This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json) Hash identifier: Ki5cWukdlHkNgj5T5fi6YJevJ+4i6o+5W9n5ve72iBI= Subject key identifier: 90:05:56:D3:2C:67:4C:7B:7B:90:95:9C:8C:9E:31:5B:87:7B:84:B2 Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Certificate serial: 019B3EDAB61F08175A376043390BCB021E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 03:01:19 +0000 Manifest this update: Sun 21 Dec 2025 03:01:19 +0000 Manifest next update: Mon 22 Dec 2025 03:01:19 +0000 Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=) 2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: qL58hW6gduM8gpjpd4f3fFzx0N1szTjb7SdRbCNrhgs=) 3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:b6:1f:08:17:5a:37:60:43:39:0b:cb:02:1e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Validity Not Before: Dec 21 03:01:19 2025 GMT Not After : Dec 22 03:01:19 2025 GMT Subject: CN=900556d32c674c7b7b90959c8c9e315b877b84b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:20:79:0c:59:be:26:6c:f0:e8:ce:f9:ef: 02:9b:c9:3b:19:88:ae:5e:83:5a:0f:8a:c4:16:55: c8:36:b9:5e:84:f9:23:72:e4:d4:52:b4:e7:72:01: 5b:65:59:06:d9:0a:c8:96:b8:b5:e5:28:ce:cf:60: 49:af:55:1c:3d:3f:77:87:f9:db:e9:c5:15:36:b0: 4e:a3:5a:ac:9d:1d:f7:ab:e9:cb:7f:eb:87:3c:e5: c1:f2:33:bb:8c:1d:96:ce:09:98:62:d2:47:e6:2f: 73:39:c4:5c:92:19:54:b1:4d:ca:92:1f:7e:70:9a: 17:20:f4:b0:1e:a5:ae:9d:34:7d:06:03:ad:7c:95: 7e:63:7d:ca:f5:9d:39:e4:01:98:ef:aa:72:88:f7: 59:81:ef:66:25:16:48:73:10:d1:d1:a3:0f:29:5c: 62:77:c6:ee:d4:6c:c4:d8:04:59:ce:e4:dd:e7:7e: 16:e4:ef:0b:55:dc:73:3a:5f:20:35:0b:92:b7:a9: 50:bf:3e:9d:9b:63:4c:76:7a:83:82:48:a5:d1:3c: 62:81:ca:39:02:6e:96:60:17:4d:c8:5d:66:09:bf: 79:55:d9:42:a7:91:11:17:e1:28:f0:48:69:72:9a: 34:fd:96:97:c3:d0:15:b1:f8:7d:e4:5a:05:36:c9: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:56:D3:2C:67:4C:7B:7B:90:95:9C:8C:9E:31:5B:87:7B:84:B2 X509v3 Authority Key Identifier: keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:30:49:da:dd:0e:e1:b9:ec:48:aa:a6:72:92:d9:fb:a8:61: 9d:56:53:dc:5b:d5:14:0d:05:80:75:c0:ef:c8:af:f0:5d:a3: 34:f9:97:87:4f:bf:10:42:20:a2:ca:91:44:5d:a8:2d:bb:f8: 21:86:b2:28:b7:ca:2f:ca:ef:c9:18:b1:ab:ed:aa:c0:0a:8d: c7:2e:2c:0c:d8:af:01:7a:3f:a3:b0:f6:ba:ac:02:db:b0:41: ab:f4:30:4f:48:90:25:dd:d7:d2:5a:0a:6a:4c:df:b1:34:51: d9:23:75:77:71:de:9c:15:e7:fc:3d:ca:ca:51:c4:17:1e:22: e6:b5:d8:4b:14:cf:9c:9c:0f:43:d6:4c:3c:ba:fd:72:f6:a3: 29:7f:48:91:4b:07:ff:c0:f0:21:10:88:f5:14:aa:ed:c6:1e: c1:ee:c8:96:3d:e9:e6:5b:05:3a:f9:41:0c:fa:69:bf:f0:f2: 5d:12:ef:b0:fd:d2:e2:23:de:e2:6e:4d:a3:dc:be:0f:48:f5: 9e:02:3b:ad:4c:b7:9c:60:b1:d4:a2:00:f9:b9:9d:71:ef:8e: 51:05:ae:f6:60:0b:3d:e5:42:92:ba:6e:66:d9:a8:76:85:92: 32:89:52:41:a1:65:64:c1:cd:de:1e:2c:17:56:47:d3:b6:cf: f1:4d:a4:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2rYfCBdaN2BDOQvLAh59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi MTM0M2YwHhcNMjUxMjIxMDMwMTE5WhcNMjUxMjIyMDMwMTE5WjAzMTEwLwYDVQQD Eyg5MDA1NTZkMzJjNjc0YzdiN2I5MDk1OWM4YzllMzE1Yjg3N2I4NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw94geQxZviZs8OjO+e8Cm8k7GYiu XoNaD4rEFlXINrlehPkjcuTUUrTncgFbZVkG2QrIlri15SjOz2BJr1UcPT93h/nb 6cUVNrBOo1qsnR33q+nLf+uHPOXB8jO7jB2WzgmYYtJH5i9zOcRckhlUsU3Kkh9+ cJoXIPSwHqWunTR9BgOtfJV+Y33K9Z055AGY76pyiPdZge9mJRZIcxDR0aMPKVxi d8bu1GzE2ARZzuTd534W5O8LVdxzOl8gNQuSt6lQvz6dm2NMdnqDgkil0Txigco5 Am6WYBdNyF1mCb95VdlCp5ERF+Eo8Ehpcpo0/ZaXw9AVsfh95FoFNskV0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAFVtMsZ0x7e5CVnIyeMVuHe4SyMB8GA1UdIwQY MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt Y2I3Y2JjYTdjMWUwLzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDBJ2t0O 4bnsSKqmcpLZ+6hhnVZT3FvVFA0FgHXA78iv8F2jNPmXh0+/EEIgosqRRF2oLbv4 IYayKLfKL8rvyRixq+2qwAqNxy4sDNivAXo/o7D2uqwC27BBq/QwT0iQJd3X0loK akzfsTRR2SN1d3HenBXn/D3KylHEFx4i5rXYSxTPnJwPQ9ZMPLr9cvajKX9IkUsH /8DwIRCI9RSq7cYewe7Ilj3p5lsFOvlBDPppv/DyXRLvsP3S4iPe4m5No9y+D0j1 ngI7rUy3nGCx1KIA+bmdce+OUQWu9mALPeVCkrpuZtmodoWSMolSQaFlZMHN3h4s F1ZH07bP8U2kdw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:21 2025 by rpki-client