This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json) Hash identifier: Xxag3RMYCfWA+2nMsCtc8OqzGhUU0vzA1dUTxYB1ZrM= Subject key identifier: 57:8E:DA:8C:93:1A:96:29:75:74:8A:B6:88:B8:AD:DF:D4:10:CD:53 Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa Certificate serial: 019B3F4805BA7595718EFE13E920A74D56C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft Manifest number: 0D4B Signing time: Sun 21 Dec 2025 05:00:43 +0000 Manifest this update: Sun 21 Dec 2025 05:00:43 +0000 Manifest next update: Mon 22 Dec 2025 05:00:43 +0000 Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: GCwBkwwCa/H/Dy5pXVQMVM9f+L8gluHDnhxCJ3Nt2bE=) 2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:05:ba:75:95:71:8e:fe:13:e9:20:a7:4d:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa Validity Not Before: Dec 21 05:00:43 2025 GMT Not After : Dec 22 05:00:43 2025 GMT Subject: CN=578eda8c931a962975748ab688b8addfd410cd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:93:a2:5d:bf:54:9f:26:0c:6d:34:86:33: fc:fc:61:ca:cd:7b:3c:0f:0c:22:af:32:5c:e6:81: 03:a3:e9:b8:4b:29:3b:55:f0:26:d6:a6:2b:ec:09: 00:c4:9a:d8:24:23:c8:bc:d3:74:43:49:c6:05:6e: 9e:f8:12:85:b1:d3:dc:50:68:f4:e5:b8:2a:b9:86: 9c:81:a9:ad:2a:e6:77:8a:9e:24:a9:27:56:34:04: f5:48:a9:46:2f:66:70:32:4a:2d:23:c0:d0:df:08: e6:58:17:39:fc:ee:bc:01:55:56:59:2c:72:d0:40: 93:14:d6:86:1c:6d:94:e8:5b:70:93:0f:87:83:94: be:ef:97:af:36:95:dd:33:01:e6:95:13:fa:92:cc: 2d:4c:54:b4:51:c8:8d:97:af:d4:39:15:cb:37:c4: ea:c9:60:06:d8:e0:42:f6:04:e9:21:79:cb:9c:95: ad:93:16:ab:9b:fd:a5:ea:6f:00:20:da:a9:31:bd: cf:5a:c0:38:25:57:36:7c:33:00:e5:dc:a1:42:84: 26:b5:1c:cf:ac:6a:f6:9d:22:84:30:61:74:85:26: 47:df:c9:00:15:71:ed:ac:88:f1:0f:d0:1e:e5:37: dc:87:ad:4c:1a:b4:b3:78:9a:6a:6f:9d:2d:c3:58: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8E:DA:8C:93:1A:96:29:75:74:8A:B6:88:B8:AD:DF:D4:10:CD:53 X509v3 Authority Key Identifier: keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:75:aa:28:1a:62:78:af:be:93:c1:34:ca:7e:8a:99:da:ca: 4e:f1:cd:72:87:c7:d9:84:32:7d:f2:d2:6d:6a:82:07:25:5f: a5:81:7d:d6:74:cc:8c:d3:fa:98:53:8b:2c:22:5c:06:44:ae: b3:7d:29:c6:6c:34:29:79:6b:df:8b:07:fd:e0:7a:7f:24:ae: 74:e9:0a:3a:55:55:97:42:f3:61:d5:a7:5a:c8:12:e7:fd:ca: fc:7b:56:b4:05:43:45:8f:db:6c:d3:ef:d2:14:33:82:50:b4: ce:a3:5b:43:a2:89:39:a6:34:c9:65:4e:5f:50:eb:03:ee:10: b7:bc:ad:9a:cf:fc:89:70:4b:1f:e5:fe:b5:cc:73:b5:94:d0: e0:ba:78:56:f2:b2:7f:d2:fb:f9:1e:28:5c:0f:fb:33:aa:1d: b2:96:ea:e9:e6:f2:ae:1c:46:c4:92:36:f5:17:a2:4f:c8:bb: 72:19:63:78:7c:68:b7:91:ea:78:a6:a6:a6:ae:8c:44:52:e0: 18:ed:ad:48:16:5f:88:1a:a9:f6:c6:85:ad:d6:28:1b:55:fb: 4f:14:7f:a9:b6:30:c5:ef:ca:06:f8:b9:38:1b:ad:dc:7d:c5: 8e:e7:40:98:3a:63:a6:7f:3b:df:fe:f6:7b:43:e0:d9:37:a1: ca:91:eb:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SAW6dZVxjv4T6SCnTVbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OGNmOTc3OWE5MmVmZTk3NTQzYjIyYTM0N2I4MWMyZWFh NWJiZmEwHhcNMjUxMjIxMDUwMDQzWhcNMjUxMjIyMDUwMDQzWjAzMTEwLwYDVQQD Eyg1NzhlZGE4YzkzMWE5NjI5NzU3NDhhYjY4OGI4YWRkZmQ0MTBjZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G2Tol2/VJ8mDG00hjP8/GHKzXs8 DwwirzJc5oEDo+m4Syk7VfAm1qYr7AkAxJrYJCPIvNN0Q0nGBW6e+BKFsdPcUGj0 5bgquYacgamtKuZ3ip4kqSdWNAT1SKlGL2ZwMkotI8DQ3wjmWBc5/O68AVVWWSxy 0ECTFNaGHG2U6Ftwkw+Hg5S+75evNpXdMwHmlRP6kswtTFS0UciNl6/UORXLN8Tq yWAG2OBC9gTpIXnLnJWtkxarm/2l6m8AINqpMb3PWsA4JVc2fDMA5dyhQoQmtRzP rGr2nSKEMGF0hSZH38kAFXHtrIjxD9Ae5Tfch61MGrSzeJpqb50tw1g30QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeO2oyTGpYpdXSKtoi4rd/UEM1TMB8GA1UdIwQY MBaAFDSM+Xeaku/pdUOyKjR7gcLqpbv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3Zjkt Yzk4MTlhNDEwYTdhLzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3ZjktYzk4MTlhNDEwYTdh LzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXWqKBpi eK++k8E0yn6KmdrKTvHNcofH2YQyffLSbWqCByVfpYF91nTMjNP6mFOLLCJcBkSu s30pxmw0KXlr34sH/eB6fySudOkKOlVVl0LzYdWnWsgS5/3K/HtWtAVDRY/bbNPv 0hQzglC0zqNbQ6KJOaY0yWVOX1DrA+4Qt7ytms/8iXBLH+X+tcxztZTQ4Lp4VvKy f9L7+R4oXA/7M6odspbq6ebyrhxGxJI29ReiT8i7chljeHxot5HqeKampq6MRFLg GO2tSBZfiBqp9saFrdYoG1X7TxR/qbYwxe/KBvi5OBut3H3FjudAmDpjpn873/72 e0Pg2TehypHrtQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:13:26 2025 by rpki-client