This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json) Hash identifier: OhFvwHk4pv2tfTwuSCtxCvIrpCPbwWNSrV4yYvflK5I= Subject key identifier: 96:D6:53:C3:9B:28:80:08:51:C5:EB:DA:37:E0:BA:8F:F7:B7:6F:3B Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Certificate serial: 019B5ED2EF56B9E47E6BB403FEC280105223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft Manifest number: 2E Signing time: Sat 27 Dec 2025 08:00:40 +0000 Manifest this update: Sat 27 Dec 2025 08:00:40 +0000 Manifest next update: Sun 28 Dec 2025 08:00:40 +0000 Files and hashes: 1: 29jzkL-Jj9fhMyXNbEiZUeBt610.roa (hash: Fg1900ujJMvemJRIc0WA5yvUfQNe0bPi7usiyHRJC1I=) 2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: ghvnD+FRUYl75MCVM7F2dzyQNTqLozELyC0AOYqcflc=) 3: hatM9e29oZLqohTezRhs0pobTPo.roa (hash: F6nkpB0hkurYv3UEzEF5feSFYVDAIvxRd/KqnsxhUoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:d2:ef:56:b9:e4:7e:6b:b4:03:fe:c2:80:10:52:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Validity Not Before: Dec 27 08:00:40 2025 GMT Not After : Dec 28 08:00:40 2025 GMT Subject: CN=96d653c39b28800851c5ebda37e0ba8ff7b76f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:23:9d:fa:16:f8:b0:b6:fc:9a:91:15:e9: 6c:bc:28:14:99:66:24:cd:35:fd:e6:76:5b:1a:28: c1:54:12:be:25:69:45:27:f4:db:94:51:4e:5a:8a: 9a:3c:fd:3d:35:17:79:e3:8d:81:28:6b:44:92:35: fb:64:af:49:31:89:4f:68:a4:17:5f:c3:8a:19:95: 88:de:d8:a5:4a:2c:98:00:00:cb:14:8e:4f:57:2e: 16:11:25:cb:49:9d:08:5e:87:5d:c2:64:71:e3:f7: 6e:8a:41:de:9a:ff:34:a5:79:a4:75:a0:26:d2:e1: d5:94:75:1b:af:23:2d:26:51:f9:ee:35:84:84:b0: a7:27:16:4b:0b:e0:fb:21:06:5d:c7:93:88:0d:ec: 97:a2:c0:97:32:72:67:29:c4:9f:60:52:a2:8a:f5: 30:2e:89:c6:9f:97:a3:84:2f:d9:49:c3:5c:f6:b0: 16:0e:1a:5f:95:77:cc:92:e6:7e:07:1e:f2:9f:9b: 2f:5a:f5:bb:c9:df:7d:ff:68:bd:64:d0:8e:9c:68: 01:56:6a:c8:52:53:aa:ba:26:ba:00:e9:1a:ef:2d: 02:2b:35:d3:4f:b2:1e:61:5b:69:a2:2b:7f:70:ca: ca:14:f4:b3:2a:f0:a3:02:9b:05:a9:e7:e1:4d:9d: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D6:53:C3:9B:28:80:08:51:C5:EB:DA:37:E0:BA:8F:F7:B7:6F:3B X509v3 Authority Key Identifier: keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6c:bd:8a:82:28:2a:68:f1:d5:0d:9f:b6:89:71:51:20:f5: 93:1f:a0:b2:6b:35:23:4d:83:5d:70:b0:e3:2d:4d:c2:06:37: 92:6b:79:44:5b:30:89:51:ba:fa:ec:b5:7a:bb:64:2b:a9:ce: 73:2d:b7:59:14:f9:f9:e3:0e:e6:ff:4f:de:2c:1c:75:d1:e5: ab:f7:b7:a9:b7:55:ed:ff:7a:1c:cc:8e:82:99:c7:d3:28:4f: 7f:d4:2f:a0:27:01:a8:7e:4f:7a:bd:f4:6a:0c:68:4c:6a:08: 53:24:ef:a6:fd:9b:53:86:71:69:db:83:82:16:e6:17:27:7b: 4a:f5:ec:38:cc:70:58:f4:28:69:16:a1:ff:6d:cf:66:8c:2d: 27:d8:b4:ae:33:62:7a:c2:6f:22:cb:24:fa:23:76:29:7b:d1: 70:f3:70:8f:1b:0e:5b:c8:9f:50:ec:2a:ac:50:cd:4d:cb:5f: 29:77:de:a6:c7:16:e2:59:01:89:e8:b8:8a:74:a1:e9:09:05: d2:78:91:84:d6:b4:b2:4e:79:83:2a:f0:78:3a:fe:32:47:ea: b0:ff:18:9b:e3:22:be:1b:ee:64:56:e2:6f:12:59:6b:59:c2: a9:a5:32:bd:47:8d:27:9d:a7:b6:e4:b3:79:7a:91:fa:6b:d9: 8b:80:f4:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZte0u9WueR+a7QD/sKAEFIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2 YmRkY2EwHhcNMjUxMjI3MDgwMDQwWhcNMjUxMjI4MDgwMDQwWjAzMTEwLwYDVQQD Eyg5NmQ2NTNjMzliMjg4MDA4NTFjNWViZGEzN2UwYmE4ZmY3Yjc2ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfsjnfoW+LC2/JqRFelsvCgUmWYk zTX95nZbGijBVBK+JWlFJ/TblFFOWoqaPP09NRd5442BKGtEkjX7ZK9JMYlPaKQX X8OKGZWI3tilSiyYAADLFI5PVy4WESXLSZ0IXoddwmRx4/duikHemv80pXmkdaAm 0uHVlHUbryMtJlH57jWEhLCnJxZLC+D7IQZdx5OIDeyXosCXMnJnKcSfYFKiivUw LonGn5ejhC/ZScNc9rAWDhpflXfMkuZ+Bx7yn5svWvW7yd99/2i9ZNCOnGgBVmrI UlOquia6AOka7y0CKzXTT7IeYVtpoit/cMrKFPSzKvCjApsFqefhTZ2bPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbWU8ObKIAIUcXr2jfguo/3t287MB8GA1UdIwQY MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt NWVmMzYyMjZhNzY3LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUtNWVmMzYyMjZhNzY3 LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGy9ioIo Kmjx1Q2ftolxUSD1kx+gsms1I02DXXCw4y1NwgY3kmt5RFswiVG6+uy1ertkK6nO cy23WRT5+eMO5v9P3iwcddHlq/e3qbdV7f96HMyOgpnH0yhPf9QvoCcBqH5Per30 agxoTGoIUyTvpv2bU4ZxaduDghbmFyd7SvXsOMxwWPQoaRah/23PZowtJ9i0rjNi esJvIssk+iN2KXvRcPNwjxsOW8ifUOwqrFDNTctfKXfepscW4lkBiei4inSh6QkF 0niRhNa0sk55gyrweDr+MkfqsP8Ym+MivhvuZFbibxJZa1nCqaUyvUeNJ52ntuSz eXqR+mvZi4D0uA== -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:09 2025 by rpki-client