This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: sH3ptWhwB4ld9+3WJNIT3nXqmpPXJqgCoTXdOEyEXJs= Subject key identifier: F9:59:41:51:06:A9:F9:19:6A:B5:07:25:A5:21:AB:11:55:77:97:6A Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019B3C10856264ED638291C57434D6C2F92D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 14:01:14 +0000 Manifest this update: Sat 20 Dec 2025 14:01:14 +0000 Manifest next update: Sun 21 Dec 2025 14:01:14 +0000 Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=) 2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=) 3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=) 4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=) 5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: We1ElV+VZNYbbkMPIUW3cjjNXOO/vHBerK7IoSeG3xc=) 6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=) 7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=) 8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=) 9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:85:62:64:ed:63:82:91:c5:74:34:d6:c2:f9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Dec 20 14:01:14 2025 GMT Not After : Dec 21 14:01:14 2025 GMT Subject: CN=f959415106a9f9196ab50725a521ab115577976a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:11:5e:cd:b8:68:b7:eb:7d:e1:e8:a3:1a: d8:0e:1b:45:98:15:d0:f2:87:cb:b3:b2:dc:37:d4: 63:63:9e:7d:0e:0b:27:eb:0d:1b:81:41:84:9e:b9: 25:75:2d:1b:3e:7a:72:2c:f9:03:ad:29:3e:68:06: 0e:92:c2:77:00:76:9e:06:b9:09:76:6e:4c:fd:3c: 8b:b1:3f:b6:03:66:98:b1:80:17:61:8e:9f:60:b5: e3:ab:7a:00:cb:10:e5:0a:68:5f:fd:d6:e5:8a:13: 19:38:1b:fb:c9:1d:37:a3:13:18:b0:5d:0b:69:cd: c9:bd:10:1e:89:f1:a3:a6:ed:19:52:03:a3:c3:1f: 19:be:8c:23:00:74:ad:50:82:65:35:cc:d9:32:29: e5:c1:88:a0:53:43:95:4d:3f:a0:25:36:54:be:8a: 17:78:ac:e0:bc:26:4b:18:46:94:fd:94:2d:aa:90: 0c:99:a0:7f:30:6d:01:e8:f0:b8:c3:c7:de:0d:4d: db:c0:a1:d7:48:d8:34:44:29:80:57:e8:33:c7:98: 2a:eb:63:a1:72:8f:cc:bd:bc:10:72:b4:3c:24:2b: e8:aa:15:35:16:85:90:e1:3b:52:68:7a:12:c1:e8: 9b:d6:f0:45:1d:91:50:47:91:80:15:43:0a:6d:0f: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:41:51:06:A9:F9:19:6A:B5:07:25:A5:21:AB:11:55:77:97:6A X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d8:29:f5:29:7f:53:b0:03:03:7c:7a:10:87:c7:ec:c7:ed: f5:a3:af:d8:65:1f:22:4b:38:60:c2:8b:67:a3:68:7e:c9:93: bc:34:20:e5:d4:18:6f:b5:f4:2e:56:63:2a:73:06:ef:82:90: 14:0b:bb:e6:17:84:ef:6e:c2:53:5e:59:8f:f4:c6:bc:0b:5f: 21:f7:ab:f4:97:e0:86:cf:3d:32:a3:67:e2:c7:11:c8:91:30: 78:20:f3:29:44:bb:6a:c0:d4:95:9c:7e:8f:c6:98:2c:ab:12: bb:af:12:7a:4a:91:9a:e6:19:94:e0:13:dd:00:2e:c6:eb:c5: 13:c9:60:5e:96:37:62:a3:4f:a2:79:35:b8:7f:45:f3:8f:35: 2b:e5:46:fb:d2:29:8e:36:1a:68:d3:c0:d6:a7:d8:56:b2:5b: 50:b4:76:2c:48:99:bd:85:81:b3:0d:c6:a7:22:da:24:49:f1: 21:7f:c2:80:53:34:15:88:89:5d:b4:d6:29:41:17:3e:36:e4: 0f:2f:e7:ec:c0:60:d7:82:88:01:b2:dd:24:9f:db:88:24:17: 4f:35:4e:e4:05:3b:14:eb:22:c8:e5:f3:97:0d:e6:a5:65:7e: 4a:87:f3:c2:a3:65:71:66:4c:ef:77:b7:75:89:f6:8b:42:35: e4:9c:c9:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIViZO1jgpHFdDTWwvktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjUxMjIwMTQwMTE0WhcNMjUxMjIxMTQwMTE0WjAzMTEwLwYDVQQD EyhmOTU5NDE1MTA2YTlmOTE5NmFiNTA3MjVhNTIxYWIxMTU1Nzc5NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HIRXs24aLfrfeHooxrYDhtFmBXQ 8ofLs7LcN9RjY559Dgsn6w0bgUGEnrkldS0bPnpyLPkDrSk+aAYOksJ3AHaeBrkJ dm5M/TyLsT+2A2aYsYAXYY6fYLXjq3oAyxDlCmhf/dblihMZOBv7yR03oxMYsF0L ac3JvRAeifGjpu0ZUgOjwx8ZvowjAHStUIJlNczZMinlwYigU0OVTT+gJTZUvooX eKzgvCZLGEaU/ZQtqpAMmaB/MG0B6PC4w8feDU3bwKHXSNg0RCmAV+gzx5gq62Oh co/MvbwQcrQ8JCvoqhU1FoWQ4TtSaHoSweib1vBFHZFQR5GAFUMKbQ9shwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlZQVEGqfkZarUHJaUhqxFVd5dqMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntgp9Sl/ U7ADA3x6EIfH7Mft9aOv2GUfIks4YMKLZ6NofsmTvDQg5dQYb7X0LlZjKnMG74KQ FAu75heE727CU15Zj/TGvAtfIfer9Jfghs89MqNn4scRyJEweCDzKUS7asDUlZx+ j8aYLKsSu68SekqRmuYZlOAT3QAuxuvFE8lgXpY3YqNPonk1uH9F8481K+VG+9Ip jjYaaNPA1qfYVrJbULR2LEiZvYWBsw3GpyLaJEnxIX/CgFM0FYiJXbTWKUEXPjbk Dy/n7MBg14KIAbLdJJ/biCQXTzVO5AU7FOsiyOXzlw3mpWV+SofzwqNlcWZM73e3 dYn2i0I15JzJXg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:56:34 2025 by rpki-client