This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json) Hash identifier: F7QuEwjmVYVyhPeB+KgLKTkUIFGW+Diq0bCNGeulpGI= Subject key identifier: 90:14:50:CD:E4:0F:3E:49:36:AA:84:AE:92:35:B8:E9:26:84:4C:BD Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8 Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8 Certificate serial: 019AF3890CC3380A21435917EBEB2A0D642D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft Manifest number: 16E6 Signing time: Sat 06 Dec 2025 12:00:36 +0000 Manifest this update: Sat 06 Dec 2025 12:00:36 +0000 Manifest next update: Sun 07 Dec 2025 12:00:36 +0000 Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=) 2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: eW0DRuhRegBOUvrQHeIo7+Lg+ggxuj5JPB1fGRwpTvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0c:c3:38:0a:21:43:59:17:eb:eb:2a:0d:64:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8 Validity Not Before: Dec 6 12:00:36 2025 GMT Not After : Dec 7 12:00:36 2025 GMT Subject: CN=901450cde40f3e4936aa84ae9235b8e926844cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:d1:d9:7b:86:19:ee:13:9f:76:6c:ad:ed: 09:48:a8:72:6e:a1:67:71:cf:b4:8d:9b:9c:61:a2: d6:5a:09:ff:3c:f1:15:5a:d8:49:d0:36:ca:38:80: 39:41:e6:08:af:1f:c0:2b:c2:ba:42:ce:a4:e3:c8: cc:3c:74:a9:12:94:fd:97:b0:df:55:9a:43:17:cf: c0:f1:3b:88:43:eb:c4:49:e2:71:64:1b:bc:16:af: 0b:79:26:ed:39:e2:2c:e0:b6:95:fa:c0:c8:13:6b: 78:a9:bb:10:e6:36:a6:96:33:2f:ff:c1:ee:30:71: 9c:c1:46:c2:33:5b:07:9f:53:76:d4:50:fa:71:86: 15:cb:6f:35:38:bb:fb:e7:ec:f4:ec:7f:b4:38:31: 4f:f4:e0:68:fd:4b:6c:85:89:f2:73:ad:25:6d:0f: c3:45:7b:be:46:ad:b9:b3:b6:0d:a9:32:96:0d:8e: ff:69:a1:2a:5a:cb:fa:e2:93:89:72:c2:05:f6:96: 62:67:8c:88:af:20:18:ad:95:5f:19:fa:0b:69:02: 02:d6:d7:4e:9b:cf:56:c2:06:32:02:75:ac:8b:0c: 44:59:90:ca:a4:81:48:ad:16:31:84:0c:52:8b:90: ff:31:7b:83:af:48:d7:db:ca:92:fd:29:02:e4:0b: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:14:50:CD:E4:0F:3E:49:36:AA:84:AE:92:35:B8:E9:26:84:4C:BD X509v3 Authority Key Identifier: keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a8:45:f7:28:4e:52:e2:42:58:cc:24:59:ff:b4:c7:a6:93: bd:31:8f:15:10:bb:bf:5a:6f:28:d5:f3:f3:e3:25:68:ae:35: 3b:f0:dd:28:4c:bc:fd:59:8f:2f:ec:f3:13:5c:6e:ca:8e:5b: bc:e9:48:91:cc:ee:07:3a:35:06:a3:00:c2:6b:21:6c:0a:c7: 90:d4:30:70:94:ea:f2:26:1d:03:44:cb:02:c9:1d:6f:88:07: 5e:67:9a:52:24:5e:c2:5c:eb:15:98:34:cd:55:54:0a:81:b9: 4b:a1:59:40:9d:a3:7a:d7:3b:4e:b1:88:7e:b6:a5:fd:9f:a3: d1:6f:00:65:fb:53:bd:65:20:83:ae:b1:20:08:96:ca:5f:0e: e0:ad:69:32:39:20:db:f8:59:26:49:f3:8f:68:93:63:17:5a: 7e:dc:33:65:08:bd:a3:47:19:2d:74:a8:08:56:ba:fe:47:71: 4d:9f:04:dc:9b:e0:7e:60:aa:59:0b:e5:90:04:c3:2c:46:7e: 25:e2:6c:6f:94:0f:19:a1:c8:54:7f:ac:5d:ac:15:27:be:ee: 55:ad:f0:85:80:b0:94:f9:5c:17:42:3b:59:f0:cc:12:02:00: 81:1f:09:53:7f:96:56:be:68:69:1b:f8:6f:0e:51:8e:ba:e0: 71:fb:37:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQzDOAohQ1kX6+sqDWQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjFmZDY5ZTcxOTZhZWY1ZTI5YmE3OTU2ODBkYWMzZTM0 ODY4YzgwHhcNMjUxMjA2MTIwMDM2WhcNMjUxMjA3MTIwMDM2WjAzMTEwLwYDVQQD Eyg5MDE0NTBjZGU0MGYzZTQ5MzZhYTg0YWU5MjM1YjhlOTI2ODQ0Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlADR2XuGGe4Tn3Zsre0JSKhybqFn cc+0jZucYaLWWgn/PPEVWthJ0DbKOIA5QeYIrx/AK8K6Qs6k48jMPHSpEpT9l7Df VZpDF8/A8TuIQ+vESeJxZBu8Fq8LeSbtOeIs4LaV+sDIE2t4qbsQ5jamljMv/8Hu MHGcwUbCM1sHn1N21FD6cYYVy281OLv75+z07H+0ODFP9OBo/UtshYnyc60lbQ/D RXu+Rq25s7YNqTKWDY7/aaEqWsv64pOJcsIF9pZiZ4yIryAYrZVfGfoLaQIC1tdO m89WwgYyAnWsiwxEWZDKpIFIrRYxhAxSi5D/MXuDr0jX28qS/SkC5AtGxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAUUM3kDz5JNqqErpI1uOkmhEy9MB8GA1UdIwQY MBaAFDXx/WnnGWrvXim6eVaA2sPjSGjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMt ZjljYTcxMjRmMDk4LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMtZjljYTcxMjRmMDk4 LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6hF9yhO UuJCWMwkWf+0x6aTvTGPFRC7v1pvKNXz8+MlaK41O/DdKEy8/VmPL+zzE1xuyo5b vOlIkczuBzo1BqMAwmshbArHkNQwcJTq8iYdA0TLAskdb4gHXmeaUiRewlzrFZg0 zVVUCoG5S6FZQJ2jetc7TrGIfral/Z+j0W8AZftTvWUgg66xIAiWyl8O4K1pMjkg 2/hZJknzj2iTYxdaftwzZQi9o0cZLXSoCFa6/kdxTZ8E3JvgfmCqWQvlkATDLEZ+ JeJsb5QPGaHIVH+sXawVJ77uVa3whYCwlPlcF0I7WfDMEgIAgR8JU3+WVr5oaRv4 bw5Rjrrgcfs3bg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:08 2025 by rpki-client