This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json) Hash identifier: 7h91lABgMKRPlBQZyUaLAU4mI7mCvpr2d//xucAq/Bs= Subject key identifier: 53:B1:EE:13:F7:D1:9C:41:45:7A:4F:76:45:B1:E4:C0:2B:1D:7C:43 Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Certificate serial: 019B2C668B177E6C3F544EB0D3E2A28F1A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 13:01:16 +0000 Manifest this update: Wed 17 Dec 2025 13:01:16 +0000 Manifest next update: Thu 18 Dec 2025 13:01:16 +0000 Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=) 2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: /GGL5cLbbH2PewIUpyd8xwtUJM54y71hVdSOl2Y2ldA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:8b:17:7e:6c:3f:54:4e:b0:d3:e2:a2:8f:1a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Validity Not Before: Dec 17 13:01:16 2025 GMT Not After : Dec 18 13:01:16 2025 GMT Subject: CN=53b1ee13f7d19c41457a4f7645b1e4c02b1d7c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:cd:e3:c5:e6:30:bc:0d:57:d2:9b:7f:74: ac:e4:16:95:af:bb:97:77:52:1b:5b:a6:55:7c:40: 31:3e:85:0e:37:2c:2a:e3:bc:3d:27:cc:23:63:c6: 37:57:f4:0f:78:fc:a0:e6:0e:dd:f0:2f:ab:ff:76: 45:93:e2:3b:64:6b:73:98:32:05:0d:cf:6b:78:65: c5:aa:ce:c2:66:96:9f:aa:79:0e:2c:8a:af:41:9d: f4:37:df:08:a6:3d:bc:e4:95:03:d6:e4:78:08:9d: cb:97:a5:6f:74:fd:04:10:8a:1d:14:ec:7c:7a:6f: 1a:84:8a:2f:05:e6:c4:fc:57:b9:54:e2:6b:9f:12: c0:a1:80:3c:d4:fd:57:e8:15:ed:d2:67:f8:f6:b9: d7:48:99:67:11:94:9e:5a:e2:af:8e:6e:83:8e:8b: 6c:0a:c0:e5:60:fe:91:a2:0b:ce:fc:53:4a:e7:3f: d3:07:17:7b:56:e9:f3:7a:82:62:18:92:73:7d:a0: bb:53:f6:47:ec:4c:d7:cb:6d:87:aa:a8:25:83:b4: 45:e8:fa:20:7b:fe:f6:d7:e4:7b:41:c1:a0:0b:c4: e3:c8:ee:23:ae:75:0a:4a:d5:44:77:f9:ce:ba:39: 4a:8c:0c:34:b8:8d:2a:13:fc:68:0e:07:9f:9d:7d: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:EE:13:F7:D1:9C:41:45:7A:4F:76:45:B1:E4:C0:2B:1D:7C:43 X509v3 Authority Key Identifier: keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d2:5b:3b:f0:0f:fa:91:a9:ef:d2:b4:4b:00:fa:f4:d7:10: b9:07:de:a1:0e:04:a3:f9:a7:9a:a5:71:9c:c7:01:cf:4a:40: 67:5a:c3:5d:84:6d:68:aa:9c:1f:d0:a2:d6:69:a5:b5:7b:21: a6:44:6d:86:52:e8:57:44:aa:3d:09:a0:af:1d:98:74:b2:d6: bd:5c:68:ab:a4:67:b6:76:e7:c2:ff:3d:1c:c4:cd:57:95:64: 47:41:8d:a0:ac:83:71:cf:8d:47:4f:ce:a2:fc:40:82:84:37: e0:59:68:ee:61:40:00:6a:83:f0:56:14:f2:a9:2a:92:53:15: 7e:ce:e1:c2:c3:fa:36:53:93:29:f7:e8:24:d5:77:00:a4:56: ce:b0:6b:39:a0:64:0d:4e:da:a8:d1:f2:42:e0:fc:76:93:38: 18:bf:3d:6c:52:d8:d9:76:24:74:4c:99:58:fc:44:2a:ab:cb: cb:1d:32:86:ae:9f:80:74:1d:f1:eb:7b:92:31:0e:0c:d5:e2: 8d:41:a8:eb:44:66:0b:af:59:fe:7b:b9:82:bb:11:9b:b7:cf: 02:9e:05:6f:78:e8:8c:3f:4e:7e:2f:e4:53:d7:de:17:37:23: b0:9e:58:48:f8:fc:61:d5:f6:88:2f:b0:d7:96:d1:a0:26:49: 03:1d:5f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZosXfmw/VE6w0+KijxoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk MDUyOTEwHhcNMjUxMjE3MTMwMTE2WhcNMjUxMjE4MTMwMTE2WjAzMTEwLwYDVQQD Eyg1M2IxZWUxM2Y3ZDE5YzQxNDU3YTRmNzY0NWIxZTRjMDJiMWQ3YzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yvN48XmMLwNV9Kbf3Ss5BaVr7uX d1IbW6ZVfEAxPoUONywq47w9J8wjY8Y3V/QPePyg5g7d8C+r/3ZFk+I7ZGtzmDIF Dc9reGXFqs7CZpafqnkOLIqvQZ30N98Ipj285JUD1uR4CJ3Ll6VvdP0EEIodFOx8 em8ahIovBebE/Fe5VOJrnxLAoYA81P1X6BXt0mf49rnXSJlnEZSeWuKvjm6Djots CsDlYP6RogvO/FNK5z/TBxd7VunzeoJiGJJzfaC7U/ZH7EzXy22Hqqglg7RF6Pog e/721+R7QcGgC8TjyO4jrnUKStVEd/nOujlKjAw0uI0qE/xoDgefnX3I6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOx7hP30ZxBRXpPdkWx5MArHXxDMB8GA1UdIwQY MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt MTBjYmM1OTdhNzFhLzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNJbO/AP +pGp79K0SwD69NcQuQfeoQ4Eo/mnmqVxnMcBz0pAZ1rDXYRtaKqcH9Ci1mmltXsh pkRthlLoV0SqPQmgrx2YdLLWvVxoq6Rntnbnwv89HMTNV5VkR0GNoKyDcc+NR0/O ovxAgoQ34Flo7mFAAGqD8FYU8qkqklMVfs7hwsP6NlOTKffoJNV3AKRWzrBrOaBk DU7aqNHyQuD8dpM4GL89bFLY2XYkdEyZWPxEKqvLyx0yhq6fgHQd8et7kjEODNXi jUGo60RmC69Z/nu5grsRm7fPAp4Fb3jojD9Ofi/kU9feFzcjsJ5YSPj8YdX2iC+w 15bRoCZJAx1fXg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:38 2025 by rpki-client