This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json) Hash identifier: tQ2BWLq9cUkvbISpEVOpIDbO4EB8QQWc+0z8qca7gEs= Subject key identifier: E4:00:36:28:07:D6:29:81:7B:84:44:4D:E4:C6:FB:BC:98:2A:6D:D7 Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6 Certificate serial: 019B32319673E5E9AC3D50AE8BAC19F687C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft Manifest number: 0C11 Signing time: Thu 18 Dec 2025 16:01:08 +0000 Manifest this update: Thu 18 Dec 2025 16:01:08 +0000 Manifest next update: Fri 19 Dec 2025 16:01:08 +0000 Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: xkv06kJxGJOZ9tjvd++o3UVBeRlor9xHi01GWUOgoag=) 2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:96:73:e5:e9:ac:3d:50:ae:8b:ac:19:f6:87:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6 Validity Not Before: Dec 18 16:01:08 2025 GMT Not After : Dec 19 16:01:08 2025 GMT Subject: CN=e400362807d629817b84444de4c6fbbc982a6dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:f9:85:0d:bb:55:54:56:05:6d:a6:eb:28: 4b:ec:6b:e3:94:12:61:ba:19:7f:28:57:93:dd:ca: 9f:1a:f5:d6:32:5d:54:c5:c3:91:0a:e2:0f:03:8e: bc:da:1e:a0:e2:b7:d1:9b:e6:f3:c6:16:88:34:cf: c6:38:ad:55:6e:1b:a4:9c:fb:8d:38:8b:6e:23:2b: 37:a6:77:99:d8:3a:d9:aa:e9:11:82:14:18:9f:fd: e7:0e:2e:93:90:6a:b6:9e:cc:4d:56:7a:81:92:ce: c0:26:14:60:08:8f:57:c8:83:4b:42:16:52:e1:26: 31:b5:eb:31:1b:04:6d:c5:cf:01:84:4a:af:fc:00: 78:bc:47:e6:0f:b5:67:e4:cf:79:dc:11:68:f2:ba: 81:9f:19:63:26:bb:c7:9f:79:6a:42:e7:3c:78:07: a7:ee:96:56:79:c5:30:e2:5d:d6:63:b0:be:b6:2a: 81:d3:66:d7:aa:94:e9:29:df:61:8c:24:fe:35:34: 64:3c:0e:81:87:5c:34:ce:c9:d7:e1:56:f2:b3:99: d8:3a:e4:7e:7b:ef:17:1e:f8:88:56:ca:00:9c:d8: bf:12:70:a6:a4:4d:f0:78:d5:3c:cf:42:02:83:b6: 8c:72:c2:e5:42:bb:b1:5e:d9:77:6d:f8:74:74:e5: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:00:36:28:07:D6:29:81:7B:84:44:4D:E4:C6:FB:BC:98:2A:6D:D7 X509v3 Authority Key Identifier: keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:74:50:f2:3e:56:04:f3:90:df:ef:6f:58:ce:6a:6f:cc:16: e7:eb:7a:23:96:8d:0b:83:d9:8e:76:14:7c:5e:8a:50:08:ac: b0:e5:62:7e:74:0e:a0:bc:72:9f:1b:68:bb:cd:4d:fa:95:a2: 6d:03:37:11:cd:61:3f:bf:e0:62:62:a8:c6:66:e0:38:d7:ec: a0:2f:62:c4:e6:fb:9a:dc:6a:f5:f1:4d:c9:07:55:95:6c:fd: 30:fc:c3:83:52:44:eb:97:9d:e3:59:fd:51:9a:ca:57:0d:61: 59:1e:6e:ba:3c:65:90:72:cd:be:29:92:d3:9a:46:ca:90:dd: 82:b6:b3:85:92:46:e7:9b:33:29:19:79:34:bf:f2:93:bb:1f: b7:a3:40:6f:4b:17:fb:9b:a5:06:ce:db:61:6b:be:65:13:dc: 75:aa:94:e0:ba:d5:9c:71:f2:7e:37:81:e2:ad:2f:81:05:b5: 73:b4:7d:ea:f1:bc:77:6b:3c:ae:f7:6b:69:56:ef:c0:dd:04: 23:54:1d:ea:a2:21:78:b1:af:22:b9:82:87:db:42:fb:05:2c: c4:68:5b:f8:f1:d5:c4:ca:6f:fa:3a:f3:f8:a8:d7:06:79:2c: fc:f8:3a:7a:af:9e:eb:5b:66:9f:6f:0e:d0:48:15:62:32:3c: 58:48:da:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMZZz5emsPVCui6wZ9ofHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj NDE5ZDYwHhcNMjUxMjE4MTYwMTA4WhcNMjUxMjE5MTYwMTA4WjAzMTEwLwYDVQQD EyhlNDAwMzYyODA3ZDYyOTgxN2I4NDQ0NGRlNGM2ZmJiYzk4MmE2ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjf5hQ27VVRWBW2m6yhL7GvjlBJh uhl/KFeT3cqfGvXWMl1UxcORCuIPA4682h6g4rfRm+bzxhaINM/GOK1VbhuknPuN OItuIys3pneZ2DrZqukRghQYn/3nDi6TkGq2nsxNVnqBks7AJhRgCI9XyINLQhZS 4SYxtesxGwRtxc8BhEqv/AB4vEfmD7Vn5M953BFo8rqBnxljJrvHn3lqQuc8eAen 7pZWecUw4l3WY7C+tiqB02bXqpTpKd9hjCT+NTRkPA6Bh1w0zsnX4Vbys5nYOuR+ e+8XHviIVsoAnNi/EnCmpE3weNU8z0ICg7aMcsLlQruxXtl3bfh0dOWd+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQANigH1imBe4RETeTG+7yYKm3XMB8GA1UdIwQY MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4 LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXRQ8j5W BPOQ3+9vWM5qb8wW5+t6I5aNC4PZjnYUfF6KUAissOVifnQOoLxynxtou81N+pWi bQM3Ec1hP7/gYmKoxmbgONfsoC9ixOb7mtxq9fFNyQdVlWz9MPzDg1JE65ed41n9 UZrKVw1hWR5uujxlkHLNvimS05pGypDdgrazhZJG55szKRl5NL/yk7sft6NAb0sX +5ulBs7bYWu+ZRPcdaqU4LrVnHHyfjeB4q0vgQW1c7R96vG8d2s8rvdraVbvwN0E I1Qd6qIheLGvIrmCh9tC+wUsxGhb+PHVxMpv+jrz+KjXBnks/Pg6eq+e61tmn28O 0EgVYjI8WEja3Q== -----END CERTIFICATE-----Generated at Thu Dec 18 18:06:49 2025 by rpki-client