This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json) Hash identifier: lGOcgXPwkCdK2Z+JLDLKzibo7p0Fid3XJkOdlaz5M+U= Subject key identifier: 57:F8:B0:E3:B4:97:DC:8E:8D:4C:C5:05:DD:2F:D3:76:F6:F0:35:DE Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52 Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952 Certificate serial: 019B68E8BCF6041C150CC52583022ABDDE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft Manifest number: 1277 Signing time: Mon 29 Dec 2025 07:00:41 +0000 Manifest this update: Mon 29 Dec 2025 07:00:41 +0000 Manifest next update: Tue 30 Dec 2025 07:00:41 +0000 Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: I74N3NzzlTkVktdzofdE09CoUeBH77xzTQLL/FupBU8=) 2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e8:bc:f6:04:1c:15:0c:c5:25:83:02:2a:bd:de:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952 Validity Not Before: Dec 29 07:00:41 2025 GMT Not After : Dec 30 07:00:41 2025 GMT Subject: CN=57f8b0e3b497dc8e8d4cc505dd2fd376f6f035de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:e5:db:da:b9:a6:91:58:e9:fd:bf:4a:94: dd:c9:70:1d:06:4f:54:9f:64:57:d7:a2:f6:e5:16: 52:ed:ff:c1:1d:0f:cd:22:72:7d:69:e8:39:d1:29: 28:eb:f7:70:3d:de:33:9d:29:18:2f:1b:6b:28:e7: 20:dc:1a:41:fb:64:62:ab:1e:cb:31:e5:22:96:90: 33:10:b7:6f:9e:17:0e:66:2a:82:95:77:fe:03:ed: 8a:af:6a:f5:23:94:ea:7d:ce:68:61:1e:a1:78:17: 2d:c8:2c:19:4a:a0:43:c3:94:64:8c:90:2d:ea:45: f9:f6:3f:ac:f6:72:67:01:40:60:a1:9e:3e:dd:07: d4:3a:85:4f:c3:53:27:1b:4a:3b:1d:bf:b9:7d:c0: 8b:b1:cb:a4:0f:50:f5:1f:1e:3b:97:fd:dc:31:b3: 0e:cb:0e:96:e6:29:49:3b:0a:62:c0:11:f8:51:be: 8e:84:90:59:7e:f6:dc:27:1d:dc:6b:a2:e8:cf:44: 6f:6d:2b:49:70:d8:ff:40:6e:e4:c7:ed:80:1a:29: 94:c7:e5:ff:a3:18:31:86:d7:1a:67:b6:3f:94:a3: a3:0b:16:5a:94:b8:37:38:a3:27:a4:6a:76:3b:e2: 0a:8c:3b:ab:7f:56:9e:da:0b:e8:4d:9b:86:68:a6: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F8:B0:E3:B4:97:DC:8E:8D:4C:C5:05:DD:2F:D3:76:F6:F0:35:DE X509v3 Authority Key Identifier: keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:24:98:16:3a:9f:92:b2:7e:30:cd:8e:8f:6f:41:99:ab: b3:9d:8a:6f:38:5a:a7:44:d3:39:ec:00:09:6c:62:62:13:dd: 1a:5b:4a:30:f8:10:3c:5d:d8:2a:4a:1a:1b:9c:09:e4:1b:eb: 6f:4b:bd:d2:5b:ec:65:88:70:e4:23:54:ba:36:1c:b1:a6:30: 8f:2c:a2:9e:30:61:6d:8a:80:a7:ac:ff:07:75:05:32:15:93: 3d:f7:d0:9e:9f:38:c5:c7:27:58:18:ab:09:5b:25:a6:52:2f: cc:9b:11:48:a3:ee:9d:4d:25:e2:1f:7c:4a:e2:00:14:ce:0a: d4:77:aa:a1:7d:9a:9e:b7:e0:f8:20:e6:6c:58:1c:a2:fc:e8: a7:94:49:8f:b7:d8:76:74:30:fb:fd:e7:06:7e:c2:6b:43:eb: 53:00:49:dd:25:f0:e0:0a:ee:88:d1:24:bd:e1:30:c0:98:ff: ef:91:99:4e:1e:9b:30:8d:38:be:6b:79:50:70:f7:76:c9:42: f7:08:9e:d2:5a:fd:bb:93:6e:f0:03:28:68:47:1d:3c:5c:61: de:7c:6d:93:55:90:75:62:2f:21:5c:dc:c1:bb:8d:9d:b1:66: 33:15:5f:f6:81:09:15:51:4c:cf:28:7a:88:e2:7d:e1:ea:3d: 95:d5:17:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6Lz2BBwVDMUlgwIqvd5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjQ1ZTAwYWUxNjRlNjdhYTEzNTQ4NTcyMzdkMDlhZGYy N2M5NTIwHhcNMjUxMjI5MDcwMDQxWhcNMjUxMjMwMDcwMDQxWjAzMTEwLwYDVQQD Eyg1N2Y4YjBlM2I0OTdkYzhlOGQ0Y2M1MDVkZDJmZDM3NmY2ZjAzNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjnl29q5ppFY6f2/SpTdyXAdBk9U n2RX16L25RZS7f/BHQ/NInJ9aeg50Sko6/dwPd4znSkYLxtrKOcg3BpB+2Riqx7L MeUilpAzELdvnhcOZiqClXf+A+2Kr2r1I5Tqfc5oYR6heBctyCwZSqBDw5RkjJAt 6kX59j+s9nJnAUBgoZ4+3QfUOoVPw1MnG0o7Hb+5fcCLscukD1D1Hx47l/3cMbMO yw6W5ilJOwpiwBH4Ub6OhJBZfvbcJx3ca6Loz0RvbStJcNj/QG7kx+2AGimUx+X/ oxgxhtcaZ7Y/lKOjCxZalLg3OKMnpGp2O+IKjDurf1ae2gvoTZuGaKZa0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf4sOO0l9yOjUzFBd0v03b28DXeMB8GA1UdIwQY MBaAFJz0XgCuFk5nqhNUhXI30JrfJ8lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmIt NWFkNWQyOWQ3MmRkLzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmItNWFkNWQyOWQ3MmRk LzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3kkmBY6 n5KyfjDNjo9vQZmrs52Kbzhap0TTOewACWxiYhPdGltKMPgQPF3YKkoaG5wJ5Bvr b0u90lvsZYhw5CNUujYcsaYwjyyinjBhbYqAp6z/B3UFMhWTPffQnp84xccnWBir CVslplIvzJsRSKPunU0l4h98SuIAFM4K1HeqoX2anrfg+CDmbFgcovzop5RJj7fY dnQw+/3nBn7Ca0PrUwBJ3SXw4AruiNEkveEwwJj/75GZTh6bMI04vmt5UHD3dslC 9wie0lr9u5Nu8AMoaEcdPFxh3nxtk1WQdWIvIVzcwbuNnbFmMxVf9oEJFVFMzyh6 iOJ94eo9ldUXWg== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:57 2025 by rpki-client