This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json) Hash identifier: WRZZioOVR5UnmoHM610RY/eiKeqZyOw7Wygg7Gm5FZU= Subject key identifier: 64:D9:BB:F3:11:5C:92:C5:19:5D:38:18:B1:8F:02:82:D9:E4:75:96 Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643 Certificate serial: 019B4513BEA845C61ABDF93505491C98204B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft Manifest number: 02F7 Signing time: Mon 22 Dec 2025 08:01:20 +0000 Manifest this update: Mon 22 Dec 2025 08:01:20 +0000 Manifest next update: Tue 23 Dec 2025 08:01:20 +0000 Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=) 2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: pQ/R/Tu/BdH2mak18J228l4r1kEyQQjAgArfOV73dRc=) 3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:be:a8:45:c6:1a:bd:f9:35:05:49:1c:98:20:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643 Validity Not Before: Dec 22 08:01:20 2025 GMT Not After : Dec 23 08:01:20 2025 GMT Subject: CN=64d9bbf3115c92c5195d3818b18f0282d9e47596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:cd:fb:0f:ee:c3:28:5d:c6:2f:42:06:49: 75:0e:1c:49:66:d8:f9:f3:cc:b1:9b:93:36:00:16: 44:df:c1:3f:fe:13:37:99:5e:c1:fb:97:bd:e3:e5: 91:1b:e8:fd:4e:a0:7d:27:e9:8c:75:47:7a:b8:43: 18:a3:0a:b6:60:d7:ac:a3:5f:05:41:f7:0b:b6:83: 0e:02:33:14:cc:aa:3a:3b:24:09:b2:72:ff:6e:ff: 0b:53:2d:fd:d2:b1:4f:0d:0d:ef:c3:c2:a7:89:85: 66:51:58:77:90:97:cb:07:bd:b3:8a:72:4d:3b:c7: fa:7c:66:7b:83:85:4b:69:96:fe:59:f0:a3:65:7a: 05:95:75:9c:68:3d:a9:c2:b6:da:37:ff:5c:b7:de: 25:30:30:f6:16:9d:50:6e:e8:b4:f1:20:06:22:80: c5:da:a5:ea:20:dc:84:ea:06:43:53:8c:69:91:4d: b1:03:ae:67:a3:52:52:c5:96:18:6e:82:4b:a3:b5: 1b:f2:81:21:83:2f:85:49:6f:30:84:42:ad:b6:70: 0d:9e:6a:20:1d:58:4b:6c:2b:26:4e:c5:d7:3a:45: d8:27:e2:4f:c0:01:14:a1:c8:d8:67:67:6a:af:7c: 20:d8:8d:3f:a3:c8:6a:4c:82:f6:27:d9:c4:46:29: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D9:BB:F3:11:5C:92:C5:19:5D:38:18:B1:8F:02:82:D9:E4:75:96 X509v3 Authority Key Identifier: keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ce:43:4f:91:ab:87:51:65:6f:be:b5:ee:3d:9a:61:7e:10: 92:6d:6b:bf:6e:65:db:ff:0b:83:38:07:40:ec:ca:47:b3:74: 76:59:66:a8:b7:43:88:40:6e:d4:1d:80:be:25:55:35:50:31: 0d:80:fe:1b:2b:40:2e:84:ca:3a:e1:4c:be:10:5c:ef:4f:1d: 81:22:bd:f0:5c:c8:24:8c:5a:e0:4b:05:91:1a:41:7a:b7:3d: d8:25:c4:39:c7:6c:3e:19:c3:ec:a5:09:44:95:7e:6b:ba:26: aa:a8:f5:36:e1:6b:62:b4:9e:b7:fe:ac:f1:72:0f:2e:2e:fa: 95:56:55:ee:54:7e:da:12:e6:08:3d:0e:28:8d:48:80:a2:a3: c0:a4:9e:2b:c1:d8:37:7f:f3:cf:b1:97:1b:28:a8:c7:36:de: df:9f:5f:0b:da:ff:b6:34:11:16:81:88:2c:ec:df:94:06:66: 18:0b:d8:d5:07:72:a5:8a:d1:59:96:03:98:d8:a9:97:b0:ea: 8c:64:06:67:cb:5a:b7:0d:7a:07:e3:90:7f:49:34:64:ec:9e: 4c:a9:05:55:51:fd:ee:ce:cf:90:b8:38:4a:ff:22:97:3d:7e: 4f:c8:10:33:6a:e4:59:32:0a:fc:ab:c9:d9:cf:5f:2d:19:2f: d5:2d:c2:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE76oRcYavfk1BUkcmCBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky NGY2NDMwHhcNMjUxMjIyMDgwMTIwWhcNMjUxMjIzMDgwMTIwWjAzMTEwLwYDVQQD Eyg2NGQ5YmJmMzExNWM5MmM1MTk1ZDM4MThiMThmMDI4MmQ5ZTQ3NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXzN+w/uwyhdxi9CBkl1DhxJZtj5 88yxm5M2ABZE38E//hM3mV7B+5e94+WRG+j9TqB9J+mMdUd6uEMYowq2YNeso18F QfcLtoMOAjMUzKo6OyQJsnL/bv8LUy390rFPDQ3vw8KniYVmUVh3kJfLB72zinJN O8f6fGZ7g4VLaZb+WfCjZXoFlXWcaD2pwrbaN/9ct94lMDD2Fp1Qbui08SAGIoDF 2qXqINyE6gZDU4xpkU2xA65no1JSxZYYboJLo7Ub8oEhgy+FSW8whEKttnANnmog HVhLbCsmTsXXOkXYJ+JPwAEUocjYZ2dqr3wg2I0/o8hqTIL2J9nERinS4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTZu/MRXJLFGV04GLGPAoLZ5HWWMB8GA1UdIwQY MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0 LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM5DT5Gr h1Flb7617j2aYX4Qkm1rv25l2/8LgzgHQOzKR7N0dllmqLdDiEBu1B2AviVVNVAx DYD+GytALoTKOuFMvhBc708dgSK98FzIJIxa4EsFkRpBerc92CXEOcdsPhnD7KUJ RJV+a7omqqj1NuFrYrSet/6s8XIPLi76lVZV7lR+2hLmCD0OKI1IgKKjwKSeK8HY N3/zz7GXGyioxzbe359fC9r/tjQRFoGILOzflAZmGAvY1QdypYrRWZYDmNipl7Dq jGQGZ8tatw16B+OQf0k0ZOyeTKkFVVH97s7PkLg4Sv8ilz1+T8gQM2rkWTIK/KvJ 2c9fLRkv1S3CEw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:30:01 2025 by rpki-client