This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json) Hash identifier: tZtRaK+wJvD5Hdb29OXF7tpgv5wV6P0DL8O6OIapLXI= Subject key identifier: 7C:C2:6C:66:7B:B1:15:D8:B9:8F:4D:82:4E:29:73:B1:AC:74:AC:A5 Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Certificate serial: 019B5C4067A6DB498980AD892A38606CF216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft Manifest number: 02F2 Signing time: Fri 26 Dec 2025 20:01:23 +0000 Manifest this update: Fri 26 Dec 2025 20:01:23 +0000 Manifest next update: Sat 27 Dec 2025 20:01:23 +0000 Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: TX6DiV6UBSV9CLOKrY+y9be2DqGom/t+cglH/+S+omk=) 2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=) 3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:67:a6:db:49:89:80:ad:89:2a:38:60:6c:f2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Validity Not Before: Dec 26 20:01:23 2025 GMT Not After : Dec 27 20:01:23 2025 GMT Subject: CN=7cc26c667bb115d8b98f4d824e2973b1ac74aca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ea:f4:59:b6:ba:2d:9d:2e:2c:28:b4:a7:49: 11:32:09:29:fa:c5:89:0b:75:31:3a:df:2b:51:bc: 77:d3:c1:51:0a:ad:ec:0f:a6:9e:93:81:40:8d:3d: 02:32:ea:32:62:36:c8:db:bb:c2:b9:a6:16:a8:c3: 68:02:c1:88:21:fb:eb:b2:96:99:45:51:a4:19:09: fe:42:5a:8a:eb:2e:74:84:1a:88:28:52:e1:a8:1f: 79:30:d7:17:72:04:5c:20:6a:d4:6f:e9:02:93:7d: f5:35:1d:73:c0:16:bc:0f:2d:20:b1:0d:dc:02:0a: bc:49:b7:4b:98:d5:2a:02:d3:eb:fd:be:71:12:95: 5f:6c:06:1b:7b:5a:3b:50:44:70:4f:c1:39:ad:5d: ad:53:1f:30:4c:e4:c7:b8:a8:99:fc:99:fe:40:15: e6:bd:d1:d5:41:d7:27:de:3e:0f:ae:4f:33:e2:bc: 79:7e:0d:ff:06:1a:dc:64:e8:8e:72:d6:16:32:15: 0b:20:70:47:42:6e:5c:8a:8f:dc:de:6c:38:fe:48: ef:98:11:b9:04:d7:ab:39:ba:9a:9d:e7:cb:27:06: 2c:28:12:82:d8:39:f0:42:1e:09:b5:d9:29:fe:b5: 24:0b:ee:37:f8:04:b0:e4:78:6b:20:4f:60:3c:1b: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C2:6C:66:7B:B1:15:D8:B9:8F:4D:82:4E:29:73:B1:AC:74:AC:A5 X509v3 Authority Key Identifier: keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ac:cf:b8:91:79:86:12:89:a0:0c:c7:e1:1c:46:9f:99:a3: 33:67:50:0c:e4:a3:b7:c9:45:04:28:44:c3:95:b8:52:8f:a2: a5:bf:89:5d:bb:71:8d:10:c0:2f:2f:27:6d:d8:81:59:cb:9f: 79:d1:83:11:b0:a4:0c:02:62:28:e8:ce:4e:e2:a9:4b:a4:ed: b9:68:a1:98:47:2f:6c:20:a2:1d:db:4d:bf:b3:de:98:25:ca: 35:fd:55:ec:8c:e8:68:94:a9:13:22:ff:c9:11:b0:c7:e6:b1: 15:aa:62:dd:fd:86:52:79:54:58:9c:f9:41:f6:99:73:f1:64: 5d:da:09:11:c6:23:d7:54:f3:68:4f:4f:ec:9d:d7:37:99:c2: f6:c1:bf:b3:08:04:67:77:26:27:c8:75:7c:51:ff:d5:31:71: ae:53:ab:a8:06:55:ca:0a:05:d9:7e:e8:47:94:13:18:c2:73: 38:3c:88:6e:c4:e2:51:3a:9e:1f:a1:bb:b5:16:65:8e:37:a1: 13:b3:dd:71:bb:10:da:6d:1d:fa:d4:b2:24:b3:24:e7:8f:08: 25:75:a0:99:d2:01:a1:3d:dc:54:76:b2:05:29:4f:f3:f3:2e: f1:68:72:2a:b9:89:9d:7a:5a:fd:1a:f5:a6:35:d7:48:ac:c4: 15:1d:2c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQGem20mJgK2JKjhgbPIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw ZjNlZDYwHhcNMjUxMjI2MjAwMTIzWhcNMjUxMjI3MjAwMTIzWjAzMTEwLwYDVQQD Eyg3Y2MyNmM2NjdiYjExNWQ4Yjk4ZjRkODI0ZTI5NzNiMWFjNzRhY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ur0Wba6LZ0uLCi0p0kRMgkp+sWJ C3UxOt8rUbx308FRCq3sD6aek4FAjT0CMuoyYjbI27vCuaYWqMNoAsGIIfvrspaZ RVGkGQn+QlqK6y50hBqIKFLhqB95MNcXcgRcIGrUb+kCk331NR1zwBa8Dy0gsQ3c Agq8SbdLmNUqAtPr/b5xEpVfbAYbe1o7UERwT8E5rV2tUx8wTOTHuKiZ/Jn+QBXm vdHVQdcn3j4Prk8z4rx5fg3/BhrcZOiOctYWMhULIHBHQm5cio/c3mw4/kjvmBG5 BNerObqanefLJwYsKBKC2DnwQh4Jtdkp/rUkC+43+ASw5HhrIE9gPBuIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzCbGZ7sRXYuY9Ngk4pc7GsdKylMB8GA1UdIwQY MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqzPuJF5 hhKJoAzH4RxGn5mjM2dQDOSjt8lFBChEw5W4Uo+ipb+JXbtxjRDALy8nbdiBWcuf edGDEbCkDAJiKOjOTuKpS6TtuWihmEcvbCCiHdtNv7PemCXKNf1V7IzoaJSpEyL/ yRGwx+axFapi3f2GUnlUWJz5QfaZc/FkXdoJEcYj11TzaE9P7J3XN5nC9sG/swgE Z3cmJ8h1fFH/1TFxrlOrqAZVygoF2X7oR5QTGMJzODyIbsTiUTqeH6G7tRZljjeh E7PdcbsQ2m0d+tSyJLMk548IJXWgmdIBoT3cVHayBSlP8/Mu8WhyKrmJnXpa/Rr1 pjXXSKzEFR0sUw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:23 2025 by rpki-client