This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json) Hash identifier: rV8dqVjOL+Hzs7LWZMIobcqNtJhl1uS4gvqj7OpzWac= Subject key identifier: 27:91:13:70:79:A5:5D:6D:C7:F6:31:BC:05:EA:3A:9F:7F:F3:F8:EB Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec Certificate serial: 019AF2097840FDB21FF98681D6726F14F5C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft Manifest number: 149B Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=) 2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: fgsXZU1EIo4j3/QW116NqXg9W1tL99fMhdco7aaP59o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:78:40:fd:b2:1f:f9:86:81:d6:72:6f:14:f5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=2791137079a55d6dc7f631bc05ea3a9f7ff3f8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:16:95:e0:30:9f:d6:f3:b8:71:bc:d2:2a: ab:83:f8:99:72:0c:82:68:e9:ea:c9:5e:5b:15:c8: c2:40:0b:51:35:f8:f1:b9:ae:ba:8b:7b:eb:36:28: e3:24:02:87:12:a0:91:7a:92:79:21:39:2f:8a:7d: 39:65:e1:12:63:9a:7d:0e:f9:29:44:8d:d2:0d:72: ea:09:48:0c:35:63:aa:3a:6c:9c:a0:63:36:d8:be: b9:05:dc:22:02:32:a7:dc:64:d9:96:28:92:2c:57: 69:ac:d2:7d:78:c7:1e:8e:24:c9:f6:0b:71:dc:5a: e3:aa:c5:64:c6:b0:68:6a:17:1a:5a:53:b0:43:71: 68:35:d0:3a:47:d9:f7:cf:d9:27:17:b2:53:b3:7c: b0:8b:d9:ed:fe:16:f4:6c:4e:6b:f1:67:e3:56:21: c6:73:01:68:ff:e7:b5:5c:b9:17:d4:06:15:4f:39: 4c:fb:4e:33:99:77:07:e6:30:a1:87:c0:b8:f5:6e: ec:c1:b9:a0:80:9f:79:95:0c:b6:d5:d4:51:ec:a1: 0d:55:fc:1b:83:f4:58:6a:f5:cd:e1:8a:4e:15:91: 03:45:9c:33:20:50:79:1c:11:4b:aa:e8:4a:47:c5: 3a:bd:66:a2:a9:8c:77:e5:e2:9e:74:8b:38:82:c6: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:91:13:70:79:A5:5D:6D:C7:F6:31:BC:05:EA:3A:9F:7F:F3:F8:EB X509v3 Authority Key Identifier: keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e9:53:87:9a:b2:c8:f7:77:1b:61:73:5b:3b:b5:6f:4b:79: 09:08:85:0d:e1:35:f4:98:a9:79:46:21:f4:66:ed:61:62:9e: 11:2d:62:7b:0a:51:4b:4e:a1:eb:12:ab:e7:7b:05:a5:6b:e9: 66:09:32:f3:7d:b3:30:c3:c0:27:f9:f0:b5:f3:06:1f:61:ba: 91:bf:97:aa:ea:54:f9:1a:5d:1a:ab:6c:30:89:25:59:a6:a3: f6:a7:23:ee:dc:27:e4:68:f6:a7:c4:c3:24:66:5e:a1:89:c3: 6b:13:b4:40:37:60:e3:40:e3:41:07:1f:42:0a:cb:5b:ad:80: bc:b5:e1:8f:49:a1:37:cb:9d:c0:71:10:13:95:6a:9e:94:f3: b5:ba:c3:86:a0:03:d0:b6:fe:af:f2:09:57:3f:07:b4:d7:5a: 81:b8:87:16:6a:47:b5:d7:f1:6c:a1:bc:b6:11:f3:39:85:ce: da:ee:a3:0c:21:80:c9:44:18:56:14:92:6b:ff:6c:25:78:5d: fd:34:6c:6d:ee:30:83:5f:26:91:d7:3d:37:64:88:20:66:ca: f2:67:48:d9:ae:bc:69:2c:e0:eb:a5:db:35:4d:9e:bb:1d:08: c9:1d:23:91:c5:d8:a5:b2:1c:39:96:b3:14:a3:08:18:8d:31: 6e:f9:d7:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXhA/bIf+YaB1nJvFPXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjhkNWY5MTM4NTY4YjUyY2IwOTM2ZTJiNGM5NGY3N2Nl NTdhZWMwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EygyNzkxMTM3MDc5YTU1ZDZkYzdmNjMxYmMwNWVhM2E5ZjdmZjNmOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq0WleAwn9bzuHG80iqrg/iZcgyC aOnqyV5bFcjCQAtRNfjxua66i3vrNijjJAKHEqCRepJ5ITkvin05ZeESY5p9Dvkp RI3SDXLqCUgMNWOqOmycoGM22L65BdwiAjKn3GTZliiSLFdprNJ9eMcejiTJ9gtx 3FrjqsVkxrBoahcaWlOwQ3FoNdA6R9n3z9knF7JTs3ywi9nt/hb0bE5r8WfjViHG cwFo/+e1XLkX1AYVTzlM+04zmXcH5jChh8C49W7swbmggJ95lQy21dRR7KENVfwb g/RYavXN4YpOFZEDRZwzIFB5HBFLquhKR8U6vWaiqYx35eKedIs4gsaGvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeRE3B5pV1tx/YxvAXqOp9/8/jrMB8GA1UdIwQY MBaAFDS41fkThWi1LLCTbitMlPd85XrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUt ZTIwZWJiZDA4NWUxLzEvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUtZTIwZWJiZDA4NWUx LzEvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZulTh5qy yPd3G2FzWzu1b0t5CQiFDeE19JipeUYh9GbtYWKeES1iewpRS06h6xKr53sFpWvp Zgky832zMMPAJ/nwtfMGH2G6kb+XqupU+RpdGqtsMIklWaaj9qcj7twn5Gj2p8TD JGZeoYnDaxO0QDdg40DjQQcfQgrLW62AvLXhj0mhN8udwHEQE5VqnpTztbrDhqAD 0Lb+r/IJVz8HtNdagbiHFmpHtdfxbKG8thHzOYXO2u6jDCGAyUQYVhSSa/9sJXhd /TRsbe4wg18mkdc9N2SIIGbK8mdI2a68aSzg66XbNU2eux0IyR0jkcXYpbIcOZaz FKMIGI0xbvnXOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:00 2025 by rpki-client