This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json) Hash identifier: eRt/emcNyxF1csK1epj8vAES0g27hAj/JGWcjPWZa6c= Subject key identifier: 6C:6C:93:2C:FB:E3:B9:76:3E:F7:58:FF:39:FF:EC:75:2A:D6:B4:89 Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643 Certificate serial: 019B65E83D1EA64096F691D7B3F57FFC5B36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft Manifest number: 0308 Signing time: Sun 28 Dec 2025 17:01:17 +0000 Manifest this update: Sun 28 Dec 2025 17:01:17 +0000 Manifest next update: Mon 29 Dec 2025 17:01:17 +0000 Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=) 2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: YA64ygugcg83UxEJkt1ChRe/E04A4uwLO3KITlH92dI=) 3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:3d:1e:a6:40:96:f6:91:d7:b3:f5:7f:fc:5b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643 Validity Not Before: Dec 28 17:01:17 2025 GMT Not After : Dec 29 17:01:17 2025 GMT Subject: CN=6c6c932cfbe3b9763ef758ff39ffec752ad6b489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:39:b2:62:4f:bd:88:bf:41:ac:67:ec:c4: 09:6f:75:f8:12:20:33:16:d3:b5:2a:51:cd:ff:ef: bf:38:c1:d2:ec:09:29:ee:7a:f6:db:6a:a3:f1:07: 36:49:12:f4:7e:06:7b:33:c2:c8:52:c9:70:f0:69: ac:5d:61:9d:16:51:f9:2c:ba:1d:2f:7a:e1:0a:e8: b8:4d:ed:10:5b:ca:36:ae:93:da:84:87:91:a9:21: a9:88:da:e5:7e:8c:f3:b7:b6:ca:1d:87:56:ff:25: 04:d2:2f:12:66:03:72:6b:94:d3:40:e4:d6:1b:3b: 32:d1:91:4a:da:e0:8f:5f:5f:2b:3a:b6:df:de:f0: cd:50:00:ac:6a:39:43:d9:81:12:81:db:d3:8a:07: 9a:4e:02:3b:a3:72:a1:4f:20:46:70:0d:29:b4:6f: 33:70:6d:88:59:32:67:07:03:b7:b1:b6:3f:7c:ca: 8b:f3:9f:e2:ff:50:f8:b3:20:79:02:c4:e8:bf:dc: 71:c1:4e:dd:6a:4a:36:f8:5a:c4:7a:3f:cc:1f:82: 05:8e:73:b9:ad:1c:f1:81:24:c7:1e:b3:3b:91:73: 4b:9c:e7:13:21:bc:73:53:0b:51:c6:4f:a2:71:03: 83:2a:5c:aa:6f:f7:aa:8e:64:f1:7b:4a:21:5d:16: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6C:93:2C:FB:E3:B9:76:3E:F7:58:FF:39:FF:EC:75:2A:D6:B4:89 X509v3 Authority Key Identifier: keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ea:fd:55:81:31:57:ae:b3:7a:3e:24:7b:19:a4:6a:10:c9: 7f:5b:a1:eb:b2:c9:57:05:7c:ce:81:cf:fe:d2:4d:e8:0c:5b: 02:2c:ec:0e:58:98:d3:d9:26:91:5e:9a:e1:6c:96:ac:9d:0a: 28:8c:70:ae:d5:a9:bd:45:66:d5:b1:7b:fb:1d:ee:f8:65:63: f1:d6:ff:5c:a8:d9:6e:b3:99:7c:22:51:20:3a:a5:1e:1c:7e: 48:79:67:50:03:9e:77:ca:77:8b:49:69:79:ed:aa:85:de:a1: a4:90:1f:e6:cd:7f:77:86:61:b1:db:d9:79:a2:ad:37:0c:4d: bd:b5:1c:36:14:ed:91:5a:e0:34:db:8c:2c:ae:a1:6e:cc:f7: f5:cf:7a:5e:22:fd:69:e5:3d:d4:58:6b:a3:62:b1:bf:c1:0b: b2:fe:a0:ed:d9:6e:3e:da:e8:8b:e0:d5:8f:7b:18:57:0f:26: 82:8d:3b:88:94:55:2f:ae:c1:fa:af:f4:15:84:52:70:2d:5b: b7:f2:ce:92:bb:c3:59:93:75:cd:4b:b3:a9:95:1e:af:f3:da: 0a:df:73:f5:d0:8d:e4:06:54:13:49:d8:07:cb:5d:a5:ab:68: 32:d6:6b:f1:2d:08:3d:e9:f5:ac:64:2c:13:35:8c:07:4a:c8: 7d:db:04:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6D0epkCW9pHXs/V//Fs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky NGY2NDMwHhcNMjUxMjI4MTcwMTE3WhcNMjUxMjI5MTcwMTE3WjAzMTEwLwYDVQQD Eyg2YzZjOTMyY2ZiZTNiOTc2M2VmNzU4ZmYzOWZmZWM3NTJhZDZiNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKE5smJPvYi/Qaxn7MQJb3X4EiAz FtO1KlHN/++/OMHS7Akp7nr222qj8Qc2SRL0fgZ7M8LIUslw8GmsXWGdFlH5LLod L3rhCui4Te0QW8o2rpPahIeRqSGpiNrlfozzt7bKHYdW/yUE0i8SZgNya5TTQOTW Gzsy0ZFK2uCPX18rOrbf3vDNUACsajlD2YESgdvTigeaTgI7o3KhTyBGcA0ptG8z cG2IWTJnBwO3sbY/fMqL85/i/1D4syB5AsTov9xxwU7dako2+FrEej/MH4IFjnO5 rRzxgSTHHrM7kXNLnOcTIbxzUwtRxk+icQODKlyqb/eqjmTxe0ohXRYwnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxskyz747l2PvdY/zn/7HUq1rSJMB8GA1UdIwQY MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0 LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFer9VYEx V66zej4kexmkahDJf1uh67LJVwV8zoHP/tJN6AxbAizsDliY09kmkV6a4WyWrJ0K KIxwrtWpvUVm1bF7+x3u+GVj8db/XKjZbrOZfCJRIDqlHhx+SHlnUAOed8p3i0lp ee2qhd6hpJAf5s1/d4ZhsdvZeaKtNwxNvbUcNhTtkVrgNNuMLK6hbsz39c96XiL9 aeU91Fhro2Kxv8ELsv6g7dluPtroi+DVj3sYVw8mgo07iJRVL67B+q/0FYRScC1b t/LOkrvDWZN1zUuzqZUer/PaCt9z9dCN5AZUE0nYB8tdpatoMtZr8S0IPen1rGQs EzWMB0rIfdsEkg== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:07 2025 by rpki-client