This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json) Hash identifier: iXazbqagr5HoRRX4YXxlLAR/okRGf/f0yQz2x/XOb1E= Subject key identifier: 49:2F:B2:40:C0:F5:05:1C:F2:C7:0F:40:E9:8E:DD:26:6A:68:6E:B7 Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2 Certificate serial: 019B6D33BCC2BA42AC3230C9BE13F46A4FFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft Manifest number: 06FD Signing time: Tue 30 Dec 2025 03:01:05 +0000 Manifest this update: Tue 30 Dec 2025 03:01:05 +0000 Manifest next update: Wed 31 Dec 2025 03:01:05 +0000 Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=) 2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: GG0fS0wb3v7vGNKcnl93M/PtF9qMB8sDyIvnCM825AY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:bc:c2:ba:42:ac:32:30:c9:be:13:f4:6a:4f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2 Validity Not Before: Dec 30 03:01:05 2025 GMT Not After : Dec 31 03:01:05 2025 GMT Subject: CN=492fb240c0f5051cf2c70f40e98edd266a686eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:1b:db:45:18:50:59:e2:0a:45:21:2e:27: 4c:ec:31:3e:81:a5:95:e2:da:ce:6f:b5:8f:fe:cf: cb:9e:76:bf:60:7b:51:ae:89:08:68:29:17:d5:de: 37:34:a5:06:2f:e5:53:5d:f9:17:2e:07:de:d1:8d: d3:43:e0:f3:0c:7a:bc:76:55:61:e7:d6:bc:bf:76: bd:c4:1e:63:a3:1c:fb:54:ad:cc:8c:4d:08:f8:1f: 00:37:5b:6a:f3:e3:6e:2b:cf:6b:4c:f9:35:1f:f5: 7b:1c:bb:4c:3d:cb:38:7f:ed:dc:58:de:1d:de:a5: 7c:9c:c0:fb:99:3d:c1:a7:6e:cc:65:17:a1:2f:0b: 2d:de:02:e9:aa:97:40:44:7e:20:6c:13:be:4d:55: cc:e6:ab:5f:94:d4:c3:c2:d0:57:41:e6:4a:b6:7d: 63:0b:7b:4c:36:63:9c:86:e5:3b:9d:8a:2a:05:c0: 4e:9e:47:95:58:95:a9:f4:5a:76:b7:0d:a7:95:33: ca:67:e2:fa:d7:8b:d9:50:1b:7d:79:d6:69:11:21: a4:c2:8f:c9:53:ee:1c:63:d9:83:26:e8:3c:d2:97: 21:72:3a:2e:72:c9:ae:ef:b1:95:fe:d6:01:82:7f: 58:e7:48:7f:70:21:1b:66:c1:e5:32:ea:3e:bc:3f: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2F:B2:40:C0:F5:05:1C:F2:C7:0F:40:E9:8E:DD:26:6A:68:6E:B7 X509v3 Authority Key Identifier: keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:25:07:3b:f7:a7:35:7f:fe:df:b4:70:45:bb:40:21:50:e7: 48:22:45:71:d9:5e:ac:9e:a8:48:04:f4:81:9b:00:5a:78:e8: f8:50:c8:9d:d5:bf:95:31:8e:1e:f9:fa:93:e0:43:ec:b4:7b: b5:80:56:10:45:33:7d:17:05:c1:a3:d0:bf:8e:00:d1:1e:a7: 52:38:05:61:fb:3e:f8:3f:e1:36:01:e5:f9:79:52:91:df:d1: eb:71:cc:c0:c8:4e:b9:22:d4:03:4c:8b:1a:d8:36:ea:51:80: ae:ef:f8:72:f3:91:1d:5e:e1:ba:17:c2:46:f3:2b:94:c6:ef: e7:67:ef:c1:5f:84:f7:c5:02:c6:2d:05:28:fc:f4:7f:89:6b: c5:90:75:c0:0f:65:41:6e:de:b0:73:b0:a9:89:50:e5:00:f3: a0:f1:f2:b8:ae:2d:b4:50:84:2d:27:e8:35:b8:3f:ce:44:c2: ab:8d:63:7c:91:2d:9d:e1:62:8f:03:d1:da:98:0d:09:bb:5e: 72:ae:0e:fb:58:07:32:03:3f:68:0d:c2:de:2d:0f:f3:9e:4a: db:63:98:a2:31:fc:b3:44:26:46:d5:b1:b3:21:45:52:81:e4: d2:21:33:63:c6:a8:2e:91:68:3f:8e:9d:0d:e2:f1:ad:73:87: 28:72:bd:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM7zCukKsMjDJvhP0ak//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl NDE2YzIwHhcNMjUxMjMwMDMwMTA1WhcNMjUxMjMxMDMwMTA1WjAzMTEwLwYDVQQD Eyg0OTJmYjI0MGMwZjUwNTFjZjJjNzBmNDBlOThlZGQyNjZhNjg2ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC0b20UYUFniCkUhLidM7DE+gaWV 4trOb7WP/s/Lnna/YHtRrokIaCkX1d43NKUGL+VTXfkXLgfe0Y3TQ+DzDHq8dlVh 59a8v3a9xB5joxz7VK3MjE0I+B8AN1tq8+NuK89rTPk1H/V7HLtMPcs4f+3cWN4d 3qV8nMD7mT3Bp27MZRehLwst3gLpqpdARH4gbBO+TVXM5qtflNTDwtBXQeZKtn1j C3tMNmOchuU7nYoqBcBOnkeVWJWp9Fp2tw2nlTPKZ+L614vZUBt9edZpESGkwo/J U+4cY9mDJug80pchcjoucsmu77GV/tYBgn9Y50h/cCEbZsHlMuo+vD+PFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkvskDA9QUc8scPQOmO3SZqaG63MB8GA1UdIwQY MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1 LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1iUHO/en NX/+37RwRbtAIVDnSCJFcdlerJ6oSAT0gZsAWnjo+FDIndW/lTGOHvn6k+BD7LR7 tYBWEEUzfRcFwaPQv44A0R6nUjgFYfs++D/hNgHl+XlSkd/R63HMwMhOuSLUA0yL Gtg26lGAru/4cvORHV7huhfCRvMrlMbv52fvwV+E98UCxi0FKPz0f4lrxZB1wA9l QW7esHOwqYlQ5QDzoPHyuK4ttFCELSfoNbg/zkTCq41jfJEtneFijwPR2pgNCbte cq4O+1gHMgM/aA3C3i0P855K22OYojH8s0QmRtWxsyFFUoHk0iEzY8aoLpFoP46d DeLxrXOHKHK9CA== -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:41 2025 by rpki-client