This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json) Hash identifier: MQ6hPyhxc1uxDo/2lVP8uVUjODr2C11v4EhE9ekjeLs= Subject key identifier: 35:4D:B6:17:EA:93:88:55:F2:7F:B4:91:3A:BF:CC:78:C9:8F:79:07 Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Certificate serial: 019B4091D0D91B84538C1BF71296765C9284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft Manifest number: 0B16 Signing time: Sun 21 Dec 2025 11:00:56 +0000 Manifest this update: Sun 21 Dec 2025 11:00:56 +0000 Manifest next update: Mon 22 Dec 2025 11:00:56 +0000 Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=) 2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: fFABg40vHteR6apLdRqjFkrCBJSlUVBMcAutzFjSEPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:d0:d9:1b:84:53:8c:1b:f7:12:96:76:5c:92:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Validity Not Before: Dec 21 11:00:56 2025 GMT Not After : Dec 22 11:00:56 2025 GMT Subject: CN=354db617ea938855f27fb4913abfcc78c98f7907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:cf:27:68:54:fe:91:cc:ed:22:b0:a8:e2: 04:f8:ed:6b:46:8f:bb:f3:8b:80:68:c1:5e:52:f7: b4:fb:71:98:4b:29:64:87:75:70:7a:e3:51:d3:56: f3:84:eb:03:55:4c:f7:fe:15:ae:e8:d7:0b:6d:12: c9:3a:63:2d:b2:a2:4d:e0:d9:be:05:25:fb:24:08: ad:de:6f:29:56:30:b5:02:ad:bf:92:16:bc:5d:b0: d3:bd:10:ba:38:70:2d:a8:61:9c:91:05:9c:b5:4e: a1:ba:02:22:16:30:92:ee:38:eb:74:ed:41:b9:30: 94:d5:b1:bf:76:68:aa:e9:26:52:be:72:71:fb:47: 3c:42:d9:5c:8b:19:f8:24:84:1b:00:c5:e0:0e:e5: 27:0b:38:46:5f:b1:cd:29:30:e2:fa:c3:42:e3:8c: 79:00:73:b8:c0:41:d3:52:6e:cc:4e:fb:a3:a6:42: 25:f6:d0:24:61:95:76:ac:f1:6c:01:3d:98:77:c0: c8:24:29:65:0a:ac:15:03:d3:0d:50:32:13:97:b3: 98:cb:47:c6:b7:75:61:93:e3:86:58:62:7b:fa:49: 25:c0:8b:47:c5:89:e5:cf:ba:a3:ae:4e:cd:e6:ee: b0:9b:0d:b1:3b:9b:d6:42:f5:1e:6f:d4:47:a2:39: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4D:B6:17:EA:93:88:55:F2:7F:B4:91:3A:BF:CC:78:C9:8F:79:07 X509v3 Authority Key Identifier: keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4a:7e:df:9a:ad:3a:48:36:fc:0a:da:c8:b0:dc:a4:cf:d0: 97:75:40:a8:96:8b:62:6d:47:12:60:07:1d:07:64:04:50:ce: 00:0c:d0:be:25:38:9d:c3:be:87:9e:a0:3d:2e:bc:0e:2d:de: 0d:58:c1:80:7f:da:84:4d:02:56:fb:29:9b:b5:71:97:2c:c9: 66:9a:d5:3a:b2:91:79:2b:32:2c:6f:c1:9f:c4:3f:be:a1:3a: 75:17:d1:03:b0:d5:24:4e:ed:31:53:90:95:82:9d:60:63:f7: 84:36:aa:44:5f:a4:de:70:4c:3b:af:16:07:c2:99:c1:f0:77: 1f:aa:87:01:bd:7d:86:b0:cd:9e:10:b9:41:ff:31:b0:a4:4a: db:d7:0d:b8:2a:c7:a8:e9:23:1e:a7:85:5e:ec:c0:7a:b3:95: f0:b1:0c:7f:e6:a0:e6:38:8e:3f:1a:4a:96:23:ed:89:80:f6: 2d:a0:19:88:c3:92:b0:bc:fc:66:9e:6a:5e:7b:79:3d:b7:4f: 1f:cf:f3:7b:7d:cb:ae:da:1a:05:4e:01:de:2e:75:cd:38:06: ed:88:65:a9:07:3b:82:15:1f:3e:9b:7a:1a:fe:d9:16:90:08: 96:d3:22:e2:47:e0:ec:8b:67:ee:fa:52:e6:b4:71:8f:ba:e3: 7f:8d:3a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkdDZG4RTjBv3EpZ2XJKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz NTdiNGYwHhcNMjUxMjIxMTEwMDU2WhcNMjUxMjIyMTEwMDU2WjAzMTEwLwYDVQQD EygzNTRkYjYxN2VhOTM4ODU1ZjI3ZmI0OTEzYWJmY2M3OGM5OGY3OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0bPJ2hU/pHM7SKwqOIE+O1rRo+7 84uAaMFeUve0+3GYSylkh3VweuNR01bzhOsDVUz3/hWu6NcLbRLJOmMtsqJN4Nm+ BSX7JAit3m8pVjC1Aq2/kha8XbDTvRC6OHAtqGGckQWctU6hugIiFjCS7jjrdO1B uTCU1bG/dmiq6SZSvnJx+0c8Qtlcixn4JIQbAMXgDuUnCzhGX7HNKTDi+sNC44x5 AHO4wEHTUm7MTvujpkIl9tAkYZV2rPFsAT2Yd8DIJCllCqwVA9MNUDITl7OYy0fG t3Vhk+OGWGJ7+kklwItHxYnlz7qjrk7N5u6wmw2xO5vWQvUeb9RHojlpaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVNthfqk4hV8n+0kTq/zHjJj3kHMB8GA1UdIwQY MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0 LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkp+35qt Okg2/ArayLDcpM/Ql3VAqJaLYm1HEmAHHQdkBFDOAAzQviU4ncO+h56gPS68Di3e DVjBgH/ahE0CVvspm7VxlyzJZprVOrKReSsyLG/Bn8Q/vqE6dRfRA7DVJE7tMVOQ lYKdYGP3hDaqRF+k3nBMO68WB8KZwfB3H6qHAb19hrDNnhC5Qf8xsKRK29cNuCrH qOkjHqeFXuzAerOV8LEMf+ag5jiOPxpKliPtiYD2LaAZiMOSsLz8Zp5qXnt5PbdP H8/ze33LrtoaBU4B3i51zTgG7YhlqQc7ghUfPpt6Gv7ZFpAIltMi4kfg7Itn7vpS 5rRxj7rjf406mw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:13:54 2025 by rpki-client