This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: X4RxvzwE5qP/HtrpdeYVGSJ0G7ZTmzTUMGzWuAxs/zo= Subject key identifier: E9:2B:B5:5D:92:B2:C7:8A:BE:80:C5:B0:18:68:C9:50:00:B9:52:53 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019AF49C395DEB5C149BF77E327762FCF518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:01:10 +0000 Manifest this update: Sat 06 Dec 2025 17:01:10 +0000 Manifest next update: Sun 07 Dec 2025 17:01:10 +0000 Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=) 2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=) 3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=) 4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=) 5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: y4tjryKJsi7/EwSLnvWy5pjLNldqGJrhwOOq76WK9gQ=) 6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=) 7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=) 8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=) 9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:39:5d:eb:5c:14:9b:f7:7e:32:77:62:fc:f5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Dec 6 17:01:10 2025 GMT Not After : Dec 7 17:01:10 2025 GMT Subject: CN=e92bb55d92b2c78abe80c5b01868c95000b95253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:89:ab:c4:3c:df:39:d3:72:78:ab:aa:69: d4:89:0b:37:ec:b7:1c:ac:59:71:af:67:3e:b2:d5: 2d:b8:61:07:1e:15:97:3c:be:37:2a:ed:46:77:7f: e0:35:8a:5c:57:62:70:ac:b1:6b:05:0c:08:65:0f: 0c:a3:d3:7e:6b:91:33:0b:cf:1b:47:0d:74:0a:b5: c9:6c:85:bb:ad:53:05:80:37:e7:d9:1b:6a:2f:f1: e1:96:39:47:6c:59:04:11:75:a3:31:a3:8e:08:9b: cc:99:65:e2:b3:5f:b5:67:48:9f:d8:bc:16:6a:ff: cc:2f:b5:6e:15:93:47:15:bb:d6:2e:5d:38:bc:65: 34:69:79:ac:10:a4:77:88:2c:50:67:54:92:10:25: 6a:14:22:45:90:20:38:b0:cc:bd:cf:25:92:ea:ff: df:85:72:0a:0c:4c:ac:fe:48:a4:22:f3:5a:50:e2: 2b:bc:73:5b:99:d4:5d:ff:65:51:cc:fe:d6:59:5f: b3:df:26:d0:db:c7:a7:bb:5e:8f:e9:26:fb:bd:b9: 9e:d9:b7:c2:fa:fe:ee:9b:69:9f:ed:cc:14:a3:cd: 1a:07:27:f2:28:b4:0d:48:e2:43:cf:1b:f3:84:35: 52:5f:13:c7:d1:c1:95:56:67:d3:47:a6:ec:44:22: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:B5:5D:92:B2:C7:8A:BE:80:C5:B0:18:68:C9:50:00:B9:52:53 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:97:4d:9b:aa:2d:c8:76:69:5f:c6:b0:2c:80:6b:5a:9f:63: 66:20:58:4e:c2:38:5b:65:be:6e:50:43:9b:64:a0:65:9e:90: 8b:a1:4d:c6:31:f7:f8:f4:37:e6:b4:4c:e5:21:6a:8d:31:f4: be:06:36:f1:64:5e:9e:33:42:9a:de:76:b7:17:8f:d9:fa:c3: 7c:c3:7c:08:bd:ef:c4:a3:7b:4e:ce:1c:c7:52:66:e4:db:87: 34:bd:dc:02:67:9c:09:4d:0e:f4:04:e5:91:d6:2b:5e:0e:65: 7c:56:5e:5b:37:7e:2f:3b:4e:dd:05:7f:06:02:54:5f:0b:e2: a7:c9:b5:5a:fe:0b:d6:e7:53:b5:63:e9:6e:4f:79:3e:b2:22: 6a:ef:9b:87:10:63:2b:ba:be:b3:db:b0:42:3e:89:11:b2:75: b1:cb:c2:f5:66:8c:5e:ad:96:15:1b:e0:3f:0f:23:f1:d6:da: e6:38:eb:36:a2:d0:0b:a8:3a:e7:04:98:89:dd:9d:e8:f4:c9: 89:76:51:d1:92:d1:f9:e2:c8:33:46:1f:00:1f:95:8d:d5:a9: 93:5a:44:c6:5b:bd:c9:af:10:ae:0c:a6:77:47:ba:9e:e7:f7: 38:7d:2d:d8:18:59:8f:06:ff:4f:6b:a3:ac:6b:a0:34:73:6f: 4d:d8:8f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nDld61wUm/d+Mndi/PUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjUxMjA2MTcwMTEwWhcNMjUxMjA3MTcwMTEwWjAzMTEwLwYDVQQD EyhlOTJiYjU1ZDkyYjJjNzhhYmU4MGM1YjAxODY4Yzk1MDAwYjk1MjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxSJq8Q83znTcnirqmnUiQs37Lcc rFlxr2c+stUtuGEHHhWXPL43Ku1Gd3/gNYpcV2JwrLFrBQwIZQ8Mo9N+a5EzC88b Rw10CrXJbIW7rVMFgDfn2RtqL/HhljlHbFkEEXWjMaOOCJvMmWXis1+1Z0if2LwW av/ML7VuFZNHFbvWLl04vGU0aXmsEKR3iCxQZ1SSECVqFCJFkCA4sMy9zyWS6v/f hXIKDEys/kikIvNaUOIrvHNbmdRd/2VRzP7WWV+z3ybQ28enu16P6Sb7vbme2bfC +v7um2mf7cwUo80aByfyKLQNSOJDzxvzhDVSXxPH0cGVVmfTR6bsRCIwFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkrtV2SsseKvoDFsBhoyVAAuVJTMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpdNm6ot yHZpX8awLIBrWp9jZiBYTsI4W2W+blBDm2SgZZ6Qi6FNxjH3+PQ35rRM5SFqjTH0 vgY28WRenjNCmt52txeP2frDfMN8CL3vxKN7Ts4cx1Jm5NuHNL3cAmecCU0O9ATl kdYrXg5lfFZeWzd+LztO3QV/BgJUXwvip8m1Wv4L1udTtWPpbk95PrIiau+bhxBj K7q+s9uwQj6JEbJ1scvC9WaMXq2WFRvgPw8j8dba5jjrNqLQC6g65wSYid2d6PTJ iXZR0ZLR+eLIM0YfAB+VjdWpk1pExlu9ya8Qrgymd0e6nuf3OH0t2BhZjwb/T2uj rGugNHNvTdiPow== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:22 2025 by rpki-client