This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json) Hash identifier: BnW0VKWMNYC4e5ZgUHIVd7L726lplT+XSgseGIkkyi4= Subject key identifier: D6:79:52:EF:48:76:31:FF:E0:00:D4:D7:29:13:0B:E9:B5:F9:80:49 Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Certificate serial: 019B3BA2B161212E5C4D71B0D1363DDA3871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft Manifest number: 11EB Signing time: Sat 20 Dec 2025 12:01:16 +0000 Manifest this update: Sat 20 Dec 2025 12:01:16 +0000 Manifest next update: Sun 21 Dec 2025 12:01:16 +0000 Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: rb9WIxdfaLLwXGews3ALXw5OotQEA8P90zRzt1aK0Ww=) 2: SgjnIjuq3AeuRbPMRDHnDCjAALI.roa (hash: Pfy5puiab8wDSE6eVbJ+tlKeXTAJeJMbBe/7aBk5Ysw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:b1:61:21:2e:5c:4d:71:b0:d1:36:3d:da:38:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Validity Not Before: Dec 20 12:01:16 2025 GMT Not After : Dec 21 12:01:16 2025 GMT Subject: CN=d67952ef487631ffe000d4d729130be9b5f98049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:64:37:29:c3:1e:c1:e2:83:16:6f:83:d5: 57:4c:7d:f3:e4:6b:25:e6:a6:bd:eb:10:54:55:17: af:42:ec:ce:c8:aa:7b:6f:12:b7:02:8a:72:b7:90: a9:b5:8d:63:25:d4:9e:7e:b4:75:e6:b5:5f:b9:e3: fa:5e:67:e2:a3:97:ca:87:7a:97:dc:7b:cd:01:3b: bd:3c:3f:c9:f6:4f:fd:c1:6e:76:14:7c:6b:29:c4: db:13:57:98:41:0c:c7:44:ee:0d:40:28:19:c6:db: e4:a0:d8:74:3d:c9:1a:bc:b9:f9:da:0f:4b:af:8b: b7:08:15:38:0e:69:be:1f:91:c1:3d:8b:4b:2c:ab: d4:cf:82:3e:5d:3f:43:aa:a3:93:d2:da:46:f2:58: 4e:4c:b1:82:94:c5:d0:66:6f:94:e3:fd:6c:5c:db: 3f:83:d8:93:24:fe:2a:0e:9f:6c:6a:8a:3b:a0:31: c8:a4:72:0d:54:c3:d7:68:3e:b1:cf:22:5f:e0:18: 6c:42:f3:b7:3d:b6:51:52:23:95:26:07:e9:31:87: 77:38:14:9f:e3:75:72:0e:3a:86:aa:1a:f6:87:7b: 59:e0:1d:7a:95:9c:e7:47:60:3b:74:bf:e5:c1:fb: ce:ce:9d:fe:0c:1d:6e:58:eb:02:91:93:14:e4:ee: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:79:52:EF:48:76:31:FF:E0:00:D4:D7:29:13:0B:E9:B5:F9:80:49 X509v3 Authority Key Identifier: keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:20:94:01:23:a4:5b:9b:f3:78:4c:33:a8:fb:0a:22:a6:9f: 1b:63:5b:a4:3a:95:d8:1b:b0:41:ae:fc:5e:80:73:e7:8c:72: 41:6b:f8:18:ce:d2:cd:99:f3:e4:33:9a:cf:4b:b8:df:68:39: b0:f1:66:3a:c1:34:b7:e7:f1:e4:d0:03:cc:b5:f4:ff:9c:04: 2b:c5:0b:ea:df:03:4a:1d:5c:62:9e:f6:ef:48:1e:7c:e7:cf: 0e:92:69:b9:79:92:56:5b:74:e6:f1:22:70:7c:16:bc:21:e2: 5a:26:c4:85:d8:8a:22:b5:62:5f:81:b4:f1:64:97:1b:38:1b: f2:70:92:33:49:af:d6:41:a7:de:47:00:18:4d:eb:09:fc:f6: 59:1b:26:4a:a8:04:02:37:b4:84:ee:8f:79:d2:16:d7:7e:fb: ed:22:a6:0a:c5:ac:7e:22:b0:2e:14:31:f9:f4:66:f8:f3:8a: 4a:0e:b2:6e:65:9c:4b:68:5a:bd:60:18:9e:92:01:45:8c:9f: eb:88:07:f2:2d:32:d5:71:ba:5b:0d:99:4c:2f:31:c8:72:09: 3e:0b:f3:09:16:de:33:3e:f0:7e:6e:6d:34:77:74:c1:d5:32: b4:7b:40:45:08:ab:97:e6:ea:36:b1:88:ab:a4:90:0b:67:10: 48:9c:b9:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7orFhIS5cTXGw0TY92jhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm YWQyZjcwHhcNMjUxMjIwMTIwMTE2WhcNMjUxMjIxMTIwMTE2WjAzMTEwLwYDVQQD EyhkNjc5NTJlZjQ4NzYzMWZmZTAwMGQ0ZDcyOTEzMGJlOWI1Zjk4MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8hkNynDHsHigxZvg9VXTH3z5Gsl 5qa96xBUVRevQuzOyKp7bxK3Aopyt5CptY1jJdSefrR15rVfueP6Xmfio5fKh3qX 3HvNATu9PD/J9k/9wW52FHxrKcTbE1eYQQzHRO4NQCgZxtvkoNh0PckavLn52g9L r4u3CBU4Dmm+H5HBPYtLLKvUz4I+XT9DqqOT0tpG8lhOTLGClMXQZm+U4/1sXNs/ g9iTJP4qDp9saoo7oDHIpHINVMPXaD6xzyJf4BhsQvO3PbZRUiOVJgfpMYd3OBSf 43VyDjqGqhr2h3tZ4B16lZznR2A7dL/lwfvOzp3+DB1uWOsCkZMU5O6FOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZ5Uu9IdjH/4ADU1ykTC+m1+YBJMB8GA1UdIwQY MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4 LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSCUASOk W5vzeEwzqPsKIqafG2NbpDqV2BuwQa78XoBz54xyQWv4GM7SzZnz5DOaz0u432g5 sPFmOsE0t+fx5NADzLX0/5wEK8UL6t8DSh1cYp7270gefOfPDpJpuXmSVlt05vEi cHwWvCHiWibEhdiKIrViX4G08WSXGzgb8nCSM0mv1kGn3kcAGE3rCfz2WRsmSqgE Aje0hO6PedIW13777SKmCsWsfiKwLhQx+fRm+POKSg6ybmWcS2havWAYnpIBRYyf 64gH8i0y1XG6Ww2ZTC8xyHIJPgvzCRbeMz7wfm5tNHd0wdUytHtARQirl+bqNrGI q6SQC2cQSJy59w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:01 2025 by rpki-client