This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json) Hash identifier: 7C5yhHsTsUGoAAv14/9mwtf4AvEgDAG708WzEFjy2OA= Subject key identifier: BB:CF:F3:39:50:A9:95:F8:F7:80:4E:A5:66:90:CD:68:11:20:DA:66 Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f Certificate serial: 019B2BC1C5F5312F10E3FCB3D77345FE1619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft Manifest number: 170D Signing time: Wed 17 Dec 2025 10:01:17 +0000 Manifest this update: Wed 17 Dec 2025 10:01:17 +0000 Manifest next update: Thu 18 Dec 2025 10:01:17 +0000 Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: B5q692eIEM54rZDoqJz9OIUGEuTmCY3B6tKFQKjPSyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:c5:f5:31:2f:10:e3:fc:b3:d7:73:45:fe:16:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f Validity Not Before: Dec 17 10:01:17 2025 GMT Not After : Dec 18 10:01:17 2025 GMT Subject: CN=bbcff33950a995f8f7804ea56690cd681120da66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:8e:46:14:db:d3:01:ea:ae:9d:57:d2:35: 80:d4:76:27:46:e1:d9:01:1a:8a:a5:13:38:3e:91: b9:2c:3f:d6:5b:34:17:81:38:10:59:f4:50:4f:89: 4c:31:05:b4:21:a9:15:c8:c2:fc:10:6f:96:a0:6f: e5:32:ef:1b:00:3e:f8:65:03:56:46:d0:8b:c8:9e: 9a:cc:6f:f2:82:33:e6:75:74:a4:b0:ae:01:74:6e: 3c:8a:c7:e0:2b:15:2a:8c:42:62:16:36:89:a9:30: b9:6a:6f:87:4c:23:cb:e2:77:72:ca:08:57:8b:a7: 30:c3:90:9d:30:af:7e:ac:28:fd:46:b4:40:f4:48: 34:d7:b2:1f:cb:bd:2b:a5:07:4d:c1:5e:84:09:ca: 05:da:3e:3f:7a:7d:3d:e1:16:d3:14:ee:54:44:23: 58:09:7d:31:01:b2:0d:11:ab:04:49:81:88:76:19: 30:87:14:6d:00:d0:81:73:21:de:5e:b4:a6:25:68: a1:73:c3:c3:c8:25:18:05:61:54:2c:76:33:76:fa: cd:cd:7a:3b:fe:e6:15:eb:cb:97:08:a8:f4:46:ef: 7e:c5:21:78:52:23:24:55:4a:66:ba:7b:e2:e8:61: 4b:76:e5:ca:e8:ce:73:29:f3:70:4f:94:ca:24:08: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CF:F3:39:50:A9:95:F8:F7:80:4E:A5:66:90:CD:68:11:20:DA:66 X509v3 Authority Key Identifier: keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b5:cf:29:c1:56:75:51:9a:05:47:87:19:db:81:9c:1c:de: 75:f9:6f:09:99:9b:cd:19:c7:33:90:da:5e:e2:99:15:85:15: 1d:cc:56:40:ba:a8:78:7d:15:be:c0:57:ba:22:ca:60:f8:6c: c4:e4:a1:b3:c8:94:ff:1c:30:19:79:92:13:1c:9f:f4:79:45: 20:77:ec:9f:27:9b:bc:85:f0:aa:b8:8f:07:58:d0:e4:49:2f: 15:fd:34:1d:0b:9d:f9:ea:62:74:63:9d:8f:ae:d6:1f:5e:22: f4:13:e0:70:55:c9:99:04:e5:12:82:de:69:3d:0c:92:83:87: c9:3a:ed:db:67:9f:d0:00:f4:72:01:22:48:4e:c9:da:8e:6d: ce:83:15:e8:9f:7a:21:b0:a5:8f:8d:22:3e:d5:c1:5b:32:ba: c3:9b:10:c6:11:22:ff:d8:5a:99:66:57:e7:dd:79:40:b5:7a: eb:fe:e3:38:28:68:e6:96:bc:d2:70:f9:d1:45:de:fe:ac:72: ce:00:b3:ea:5d:5f:b6:fe:d7:f6:c3:cc:7f:5f:e7:b9:8b:ea: 33:cd:a1:5b:50:cc:f4:9b:a0:f9:78:b9:08:07:d4:7e:35:45: cf:9d:73:13:af:a7:74:b0:bf:4e:ee:be:a7:0d:1c:ce:cd:27: 86:e5:d1:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwcX1MS8Q4/yz13NF/hYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTY3NjQ1OTRlMDBkOWFiODAxNzg5M2M3MTA5MmNmNTE2 YjEwMWYwHhcNMjUxMjE3MTAwMTE3WhcNMjUxMjE4MTAwMTE3WjAzMTEwLwYDVQQD EyhiYmNmZjMzOTUwYTk5NWY4Zjc4MDRlYTU2NjkwY2Q2ODExMjBkYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi+ORhTb0wHqrp1X0jWA1HYnRuHZ ARqKpRM4PpG5LD/WWzQXgTgQWfRQT4lMMQW0IakVyML8EG+WoG/lMu8bAD74ZQNW RtCLyJ6azG/ygjPmdXSksK4BdG48isfgKxUqjEJiFjaJqTC5am+HTCPL4ndyyghX i6cww5CdMK9+rCj9RrRA9Eg017Ify70rpQdNwV6ECcoF2j4/en094RbTFO5URCNY CX0xAbINEasESYGIdhkwhxRtANCBcyHeXrSmJWihc8PDyCUYBWFULHYzdvrNzXo7 /uYV68uXCKj0Ru9+xSF4UiMkVUpmunvi6GFLduXK6M5zKfNwT5TKJAi6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvP8zlQqZX494BOpWaQzWgRINpmMB8GA1UdIwQY MBaAFDXmdkWU4A2auAF4k8cQks9RaxAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQt YjJmMGIxYmNhZTVjLzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQtYjJmMGIxYmNhZTVj LzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrXPKcFW dVGaBUeHGduBnBzedflvCZmbzRnHM5DaXuKZFYUVHcxWQLqoeH0VvsBXuiLKYPhs xOShs8iU/xwwGXmSExyf9HlFIHfsnyebvIXwqriPB1jQ5EkvFf00HQud+epidGOd j67WH14i9BPgcFXJmQTlEoLeaT0MkoOHyTrt22ef0AD0cgEiSE7J2o5tzoMV6J96 IbClj40iPtXBWzK6w5sQxhEi/9hamWZX5915QLV66/7jOCho5pa80nD50UXe/qxy zgCz6l1ftv7X9sPMf1/nuYvqM82hW1DM9Jug+Xi5CAfUfjVFz51zE6+ndLC/Tu6+ pw0czs0nhuXRlg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:53:45 2025 by rpki-client