This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json) Hash identifier: KMyRhbaFW9dCsTamvjKGZZag3OzYp7rxFLKmNbm5bWI= Subject key identifier: ED:32:7C:DA:2A:C5:9D:1E:F8:97:29:10:74:79:D0:05:E1:E4:78:F9 Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Certificate serial: 019B3B6BD0E696B89A84D35BFC3D10AEF7EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft Manifest number: 02E1 Signing time: Sat 20 Dec 2025 11:01:20 +0000 Manifest this update: Sat 20 Dec 2025 11:01:20 +0000 Manifest next update: Sun 21 Dec 2025 11:01:20 +0000 Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: CZLdIp4andltFTjrvKx+CwyGWv3d+1M330049JsRcGU=) 2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=) 3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:d0:e6:96:b8:9a:84:d3:5b:fc:3d:10:ae:f7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Validity Not Before: Dec 20 11:01:20 2025 GMT Not After : Dec 21 11:01:20 2025 GMT Subject: CN=ed327cda2ac59d1ef89729107479d005e1e478f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:33:97:c4:f2:2b:cd:21:44:7b:5f:6c:2d: 5f:98:e7:e6:b5:e5:a7:61:06:31:58:76:4a:4c:96: fb:32:b6:90:87:ef:e2:45:6c:63:77:a0:57:b4:72: 7d:de:f0:58:b4:17:db:80:73:33:bd:27:14:24:89: 0f:5b:a7:93:4c:bc:98:a8:9e:c0:a5:3a:e8:20:1e: 0a:92:47:84:bd:16:50:34:09:37:42:2c:45:98:0c: cc:8f:18:6e:ef:b4:0c:d5:66:db:71:46:c8:3c:50: bd:8a:13:8b:14:0e:62:ac:36:2c:af:03:6c:ba:75: 90:73:79:96:1f:34:bd:4f:8e:11:9b:f4:08:2c:ae: 10:db:ba:60:b4:86:10:30:3e:97:8f:62:a2:ec:98: 0a:77:0f:56:e0:78:d5:98:10:3e:59:e0:81:cb:9c: e1:2a:0b:06:24:0a:58:6c:4a:b0:3b:8d:4b:c4:49: c7:1c:d5:a2:4b:9d:17:f6:d7:d3:c3:6e:23:14:e5: 8f:a4:66:12:97:29:4c:a8:ac:f4:a7:f1:00:87:d3: 0e:a9:37:83:b8:cd:bc:0b:59:17:20:c6:aa:83:90: fa:63:cd:61:54:eb:d8:a1:c7:80:bf:30:06:c5:b0: 3f:c1:8c:53:a1:6c:45:4f:04:0a:c1:63:e2:44:9c: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:32:7C:DA:2A:C5:9D:1E:F8:97:29:10:74:79:D0:05:E1:E4:78:F9 X509v3 Authority Key Identifier: keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:15:a8:69:61:f4:ce:39:09:89:e9:12:50:af:07:51:26:e5: 67:8c:5e:e9:25:4e:c7:4d:05:62:fc:0c:ee:ee:4d:93:7e:c7: c9:76:20:72:7e:eb:90:9c:16:12:04:23:51:3a:aa:99:67:64: a1:05:0f:89:53:c1:fc:69:98:cc:ae:50:f0:ff:1a:d7:f4:e8: 89:88:e4:36:cb:78:4a:d5:e8:9c:25:49:7d:23:85:43:ed:38: 24:47:fd:9a:68:85:6f:f3:be:bb:d0:33:cd:5d:d0:c6:ec:d7: 46:db:ba:a8:17:30:9c:e3:b4:8b:4e:ba:90:c2:1e:07:87:f8: b5:25:36:25:b1:b6:81:2a:cb:c9:45:90:da:74:3e:cd:ea:24: 64:7e:14:15:4b:50:ab:20:80:1b:a9:49:91:a3:39:38:90:4d: 26:de:dc:77:d4:6b:5f:17:10:34:dc:4f:b9:26:ab:cf:b4:34: f0:53:4a:dd:11:67:fe:c5:f5:53:1c:07:d3:da:5b:99:f8:2e: 76:e4:3c:f1:b4:d5:6e:5f:11:60:66:78:bb:11:44:ac:ef:c8: 13:ce:e4:c2:43:cf:dd:8b:40:87:d5:9d:d1:63:8c:c2:df:77: 6c:e0:47:2c:18:a3:85:4e:79:5f:82:04:57:bc:d1:d2:1b:b7: 2d:6f:e8:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a9DmlriahNNb/D0QrvfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw ZjNlZDYwHhcNMjUxMjIwMTEwMTIwWhcNMjUxMjIxMTEwMTIwWjAzMTEwLwYDVQQD EyhlZDMyN2NkYTJhYzU5ZDFlZjg5NzI5MTA3NDc5ZDAwNWUxZTQ3OGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhEzl8TyK80hRHtfbC1fmOfmteWn YQYxWHZKTJb7MraQh+/iRWxjd6BXtHJ93vBYtBfbgHMzvScUJIkPW6eTTLyYqJ7A pTroIB4KkkeEvRZQNAk3QixFmAzMjxhu77QM1WbbcUbIPFC9ihOLFA5irDYsrwNs unWQc3mWHzS9T44Rm/QILK4Q27pgtIYQMD6Xj2Ki7JgKdw9W4HjVmBA+WeCBy5zh KgsGJApYbEqwO41LxEnHHNWiS50X9tfTw24jFOWPpGYSlylMqKz0p/EAh9MOqTeD uM28C1kXIMaqg5D6Y81hVOvYoceAvzAGxbA/wYxToWxFTwQKwWPiRJx/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0yfNoqxZ0e+JcpEHR50AXh5Hj5MB8GA1UdIwQY MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBWoaWH0 zjkJiekSUK8HUSblZ4xe6SVOx00FYvwM7u5Nk37HyXYgcn7rkJwWEgQjUTqqmWdk oQUPiVPB/GmYzK5Q8P8a1/ToiYjkNst4StXonCVJfSOFQ+04JEf9mmiFb/O+u9Az zV3QxuzXRtu6qBcwnOO0i066kMIeB4f4tSU2JbG2gSrLyUWQ2nQ+zeokZH4UFUtQ qyCAG6lJkaM5OJBNJt7cd9RrXxcQNNxPuSarz7Q08FNK3RFn/sX1UxwH09pbmfgu duQ88bTVbl8RYGZ4uxFErO/IE87kwkPP3YtAh9Wd0WOMwt93bOBHLBijhU55X4IE V7zR0hu3LW/o1A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:56:22 2025 by rpki-client