This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json) Hash identifier: 1tGx3Ks2+Jb1X3iELnoUUt6MKs/Up/r5oybwkauqyx0= Subject key identifier: 3B:AD:B2:11:EB:0D:E3:06:1D:A6:1B:D0:2C:AF:F3:B0:24:A4:2A:2C Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1 Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1 Certificate serial: 019B3AC6B07CFBED176A5DE07484023BF642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 08:00:58 +0000 Manifest this update: Sat 20 Dec 2025 08:00:58 +0000 Manifest next update: Sun 21 Dec 2025 08:00:58 +0000 Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=) 2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: geRGdw3H7FMEmUJkX2chMn0YymHuC8X/bLN0ezS5Wf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:b0:7c:fb:ed:17:6a:5d:e0:74:84:02:3b:f6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1 Validity Not Before: Dec 20 08:00:58 2025 GMT Not After : Dec 21 08:00:58 2025 GMT Subject: CN=3badb211eb0de3061da61bd02caff3b024a42a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:32:30:a3:06:96:46:05:43:09:33:87:0d: b6:18:3d:cc:cc:1e:96:80:04:45:20:d7:d7:9e:7d: 31:27:bc:58:32:7e:52:b8:21:f1:f4:2a:a0:f0:6e: e7:d8:75:b1:de:3e:36:44:42:65:86:92:54:6f:b2: 5c:5c:dc:b5:6f:23:e0:88:d4:85:97:d8:cf:bd:fb: a2:7d:67:b7:bf:5a:a9:99:9d:a6:1a:53:07:62:17: 30:b8:39:20:10:39:8c:9d:98:85:1d:0b:f3:0f:c0: c1:f2:27:e7:22:35:5e:99:4c:2d:e3:d6:c0:6f:7e: 24:7e:7f:5d:0c:e4:36:8e:55:aa:4a:30:ed:5b:4c: 63:42:2d:0f:7d:f5:6a:9e:b7:1d:37:4f:65:ba:ab: b3:3d:fa:4b:16:b0:59:78:bf:45:57:6e:51:cf:9f: 56:41:07:2e:8c:2a:ff:4e:58:3b:f9:9c:9b:7b:84: e4:b1:75:d4:3c:39:91:13:94:be:06:dc:7e:ba:79: 50:88:fd:7f:0d:97:24:9b:bf:95:30:75:bc:59:e5: bf:f2:ab:1e:6a:2b:b2:c0:fa:1a:ca:28:9c:72:0b: 21:9c:f7:99:9c:c4:9c:17:a4:c6:9c:ed:f5:68:a4: 60:16:bf:4b:51:86:9e:56:4c:62:cc:0b:1a:cf:d6: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:B2:11:EB:0D:E3:06:1D:A6:1B:D0:2C:AF:F3:B0:24:A4:2A:2C X509v3 Authority Key Identifier: keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a2:57:d0:40:52:5c:e7:3f:d4:40:f7:05:6d:a7:04:24:29: 9f:22:1f:dd:76:4e:c4:f8:56:79:8c:68:3a:c2:b2:f8:97:9c: 33:09:61:47:4a:ac:a9:f2:ac:43:fb:21:4f:ee:51:70:cc:3c: d9:e8:26:83:51:e2:a8:58:ab:f5:de:01:4f:56:6a:21:31:7d: 48:69:ca:23:e4:bc:6b:b9:43:d2:46:4b:f7:f7:05:ba:a7:3d: 2c:93:07:72:46:34:19:97:19:45:c5:55:59:24:17:c3:3b:b6: 3f:7d:f7:58:12:e3:79:0e:d4:21:dd:74:12:33:ae:ff:59:11: 85:1a:83:29:f1:c3:a9:4d:90:62:8d:1d:20:d6:99:20:8b:81: ce:91:e5:c2:d8:eb:da:71:7f:39:36:09:cb:7b:35:58:28:e1: 16:99:7c:bf:8a:0b:09:45:f0:8f:0b:30:a9:1f:92:4e:97:25: 08:6c:a3:d9:d6:21:6c:4e:66:36:02:f0:5e:a7:50:10:95:43: 98:ba:14:08:78:74:00:a9:5a:3a:a9:4b:ce:f7:c5:6e:b9:ac: f7:17:19:7f:42:cc:23:da:32:e6:c3:11:b7:41:bf:56:c2:ab: a2:2a:7a:27:51:4a:c8:d7:51:34:b9:fd:c2:28:33:8c:bd:7a: 65:e5:c5:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xrB8++0Xal3gdIQCO/ZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YzBhNWJhNWJjODJlMjBlMDQ2ZmJiNTRjMDY1ODA2ZjRj N2I2YTEwHhcNMjUxMjIwMDgwMDU4WhcNMjUxMjIxMDgwMDU4WjAzMTEwLwYDVQQD EygzYmFkYjIxMWViMGRlMzA2MWRhNjFiZDAyY2FmZjNiMDI0YTQyYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8oyMKMGlkYFQwkzhw22GD3MzB6W gARFINfXnn0xJ7xYMn5SuCHx9Cqg8G7n2HWx3j42REJlhpJUb7JcXNy1byPgiNSF l9jPvfuifWe3v1qpmZ2mGlMHYhcwuDkgEDmMnZiFHQvzD8DB8ifnIjVemUwt49bA b34kfn9dDOQ2jlWqSjDtW0xjQi0PffVqnrcdN09luquzPfpLFrBZeL9FV25Rz59W QQcujCr/Tlg7+Zybe4TksXXUPDmRE5S+Btx+unlQiP1/DZckm7+VMHW8WeW/8qse aiuywPoayiiccgshnPeZnMScF6TGnO31aKRgFr9LUYaeVkxizAsaz9YrDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDutshHrDeMGHaYb0Cyv87AkpCosMB8GA1UdIwQY MBaAFDXApbpbyC4g4Eb7tUwGWAb0x7ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83MDczZjEtM2EwOC00ZTRhLWJlZGYt NThjY2Y5NWQyODJiLzEvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83MDczZjEtM2EwOC00ZTRhLWJlZGYtNThjY2Y5NWQyODJi LzEvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKJX0EBS XOc/1ED3BW2nBCQpnyIf3XZOxPhWeYxoOsKy+JecMwlhR0qsqfKsQ/shT+5RcMw8 2egmg1HiqFir9d4BT1ZqITF9SGnKI+S8a7lD0kZL9/cFuqc9LJMHckY0GZcZRcVV WSQXwzu2P333WBLjeQ7UId10EjOu/1kRhRqDKfHDqU2QYo0dINaZIIuBzpHlwtjr 2nF/OTYJy3s1WCjhFpl8v4oLCUXwjwswqR+STpclCGyj2dYhbE5mNgLwXqdQEJVD mLoUCHh0AKlaOqlLzvfFbrms9xcZf0LMI9oy5sMRt0G/VsKroip6J1FKyNdRNLn9 wigzjL16ZeXF3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 09:57:56 2025 by rpki-client