This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json) Hash identifier: Uv/80riCQCK7P/ItYw21vQV759b6n7c3SoAtxcALM8g= Subject key identifier: DE:C3:C8:EB:08:93:81:B1:19:E8:BC:18:73:21:E7:88:C3:A9:11:B5 Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Certificate serial: 019B44A5DDC75EC9E2C5447AC3B6AE4B7FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft Manifest number: 1795 Signing time: Mon 22 Dec 2025 06:01:19 +0000 Manifest this update: Mon 22 Dec 2025 06:01:19 +0000 Manifest next update: Tue 23 Dec 2025 06:01:19 +0000 Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=) 2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: G/mCQDEcMdHxAFfah4XPLuxgpjAkjxltMQI+gvN1CAo=) 3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:dd:c7:5e:c9:e2:c5:44:7a:c3:b6:ae:4b:7f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Validity Not Before: Dec 22 06:01:19 2025 GMT Not After : Dec 23 06:01:19 2025 GMT Subject: CN=dec3c8eb089381b119e8bc187321e788c3a911b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:e8:52:b9:47:ac:6a:2b:cd:3b:ac:71:46: 9d:b1:59:94:7e:4c:58:31:4c:59:6d:d6:d6:8c:d1: 38:fc:0c:ee:7a:7d:8f:5d:c0:2b:69:51:8f:18:b6: 26:a5:63:9a:20:b6:41:3b:34:e2:7c:7f:4c:96:30: b4:1e:86:3f:be:3d:e3:9c:06:4d:f4:60:fd:24:19: e8:7d:bc:fc:8d:04:80:2a:8c:bd:45:ed:e3:3c:94: 12:a2:32:75:de:b6:8f:54:60:98:0f:c6:55:d6:0b: 74:3a:89:f2:13:ff:bf:c4:e0:14:ac:b9:65:29:ca: ef:9b:1e:14:fd:45:fc:ee:7b:b3:e1:39:76:40:8d: 91:55:3e:86:d2:56:8b:db:f0:7d:44:60:34:df:85: 0d:25:31:c2:d5:0e:e9:dc:a5:a1:c1:4b:9b:75:29: 4f:46:9d:76:58:62:5e:cb:06:13:a1:f9:f1:44:77: f7:b5:4d:68:f4:f8:60:e3:dc:6c:d0:f3:a1:09:64: a2:65:3f:31:9e:7a:5a:d4:0a:61:c4:bc:61:10:d0: e2:5e:93:0b:fc:3f:08:f4:10:ec:10:23:c3:e5:40: 17:37:06:8f:9d:20:55:41:da:66:6d:a2:7f:a4:45: 06:b4:ac:61:fa:e8:df:9c:c3:cc:fd:fd:0f:f2:c7: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C3:C8:EB:08:93:81:B1:19:E8:BC:18:73:21:E7:88:C3:A9:11:B5 X509v3 Authority Key Identifier: keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e7:4e:a9:e2:31:0b:b0:7e:1e:fc:9a:88:cf:1e:32:e2:a4: c1:a5:0c:9d:6a:a4:1a:c8:8c:67:4e:16:2f:91:90:65:ea:ba: 6a:6a:11:48:c7:8f:7f:a7:b6:db:66:24:49:12:47:7a:2d:73: 25:f0:a5:d6:9b:16:2f:d5:49:97:cc:76:c2:0e:57:ac:15:64: 29:10:09:b0:9d:d1:39:ca:f0:0c:ca:80:a1:9f:28:b2:b3:29: e9:34:8f:63:7b:ab:83:da:d3:93:4a:8e:63:d5:7e:8b:06:75: ad:90:aa:00:a2:18:df:d5:65:f7:67:81:2a:11:cf:b8:c8:f8: a3:d2:67:0e:9f:e7:5c:70:a8:b3:08:f1:d9:0b:5f:c2:26:fa: d6:22:1f:52:d8:92:de:09:68:3b:d1:c0:b0:89:5d:ab:71:8d: 03:34:05:30:e6:93:24:a0:65:b6:a5:5a:4b:58:49:2f:2c:40: 66:03:d9:66:a4:39:f9:0f:f6:ba:a9:44:e3:bc:ed:17:a6:96: 41:83:c9:cf:2c:44:e9:89:f8:dc:ff:37:2e:61:c2:0f:9b:be: d1:c4:00:54:fb:74:fb:28:20:71:79:59:44:e5:8f:5a:1c:f8: 70:43:a5:3c:f9:36:ee:ba:a6:c8:17:9f:1c:d1:12:7a:88:50: 49:8c:16:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpd3HXsnixUR6w7auS3/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi MTM0M2YwHhcNMjUxMjIyMDYwMTE5WhcNMjUxMjIzMDYwMTE5WjAzMTEwLwYDVQQD EyhkZWMzYzhlYjA4OTM4MWIxMTllOGJjMTg3MzIxZTc4OGMzYTkxMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdDoUrlHrGorzTuscUadsVmUfkxY MUxZbdbWjNE4/Azuen2PXcAraVGPGLYmpWOaILZBOzTifH9MljC0HoY/vj3jnAZN 9GD9JBnofbz8jQSAKoy9Re3jPJQSojJ13raPVGCYD8ZV1gt0OonyE/+/xOAUrLll Kcrvmx4U/UX87nuz4Tl2QI2RVT6G0laL2/B9RGA034UNJTHC1Q7p3KWhwUubdSlP Rp12WGJeywYTofnxRHf3tU1o9Phg49xs0POhCWSiZT8xnnpa1AphxLxhENDiXpML /D8I9BDsECPD5UAXNwaPnSBVQdpmbaJ/pEUGtKxh+ujfnMPM/f0P8scIcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7DyOsIk4GxGei8GHMh54jDqRG1MB8GA1UdIwQY MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt Y2I3Y2JjYTdjMWUwLzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcedOqeIx C7B+HvyaiM8eMuKkwaUMnWqkGsiMZ04WL5GQZeq6amoRSMePf6e222YkSRJHei1z JfCl1psWL9VJl8x2wg5XrBVkKRAJsJ3ROcrwDMqAoZ8osrMp6TSPY3urg9rTk0qO Y9V+iwZ1rZCqAKIY39Vl92eBKhHPuMj4o9JnDp/nXHCoswjx2Qtfwib61iIfUtiS 3gloO9HAsIldq3GNAzQFMOaTJKBltqVaS1hJLyxAZgPZZqQ5+Q/2uqlE47ztF6aW QYPJzyxE6Yn43P83LmHCD5u+0cQAVPt0+yggcXlZROWPWhz4cEOlPPk27rqmyBef HNESeohQSYwWCQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:57:05 2025 by rpki-client