This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json) Hash identifier: BfYakIfcOFAE2qMFiCWa3l9g6qd+XfEiOS7/S9hipRo= Subject key identifier: 90:84:F0:95:9D:D2:C1:63:02:25:02:07:07:75:E2:16:CF:11:D7:BE Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Certificate serial: 019B390F7142B03D7A219C3D1317A9A287A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 00:01:11 +0000 Manifest this update: Sat 20 Dec 2025 00:01:11 +0000 Manifest next update: Sun 21 Dec 2025 00:01:11 +0000 Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: 7sYyisanMVrVyjiU4Yy2LZErlVORQcNePj0uIOEifxM=) 2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=) 3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=) 4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=) 5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:71:42:b0:3d:7a:21:9c:3d:13:17:a9:a2:87:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Validity Not Before: Dec 20 00:01:11 2025 GMT Not After : Dec 21 00:01:11 2025 GMT Subject: CN=9084f0959dd2c163022502070775e216cf11d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:0a:1e:54:f8:30:fc:2f:84:c3:b1:b3:5f: 2f:29:62:fd:bf:ce:bf:db:a3:73:9c:65:38:7b:56: 54:cd:ad:97:2c:cd:d3:43:f0:ea:d8:16:30:52:c2: 2a:a8:5e:e6:26:57:c6:79:6f:27:2d:24:4b:10:2c: 31:ba:61:17:5c:32:b3:41:bc:27:e7:fc:83:65:14: f6:ca:64:a8:a9:e3:66:b7:2a:64:fd:c8:d8:18:99: 2b:a0:fb:0a:5d:d2:0c:2f:63:ce:bd:0b:44:95:f5: d3:77:6c:4a:2e:09:b0:45:f2:11:57:56:86:f1:17: bd:6b:22:a1:a4:98:63:ad:c2:5e:b4:dd:25:f9:26: dc:e6:48:d6:df:c7:7d:46:9e:ba:5d:26:32:82:0b: 9b:5b:37:44:24:3f:6d:31:c5:15:91:e0:59:36:81: 61:5d:43:47:7e:98:ae:31:95:84:86:16:b7:cf:7b: 5b:3a:cb:ad:3b:4b:7b:78:11:c0:d2:16:80:66:28: 04:4e:66:f9:83:d0:d4:63:27:10:90:a3:3c:23:bc: 74:23:f8:8c:5f:4c:aa:c9:3d:22:a4:b7:04:6d:47: cb:8c:57:00:72:1d:41:17:f4:76:b9:ff:f2:5b:37: bc:67:fa:f8:91:c2:77:73:cf:5b:84:02:5b:ef:69: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:84:F0:95:9D:D2:C1:63:02:25:02:07:07:75:E2:16:CF:11:D7:BE X509v3 Authority Key Identifier: keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:df:92:36:b8:ef:aa:1d:84:9e:79:e3:7f:a8:87:ab:cb:c9: ea:ce:e8:cd:a0:76:77:17:81:35:be:fc:0d:32:66:79:85:3f: 5e:a0:5e:87:26:2e:e7:b8:d0:40:13:ab:42:c4:04:e5:aa:05: d3:0b:e3:1e:1b:a3:5f:27:a2:b7:b5:00:22:55:83:35:cf:61: 1e:c4:a6:ea:46:97:61:9e:f5:68:28:c8:2c:db:82:bb:0f:d7: dc:d3:ca:76:63:ca:65:68:63:1a:1f:34:ef:d5:c4:cd:bc:0b: 81:23:f6:04:1f:5b:d0:0d:ba:cc:18:8c:4c:ce:dd:de:a1:42: f8:2c:ff:6d:75:64:32:f0:ec:5b:05:03:2c:71:66:69:39:d7: 03:db:24:af:b0:b5:19:e9:19:f4:77:eb:19:95:eb:74:be:b7: a1:b3:96:31:0d:d2:dd:9d:46:0c:f3:0b:45:37:de:b0:60:1b: 03:da:d3:4f:d1:38:df:83:2e:f8:14:9a:f7:77:8d:16:01:87: 81:05:98:26:df:4a:7b:a6:38:b1:42:a9:82:c1:a9:ed:29:6b: 7d:38:2f:73:5f:f5:eb:a8:f8:a4:7b:3b:12:17:37:c7:0e:84: 92:57:a9:a1:4d:ee:dc:22:8b:9b:66:94:5e:b9:58:8b:c4:45: cb:70:ad:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D3FCsD16IZw9ExepooelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWFlNjQ2ZWEzNGFkMjY4OGFjYTJmZGQxYTZmMzM0MDM1 NjQ5NWUwHhcNMjUxMjIwMDAwMTExWhcNMjUxMjIxMDAwMTExWjAzMTEwLwYDVQQD Eyg5MDg0ZjA5NTlkZDJjMTYzMDIyNTAyMDcwNzc1ZTIxNmNmMTFkN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHsKHlT4MPwvhMOxs18vKWL9v86/ 26NznGU4e1ZUza2XLM3TQ/Dq2BYwUsIqqF7mJlfGeW8nLSRLECwxumEXXDKzQbwn 5/yDZRT2ymSoqeNmtypk/cjYGJkroPsKXdIML2POvQtElfXTd2xKLgmwRfIRV1aG 8Re9ayKhpJhjrcJetN0l+Sbc5kjW38d9Rp66XSYyggubWzdEJD9tMcUVkeBZNoFh XUNHfpiuMZWEhha3z3tbOsutO0t7eBHA0haAZigETmb5g9DUYycQkKM8I7x0I/iM X0yqyT0ipLcEbUfLjFcAch1BF/R2uf/yWze8Z/r4kcJ3c89bhAJb72mfPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCE8JWd0sFjAiUCBwd14hbPEde+MB8GA1UdIwQY MBaAFDRa5kbqNK0miKyi/dGm8zQDVkleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMt ZjQ5MTIwYmVkNTFjLzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMtZjQ5MTIwYmVkNTFj LzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAON+SNrjv qh2Ennnjf6iHq8vJ6s7ozaB2dxeBNb78DTJmeYU/XqBehyYu57jQQBOrQsQE5aoF 0wvjHhujXyeit7UAIlWDNc9hHsSm6kaXYZ71aCjILNuCuw/X3NPKdmPKZWhjGh80 79XEzbwLgSP2BB9b0A26zBiMTM7d3qFC+Cz/bXVkMvDsWwUDLHFmaTnXA9skr7C1 GekZ9HfrGZXrdL63obOWMQ3S3Z1GDPMLRTfesGAbA9rTT9E434Mu+BSa93eNFgGH gQWYJt9Ke6Y4sUKpgsGp7SlrfTgvc1/166j4pHs7Ehc3xw6EklepoU3u3CKLm2aU XrlYi8RFy3Ctag== -----END CERTIFICATE-----Generated at Sat Dec 20 03:00:31 2025 by rpki-client