5:3f:4b:e2:85:3c:39:ab: 04:12:29:9d:7e:55:27:d2:f8:ba:8b:c9:43:95:43: 03:28:77:65:bb:a8:67:ae:46:3b:1f:8a:aa:b7:4b: 0e:fe:7a:33:69:f7:e6:ef:6b:61:f7:8e:bb:61:51: 98:68:56:75:27:ca:1b:33:0a:13:a9:74:6c:ec:ac: 70:94:87:d2:ca:eb:dd:00:7a:e7:8a:fa:ff:6e:c0: 1e:0d:89:ed:06:e6:ec:e7:60:86:41:a1:63:29:d2: 9a:e3:5d:9c:6f:74:57:d5:47:8f:02:c0:e5:5f:c8: ef:eb:1b:09:dc:46:a8:0b:d0:17:67:9e:d9:16:10: 31:19:b7:d5:ba:8e:ec:a8:84:f5:70:34:61:be:02: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:00:82:EB:4D:4C:70:06:99:DF:81:EC:1B:16:32:FB:8B:D6:03:BD X509v3 Authority Key Identifier: keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9d:47:bf:4e:5f:c1:92:ed:17:92:f8:df:c1:9c:f4:92:43: 80:25:5b:60:af:42:04:ea:a2:fc:ff:57:87:6f:02:97:b8:5d: c8:2f:b4:04:33:bd:9f:f0:cb:a6:0a:0a:98:a9:7b:a3:c7:2a: 4a:65:01:5c:94:96:a9:ec:d8:26:dc:85:c1:30:de:fc:54:4b: be:c9:04:49:27:47:d8:9b:1f:80:95:69:1c:48:01:df:6e:42: 59:30:c7:0c:9e:79:3e:37:ac:4d:01:0f:38:f4:80:fd:38:33: e0:ad:f2:af:84:ae:cc:b7:0d:30:c2:0f:42:a2:63:ef:d4:f7: 58:2a:6a:05:6a:32:2e:8a:a7:75:ad:87:76:c8:a5:40:31:ff: 5e:e4:55:88:f0:2f:51:90:44:ce:b9:35:73:45:14:60:83:51: c9:0e:76:b3:19:4e:5b:5c:26:00:19:2a:18:dc:f4:13:79:26: 3a:55:3e:84:ed:18:88:df:09:be:9a:6a:66:52:a8:00:2d:4b: df:50:c1:e3:a0:aa:7c:56:2b:6f:c0:36:ca:af:3f:1f:6e:26: cb:47:51:b3:60:c6:a6:d9:c2:d5:4c:63:a4:0e:11:01:95:16: 8c:cc:0c:da:45:67:7e:8d:b1:4d:26:ae:ba:16:a4:44:af:a9: 74:17:8d:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL2gKK0BwmCHiJqIfrJaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm YWQyZjcwHhcNMjUxMjE3MTIwMTAyWhcNMjUxMjE4MTIwMTAyWjAzMTEwLwYDVQQD EygzOTAwODJlYjRkNGM3MDA2OTlkZjgxZWMxYjE2MzJmYjhiZDYwM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFsns8j0ZmeKyvkWgOdedxsPDpbf 5HbxWCjv/Fuaq3MiPyxhjUAvMFWSNcs1+uO1OBIKPcZwo/ULy1CzLlM6nGsYcZs3 srkpf/ArblOWZil9TDek6G6JXZp2iK56C9n/AoFYSroJrxeIGe4gu+ne1T9L4oU8 OasEEimdflUn0vi6i8lDlUMDKHdlu6hnrkY7H4qqt0sO/nozaffm72th9467YVGY aFZ1J8obMwoTqXRs7KxwlIfSyuvdAHrnivr/bsAeDYntBubs52CGQaFjKdKa412c b3RX1UePAsDlX8jv6xsJ3EaoC9AXZ57ZFhAxGbfVuo7sqIT1cDRhvgIr/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkAgutNTHAGmd+B7BsWMvuL1gO9MB8GA1UdIwQY MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4 LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM51Hv05f wZLtF5L438Gc9JJDgCVbYK9CBOqi/P9Xh28Cl7hdyC+0BDO9n/DLpgoKmKl7o8cq SmUBXJSWqezYJtyFwTDe/FRLvskESSdH2JsfgJVpHEgB325CWTDHDJ55PjesTQEP OPSA/Tgz4K3yr4SuzLcNMMIPQqJj79T3WCpqBWoyLoqnda2HdsilQDH/XuRViPAv UZBEzrk1c0UUYINRyQ52sxlOW1wmABkqGNz0E3kmOlU+hO0YiN8JvppqZlKoAC1L 31DB46CqfFYrb8A2yq8/H24my0dRs2DGptnC1UxjpA4RAZUWjMwM2kVnfo2xTSau uhakRK+pdBeNnw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:07:19 2025 by rpki-client