This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json) Hash identifier: 0xqNXQJpce6xi4mAhWhAh0Y4Jn139yXjVxXCLn9TDYA= Subject key identifier: 4D:3D:6D:34:BB:2B:47:B2:A9:4B:B1:BA:79:F4:D9:4B:DF:F9:3F:07 Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Certificate serial: 019AF1D19F9503A8462D1A941B27806C8F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft Manifest number: 0C0E Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 43HN-WojVqeLOGbjlvU4KmuDcw8.roa (hash: lA6GODL3wPZINRy3RkLrOMCh7lQspm9tGiMrGo/nCbk=) 2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=) 3: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: y4MICF9MW5BmmMI2pXK4LZoHin5NtEVwmxUR+3l8A4A=) 4: NmLjr4D1oVlMUObOTvLM1xAzd4w.roa (hash: 2JPcfWuMTpLj1ICDWdYsPKsfferPa3mavJOhWQcLuVU=) 5: Qv4r9KoCM0llZGGIu0ESO7fsTrk.roa (hash: 2dbd9G4ssUUV7QjZ8jn5D3p3tWBPiALD7SCeLQ3ju+s=) 6: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9f:95:03:a8:46:2d:1a:94:1b:27:80:6c:8f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=4d3d6d34bb2b47b2a94bb1ba79f4d94bdff93f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:da:5b:48:49:cf:3f:96:68:6e:49:dc:69: 14:88:dd:dc:99:a0:c7:95:1d:50:7b:02:92:b6:42: 8f:b1:fe:3b:2c:25:8b:30:ed:bf:77:19:bf:4b:bc: 48:ac:83:42:1f:ea:eb:d0:b9:94:04:fe:a5:46:f3: 2a:85:5c:d5:d7:da:a7:13:60:92:04:52:65:bc:6c: 8b:31:dc:d0:d3:ad:44:09:d6:57:45:de:99:31:c1: fd:1e:8b:ec:33:c4:b7:f7:2f:03:73:ed:59:e6:de: ce:6e:e3:bc:74:59:91:8f:df:70:5c:f6:1f:ee:21: 58:4d:ec:99:40:04:d4:bc:71:3e:cf:af:ee:43:36: d0:d4:22:63:15:44:e4:65:07:3f:35:a2:d7:53:7a: 0c:9d:16:f0:d7:33:27:ba:cb:b9:93:47:bd:d6:77: 7f:83:fe:c1:24:e0:2b:5f:ac:80:61:cf:ea:f5:f5: 7a:9a:4d:46:56:f6:80:be:34:c3:d5:4a:9e:20:9e: 02:74:1e:1f:6f:f3:a6:38:e5:5a:75:c3:fb:e4:8a: de:cc:31:fa:3a:4c:c3:65:fd:e5:04:07:ef:1b:d3: 4c:92:fd:eb:cd:7d:17:3b:ff:52:f2:ad:39:81:2d: 28:76:5e:45:16:26:66:8a:fe:5a:44:02:27:de:80: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3D:6D:34:BB:2B:47:B2:A9:4B:B1:BA:79:F4:D9:4B:DF:F9:3F:07 X509v3 Authority Key Identifier: keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d4:c7:d1:59:69:e7:d2:17:75:06:65:63:25:3f:13:91:2d: 7b:53:6e:d7:9c:a4:a9:c3:6c:0d:79:b6:2c:ae:83:d6:6e:f1: 33:2e:78:b5:a6:44:ab:56:d8:5d:09:1a:7a:ac:68:69:ec:ba: c3:d4:d5:6a:99:ab:66:9a:31:63:02:35:18:7a:3c:df:c3:88: ba:10:83:e2:80:cf:61:20:17:10:10:a7:dc:95:f3:10:9b:d1: 08:29:b7:64:ae:b9:24:50:d2:41:c9:e8:91:82:f2:b0:c1:2c: d0:e8:7a:d1:55:b3:a0:7d:ac:05:8e:29:f7:f3:c0:1a:12:45: 14:b6:57:cf:61:d1:bf:17:0b:6c:3c:86:a9:57:2b:f3:20:f8: a6:77:ab:e4:e4:5e:53:55:3b:77:21:5b:0a:0d:6e:9a:13:4a: 10:00:64:1d:be:dd:96:bd:34:07:98:bf:a8:82:a0:53:cd:4c: d2:c5:e3:4f:7b:f6:d6:d3:7b:c7:65:e0:76:bd:d5:76:0d:ba: 07:d2:5c:de:73:e8:83:47:37:71:a6:72:f6:ff:f2:aa:07:42: c6:58:fd:1c:e5:a7:56:87:03:f6:53:a2:c6:7b:59:88:a9:c0: df:42:e9:85:51:42:e6:e3:18:a0:ee:5b:b9:83:4a:ba:c4:20: 47:c1:e2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z+VA6hGLRqUGyeAbI8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl NjFiZDUwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD Eyg0ZDNkNmQzNGJiMmI0N2IyYTk0YmIxYmE3OWY0ZDk0YmRmZjkzZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWjaW0hJzz+WaG5J3GkUiN3cmaDH lR1QewKStkKPsf47LCWLMO2/dxm/S7xIrINCH+rr0LmUBP6lRvMqhVzV19qnE2CS BFJlvGyLMdzQ061ECdZXRd6ZMcH9HovsM8S39y8Dc+1Z5t7ObuO8dFmRj99wXPYf 7iFYTeyZQATUvHE+z6/uQzbQ1CJjFUTkZQc/NaLXU3oMnRbw1zMnusu5k0e91nd/ g/7BJOArX6yAYc/q9fV6mk1GVvaAvjTD1UqeIJ4CdB4fb/OmOOVadcP75IrezDH6 OkzDZf3lBAfvG9NMkv3rzX0XO/9S8q05gS0odl5FFiZmiv5aRAIn3oBt5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE09bTS7K0eyqUuxunn02Uvf+T8HMB8GA1UdIwQY MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtTH0Vlp 59IXdQZlYyU/E5Ete1Nu15ykqcNsDXm2LK6D1m7xMy54taZEq1bYXQkaeqxoaey6 w9TVapmrZpoxYwI1GHo838OIuhCD4oDPYSAXEBCn3JXzEJvRCCm3ZK65JFDSQcno kYLysMEs0Oh60VWzoH2sBY4p9/PAGhJFFLZXz2HRvxcLbDyGqVcr8yD4pner5ORe U1U7dyFbCg1umhNKEABkHb7dlr00B5i/qIKgU81M0sXjT3v21tN7x2Xgdr3Vdg26 B9Jc3nPog0c3caZy9v/yqgdCxlj9HOWnVocD9lOixntZiKnA30LphVFC5uMYoO5b uYNKusQgR8HiAg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:47 2025 by rpki-client