This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json) Hash identifier: tzt0PsLXZ3MRASII04/BLRP8X8Zaj59/v6dwNO9grtc= Subject key identifier: AD:6C:52:F2:F6:45:06:7A:7C:5D:6F:CC:88:F1:C7:B3:E9:3B:C4:E1 Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2 Certificate serial: 019B676857C484F2346BEB7252A2BB7753AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft Manifest number: 06FA Signing time: Mon 29 Dec 2025 00:00:49 +0000 Manifest this update: Mon 29 Dec 2025 00:00:49 +0000 Manifest next update: Tue 30 Dec 2025 00:00:49 +0000 Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=) 2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: MJ2rNcJAqRyKaOvBW2yWlo6CYclwfOZjizlSj6aGHYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:57:c4:84:f2:34:6b:eb:72:52:a2:bb:77:53:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2 Validity Not Before: Dec 29 00:00:49 2025 GMT Not After : Dec 30 00:00:49 2025 GMT Subject: CN=ad6c52f2f645067a7c5d6fcc88f1c7b3e93bc4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:bc:25:08:f7:bc:a2:f5:b6:91:5d:eb:99: 2e:ac:45:c8:b0:b9:b7:b9:52:d4:d1:3c:d6:41:20: 2a:81:81:d1:63:c4:65:df:59:41:b4:7e:46:52:cd: 14:f5:4b:b6:f2:54:3a:b9:24:33:35:65:ed:85:3e: cc:73:cb:ea:13:dc:00:fe:34:66:ca:6a:4a:bf:04: 75:93:08:be:b9:b2:12:1b:02:52:bf:82:7b:6f:e0: df:d2:09:cc:46:97:7f:15:ef:f8:76:73:44:1b:07: 6c:fb:5d:7d:57:05:ac:bf:6d:ae:63:ba:58:2e:aa: 92:ec:f3:cc:8f:8b:30:8c:1c:84:57:2a:34:28:c6: 8a:6a:63:6d:41:27:2f:35:1e:50:fe:dc:13:fa:85: 0f:4f:26:d0:71:a0:d3:3c:7f:25:6b:34:c9:be:62: 17:fc:04:5d:85:60:f6:89:27:8c:8d:a4:d0:87:00: f7:b5:26:76:c2:81:b3:1c:41:2a:e0:ff:88:fb:8b: 63:26:64:ec:89:4d:f0:cb:8b:42:00:66:42:29:de: 4d:69:e1:f1:6e:cf:09:d4:62:36:c4:33:01:0b:f2: e4:13:8a:08:97:47:2e:bf:db:a5:67:96:5c:a3:ba: 22:5f:2d:f2:a2:7e:5c:04:83:c5:46:cc:15:a0:d8: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6C:52:F2:F6:45:06:7A:7C:5D:6F:CC:88:F1:C7:B3:E9:3B:C4:E1 X509v3 Authority Key Identifier: keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a7:cf:01:75:bf:d8:ca:fb:b7:ba:b0:f1:d6:2e:a2:f1:36: 31:3d:db:b8:f8:0c:9d:4a:48:9f:7c:02:79:f4:0c:53:2f:2b: b1:d3:b4:89:4d:53:04:7f:79:6b:b2:4b:2e:c3:eb:8a:36:d4: ed:64:ab:70:e0:0a:fd:35:77:0f:b0:ce:81:9f:e9:5c:13:13: 34:67:e4:07:32:fd:d9:d2:22:8b:b8:c8:8c:b5:46:b0:d5:7c: ec:76:03:dc:41:ed:8e:5f:01:0f:8d:39:c3:e9:44:95:9e:7a: ee:57:3e:29:6c:ac:24:02:e8:6b:fe:f2:8e:59:e0:51:05:c7: 07:37:b3:c0:40:ef:f6:e0:67:f0:e4:1f:3e:c3:29:93:3b:f2: 83:77:1e:9e:0b:91:e7:99:8d:4f:75:b6:f4:ef:97:f7:38:3f: 4a:59:65:29:bb:99:03:da:65:e8:48:b3:46:35:51:bb:8c:67: 39:90:01:53:1a:fe:59:94:27:7c:a3:17:f4:9b:6e:8f:a0:f1: 36:94:9d:17:37:7f:c0:2a:b8:a7:e0:bd:e9:af:4f:3a:43:42: d1:8f:d6:4c:8b:14:cf:db:bd:d8:d4:24:db:ba:7e:ae:74:6f: a6:dc:84:a4:65:08:d6:cc:da:c5:07:34:39:2c:2c:5b:55:d8: 1d:d2:b4:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaFfEhPI0a+tyUqK7d1OsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl NDE2YzIwHhcNMjUxMjI5MDAwMDQ5WhcNMjUxMjMwMDAwMDQ5WjAzMTEwLwYDVQQD EyhhZDZjNTJmMmY2NDUwNjdhN2M1ZDZmY2M4OGYxYzdiM2U5M2JjNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uq8JQj3vKL1tpFd65kurEXIsLm3 uVLU0TzWQSAqgYHRY8Rl31lBtH5GUs0U9Uu28lQ6uSQzNWXthT7Mc8vqE9wA/jRm ympKvwR1kwi+ubISGwJSv4J7b+Df0gnMRpd/Fe/4dnNEGwds+119VwWsv22uY7pY LqqS7PPMj4swjByEVyo0KMaKamNtQScvNR5Q/twT+oUPTybQcaDTPH8lazTJvmIX /ARdhWD2iSeMjaTQhwD3tSZ2woGzHEEq4P+I+4tjJmTsiU3wy4tCAGZCKd5NaeHx bs8J1GI2xDMBC/LkE4oIl0cuv9ulZ5Zco7oiXy3yon5cBIPFRswVoNgdywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1sUvL2RQZ6fF1vzIjxx7PpO8ThMB8GA1UdIwQY MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1 LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6fPAXW/ 2Mr7t7qw8dYuovE2MT3buPgMnUpIn3wCefQMUy8rsdO0iU1TBH95a7JLLsPrijbU 7WSrcOAK/TV3D7DOgZ/pXBMTNGfkBzL92dIii7jIjLVGsNV87HYD3EHtjl8BD405 w+lElZ567lc+KWysJALoa/7yjlngUQXHBzezwEDv9uBn8OQfPsMpkzvyg3cenguR 55mNT3W29O+X9zg/SlllKbuZA9pl6EizRjVRu4xnOZABUxr+WZQnfKMX9Jtuj6Dx NpSdFzd/wCq4p+C96a9POkNC0Y/WTIsUz9u92NQk27p+rnRvptyEpGUI1szaxQc0 OSwsW1XYHdK0Xg== -----END CERTIFICATE-----Generated at Mon Dec 29 05:21:24 2025 by rpki-client