This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json) Hash identifier: yoTJOJ0nDNX1O3ZAx44xTpbaYh1uaioyg9fnl6xSt8Q= Subject key identifier: 64:9F:E4:49:54:80:AF:20:90:FA:97:99:64:D4:3F:43:33:D7:CA:39 Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Certificate serial: 019AF389D32FA8AA42224EFC21EA226A1D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 12:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:01:27 +0000 Manifest next update: Sun 07 Dec 2025 12:01:27 +0000 Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=) 2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: 32uTXpxtVUaX16nFS2jM5od+n8WW8YjnjY1Ytw04Uko=) 3: sPxjsNKAZYfgxPi8TQlY-mZZcT4.roa (hash: EWGb5uGqI3pCu9DA248NQJ9YLr39oAfQHZAN5stmGVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d3:2f:a8:aa:42:22:4e:fc:21:ea:22:6a:1d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Validity Not Before: Dec 6 12:01:27 2025 GMT Not After : Dec 7 12:01:27 2025 GMT Subject: CN=649fe4495480af2090fa979964d43f4333d7ca39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:80:0d:56:ef:ae:74:a9:0b:c5:af:27:20: ea:a2:0d:ab:a1:cc:6c:49:76:ab:1d:af:6e:bd:8c: fa:39:dc:ac:1f:3a:14:36:98:27:e1:d3:e8:b9:06: 6d:ed:b2:fd:be:ae:c2:ea:ba:fe:24:64:09:a4:03: 37:88:60:ef:07:73:c4:8b:d6:78:70:3a:d4:2a:c8: 17:76:31:67:68:65:46:0f:c9:58:e5:e3:72:58:69: 8c:9b:2f:ee:eb:20:83:7f:85:7e:a8:70:0e:52:fb: d1:ad:6d:d2:cf:7a:4c:6f:a2:49:14:99:ee:36:f9: 41:bb:c2:ab:f8:1e:6c:f2:5f:63:c2:8b:63:a4:f1: 56:2d:d0:9e:24:b8:5a:ce:e2:f8:30:2e:ec:32:36: 8a:72:f3:9d:1a:67:b0:f3:ab:76:bc:ca:ca:6e:45: c1:a3:0c:2d:2c:1d:c4:0d:9e:35:98:d8:78:0a:f3: ee:34:35:4e:4f:28:23:3b:2b:0e:a2:95:8e:ef:5a: 6d:66:e1:80:40:c4:5a:19:ec:26:85:7d:8c:99:1e: cf:ab:51:7e:d9:18:0f:72:6d:40:bc:4d:2c:06:a3: 9d:16:90:68:b0:2b:2d:ec:27:02:f3:ac:24:39:c2: 32:4e:b8:ae:b3:87:93:0d:f0:f2:2a:7e:59:43:3f: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9F:E4:49:54:80:AF:20:90:FA:97:99:64:D4:3F:43:33:D7:CA:39 X509v3 Authority Key Identifier: keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b2:46:90:11:0c:9d:a0:01:7b:7a:a3:4f:f1:12:a6:3d:c5: 70:71:07:55:df:b3:cb:26:59:6f:51:14:ba:34:e0:a3:63:5d: a3:55:31:1d:7f:5e:4f:47:cc:ee:45:da:5c:48:83:3d:38:82: d6:a5:85:5f:fc:cd:33:6e:95:c7:6e:9d:ea:a5:14:8c:f6:f3: fc:b3:3b:dc:ef:6c:50:89:3f:d0:69:3c:0b:0a:4f:85:b1:22: c8:a5:a0:25:48:ee:eb:d9:a3:40:43:5c:e4:4d:a7:a0:d7:aa: b6:43:91:42:7b:01:ae:10:e1:10:8c:a8:8e:77:e0:31:e2:4b: 71:05:15:dc:1b:06:45:96:99:b8:eb:3e:7f:ac:32:b6:b0:52: 01:29:a3:79:9a:ba:77:92:b3:dd:90:10:e3:a5:e4:ca:1e:af: 8c:97:2f:5b:cd:72:b0:7a:43:7f:62:ad:c9:46:74:d8:6d:02: 62:76:84:84:77:4d:13:30:da:65:19:aa:86:1a:34:88:8f:1a: 4f:19:f1:ad:aa:04:15:72:11:2a:ba:bb:01:c9:4c:7f:c2:2a: 84:40:f8:d0:af:eb:47:6c:01:70:da:21:9e:f4:89:6e:29:54: 68:f6:93:d6:bc:08:1e:9d:97:90:78:a1:ba:46:20:36:4e:2d: 08:c1:8b:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidMvqKpCIk78Ieoiah2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0 OTBmMGUwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD Eyg2NDlmZTQ0OTU0ODBhZjIwOTBmYTk3OTk2NGQ0M2Y0MzMzZDdjYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjeADVbvrnSpC8WvJyDqog2rocxs SXarHa9uvYz6OdysHzoUNpgn4dPouQZt7bL9vq7C6rr+JGQJpAM3iGDvB3PEi9Z4 cDrUKsgXdjFnaGVGD8lY5eNyWGmMmy/u6yCDf4V+qHAOUvvRrW3Sz3pMb6JJFJnu NvlBu8Kr+B5s8l9jwotjpPFWLdCeJLhazuL4MC7sMjaKcvOdGmew86t2vMrKbkXB owwtLB3EDZ41mNh4CvPuNDVOTygjOysOopWO71ptZuGAQMRaGewmhX2MmR7Pq1F+ 2RgPcm1AvE0sBqOdFpBosCst7CcC86wkOcIyTrius4eTDfDyKn5ZQz8t2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSf5ElUgK8gkPqXmWTUP0Mz18o5MB8GA1UdIwQY MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLJGkBEM naABe3qjT/ESpj3FcHEHVd+zyyZZb1EUujTgo2Ndo1UxHX9eT0fM7kXaXEiDPTiC 1qWFX/zNM26Vx26d6qUUjPbz/LM73O9sUIk/0Gk8CwpPhbEiyKWgJUju69mjQENc 5E2noNeqtkORQnsBrhDhEIyojnfgMeJLcQUV3BsGRZaZuOs+f6wytrBSASmjeZq6 d5Kz3ZAQ46Xkyh6vjJcvW81ysHpDf2KtyUZ02G0CYnaEhHdNEzDaZRmqhho0iI8a TxnxraoEFXIRKrq7AclMf8IqhED40K/rR2wBcNohnvSJbilUaPaT1rwIHp2XkHih ukYgNk4tCMGLvA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:00 2025 by rpki-client