This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json) Hash identifier: DVSZDfBbwVwQTAznwJnXrXT8wMT4hdS+h5tbKtXJQGw= Subject key identifier: 79:A7:A7:24:3D:4A:FB:2C:BC:1E:C7:97:38:B8:16:3C:F8:27:C6:2D Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Certificate serial: 019B3D90E738A6A5DFFD9A94F03159C9348A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft Manifest number: 11EC Signing time: Sat 20 Dec 2025 21:01:04 +0000 Manifest this update: Sat 20 Dec 2025 21:01:04 +0000 Manifest next update: Sun 21 Dec 2025 21:01:04 +0000 Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: RmQWAjMIWZysIWV/wfMRjVcJhbftT6ZA0xHsrV+dtJE=) 2: SgjnIjuq3AeuRbPMRDHnDCjAALI.roa (hash: Pfy5puiab8wDSE6eVbJ+tlKeXTAJeJMbBe/7aBk5Ysw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e7:38:a6:a5:df:fd:9a:94:f0:31:59:c9:34:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Validity Not Before: Dec 20 21:01:04 2025 GMT Not After : Dec 21 21:01:04 2025 GMT Subject: CN=79a7a7243d4afb2cbc1ec79738b8163cf827c62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:59:59:cd:a1:34:cd:9c:cf:5a:a1:1c:5a:38: 34:73:48:aa:71:27:1c:95:0b:64:4f:b8:e9:f0:e8: 17:a8:2a:a6:18:77:66:23:51:d3:cb:39:a0:d3:ee: 91:a0:f4:60:60:aa:1f:53:e6:3d:8d:c9:f1:fb:14: a4:cb:60:9e:29:a5:48:74:bb:f5:cd:14:02:f8:40: d2:d3:79:57:93:02:2c:f0:07:b9:5f:71:9b:53:18: c5:d2:f1:2a:6b:d0:e6:51:e5:91:a3:e7:09:d5:94: e3:c6:09:84:76:08:ce:43:ef:55:5c:4d:dd:8b:31: 9d:4d:a4:96:cd:6f:07:85:32:8a:31:ba:12:10:2b: 49:49:b0:01:69:c9:a6:ac:7c:31:96:40:42:a4:16: e6:db:06:a6:d0:0c:c3:ec:c0:32:6b:77:6d:eb:9c: 64:64:21:65:2a:18:e3:24:21:a0:d8:f7:0e:d7:ee: 4e:17:ff:e8:a3:5a:f9:ef:d6:22:6e:76:c0:e1:28: 64:24:61:c0:b1:ea:19:ce:3d:30:7c:63:64:05:a9: de:ed:1f:b6:68:57:aa:c7:72:4c:ca:78:01:dc:9b: 72:ab:d9:6b:a5:14:2e:cd:63:2e:17:2e:0c:0f:66: 31:4e:bc:34:d8:02:30:30:9a:c1:36:b6:1a:1b:e5: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A7:A7:24:3D:4A:FB:2C:BC:1E:C7:97:38:B8:16:3C:F8:27:C6:2D X509v3 Authority Key Identifier: keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:78:ab:c1:ce:b3:59:6e:7b:27:a7:4e:13:76:21:56:32:2a: cf:eb:74:02:3f:55:ed:6b:bc:a2:d3:34:8d:a4:a3:18:2d:aa: 2e:bd:e7:06:2b:c2:9e:28:01:cb:14:28:b8:39:93:68:62:e4: 5c:a7:38:a6:92:15:86:20:27:ad:ef:41:7b:af:3f:02:e2:01: 1f:a4:ed:65:5c:bf:70:56:43:e3:e4:90:90:0a:65:6c:36:b3: 9f:03:62:a5:87:94:94:33:79:0f:c4:a8:3d:7b:56:6f:10:e7: d8:2a:5f:a6:18:90:da:50:0b:6f:52:15:51:0f:24:f9:dc:c0: 6f:c8:df:11:02:a9:7c:72:2f:8b:1a:4d:74:d4:33:fe:2f:ef: f9:e4:d5:bc:5c:c3:8b:4d:b5:19:6f:d8:08:76:53:99:29:69: be:3e:92:01:44:33:9e:90:28:24:c6:a6:14:68:b7:c2:a0:3e: 22:56:4d:58:5b:30:76:4b:99:dd:16:6c:ea:69:45:06:50:9e: 69:ab:55:3f:8b:de:71:d4:59:a7:75:26:5e:0b:87:5d:c0:11: ff:be:18:d3:3d:67:17:cd:23:1b:65:c9:c7:2c:07:76:1f:5a: ec:ee:08:2a:99:9f:c8:a2:29:b6:a1:f8:af:20:e8:0d:6f:46: 41:44:ab:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOc4pqXf/ZqU8DFZyTSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm YWQyZjcwHhcNMjUxMjIwMjEwMTA0WhcNMjUxMjIxMjEwMTA0WjAzMTEwLwYDVQQD Eyg3OWE3YTcyNDNkNGFmYjJjYmMxZWM3OTczOGI4MTYzY2Y4MjdjNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVlZzaE0zZzPWqEcWjg0c0iqcScc lQtkT7jp8OgXqCqmGHdmI1HTyzmg0+6RoPRgYKofU+Y9jcnx+xSky2CeKaVIdLv1 zRQC+EDS03lXkwIs8Ae5X3GbUxjF0vEqa9DmUeWRo+cJ1ZTjxgmEdgjOQ+9VXE3d izGdTaSWzW8HhTKKMboSECtJSbABacmmrHwxlkBCpBbm2wam0AzD7MAya3dt65xk ZCFlKhjjJCGg2PcO1+5OF//oo1r579YibnbA4ShkJGHAseoZzj0wfGNkBane7R+2 aFeqx3JMyngB3Jtyq9lrpRQuzWMuFy4MD2YxTrw02AIwMJrBNrYaG+X8YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmnpyQ9SvssvB7Hlzi4Fjz4J8YtMB8GA1UdIwQY MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4 LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXirwc6z WW57J6dOE3YhVjIqz+t0Aj9V7Wu8otM0jaSjGC2qLr3nBivCnigByxQouDmTaGLk XKc4ppIVhiAnre9Be68/AuIBH6TtZVy/cFZD4+SQkAplbDaznwNipYeUlDN5D8So PXtWbxDn2CpfphiQ2lALb1IVUQ8k+dzAb8jfEQKpfHIvixpNdNQz/i/v+eTVvFzD i021GW/YCHZTmSlpvj6SAUQznpAoJMamFGi3wqA+IlZNWFswdkuZ3RZs6mlFBlCe aatVP4vecdRZp3UmXguHXcAR/74Y0z1nF80jG2XJxywHdh9a7O4IKpmfyKIptqH4 ryDoDW9GQUSrkQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:16:28 2025 by rpki-client