This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json) Hash identifier: Umx6Z6c9UFAKza3a2+tf7fc/DwG3WyEPK6IUDu4sLbs= Subject key identifier: F7:67:82:39:90:B7:51:93:24:1D:07:29:48:A8:C6:A0:E9:87:B2:7F Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Certificate serial: 019AF19B2908E5DDD256B1ED7B426A83697E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: K36NLOnQ7T42+iwsSmpl08wiL6o69oSm5xiQuozqugE=) 2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=) 3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:29:08:e5:dd:d2:56:b1:ed:7b:42:6a:83:69:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=f767823990b75193241d072948a8c6a0e987b27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:b1:78:a2:51:ff:db:3b:a7:70:6d:cd:b3: 29:fa:74:2e:c4:03:70:55:e4:c7:33:90:89:be:c0: 87:28:fb:c6:24:99:ce:a7:e4:24:23:a7:05:c9:bd: 66:47:03:9c:27:8d:bd:da:dd:e4:40:a6:8b:e8:f5: d8:b7:bc:b4:75:d2:b8:f9:12:94:57:24:9d:b1:18: a8:ff:99:2e:a0:5b:65:02:a6:cc:1a:c2:49:fa:42: 2f:16:09:25:d3:36:1e:2a:36:59:24:a9:72:7d:ed: e8:36:d2:3d:b0:5f:8d:b4:6f:8b:45:df:a4:32:c7: 6c:c3:87:c8:53:7d:51:75:0b:a6:29:ae:89:d3:ad: 13:a5:11:be:7d:d1:84:cf:4e:50:1a:15:ce:47:59: d4:99:55:c8:b2:12:fb:e7:71:5d:26:5f:04:9f:d4: dc:b1:e2:ec:dd:a9:31:02:90:18:27:28:37:bf:1d: f3:cd:a4:ba:1a:b2:e6:62:ae:b7:f5:95:c7:81:dc: 9a:6a:67:03:72:4d:00:d5:13:3c:82:58:b5:f6:17: 45:97:71:f1:a6:3a:03:6c:c3:70:88:38:22:e2:0d: 77:79:44:87:ce:4f:2b:77:49:22:bf:5b:4c:a2:7d: 75:cc:3c:7f:05:39:37:bf:65:c8:26:4a:a0:a8:48: 92:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:67:82:39:90:B7:51:93:24:1D:07:29:48:A8:C6:A0:E9:87:B2:7F X509v3 Authority Key Identifier: keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e3:16:3c:49:6d:01:33:40:3e:fd:b6:90:f5:ba:2c:27:aa: df:d1:5f:cc:25:3f:1d:36:48:0a:c1:a2:8c:d5:34:cf:a5:ea: 8d:c8:e7:41:1d:bd:ec:1f:52:d2:d4:74:9c:56:c1:32:9d:46: f5:7c:12:98:f1:45:52:11:fd:a8:05:56:87:0a:2d:89:a9:5e: b8:e1:49:68:c1:57:74:05:24:a7:ba:e5:82:78:3d:99:64:f6: 87:61:de:8a:ea:e6:18:3d:8b:ac:a5:e5:2d:71:f1:a2:eb:c5: a3:db:41:16:db:e4:df:e0:1b:cc:ae:ad:73:35:be:45:b5:5b: 6b:33:8e:ea:f4:24:76:77:a1:7d:60:df:56:50:31:d7:37:68: 35:37:75:98:8a:6c:3e:7e:e7:75:62:16:be:40:8c:91:c9:a4: e8:4c:fe:a9:37:18:3f:47:97:c1:af:1f:dd:53:c5:1d:8a:71: be:1e:45:e8:ea:8c:32:63:3a:9f:22:2f:14:62:42:db:48:32: 7c:a2:a1:38:39:81:3d:8d:cf:2a:0e:d4:65:5e:75:d5:1d:0f: 74:b5:7a:55:d4:a9:95:6b:3a:ab:e8:bb:ea:57:00:dc:e2:6a: 32:25:c4:1c:49:40:16:f2:f7:d1:9e:7f:07:a7:fa:b9:77:07: b4:27:a9:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmykI5d3SVrHte0Jqg2l+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj MDgxOTAwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhmNzY3ODIzOTkwYjc1MTkzMjQxZDA3Mjk0OGE4YzZhMGU5ODdiMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUqxeKJR/9s7p3BtzbMp+nQuxANw VeTHM5CJvsCHKPvGJJnOp+QkI6cFyb1mRwOcJ4292t3kQKaL6PXYt7y0ddK4+RKU VySdsRio/5kuoFtlAqbMGsJJ+kIvFgkl0zYeKjZZJKlyfe3oNtI9sF+NtG+LRd+k Msdsw4fIU31RdQumKa6J060TpRG+fdGEz05QGhXOR1nUmVXIshL753FdJl8En9Tc seLs3akxApAYJyg3vx3zzaS6GrLmYq639ZXHgdyaamcDck0A1RM8gli19hdFl3Hx pjoDbMNwiDgi4g13eUSHzk8rd0kiv1tMon11zDx/BTk3v2XIJkqgqEiSuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdngjmQt1GTJB0HKUioxqDph7J/MB8GA1UdIwQY MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+MWPElt ATNAPv22kPW6LCeq39FfzCU/HTZICsGijNU0z6XqjcjnQR297B9S0tR0nFbBMp1G 9XwSmPFFUhH9qAVWhwotialeuOFJaMFXdAUkp7rlgng9mWT2h2HeiurmGD2LrKXl LXHxouvFo9tBFtvk3+AbzK6tczW+RbVbazOO6vQkdnehfWDfVlAx1zdoNTd1mIps Pn7ndWIWvkCMkcmk6Ez+qTcYP0eXwa8f3VPFHYpxvh5F6OqMMmM6nyIvFGJC20gy fKKhODmBPY3PKg7UZV511R0PdLV6VdSplWs6q+i76lcA3OJqMiXEHElAFvL30Z5/ B6f6uXcHtCepOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:35 2025 by rpki-client