This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json) Hash identifier: Cf4o+HZ2H/UZAQzaEm76fkUOTP7h8TyEkwNIUMBiC44= Subject key identifier: 5C:EB:24:54:AA:58:A1:02:D6:9F:4C:AF:81:00:33:68:53:5A:E2:46 Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Certificate serial: 019B3AFD79543E42CB8361E6E251CFEC53AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft Manifest number: 122B Signing time: Sat 20 Dec 2025 09:00:48 +0000 Manifest this update: Sat 20 Dec 2025 09:00:48 +0000 Manifest next update: Sun 21 Dec 2025 09:00:48 +0000 Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=) 2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=) 3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: wVVkpVusZD6LYe+UNWz11aaWNEPqppht8WLBIiFYx+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:79:54:3e:42:cb:83:61:e6:e2:51:cf:ec:53:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Validity Not Before: Dec 20 09:00:48 2025 GMT Not After : Dec 21 09:00:48 2025 GMT Subject: CN=5ceb2454aa58a102d69f4caf81003368535ae246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:e2:e9:89:ec:d8:4b:06:b5:68:d3:d6:8e: 18:76:df:96:68:59:8e:5c:52:1e:fe:2b:e0:5a:54: a1:bf:69:eb:22:f1:de:aa:6e:24:22:65:34:10:49: 92:56:4b:52:76:69:c4:d7:62:e9:9b:8c:80:a1:8e: f0:cb:28:ed:7e:9f:e4:3a:f1:a9:31:7b:39:e5:ee: 4f:70:6d:3b:7f:9c:0a:f1:db:99:e2:0d:8d:d0:1a: ec:1d:f7:5c:e8:3c:c2:3c:f3:46:71:08:cb:d2:68: b4:ca:94:d4:02:23:21:ba:67:9d:12:c5:28:73:b7: 84:a8:f1:7a:cb:3f:40:72:93:98:2b:62:86:87:15: e1:74:88:a3:64:d4:6e:7c:65:82:e4:21:18:42:7b: c1:f8:be:69:84:fb:49:d0:e1:39:89:55:0e:c6:6a: ad:aa:be:18:6c:bd:94:ec:07:e8:3b:36:2c:14:10: 65:8a:dc:83:41:54:0f:77:7e:ca:ea:35:7a:8f:43: 17:53:03:b0:6b:8d:81:76:a1:d0:f3:8f:71:c8:e7: 8a:db:e5:b4:ad:e0:30:4a:e0:0b:e4:73:20:fa:18: cf:af:22:55:af:b5:b9:29:33:4f:b5:d0:14:e3:cf: 28:b5:2a:7d:1f:7e:5b:92:5c:cc:30:ae:71:ba:7f: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:24:54:AA:58:A1:02:D6:9F:4C:AF:81:00:33:68:53:5A:E2:46 X509v3 Authority Key Identifier: keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:56:7a:28:26:8c:05:5f:5c:ab:ce:4b:aa:0a:c9:07:95:bf: 8c:35:b1:68:87:b7:e4:74:22:41:dc:2b:58:2e:13:b5:49:5f: ff:af:6e:4f:b4:b7:bb:a9:04:54:e1:3b:a2:74:11:ec:d7:f4: 70:cd:ea:be:af:aa:2c:6a:4f:a9:91:aa:0b:f7:67:ba:1b:14: 62:f3:ed:50:df:09:27:cd:a2:a5:fd:0a:2d:48:10:00:b8:af: ee:59:7a:c0:e0:93:fe:13:23:19:5a:df:5d:39:5c:f5:08:56: 55:fe:9d:79:0b:f9:e1:fe:35:f3:7f:eb:cf:90:9e:a3:a2:56: e8:f2:13:86:ef:49:99:6a:98:22:1b:4e:4a:bb:63:f2:e8:f3: 1e:7a:14:ce:56:d0:51:08:fc:76:e2:9a:3c:cc:a8:e1:79:e5: 30:4b:7e:ae:be:e5:8b:75:b5:8f:ad:d9:1d:2b:6d:61:f2:d7: 28:43:86:23:c4:19:63:7b:19:78:7c:d2:e4:9d:9d:3b:9a:d6: e0:ae:60:16:16:d2:39:6b:1b:04:27:a2:04:6e:19:e4:16:07: f0:1d:b2:4c:92:34:f9:4a:61:14:d3:9c:83:b8:2c:5a:54:9b: 58:64:c1:7c:9c:e4:3b:2b:8a:47:53:61:53:cf:7b:e7:a4:c5: a8:06:fb:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/XlUPkLLg2Hm4lHP7FOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy YWQ0ODEwHhcNMjUxMjIwMDkwMDQ4WhcNMjUxMjIxMDkwMDQ4WjAzMTEwLwYDVQQD Eyg1Y2ViMjQ1NGFhNThhMTAyZDY5ZjRjYWY4MTAwMzM2ODUzNWFlMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2fi6Yns2EsGtWjT1o4Ydt+WaFmO XFIe/ivgWlShv2nrIvHeqm4kImU0EEmSVktSdmnE12Lpm4yAoY7wyyjtfp/kOvGp MXs55e5PcG07f5wK8duZ4g2N0BrsHfdc6DzCPPNGcQjL0mi0ypTUAiMhumedEsUo c7eEqPF6yz9AcpOYK2KGhxXhdIijZNRufGWC5CEYQnvB+L5phPtJ0OE5iVUOxmqt qr4YbL2U7AfoOzYsFBBlityDQVQPd37K6jV6j0MXUwOwa42BdqHQ849xyOeK2+W0 reAwSuAL5HMg+hjPryJVr7W5KTNPtdAU488otSp9H35bklzMMK5xun/EpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzrJFSqWKEC1p9Mr4EAM2hTWuJGMB8GA1UdIwQY MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt NDA4NThiOTVmY2Y1LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1 LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1Z6KCaM BV9cq85LqgrJB5W/jDWxaIe35HQiQdwrWC4TtUlf/69uT7S3u6kEVOE7onQR7Nf0 cM3qvq+qLGpPqZGqC/dnuhsUYvPtUN8JJ82ipf0KLUgQALiv7ll6wOCT/hMjGVrf XTlc9QhWVf6deQv54f4183/rz5Ceo6JW6PIThu9JmWqYIhtOSrtj8ujzHnoUzlbQ UQj8duKaPMyo4XnlMEt+rr7li3W1j63ZHSttYfLXKEOGI8QZY3sZeHzS5J2dO5rW 4K5gFhbSOWsbBCeiBG4Z5BYH8B2yTJI0+UphFNOcg7gsWlSbWGTBfJzkOyuKR1Nh U89756TFqAb7Dg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:36:28 2025 by rpki-client