This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json) Hash identifier: hYCStc6qZgv2L3jlUPIUSATvDxjJqG6qyEOTb8u4osI= Subject key identifier: 54:5F:CB:1E:0B:63:18:B1:30:0F:12:F5:07:E9:05:1C:08:8F:8C:78 Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Certificate serial: 019AF12E4C803F2FD690B124432CAF57C38E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft Manifest number: 16A0 Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=) 2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: TtvYKy5troSiJVJRc/NTgOl8jShgimqy+iJTJ6mjqIc=) 3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4c:80:3f:2f:d6:90:b1:24:43:2c:af:57:c3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=545fcb1e0b6318b1300f12f507e9051c088f8c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:52:61:30:a2:1c:da:a3:c7:03:71:31:e9: 0b:a3:88:d8:6d:87:87:fd:c3:4d:2c:72:5c:3b:19: 97:74:aa:77:d0:65:6a:2b:a5:be:a3:04:03:ff:7d: 24:8a:c8:26:54:35:ae:fc:6a:f0:15:f9:c6:f5:85: 70:64:47:ff:a5:5a:40:1e:83:e9:72:f8:07:78:c9: ea:74:f3:81:45:51:ad:94:35:de:d2:b7:56:e8:55: 55:3a:97:10:21:43:a0:fc:c6:79:93:72:93:43:b7: 61:00:63:c8:cc:b1:12:6b:c4:41:e8:59:46:53:ce: c7:de:d1:d6:7b:11:93:f8:fa:d2:78:82:de:9c:72: 61:4a:fa:f7:65:d5:10:1a:55:e4:00:16:c0:a7:0b: 1c:7e:c6:bb:f6:ec:d5:82:7c:c5:da:94:0c:ac:1b: 05:f7:2e:c4:56:fb:75:8d:17:98:56:bc:45:2d:da: e4:54:5b:36:46:4f:1f:1d:81:b1:2c:26:13:8f:64: ab:ac:ac:6d:cb:3a:40:e2:bf:46:37:37:3f:51:37: ce:13:da:18:80:3c:98:11:80:a2:20:78:5b:8e:5c: 3f:5c:a0:0e:ec:a7:1a:e0:d3:d2:49:82:1f:08:af: b2:94:45:96:05:6b:ae:21:64:0d:9a:74:db:c4:af: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5F:CB:1E:0B:63:18:B1:30:0F:12:F5:07:E9:05:1C:08:8F:8C:78 X509v3 Authority Key Identifier: keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:83:4f:c3:c4:fa:70:b9:bf:f7:a7:3c:1f:e7:7a:04:1c:dc: ee:63:50:f5:ac:c6:8d:82:e9:b9:10:98:70:79:c0:d6:ac:05: 22:13:6a:0c:0f:ba:d1:fe:d2:56:83:ae:8a:91:bd:71:74:d6: 2e:1f:60:74:79:a0:53:f8:40:52:71:27:12:19:fa:47:8a:83: 40:52:c4:b9:3d:96:54:8a:6b:b1:be:6e:d1:6f:fe:d6:c6:2d: 1d:b6:3c:ab:16:83:b1:68:9a:e4:c8:af:5c:a5:ae:26:c4:29: e8:4d:3e:1d:07:ce:bc:8b:37:9b:14:76:f0:7a:b1:0b:9e:be: dc:cc:70:f4:79:95:67:e2:67:66:ce:cc:10:ac:7e:62:db:f5: fe:1e:57:04:a5:17:c4:af:34:64:c2:ca:e6:41:57:e7:27:dd: 78:b4:26:6c:e7:9c:53:4f:34:ac:8e:9f:f1:d9:38:d9:25:56: 19:da:15:57:63:b1:c5:e7:bf:f3:6c:53:b7:0a:57:16:7e:43: b2:20:fe:51:a0:e6:5f:dc:89:4b:7e:c9:81:88:60:6d:43:ff: 60:70:91:45:b9:43:15:50:a3:af:05:9f:af:b8:b2:41:47:ef: 37:80:ea:56:97:02:bd:f4:c5:d1:a3:62:c1:50:fe:6e:05:de: b9:30:cb:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkyAPy/WkLEkQyyvV8OOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh MGNkYzkwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD Eyg1NDVmY2IxZTBiNjMxOGIxMzAwZjEyZjUwN2U5MDUxYzA4OGY4Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoRSYTCiHNqjxwNxMekLo4jYbYeH /cNNLHJcOxmXdKp30GVqK6W+owQD/30kisgmVDWu/GrwFfnG9YVwZEf/pVpAHoPp cvgHeMnqdPOBRVGtlDXe0rdW6FVVOpcQIUOg/MZ5k3KTQ7dhAGPIzLESa8RB6FlG U87H3tHWexGT+PrSeILenHJhSvr3ZdUQGlXkABbApwscfsa79uzVgnzF2pQMrBsF 9y7EVvt1jReYVrxFLdrkVFs2Rk8fHYGxLCYTj2SrrKxtyzpA4r9GNzc/UTfOE9oY gDyYEYCiIHhbjlw/XKAO7Kca4NPSSYIfCK+ylEWWBWuuIWQNmnTbxK8E2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRfyx4LYxixMA8S9QfpBRwIj4x4MB8GA1UdIwQY MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYNPw8T6 cLm/96c8H+d6BBzc7mNQ9azGjYLpuRCYcHnA1qwFIhNqDA+60f7SVoOuipG9cXTW Lh9gdHmgU/hAUnEnEhn6R4qDQFLEuT2WVIprsb5u0W/+1sYtHbY8qxaDsWia5Miv XKWuJsQp6E0+HQfOvIs3mxR28HqxC56+3Mxw9HmVZ+JnZs7MEKx+Ytv1/h5XBKUX xK80ZMLK5kFX5yfdeLQmbOecU080rI6f8dk42SVWGdoVV2Oxxee/82xTtwpXFn5D siD+UaDmX9yJS37JgYhgbUP/YHCRRblDFVCjrwWfr7iyQUfvN4DqVpcCvfTF0aNi wVD+bgXeuTDLGA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:09 2025 by rpki-client