This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json) Hash identifier: T+/PX8dsyQZEgdSiVM80w5qmdqbLNZrkqk7O8qzqWo0= Subject key identifier: 90:EF:6F:B8:43:9F:AF:19:F0:66:22:2B:6E:51:6F:83:1C:5D:1C:89 Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df Certificate serial: 019B465D0F0DE19CF634B2370DCCD6382FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft Manifest number: 0F92 Signing time: Mon 22 Dec 2025 14:01:02 +0000 Manifest this update: Mon 22 Dec 2025 14:01:02 +0000 Manifest next update: Tue 23 Dec 2025 14:01:02 +0000 Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: wMm5HbiMfdF5FbW7Hp9VVhez3w7wMy7Gt9/4h+qw6d4=) 2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:0f:0d:e1:9c:f6:34:b2:37:0d:cc:d6:38:2f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df Validity Not Before: Dec 22 14:01:02 2025 GMT Not After : Dec 23 14:01:02 2025 GMT Subject: CN=90ef6fb8439faf19f066222b6e516f831c5d1c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:b6:3e:63:2c:dd:a6:4b:04:98:64:6a:18: 05:d0:c3:ee:c0:01:76:a4:98:87:00:71:8c:db:1b: 8c:ec:72:bb:cd:6c:62:2d:79:0c:e4:cb:ea:4a:68: 96:5b:6f:4b:31:9f:f8:58:44:a7:68:03:62:63:f6: 18:66:2c:46:e7:27:54:f1:99:be:7e:79:56:c0:ae: 92:f4:47:7c:aa:18:1e:b0:3b:94:5d:dc:a4:c2:55: 50:28:e7:18:b8:b6:4d:41:85:99:4f:2d:60:c7:23: b5:4a:44:3d:d3:37:cd:7d:4d:5b:07:e4:ca:01:ee: bd:69:6f:9a:5b:15:63:e3:cf:f0:99:cd:25:e2:4b: 8d:75:16:06:70:d8:6c:9d:09:09:0c:6a:45:fa:ef: 88:fa:35:4f:a1:64:03:ec:48:42:b3:ae:19:18:2f: 6e:39:37:eb:6a:f6:3e:4c:80:43:e9:89:9f:ca:58: 21:ac:23:aa:aa:b4:1e:c2:f5:67:3e:ba:86:d5:a4: cc:ee:1d:a0:f9:7f:6e:dc:15:41:b3:e8:00:b0:fa: 29:2d:60:f3:af:c5:bb:f9:fc:37:bd:12:0f:8a:51: 91:ab:1a:2f:68:ad:d1:ba:33:bc:24:14:db:1a:24: f3:30:8c:5c:81:95:de:15:e0:f1:11:e3:ce:b5:03: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EF:6F:B8:43:9F:AF:19:F0:66:22:2B:6E:51:6F:83:1C:5D:1C:89 X509v3 Authority Key Identifier: keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:5e:3b:5e:76:d4:32:67:07:f2:32:06:eb:78:fd:c1:ed:35: f8:6c:30:e7:6a:80:88:25:a2:39:3d:e6:ed:39:fe:b7:0d:a5: 3d:7d:74:ce:2c:d6:81:e1:68:c0:30:f5:d2:a5:7b:87:49:f0: 54:3c:dc:65:83:82:a1:3e:29:63:af:88:21:0b:78:7e:40:b9: 05:b6:a1:a4:db:be:af:1a:5e:23:e1:2e:1b:c2:4f:3f:a6:9e: b7:0b:34:a9:5d:7d:2b:a3:53:10:7c:af:6d:a9:74:dd:f8:e0: e2:28:b7:b4:48:11:7a:a4:21:46:5b:73:16:87:bf:5a:a5:c7: ae:c1:9c:e9:79:e7:1f:77:4d:f0:48:7f:27:09:fa:9b:cd:38: 16:6a:09:60:a5:d4:d9:c6:8a:39:0e:b0:c3:8e:80:e0:3c:92: 60:a9:91:8d:c9:cb:9b:06:d9:d0:d7:4f:74:91:61:83:82:eb: c9:22:18:59:1a:ba:4f:62:65:5d:20:8c:5a:85:bb:17:a8:21: 50:64:35:5e:f0:d7:71:ab:6e:ee:c2:8f:28:13:2b:ca:3c:f0: 16:36:3a:ad:19:a8:3d:78:45:c8:67:e1:a8:a0:0e:d7:a0:20: 4c:fd:9e:2e:38:f4:9b:0a:f0:ca:9f:0f:08:b9:83:07:26:01: 6f:bb:e6:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXQ8N4Zz2NLI3DczWOC/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDEyMzQzYTYyZjNmMDliNTVjZGJjMDFlNzVjMzgyMTJh MjM1ZGYwHhcNMjUxMjIyMTQwMTAyWhcNMjUxMjIzMTQwMTAyWjAzMTEwLwYDVQQD Eyg5MGVmNmZiODQzOWZhZjE5ZjA2NjIyMmI2ZTUxNmY4MzFjNWQxYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdK2PmMs3aZLBJhkahgF0MPuwAF2 pJiHAHGM2xuM7HK7zWxiLXkM5MvqSmiWW29LMZ/4WESnaANiY/YYZixG5ydU8Zm+ fnlWwK6S9Ed8qhgesDuUXdykwlVQKOcYuLZNQYWZTy1gxyO1SkQ90zfNfU1bB+TK Ae69aW+aWxVj48/wmc0l4kuNdRYGcNhsnQkJDGpF+u+I+jVPoWQD7EhCs64ZGC9u OTfravY+TIBD6YmfylghrCOqqrQewvVnPrqG1aTM7h2g+X9u3BVBs+gAsPopLWDz r8W7+fw3vRIPilGRqxovaK3RujO8JBTbGiTzMIxcgZXeFeDxEePOtQMEuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDvb7hDn68Z8GYiK25Rb4McXRyJMB8GA1UdIwQY MBaAFDQBI0OmLz8JtVzbwB51w4ISojXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWIt MzJkMmJkZDRiYmIxLzEvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWItMzJkMmJkZDRiYmIx LzEvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1147XnbU MmcH8jIG63j9we01+Gww52qAiCWiOT3m7Tn+tw2lPX10zizWgeFowDD10qV7h0nw VDzcZYOCoT4pY6+IIQt4fkC5BbahpNu+rxpeI+EuG8JPP6aetws0qV19K6NTEHyv bal03fjg4ii3tEgReqQhRltzFoe/WqXHrsGc6XnnH3dN8Eh/Jwn6m804FmoJYKXU 2caKOQ6ww46A4DySYKmRjcnLmwbZ0NdPdJFhg4LrySIYWRq6T2JlXSCMWoW7F6gh UGQ1XvDXcatu7sKPKBMryjzwFjY6rRmoPXhFyGfhqKAO16AgTP2eLjj0mwrwyp8P CLmDByYBb7vmHg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:17:09 2025 by rpki-client