This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json) Hash identifier: OI3/xyAcUZxbavgdPhr90YMLWhRUTFgjFP19I/GfiUU= Subject key identifier: 70:E4:E7:E9:11:9E:03:8F:6A:D2:E8:0C:69:2F:D5:E2:C7:1E:D2:EC Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Certificate serial: 019AF276D3C5FE64F267D9653541F81C7609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft Manifest number: 0CD7 Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: 0XrtsgH11ZFgAx7UTFQFi3a5BBIutL36KpRN7F92cxs=) 2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d3:c5:fe:64:f2:67:d9:65:35:41:f8:1c:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=70e4e7e9119e038f6ad2e80c692fd5e2c71ed2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:d0:62:13:46:e3:83:71:3e:ec:28:d7:b4: ed:22:ab:14:12:1d:29:f9:7d:be:ec:55:8e:15:6a: f1:56:07:78:aa:a7:94:52:85:29:fe:eb:de:c5:dc: 32:f6:32:18:b6:9e:28:08:8a:31:7b:05:b3:e1:fa: 05:c7:5a:be:f4:81:20:ce:64:d9:f5:3b:82:e4:44: 00:12:0c:e3:cf:5c:7e:5b:d2:00:96:c6:50:5a:97: 86:5f:eb:8f:98:4f:3f:fd:6e:d6:0a:11:6f:de:cb: fb:a9:91:9f:27:9a:20:b9:69:62:04:00:9d:a9:16: 2d:bd:7a:2b:e5:eb:c6:36:31:05:7e:a8:17:12:fb: 3d:be:4e:1e:c0:46:de:41:f6:62:e7:df:e3:8b:03: 97:53:af:92:b3:0a:75:41:cb:db:91:cb:f3:0f:a9: a4:bb:43:9e:b2:68:c0:af:56:e7:47:0d:63:a7:03: 2d:57:e0:6b:a6:f1:c9:38:51:16:6a:f9:18:50:c4: 0a:ad:88:5e:e6:e7:4a:c3:b1:a1:3d:47:a4:23:c6: f1:dc:ad:75:99:97:dd:7f:9e:a4:a7:30:db:b9:80: 1e:06:42:47:17:ce:92:3b:93:df:66:2c:29:9d:8f: 01:85:d9:aa:cc:b0:83:19:d0:13:5a:71:5f:b9:ab: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:E7:E9:11:9E:03:8F:6A:D2:E8:0C:69:2F:D5:E2:C7:1E:D2:EC X509v3 Authority Key Identifier: keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d2:00:fc:4e:a3:36:7c:f2:7b:aa:05:c2:ea:66:10:45:86: 5f:84:11:0d:6d:6c:f5:91:20:3a:47:4f:15:28:98:57:50:fc: 6d:8f:09:46:ab:e4:c2:6f:1f:62:8d:f0:80:b7:7c:7d:33:71: f6:55:02:ba:2c:45:ab:08:6e:96:ed:56:82:fe:0a:f0:f9:47: 00:10:50:63:f9:5d:d6:4b:9d:18:b2:06:49:ac:f6:1f:b5:bd: 5a:41:bf:48:7b:0e:1d:e5:7a:f7:e4:0b:ea:33:87:4b:e6:6c: 30:47:67:87:0a:df:e9:95:e5:9a:98:ae:a8:10:98:05:d2:39: 9c:ea:21:6f:50:e9:b0:a5:ba:ec:a1:2e:b5:9a:d8:87:6e:3c: 68:0d:76:67:60:0e:9f:78:54:8e:10:50:91:7f:f2:90:13:89: 7b:57:8b:83:d1:db:b5:f5:a8:6d:b6:43:5b:f7:33:9a:2b:df: 3b:ce:8d:d1:4a:64:74:16:c5:c8:53:e0:4d:1e:14:8b:be:15: 2c:68:97:80:a6:0b:2a:ee:05:87:11:40:17:be:2e:e6:a7:1e: 7a:fe:40:cd:d8:42:5e:b5:2c:00:fb:5c:24:e0:c2:33:99:ae: 2d:ac:dd:64:80:fd:33:91:69:25:66:5f:62:8f:95:7a:bc:19: e1:c5:87:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtPF/mTyZ9llNUH4HHYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWU2ZTFkNjZmYzA0N2UwZTg5ZmYwNDVjMmQwOGNhMTdk NTVlYTUwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD Eyg3MGU0ZTdlOTExOWUwMzhmNmFkMmU4MGM2OTJmZDVlMmM3MWVkMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWrQYhNG44NxPuwo17TtIqsUEh0p +X2+7FWOFWrxVgd4qqeUUoUp/uvexdwy9jIYtp4oCIoxewWz4foFx1q+9IEgzmTZ 9TuC5EQAEgzjz1x+W9IAlsZQWpeGX+uPmE8//W7WChFv3sv7qZGfJ5oguWliBACd qRYtvXor5evGNjEFfqgXEvs9vk4ewEbeQfZi59/jiwOXU6+Sswp1QcvbkcvzD6mk u0OesmjAr1bnRw1jpwMtV+BrpvHJOFEWavkYUMQKrYhe5udKw7GhPUekI8bx3K11 mZfdf56kpzDbuYAeBkJHF86SO5PfZiwpnY8BhdmqzLCDGdATWnFfuauJgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDk5+kRngOPatLoDGkv1eLHHtLsMB8GA1UdIwQY MBaAFDRebh1m/AR+Don/BFwtCMoX1V6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTct ZGRkNzNkNTA5ZTEyLzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTctZGRkNzNkNTA5ZTEy LzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINIA/E6j Nnzye6oFwupmEEWGX4QRDW1s9ZEgOkdPFSiYV1D8bY8JRqvkwm8fYo3wgLd8fTNx 9lUCuixFqwhulu1Wgv4K8PlHABBQY/ld1kudGLIGSaz2H7W9WkG/SHsOHeV69+QL 6jOHS+ZsMEdnhwrf6ZXlmpiuqBCYBdI5nOohb1DpsKW67KEutZrYh248aA12Z2AO n3hUjhBQkX/ykBOJe1eLg9HbtfWobbZDW/czmivfO86N0UpkdBbFyFPgTR4Ui74V LGiXgKYLKu4FhxFAF74u5qceev5AzdhCXrUsAPtcJODCM5muLazdZID9M5FpJWZf Yo+VerwZ4cWHUg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:18 2025 by rpki-client