This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft File: nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json) Hash identifier: reWsg00KhbREXAdrE29VXYDVRvPgc/855ZFfUe4IeWs= Subject key identifier: 37:36:A4:20:CF:92:4E:D8:67:54:AE:86:BC:A3:9D:FE:09:91:F6:6E Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Certificate serial: 019B34C5AE4A036BCDEEB5B09556418D0F03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 04:02:08 +0000 Manifest this update: Fri 19 Dec 2025 04:02:08 +0000 Manifest next update: Sat 20 Dec 2025 04:02:08 +0000 Files and hashes: 1: GMzP4FK3BWd73BtB1rspDBtNJAI.roa (hash: RDWj3PKIvnG4Znaa0y/vyFyoiglGm7aIo1wXj8w5Ol8=) 2: TrApzRwO46U5cvWOoWRmtJkH50k.roa (hash: jn6OnmEsOzdilDL0UdqQEgfGfw7WKVGdZ+IBRjWfYTM=) 3: bkPZdYGaPrRP7ibLuByUsUTfmq8.roa (hash: mPM3jm7wNDKXQnm9t+BGq+2FqCZJMLYCeySMg/uwrT0=) 4: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: l+mGZcc9ZRj9PQPXpJ1j/1BLy4Htx6oOfAAMonRztMs=) 5: pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa (hash: huCovKVCwZRD1Jyuh4oDP9/7mz4WorFE/yOJ4oY3xMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:ae:4a:03:6b:cd:ee:b5:b0:95:56:41:8d:0f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Validity Not Before: Dec 19 04:02:08 2025 GMT Not After : Dec 20 04:02:08 2025 GMT Subject: CN=3736a420cf924ed86754ae86bca39dfe0991f66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:2e:1e:07:63:21:1f:67:c9:f3:b2:49:96: fd:31:6b:f1:10:3e:b1:9d:45:fb:94:79:2c:30:a0: 6f:78:8f:ba:9a:23:4e:7b:e5:51:65:55:cd:f6:f2: da:7f:80:fc:52:67:51:15:12:42:d5:5a:4a:a2:74: b7:6a:e8:c4:d9:ae:81:5d:ab:2d:a8:1e:e3:52:e0: 61:55:1b:4f:4b:2b:fd:b7:4b:f5:87:d8:da:06:82: 7f:23:41:df:c6:06:d0:25:86:97:fa:6d:18:e7:a5: b7:a5:18:c6:f3:a1:33:f0:a8:92:89:e5:0e:f5:25: 5e:c4:b7:f4:04:eb:f1:b7:68:0c:9d:e0:62:aa:96: 1c:89:59:ea:c8:d6:6a:67:b2:be:27:a9:06:95:4e: c5:63:a7:0a:57:d3:70:d1:c4:40:e5:37:f2:84:9a: 71:fc:9d:97:bd:63:b5:f3:14:b4:38:9e:e1:1c:3b: 45:c8:0b:39:5d:ed:3a:a4:45:35:1f:06:bd:47:5e: 86:c9:50:a2:92:79:e9:e6:61:a5:6d:52:6f:0a:eb: 5b:18:04:6e:a2:04:c7:ef:4b:21:82:98:ae:01:b6: 50:23:0e:65:fc:c1:d6:95:8a:38:50:54:58:7f:1d: 5c:8a:7a:19:3d:99:61:05:40:32:0d:9c:af:39:53: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:36:A4:20:CF:92:4E:D8:67:54:AE:86:BC:A3:9D:FE:09:91:F6:6E X509v3 Authority Key Identifier: keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:13:56:2b:08:fc:29:d4:63:c6:09:96:ac:b0:30:a8:2e:bc: e1:dc:55:13:3b:99:6d:5e:ce:db:3c:5e:07:a4:38:68:6f:97: c6:04:95:db:5f:28:8d:e8:f1:b8:b3:00:36:2b:c1:1b:d4:a2: 38:3e:ef:12:33:38:e6:c0:eb:08:aa:24:ae:87:5b:dd:75:ab: 1d:52:88:f7:f5:14:42:bb:7b:f2:b9:6e:14:60:c5:30:5f:cd: 53:88:9a:b4:c6:40:ab:09:bd:5b:eb:63:42:56:78:cd:ac:49: 91:d7:65:c0:1b:bb:03:aa:74:35:1a:ce:db:86:52:ca:93:cb: f5:ef:7f:97:36:93:74:2e:ae:0b:c1:bc:2f:0f:fc:b6:7c:e7: bb:85:df:45:70:62:70:5c:76:db:9a:b4:be:89:71:c3:61:61: 8e:bd:84:4f:51:c6:ef:0f:1f:e2:78:a5:d5:02:ca:e0:98:52: b3:96:86:fb:23:35:8a:cc:d1:c9:fe:26:cc:49:d1:05:f2:9b: 3e:72:af:ca:6c:27:de:f3:34:48:ec:ff:58:56:29:6a:34:8b: 44:bf:24:7c:ce:6e:70:d9:06:0f:5e:23:c9:ea:2d:e3:f3:ff: 41:da:9c:d8:18:6c:fb:bc:6f:34:e0:e5:e8:8b:fa:86:d4:2c: af:8c:72:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xa5KA2vN7rWwlVZBjQ8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDdlZTczYzI4NzgwYjEyZjE1MmNmYTI1OWFkZTNkOGFl MGQxM2IwHhcNMjUxMjE5MDQwMjA4WhcNMjUxMjIwMDQwMjA4WjAzMTEwLwYDVQQD EygzNzM2YTQyMGNmOTI0ZWQ4Njc1NGFlODZiY2EzOWRmZTA5OTFmNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTQuHgdjIR9nyfOySZb9MWvxED6x nUX7lHksMKBveI+6miNOe+VRZVXN9vLaf4D8UmdRFRJC1VpKonS3aujE2a6BXast qB7jUuBhVRtPSyv9t0v1h9jaBoJ/I0HfxgbQJYaX+m0Y56W3pRjG86Ez8KiSieUO 9SVexLf0BOvxt2gMneBiqpYciVnqyNZqZ7K+J6kGlU7FY6cKV9Nw0cRA5TfyhJpx /J2XvWO18xS0OJ7hHDtFyAs5Xe06pEU1Hwa9R16GyVCiknnp5mGlbVJvCutbGARu ogTH70shgpiuAbZQIw5l/MHWlYo4UFRYfx1cinoZPZlhBUAyDZyvOVP/IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDc2pCDPkk7YZ1Suhryjnf4JkfZuMB8GA1UdIwQY MBaAFJxH7nPCh4CxLxUs+iWa3j2K4NE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2Et ZjNjMWE5YTExZDczLzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2EtZjNjMWE5YTExZDcz LzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxNWKwj8 KdRjxgmWrLAwqC684dxVEzuZbV7O2zxeB6Q4aG+XxgSV218ojejxuLMANivBG9Si OD7vEjM45sDrCKokrodb3XWrHVKI9/UUQrt78rluFGDFMF/NU4iatMZAqwm9W+tj QlZ4zaxJkddlwBu7A6p0NRrO24ZSypPL9e9/lzaTdC6uC8G8Lw/8tnznu4XfRXBi cFx225q0volxw2Fhjr2ET1HG7w8f4nil1QLK4JhSs5aG+yM1iszRyf4mzEnRBfKb PnKvymwn3vM0SOz/WFYpajSLRL8kfM5ucNkGD14jyeot4/P/Qdqc2Bhs+7xvNODl 6Iv6htQsr4xybQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:42:06 2025 by rpki-client