This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json) Hash identifier: zciMSpKfgYmhFqN5e/+rDCMfpMmHGwbcX/qcph533As= Subject key identifier: E4:4A:35:1B:DF:03:F7:96:B2:FD:12:BA:C5:6E:75:CB:10:7A:B7:CD Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74 Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474 Certificate serial: 019B390F1F507495684FD0CC27592C7545E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 00:00:50 +0000 Manifest this update: Sat 20 Dec 2025 00:00:50 +0000 Manifest next update: Sun 21 Dec 2025 00:00:50 +0000 Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=) 2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=) 3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=) 4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: lHqCvOyysleFlSYYkLdDfie9XCpARnZGHnA1vLQFAcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:1f:50:74:95:68:4f:d0:cc:27:59:2c:75:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474 Validity Not Before: Dec 20 00:00:50 2025 GMT Not After : Dec 21 00:00:50 2025 GMT Subject: CN=e44a351bdf03f796b2fd12bac56e75cb107ab7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:ce:c7:53:c8:0d:0c:97:4a:e1:37:74:00: 09:cb:79:41:23:6c:c6:0c:6d:8b:40:ad:62:fb:c2: 85:f3:41:04:6f:37:80:10:d2:54:36:c4:e4:4d:c1: 19:21:a7:5e:fc:b9:d0:27:28:7c:14:2d:e8:0f:d3: e5:57:93:59:14:1d:88:c5:de:55:f2:6f:05:c8:65: db:88:13:ee:ff:24:7d:26:20:1e:43:9c:bc:ec:37: fc:09:c4:84:17:80:c5:82:8f:98:bb:8c:6e:80:78: 84:4e:8c:ef:eb:d7:d2:e3:f0:f1:94:e1:1a:55:cb: fc:a9:8c:ad:a6:d8:15:00:48:02:1c:2e:dc:0c:b3: 02:37:c1:7a:ae:c6:99:9a:ec:5b:90:03:c0:af:13: 09:b3:d3:56:67:06:c1:e0:5b:1f:fc:e1:7a:fc:cf: a5:88:98:83:68:84:55:bc:b7:f6:50:37:57:56:e8: 95:cf:24:72:02:b8:22:b0:c6:d6:e7:1c:9a:9a:0c: 23:64:0b:2b:1b:74:87:45:c9:77:c9:05:bf:09:ea: ff:08:13:a7:7c:50:c4:82:0c:bd:d7:ab:48:ec:67: a1:0a:bd:20:99:b0:9c:b5:80:61:76:c5:2a:f6:35: 7e:12:cb:5b:af:67:9d:e8:94:bc:e8:da:ef:8a:be: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4A:35:1B:DF:03:F7:96:B2:FD:12:BA:C5:6E:75:CB:10:7A:B7:CD X509v3 Authority Key Identifier: keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:46:6d:b9:05:cc:bc:da:53:c8:a5:9e:9d:e3:70:a5:cf:8a: 70:64:29:70:8d:c3:74:0c:9b:cd:26:fb:4d:bb:07:95:b5:ef: 4f:91:94:20:87:de:66:b7:08:50:1c:6d:c9:7d:9e:5d:9a:15: 9d:4b:a4:46:b8:95:f3:fa:0a:53:a0:2e:2e:5d:cc:04:0f:15: ec:6c:1a:b6:ce:16:41:35:c3:02:7b:71:e2:9f:38:84:0b:69: 90:ce:b5:6a:9f:0f:e4:32:ac:f1:3c:08:90:97:38:10:93:0b: fd:77:a7:74:39:43:fa:2a:3b:09:6c:66:91:b7:25:41:8e:58: da:3b:f3:9f:de:45:64:17:c2:59:ae:38:a2:07:57:eb:a4:66: b4:14:2a:fa:fd:f7:ea:45:ce:5c:61:9a:82:15:f9:eb:41:9a: 74:2b:c9:93:3c:b3:99:84:60:83:85:11:d2:65:bd:d6:4f:64: a9:a5:e7:7c:15:28:8f:2c:71:6e:75:0f:3c:34:41:c0:2d:53: f1:a6:4f:38:89:6d:d8:cd:d9:2c:c8:6e:d7:dc:be:fb:a1:c6: 69:59:69:ca:e9:92:f9:db:5f:e9:6f:bc:60:9f:d3:0d:96:77: 06:81:a0:67:73:b9:1d:da:dc:5c:fa:57:21:72:ed:99:5c:e8: a2:43:5c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dx9QdJVoT9DMJ1ksdUXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1YjgxYjZjMWVkZDJmNmY1YmMxYzYwOGE1ZmM5ZmU5 MjY0NzQwHhcNMjUxMjIwMDAwMDUwWhcNMjUxMjIxMDAwMDUwWjAzMTEwLwYDVQQD EyhlNDRhMzUxYmRmMDNmNzk2YjJmZDEyYmFjNTZlNzVjYjEwN2FiN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMPOx1PIDQyXSuE3dAAJy3lBI2zG DG2LQK1i+8KF80EEbzeAENJUNsTkTcEZIade/LnQJyh8FC3oD9PlV5NZFB2Ixd5V 8m8FyGXbiBPu/yR9JiAeQ5y87Df8CcSEF4DFgo+Yu4xugHiETozv69fS4/DxlOEa Vcv8qYytptgVAEgCHC7cDLMCN8F6rsaZmuxbkAPArxMJs9NWZwbB4Fsf/OF6/M+l iJiDaIRVvLf2UDdXVuiVzyRyArgisMbW5xyamgwjZAsrG3SHRcl3yQW/Cer/CBOn fFDEggy916tI7GehCr0gmbCctYBhdsUq9jV+Estbr2ed6JS86Nrvir5o5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORKNRvfA/eWsv0SusVudcsQerfNMB8GA1UdIwQY MBaAFDUTW4G2we3S9vW8HGCKX8n+kmR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMGEwYTAtZDI1YS00NzQ2LTkxMzkt YTcxNDU2ZGY5OTk3LzEvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMGEwYTAtZDI1YS00NzQ2LTkxMzktYTcxNDU2ZGY5OTk3 LzEvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4UZtuQXM vNpTyKWeneNwpc+KcGQpcI3DdAybzSb7TbsHlbXvT5GUIIfeZrcIUBxtyX2eXZoV nUukRriV8/oKU6AuLl3MBA8V7Gwats4WQTXDAntx4p84hAtpkM61ap8P5DKs8TwI kJc4EJML/XendDlD+io7CWxmkbclQY5Y2jvzn95FZBfCWa44ogdX66RmtBQq+v33 6kXOXGGaghX560GadCvJkzyzmYRgg4UR0mW91k9kqaXnfBUojyxxbnUPPDRBwC1T 8aZPOIlt2M3ZLMhu19y++6HGaVlpyumS+dtf6W+8YJ/TDZZ3BoGgZ3O5HdrcXPpX IXLtmVzookNc0w== -----END CERTIFICATE-----Generated at Sat Dec 20 08:56:01 2025 by rpki-client