This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft File: NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft (raw, json) Hash identifier: ai2yu7aqzuNdm/zvKqW4/pYwrqgNTd6WB58nMRNAkBI= Subject key identifier: 0E:8D:8F:88:FA:C2:CC:45:7B:17:D7:BB:9D:74:80:1E:60:0C:DA:A2 Authority key identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D Certificate issuer: /CN=35f49b5d505000b909932c6b4f443e7ef81d780d Certificate serial: 019AF19AB0FAEBD011D20DB392A169807040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl (hash: PxUIqyTByKHJnBjYrVBxbsS9hqWYMgiPCoGKLhYglJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b0:fa:eb:d0:11:d2:0d:b3:92:a1:69:80:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f49b5d505000b909932c6b4f443e7ef81d780d Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=0e8d8f88fac2cc457b17d7bb9d74801e600cdaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:b1:11:23:fd:fe:fd:20:71:c8:2e:f6:2a: 00:fe:79:9f:e7:86:ae:8d:2b:1d:b3:6e:cb:28:2f: 67:8a:f9:12:d1:c3:97:ae:b6:36:33:b0:9f:9a:f3: be:e4:f0:df:2c:70:a3:2c:de:fc:a0:5b:24:5c:0a: 12:57:b6:06:0e:e3:ee:40:26:73:31:1b:78:db:b8: 7b:ba:dd:c0:7e:1f:0a:04:70:28:eb:bc:92:e7:fa: 3c:43:32:3c:ff:4c:b6:8f:8e:ad:37:64:08:30:eb: 40:42:4a:e9:72:fb:d7:93:5c:ce:97:ae:11:2e:d7: fd:22:61:2c:c2:b5:5e:b0:a5:32:fe:9b:ef:5c:37: b7:d8:69:98:1a:00:c0:58:52:d0:a8:c7:b0:18:a6: 1c:8a:67:97:c9:a1:5d:34:69:3e:b5:d8:c1:87:95: 79:60:ea:3a:6e:91:bb:58:8a:4b:f1:14:87:f9:7e: 8e:c2:4f:9a:58:f8:b2:fc:cb:db:86:ef:ee:f9:34: 36:72:f5:5e:0a:74:3f:76:6a:2d:28:ed:a8:ea:c6: a6:67:75:40:93:9e:02:b8:73:ee:fb:e4:0c:2c:73: 17:9e:43:63:f1:8a:ef:d4:4c:b2:a7:46:7c:e1:83: bb:22:49:4c:e4:01:0f:1b:3a:51:ab:10:8e:52:5c: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8D:8F:88:FA:C2:CC:45:7B:17:D7:BB:9D:74:80:1E:60:0C:DA:A2 X509v3 Authority Key Identifier: keyid:35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fb:a6:9a:d0:6c:7f:04:7b:9c:48:17:4a:47:ab:b6:90:73: e6:3c:e2:ca:b5:29:f6:7a:d3:8b:08:66:f0:ef:e2:01:83:b6: e5:99:f4:6d:b5:dd:6d:b1:f7:87:44:76:42:c9:c8:2b:1a:e4: 38:32:99:c2:37:31:6b:62:78:95:6e:21:ae:2f:9f:6b:be:2d: 08:6a:e2:72:f2:bc:14:d7:93:13:a4:ef:fc:34:be:04:84:4e: 39:f3:5e:12:15:9d:40:07:db:f1:37:b2:cf:5a:94:67:13:0f: 28:eb:a6:23:f9:f4:09:64:5a:a7:f6:c5:cd:65:86:d0:41:17: d2:e3:70:1a:36:18:ee:60:e1:ef:e7:cc:53:8c:3f:82:62:8e: 6a:5c:48:e0:1e:c8:03:1b:a8:c5:a1:d2:54:fb:91:7a:c1:93: 2c:1f:f7:27:cb:6e:4a:d2:21:7e:4b:1e:35:98:af:80:b0:c6: 70:16:ff:8d:59:ce:7c:43:41:87:91:e9:b2:78:4b:10:0d:25: 21:2a:e1:64:a5:fd:2d:56:a3:63:29:e1:8e:09:28:ef:3a:42: 37:0b:f5:e5:4e:74:f8:fe:25:90:21:eb:1e:23:39:e6:49:da: f7:86:e0:58:54:50:e7:ab:d6:16:9a:d5:11:35:f3:e3:d3:fb: f4:2d:5b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrD669AR0g2zkqFpgHBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjQ5YjVkNTA1MDAwYjkwOTkzMmM2YjRmNDQzZTdlZjgx ZDc4MGQwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD EygwZThkOGY4OGZhYzJjYzQ1N2IxN2Q3YmI5ZDc0ODAxZTYwMGNkYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi+xESP9/v0gccgu9ioA/nmf54au jSsds27LKC9nivkS0cOXrrY2M7CfmvO+5PDfLHCjLN78oFskXAoSV7YGDuPuQCZz MRt427h7ut3Afh8KBHAo67yS5/o8QzI8/0y2j46tN2QIMOtAQkrpcvvXk1zOl64R Ltf9ImEswrVesKUy/pvvXDe32GmYGgDAWFLQqMewGKYcimeXyaFdNGk+tdjBh5V5 YOo6bpG7WIpL8RSH+X6Owk+aWPiy/Mvbhu/u+TQ2cvVeCnQ/dmotKO2o6samZ3VA k54CuHPu++QMLHMXnkNj8Yrv1Eyyp0Z84YO7IklM5AEPGzpRqxCOUlyQrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6Nj4j6wsxFexfXu510gB5gDNqiMB8GA1UdIwQY MBaAFDX0m11QUAC5CZMsa09EPn74HXgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZTYlhWQlFBTGtKa3l4clQwUS1mdmdkZUEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iMzkyMTctMjVkMy00MDFkLWExZDEt MDJiM2RlODM0YmY0LzEvTmZTYlhWQlFBTGtKa3l4clQwUS1mdmdkZUEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iMzkyMTctMjVkMy00MDFkLWExZDEtMDJiM2RlODM0YmY0 LzEvTmZTYlhWQlFBTGtKa3l4clQwUS1mdmdkZUEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvummtBs fwR7nEgXSkertpBz5jziyrUp9nrTiwhm8O/iAYO25Zn0bbXdbbH3h0R2QsnIKxrk ODKZwjcxa2J4lW4hri+fa74tCGricvK8FNeTE6Tv/DS+BIROOfNeEhWdQAfb8Tey z1qUZxMPKOumI/n0CWRap/bFzWWG0EEX0uNwGjYY7mDh7+fMU4w/gmKOalxI4B7I AxuoxaHSVPuResGTLB/3J8tuStIhfkseNZivgLDGcBb/jVnOfENBh5HpsnhLEA0l ISrhZKX9LVajYynhjgko7zpCNwv15U50+P4lkCHrHiM55kna94bgWFRQ56vWFprV ETXz49P79C1b2A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:00 2025 by rpki-client