This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json) Hash identifier: wGVaGFWAcM8HLiu+Ex4A0o4hUGmKeufYONSHarLvqvk= Subject key identifier: 76:64:72:33:23:8C:E6:AB:0E:B8:CB:7E:11:81:38:34:9E:CD:DA:70 Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74 Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74 Certificate serial: 019B522A01541F7EFBE3F713021D9B1EC8CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft Manifest number: 02B1 Signing time: Wed 24 Dec 2025 21:00:43 +0000 Manifest this update: Wed 24 Dec 2025 21:00:43 +0000 Manifest next update: Thu 25 Dec 2025 21:00:43 +0000 Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: B2CSh1KVvmgWqMImw6pGeURJa2jpr+R7RuBegzSju2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:01:54:1f:7e:fb:e3:f7:13:02:1d:9b:1e:c8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74 Validity Not Before: Dec 24 21:00:43 2025 GMT Not After : Dec 25 21:00:43 2025 GMT Subject: CN=76647233238ce6ab0eb8cb7e118138349ecdda70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:a2:ee:f3:d5:9b:9b:dd:7c:21:3e:b1:0d: af:cc:3f:54:4f:11:0d:2e:79:da:fd:53:d8:74:fd: ea:66:fe:14:63:84:34:80:1f:fe:2e:b6:b5:29:ef: 8f:b8:be:5b:f1:18:d6:6f:72:7a:ff:14:15:7f:c8: ab:56:e3:9f:b3:b8:be:10:c0:ca:71:5c:a4:91:11: 94:f6:4e:7e:5d:75:d2:73:f3:f9:78:28:ee:b5:2b: 65:c1:18:74:00:51:f0:7d:5d:13:55:7f:35:c2:ef: 76:23:8a:2e:5e:89:1c:c0:1a:72:e0:76:a7:a5:12: 06:c6:f5:ae:c3:9f:1b:57:53:eb:a0:4b:f3:58:1c: c4:26:c6:68:7e:75:02:fb:a3:a5:a9:ee:08:4b:b6: 3c:92:9c:d1:7a:c1:71:b1:72:51:5f:1f:c8:bb:db: 9e:9d:28:71:38:9a:b7:ed:f0:90:9b:01:df:fd:89: e2:d8:95:35:8e:8d:eb:05:4e:f7:eb:4b:17:0f:ae: d2:60:aa:36:1d:12:c4:db:92:2c:67:90:d8:63:2d: 70:1d:04:ef:b7:59:0f:a6:f5:c9:c7:ad:5a:aa:1f: 59:7b:c4:78:84:aa:0b:97:1e:0f:88:5f:06:8b:54: 71:0e:7d:c4:f7:ba:b8:5c:45:f4:3c:22:ba:e8:b7: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:64:72:33:23:8C:E6:AB:0E:B8:CB:7E:11:81:38:34:9E:CD:DA:70 X509v3 Authority Key Identifier: keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3a:65:ca:c8:70:69:e6:7b:0e:6f:6c:31:57:c6:45:da:d2: ca:21:8d:5c:d3:70:dc:ef:88:1a:bc:79:21:0e:6d:28:90:4c: f8:36:c3:67:d1:3e:87:bd:de:a5:e8:9c:c3:87:20:b4:e2:ad: ad:ef:ff:8b:4f:9f:71:4e:54:c7:27:ce:c4:0f:34:d0:14:db: 94:92:e0:52:95:98:a6:72:af:c8:2b:0d:29:0a:df:71:4a:41: 27:4b:c7:e0:e4:3b:c6:2f:b2:3e:ff:14:d5:77:1c:0e:31:22: 57:d8:7b:48:2d:fa:49:11:ee:1e:b9:36:17:66:1b:ac:ac:fb: dd:96:bf:4a:6b:77:bc:9f:c1:f3:a7:93:62:4c:99:91:b6:29: 12:34:22:ef:c9:97:d9:68:93:38:ab:d8:b9:d4:82:04:9b:11: e7:3a:81:7c:94:d1:f7:0b:86:a4:60:fb:9d:8c:30:c4:85:ae: ba:d8:bc:b9:50:48:7b:3d:2b:34:7d:f4:37:0f:20:7e:6c:97: e2:48:70:01:99:a4:9a:55:8e:50:62:1b:a2:40:0a:bd:66:b2: 20:fc:48:67:96:20:c7:41:97:65:23:29:ed:7e:65:4b:a7:ea: ab:22:b2:2c:91:1a:00:ff:7d:44:cf:7b:c4:55:2a:e7:fc:4e: f9:b1:9e:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKgFUH3774/cTAh2bHsjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VkMDU0OWY1YjM1ZGFmYTc0ZDkwYjA0NjgyMDAxNzg1 NDVkNzQwHhcNMjUxMjI0MjEwMDQzWhcNMjUxMjI1MjEwMDQzWjAzMTEwLwYDVQQD Eyg3NjY0NzIzMzIzOGNlNmFiMGViOGNiN2UxMTgxMzgzNDllY2RkYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mmi7vPVm5vdfCE+sQ2vzD9UTxEN Lnna/VPYdP3qZv4UY4Q0gB/+Lra1Ke+PuL5b8RjWb3J6/xQVf8irVuOfs7i+EMDK cVykkRGU9k5+XXXSc/P5eCjutStlwRh0AFHwfV0TVX81wu92I4ouXokcwBpy4Han pRIGxvWuw58bV1ProEvzWBzEJsZofnUC+6Olqe4IS7Y8kpzResFxsXJRXx/Iu9ue nShxOJq37fCQmwHf/Yni2JU1jo3rBU7360sXD67SYKo2HRLE25IsZ5DYYy1wHQTv t1kPpvXJx61aqh9Ze8R4hKoLlx4PiF8Gi1RxDn3E97q4XEX0PCK66LdHhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZkcjMjjOarDrjLfhGBODSezdpwMB8GA1UdIwQY MBaAFDXO0FSfWzXa+nTZCwRoIAF4VF10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODIt ZWZjMTJhOWZkNmUxLzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODItZWZjMTJhOWZkNmUx LzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzplyshw aeZ7Dm9sMVfGRdrSyiGNXNNw3O+IGrx5IQ5tKJBM+DbDZ9E+h73epeicw4cgtOKt re//i0+fcU5UxyfOxA800BTblJLgUpWYpnKvyCsNKQrfcUpBJ0vH4OQ7xi+yPv8U 1XccDjEiV9h7SC36SRHuHrk2F2YbrKz73Za/Smt3vJ/B86eTYkyZkbYpEjQi78mX 2WiTOKvYudSCBJsR5zqBfJTR9wuGpGD7nYwwxIWuuti8uVBIez0rNH30Nw8gfmyX 4khwAZmkmlWOUGIbokAKvWayIPxIZ5Ygx0GXZSMp7X5lS6fqqyKyLJEaAP99RM97 xFUq5/xO+bGeag== -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:04 2025 by rpki-client