This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json) Hash identifier: w+9yCPGs4PhYR9hqjqfobw8besCtkiNHrhSG8bUCKN8= Subject key identifier: 3F:B7:73:EB:28:3E:45:76:C0:88:79:31:9D:3E:BC:F2:06:EB:78:7C Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f Certificate serial: 019AF1D20A5D0F8CF6C0C4D66A6F58655F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: 94JYj9fk8vwPp2qmFPFp6ehqej7lmZrsTE8h6+WvJkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0a:5d:0f:8c:f6:c0:c4:d6:6a:6f:58:65:5f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=3fb773eb283e4576c08879319d3ebcf206eb787c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:14:20:39:35:e7:ab:09:9e:3b:18:a7:98: 31:70:ff:17:3c:53:a8:3e:35:cb:a5:2c:e7:c2:ab: e3:2f:05:6e:57:91:db:7e:7b:ea:10:6c:59:a7:94: 48:b6:f4:16:6b:f8:41:de:36:ad:ee:c4:f9:92:db: 28:a6:f7:59:52:8e:5a:4c:c9:a3:8d:88:30:aa:b6: bd:f5:a9:0a:76:1b:4e:b5:89:47:4d:71:7e:5d:a6: 13:27:0b:ca:42:39:df:9d:c3:22:26:71:21:6e:8e: cd:1f:5f:af:02:31:89:0c:22:b2:7c:e2:00:d5:4a: 6d:95:d5:f8:37:82:1c:a3:88:ea:e2:93:ad:c9:7d: 72:40:04:fe:df:96:06:76:f7:88:9c:ec:4c:13:23: d4:e8:05:26:6e:59:f9:f6:46:19:c4:dd:b7:5b:9d: 12:42:8a:57:66:e4:af:5f:94:dd:79:98:29:c9:85: e7:65:42:5f:74:5e:ff:a2:7e:64:1d:64:c7:e6:0d: 23:29:74:21:35:2a:97:4e:d1:d3:60:1b:2c:47:16: ec:5c:e4:be:88:39:76:db:5f:97:ad:55:be:89:b2: fc:49:e9:65:ab:8f:bd:b9:b5:96:6a:e5:07:e1:b0: 24:0f:1e:46:99:fd:88:44:9e:18:c5:5d:19:73:94: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B7:73:EB:28:3E:45:76:C0:88:79:31:9D:3E:BC:F2:06:EB:78:7C X509v3 Authority Key Identifier: keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ac:50:77:70:71:ea:88:3f:6c:45:8d:d4:74:46:ba:63:b2: 46:73:06:53:7a:6c:1e:35:21:d2:4c:1b:c2:ca:2a:3e:2c:8a: 46:04:81:01:1e:20:c8:0d:21:06:77:1b:dd:d7:11:ec:58:01: a1:c2:a1:c6:d7:33:63:7b:0a:9a:bf:e9:ee:ab:0f:54:76:5a: fd:9b:35:9c:46:7b:7a:9f:53:7f:99:f5:ce:5c:05:08:37:e5: 15:bb:60:e9:ee:09:9a:03:3c:cd:e0:42:0a:3e:ce:a5:68:c3: dd:ba:21:f7:a8:1a:26:a3:ae:13:73:61:41:1f:00:2f:93:ee: 5a:63:5f:e3:56:67:45:a2:8e:4f:06:e1:7f:89:bd:fb:9a:25: bb:37:8c:89:fe:af:de:d5:9d:ef:2e:fc:65:5f:d0:96:ee:3b: 48:cc:99:08:ba:9c:d6:c3:4f:09:e7:3e:34:44:70:59:6f:f7: 9d:38:14:05:f5:32:b6:d1:f6:d9:8a:64:46:68:1a:90:e7:20: e7:62:b1:8b:6c:0f:36:cf:c9:e7:cc:3a:71:de:6d:cb:eb:91: 87:13:03:75:97:60:f6:bd:c9:5a:84:57:38:6f:27:14:87:69: 7f:23:92:84:99:b7:c5:ac:7e:be:bd:89:85:f4:25:42:9a:3f: 13:cd:f3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gpdD4z2wMTWam9YZV8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTY3NjQ1OTRlMDBkOWFiODAxNzg5M2M3MTA5MmNmNTE2 YjEwMWYwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EygzZmI3NzNlYjI4M2U0NTc2YzA4ODc5MzE5ZDNlYmNmMjA2ZWI3ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OYUIDk156sJnjsYp5gxcP8XPFOo PjXLpSznwqvjLwVuV5HbfnvqEGxZp5RItvQWa/hB3jat7sT5ktsopvdZUo5aTMmj jYgwqra99akKdhtOtYlHTXF+XaYTJwvKQjnfncMiJnEhbo7NH1+vAjGJDCKyfOIA 1UptldX4N4Ico4jq4pOtyX1yQAT+35YGdveInOxMEyPU6AUmbln59kYZxN23W50S QopXZuSvX5TdeZgpyYXnZUJfdF7/on5kHWTH5g0jKXQhNSqXTtHTYBssRxbsXOS+ iDl221+XrVW+ibL8Sellq4+9ubWWauUH4bAkDx5Gmf2IRJ4YxV0Zc5RpTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+3c+soPkV2wIh5MZ0+vPIG63h8MB8GA1UdIwQY MBaAFDXmdkWU4A2auAF4k8cQks9RaxAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQt YjJmMGIxYmNhZTVjLzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQtYjJmMGIxYmNhZTVj LzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqxQd3Bx 6og/bEWN1HRGumOyRnMGU3psHjUh0kwbwsoqPiyKRgSBAR4gyA0hBncb3dcR7FgB ocKhxtczY3sKmr/p7qsPVHZa/Zs1nEZ7ep9Tf5n1zlwFCDflFbtg6e4JmgM8zeBC Cj7OpWjD3boh96gaJqOuE3NhQR8AL5PuWmNf41ZnRaKOTwbhf4m9+5oluzeMif6v 3tWd7y78ZV/Qlu47SMyZCLqc1sNPCec+NERwWW/3nTgUBfUyttH22YpkRmgakOcg 52Kxi2wPNs/J58w6cd5ty+uRhxMDdZdg9r3JWoRXOG8nFIdpfyOShJm3xax+vr2J hfQlQpo/E83zuw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:13 2025 by rpki-client