This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json) Hash identifier: LYcLA+FH3vgy3xTl2rTxoW+35tdEdg6oF8q0Dxskwrw= Subject key identifier: 3A:65:77:7A:60:F8:4F:29:70:82:38:E5:F0:F2:E7:F5:FD:C4:A5:9F Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Certificate serial: 019B6EB4AD146D7BE02AB5DA073EB8EB608A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 10:01:33 +0000 Manifest this update: Tue 30 Dec 2025 10:01:33 +0000 Manifest next update: Wed 31 Dec 2025 10:01:33 +0000 Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: NBM1neXUSIlci/waYIwtQufXXHj5CuOKNk2XJRrnCLM=) 2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:ad:14:6d:7b:e0:2a:b5:da:07:3e:b8:eb:60:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Validity Not Before: Dec 30 10:01:33 2025 GMT Not After : Dec 31 10:01:33 2025 GMT Subject: CN=3a65777a60f84f29708238e5f0f2e7f5fdc4a59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:c7:57:3b:a9:d4:1b:f6:f1:24:4e:39:1d: 97:a5:78:51:c6:bf:3d:3c:bd:16:24:5c:c1:23:56: 18:21:73:3e:1f:7e:6b:d5:6d:e8:53:30:a3:6d:a7: 76:3d:8c:73:b8:f4:a2:ff:45:c3:e7:a0:bc:ee:8f: b9:03:9b:fb:64:e8:48:58:d3:e6:7d:28:f9:e0:b6: 70:40:d1:1d:1c:52:f5:e7:04:31:19:ea:cf:2e:d4: 84:78:90:50:20:80:9f:61:30:d2:d0:c6:7f:cc:9a: 88:5f:a9:d4:0d:13:07:53:96:4a:96:82:3b:cd:f7: 3b:30:85:87:e6:5f:90:a8:c0:44:34:2f:d6:43:d6: e4:f0:2b:bf:e9:d7:2d:ab:dd:01:26:7f:7a:38:c4: bf:88:ff:fc:ff:09:5c:c0:fc:fd:12:53:ff:3a:08: f0:95:13:52:08:9d:a4:ab:92:f0:a7:99:31:23:99: ca:df:69:5e:ca:da:be:34:8a:fa:1c:e3:d2:f2:ed: 4f:62:8e:ba:55:a5:45:b7:87:9d:04:87:d8:e2:7a: f1:68:58:14:90:c5:da:f0:f5:d1:18:fd:f7:bf:13: 41:38:5f:ad:00:28:ea:23:5e:a8:18:6b:b8:c5:df: 87:9c:f2:8f:59:45:71:8e:cd:6e:e8:3b:d9:56:30: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:65:77:7A:60:F8:4F:29:70:82:38:E5:F0:F2:E7:F5:FD:C4:A5:9F X509v3 Authority Key Identifier: keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7c:d7:32:f3:ac:ba:1a:9a:77:25:22:96:34:6a:46:99:03: c3:fd:c9:3d:90:79:12:45:21:28:87:c5:60:c5:1f:2f:6c:7e: 2b:2d:c8:6a:54:13:82:a6:42:da:fe:db:63:4b:dc:0f:c3:83: 9f:ce:33:56:99:bc:81:b8:a7:de:ac:a7:09:8c:08:0d:9d:f3: 48:5e:08:b7:71:ec:86:5d:4b:98:3a:8f:4a:32:ec:a2:bf:79: f7:86:6a:5a:49:c6:fb:4c:cb:3d:f0:47:3e:d6:b6:ba:19:e8: c1:40:c4:f6:0e:ae:87:1d:96:2f:43:36:71:d2:e1:e8:10:10: 73:b6:92:d5:c4:28:f0:8c:25:e4:a7:0b:78:d4:76:e2:0b:13: cc:15:57:c8:f3:e2:3b:73:0b:fb:f9:a7:68:84:7e:33:62:b7: 0e:67:c9:1a:ad:32:50:b6:e3:5e:d6:e0:2c:1b:39:5a:95:13: 5d:6c:da:eb:b1:76:2b:eb:c5:5e:64:a9:0c:7d:c9:d4:41:62: a6:8e:42:58:60:7b:ca:1c:51:2a:a5:9d:d5:d6:17:75:27:a4: c2:19:ff:be:c8:65:9d:67:e0:9e:f7:ca:b2:38:3a:ea:d9:1a: ba:58:ff:82:10:a6:09:cf:73:7e:86:82:a2:b8:72:13:1b:b6: ad:ae:5c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutK0UbXvgKrXaBz6462CKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OGZkOTc3Y2NiZTdiYjk2ZDNjMGYzMTc0Yzk5NTFiZjg3 MGZlYjAwHhcNMjUxMjMwMTAwMTMzWhcNMjUxMjMxMTAwMTMzWjAzMTEwLwYDVQQD EygzYTY1Nzc3YTYwZjg0ZjI5NzA4MjM4ZTVmMGYyZTdmNWZkYzRhNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykvHVzup1Bv28SROOR2XpXhRxr89 PL0WJFzBI1YYIXM+H35r1W3oUzCjbad2PYxzuPSi/0XD56C87o+5A5v7ZOhIWNPm fSj54LZwQNEdHFL15wQxGerPLtSEeJBQIICfYTDS0MZ/zJqIX6nUDRMHU5ZKloI7 zfc7MIWH5l+QqMBENC/WQ9bk8Cu/6dctq90BJn96OMS/iP/8/wlcwPz9ElP/Ogjw lRNSCJ2kq5Lwp5kxI5nK32leytq+NIr6HOPS8u1PYo66VaVFt4edBIfY4nrxaFgU kMXa8PXRGP33vxNBOF+tACjqI16oGGu4xd+HnPKPWUVxjs1u6DvZVjCbDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpld3pg+E8pcII45fDy5/X9xKWfMB8GA1UdIwQY MBaAFDSP2XfMvnu5bTwPMXTJlRv4cP6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2Yt YmU3NzBlMWU2YzEzLzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2YtYmU3NzBlMWU2YzEz LzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnzXMvOs uhqadyUiljRqRpkDw/3JPZB5EkUhKIfFYMUfL2x+Ky3IalQTgqZC2v7bY0vcD8OD n84zVpm8gbin3qynCYwIDZ3zSF4It3Hshl1LmDqPSjLsor9594ZqWknG+0zLPfBH Pta2uhnowUDE9g6uhx2WL0M2cdLh6BAQc7aS1cQo8Iwl5KcLeNR24gsTzBVXyPPi O3ML+/mnaIR+M2K3DmfJGq0yULbjXtbgLBs5WpUTXWza67F2K+vFXmSpDH3J1EFi po5CWGB7yhxRKqWd1dYXdSekwhn/vshlnWfgnvfKsjg66tkaulj/ghCmCc9zfoaC orhyExu2ra5cfA== -----END CERTIFICATE-----Generated at Tue Dec 30 14:19:27 2025 by rpki-client