This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json) Hash identifier: +vWw5yQW6SVer2h6cLJvrb2rWvMoiVzkgSor4i6gGRQ= Subject key identifier: EA:AB:E0:AE:45:65:43:09:73:82:F4:E3:AA:27:E1:0C:9A:C0:84:5B Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Certificate serial: 019B3C7DEA14D6B330791CCE437DC4C5DA14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft Manifest number: 02D6 Signing time: Sat 20 Dec 2025 16:00:43 +0000 Manifest this update: Sat 20 Dec 2025 16:00:43 +0000 Manifest next update: Sun 21 Dec 2025 16:00:43 +0000 Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: MK+qgcNl5+Re78pC7Qv0qxK6XJJV2JnE+puvKIfI+L8=) 2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=) 3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ea:14:d6:b3:30:79:1c:ce:43:7d:c4:c5:da:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d Validity Not Before: Dec 20 16:00:43 2025 GMT Not After : Dec 21 16:00:43 2025 GMT Subject: CN=eaabe0ae456543097382f4e3aa27e10c9ac0845b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:83:81:bf:c1:a8:97:4f:f8:10:5b:33:70: bb:e4:38:84:29:2f:d6:14:2b:bc:1f:19:7f:3e:ad: 49:0e:93:fa:07:d8:8b:b0:5a:29:af:e0:81:82:95: fd:14:25:77:51:d5:1d:9b:4f:00:f9:92:33:a6:db: 3f:aa:d3:d9:e6:e8:66:9d:22:e4:cf:21:2b:f4:10: 86:09:cf:70:5b:4f:bd:9b:3a:44:81:ba:8d:23:c9: 70:a2:b6:19:70:87:ea:c7:05:d7:d7:f1:be:41:69: ac:7d:b4:c2:e4:45:9b:47:c8:ce:af:11:3c:39:51: 84:fc:8a:44:be:82:75:dd:32:30:b2:75:22:55:8b: f7:ed:24:3b:d9:57:4e:98:f7:0b:43:8c:f4:f9:07: f3:18:82:83:96:63:fd:2f:3b:59:4c:db:0e:a4:a9: 33:85:2f:10:93:c5:21:f6:35:5e:2e:4b:de:57:d3: 9f:07:f6:3c:5f:2a:e4:51:79:8d:59:a2:07:af:51: 39:df:58:00:43:ad:ec:44:2e:1b:fb:93:42:6c:ac: 1a:21:eb:91:33:b6:64:5d:fc:31:40:25:10:25:65: 82:dd:fa:ae:d5:58:bb:60:c6:2b:88:39:af:02:0f: 78:8f:5f:30:7b:ac:42:0c:d1:5a:12:d4:db:02:06: 8b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AB:E0:AE:45:65:43:09:73:82:F4:E3:AA:27:E1:0C:9A:C0:84:5B X509v3 Authority Key Identifier: keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:0c:97:7e:f4:aa:25:aa:4d:b2:1a:c3:86:34:4b:38:71:6d: 1b:c6:d8:34:de:96:f7:1d:0d:35:c9:c5:a9:d1:d3:9b:06:1a: 10:84:35:70:80:84:16:64:0b:d6:57:16:d1:de:0b:76:eb:74: ca:aa:54:6d:a7:10:47:70:63:6c:84:59:b1:a1:83:6e:90:7b: 45:e8:11:f8:8b:ff:42:ae:a3:15:75:fb:33:d9:9c:cd:16:3a: 9a:6b:3e:f6:a9:97:4b:d4:20:33:05:8c:4a:43:0a:e1:03:6c: e0:a6:07:e5:a6:0a:52:93:1c:ec:6d:c8:63:70:07:62:37:b1: cb:60:6d:4d:63:73:30:b1:bf:9b:39:36:58:ef:79:84:90:3b: d0:12:c4:96:14:33:2c:82:45:74:fb:ca:9d:18:cf:13:57:85: d9:7b:ce:d6:96:56:fd:9d:da:f5:2a:bc:b8:c4:95:2a:d3:22: 93:67:1a:c7:8c:1a:d5:d4:7a:cb:41:7a:74:58:fe:c5:67:33: 17:e6:0c:83:bc:28:1b:be:be:b4:04:d0:0f:2c:87:c7:d2:5e: 9a:04:45:86:dd:8b:c9:e9:1c:b9:36:6f:29:64:e2:26:8d:c1: f5:54:64:df:64:23:f8:d4:e7:bd:4a:de:73:d3:1a:40:61:b0: ad:73:11:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feoU1rMweRzOQ33ExdoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGQ0MDI2ZDI5MGYzMjAxZDI4ZWY2ODRkM2M1YWMxM2M5 NmVjNmQwHhcNMjUxMjIwMTYwMDQzWhcNMjUxMjIxMTYwMDQzWjAzMTEwLwYDVQQD EyhlYWFiZTBhZTQ1NjU0MzA5NzM4MmY0ZTNhYTI3ZTEwYzlhYzA4NDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6KDgb/BqJdP+BBbM3C75DiEKS/W FCu8Hxl/Pq1JDpP6B9iLsFopr+CBgpX9FCV3UdUdm08A+ZIzpts/qtPZ5uhmnSLk zyEr9BCGCc9wW0+9mzpEgbqNI8lworYZcIfqxwXX1/G+QWmsfbTC5EWbR8jOrxE8 OVGE/IpEvoJ13TIwsnUiVYv37SQ72VdOmPcLQ4z0+QfzGIKDlmP9LztZTNsOpKkz hS8Qk8Uh9jVeLkveV9OfB/Y8XyrkUXmNWaIHr1E531gAQ63sRC4b+5NCbKwaIeuR M7ZkXfwxQCUQJWWC3fqu1Vi7YMYriDmvAg94j18we6xCDNFaEtTbAgaLSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqr4K5FZUMJc4L046on4QyawIRbMB8GA1UdIwQY MBaAFDTdQCbSkPMgHSjvaE08WsE8luxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt ODc4NTA3ZWQ0NmY3LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3 LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugyXfvSq JapNshrDhjRLOHFtG8bYNN6W9x0NNcnFqdHTmwYaEIQ1cICEFmQL1lcW0d4Ldut0 yqpUbacQR3BjbIRZsaGDbpB7RegR+Iv/Qq6jFXX7M9mczRY6mms+9qmXS9QgMwWM SkMK4QNs4KYH5aYKUpMc7G3IY3AHYjexy2BtTWNzMLG/mzk2WO95hJA70BLElhQz LIJFdPvKnRjPE1eF2XvO1pZW/Z3a9Sq8uMSVKtMik2cax4wa1dR6y0F6dFj+xWcz F+YMg7woG76+tATQDyyHx9JemgRFht2LyekcuTZvKWTiJo3B9VRk32Qj+NTnvUre c9MaQGGwrXMRNg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:46 2025 by rpki-client