This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json) Hash identifier: 81uEDIGkIuDdP3PaJKSrkTrxHOZ2+yYR76cDHe9CE3A= Subject key identifier: C9:75:4E:B1:5F:E4:93:6C:70:4C:14:F0:F5:76:B9:FB:AA:8C:CE:C1 Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Certificate serial: 019AF208C5CDE5024098F285D19FE9783BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft Manifest number: 0DC9 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=) 2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=) 3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: J+Dg2zbmuFpcbVWzd5JZDUeT/a+aONM2Jt/YNWnV3Kg=) 4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=) 5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c5:cd:e5:02:40:98:f2:85:d1:9f:e9:78:3b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=c9754eb15fe4936c704c14f0f576b9fbaa8ccec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a9:12:e5:7f:a3:aa:ba:aa:02:59:f0:4e:45: 09:2a:f1:fa:49:32:76:83:b4:d7:8d:d0:1d:d2:a3: 58:83:fc:22:0f:45:71:83:e9:ca:93:86:1f:83:8a: 2c:43:8c:fd:8b:6d:5b:97:80:36:ec:0d:61:a8:63: e1:01:60:41:0f:6c:40:43:da:7e:58:4b:57:93:2d: 2b:1f:56:e6:ae:67:52:b3:29:27:9c:d5:ab:60:0a: f4:66:0f:42:a6:05:b6:88:a4:5a:ab:3e:f2:cf:0a: 85:61:71:27:b3:09:35:e9:05:1b:94:fc:a6:a9:e3: 2a:f0:7f:c8:8c:f4:7f:12:6f:27:35:8a:f1:07:0e: ec:3d:2d:02:c1:7c:ad:05:7d:74:94:9a:ee:0c:f4: 9c:f6:9e:6e:1c:f5:cb:82:5e:5b:d8:ba:59:4f:d8: ca:11:e3:e4:e7:eb:a3:b4:51:68:c4:88:50:6c:45: 5b:ed:f9:4d:09:d8:37:e1:f2:a4:7a:7a:d2:78:f9: aa:a3:79:37:cd:d6:c1:8a:d8:d2:45:c0:8e:92:37: 6f:bd:f4:9d:f1:93:eb:2f:6f:22:a8:af:c6:3b:42: bd:2a:7f:26:b3:2a:c8:34:49:ed:0f:8a:d9:62:fa: b0:6c:3b:a3:61:88:4c:52:94:65:df:ca:53:3e:04: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:4E:B1:5F:E4:93:6C:70:4C:14:F0:F5:76:B9:FB:AA:8C:CE:C1 X509v3 Authority Key Identifier: keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:46:56:9f:8d:a0:0b:1a:1f:cc:b5:d8:ca:b2:95:59:9f:bc: 44:8f:8c:2d:1f:70:4b:38:d2:3e:fe:11:21:ec:41:dd:f9:c8: 3d:e3:f0:08:8b:39:c3:98:f7:79:4a:21:28:01:8c:b1:a7:7e: ee:f4:d5:41:4b:45:a4:00:da:8d:82:5d:cb:2a:35:c8:ff:a4: c1:11:e3:50:ad:1d:2e:a3:46:4e:b1:cf:87:23:0e:4f:4b:2c: f9:ac:20:32:f7:5d:c6:04:db:85:93:a5:20:f7:d9:6b:77:bd: 09:17:5a:ed:0e:b0:42:44:94:55:1e:3a:d4:53:87:a1:0a:be: 37:5c:49:d4:6b:af:75:66:ad:03:0d:b5:0a:16:96:92:46:e8: 32:a8:6c:a2:31:fb:23:48:97:2d:50:85:0c:e4:5d:25:ac:81: 91:f9:93:d9:79:56:2d:51:f5:bc:3d:24:a4:0c:59:e0:30:86: 6b:26:a8:56:6a:bd:58:88:46:0a:a7:ba:98:c7:0b:e3:b8:9c: 86:ee:75:9b:9d:cc:86:38:b5:32:05:27:b9:36:6c:d2:84:92: ab:24:79:93:11:cb:8a:5d:e1:87:97:07:d2:17:d7:f4:91:c7: ca:8c:d8:99:2a:64:65:96:dd:88:75:8c:b5:cc:b9:0b:12:7c: f2:fa:2d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMXN5QJAmPKF0Z/peDv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy YTBlZDYwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EyhjOTc1NGViMTVmZTQ5MzZjNzA0YzE0ZjBmNTc2YjlmYmFhOGNjZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqkS5X+jqrqqAlnwTkUJKvH6STJ2 g7TXjdAd0qNYg/wiD0Vxg+nKk4Yfg4osQ4z9i21bl4A27A1hqGPhAWBBD2xAQ9p+ WEtXky0rH1bmrmdSsyknnNWrYAr0Zg9CpgW2iKRaqz7yzwqFYXEnswk16QUblPym qeMq8H/IjPR/Em8nNYrxBw7sPS0CwXytBX10lJruDPSc9p5uHPXLgl5b2LpZT9jK EePk5+ujtFFoxIhQbEVb7flNCdg34fKkenrSePmqo3k3zdbBitjSRcCOkjdvvfSd 8ZPrL28iqK/GO0K9Kn8msyrINEntD4rZYvqwbDujYYhMUpRl38pTPgRxsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMl1TrFf5JNscEwU8PV2ufuqjM7BMB8GA1UdIwQY MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt ZmQzYjMwMDJjMGJiLzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUZWn42g CxofzLXYyrKVWZ+8RI+MLR9wSzjSPv4RIexB3fnIPePwCIs5w5j3eUohKAGMsad+ 7vTVQUtFpADajYJdyyo1yP+kwRHjUK0dLqNGTrHPhyMOT0ss+awgMvddxgTbhZOl IPfZa3e9CRda7Q6wQkSUVR461FOHoQq+N1xJ1GuvdWatAw21ChaWkkboMqhsojH7 I0iXLVCFDORdJayBkfmT2XlWLVH1vD0kpAxZ4DCGayaoVmq9WIhGCqe6mMcL47ic hu51m53Mhji1MgUnuTZs0oSSqyR5kxHLil3hh5cH0hfX9JHHyozYmSpkZZbdiHWM tcy5CxJ88vot1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:47 2025 by rpki-client