This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json) Hash identifier: Eoqv391JaWxvq1WIxBkuYw8w4lXweNfP9yDaaVaN9Ss= Subject key identifier: D7:73:C7:48:B2:4A:A7:D7:5F:92:9F:A5:C3:A7:A4:3D:47:28:09:50 Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Certificate serial: 019B3CEC1702A05B86589061639E3AF4F337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 18:01:03 +0000 Manifest this update: Sat 20 Dec 2025 18:01:03 +0000 Manifest next update: Sun 21 Dec 2025 18:01:03 +0000 Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=) 2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: UDntXTT+4w9CkXOsfOfmMCiiY6kJeMhAue9oLVUvI+s=) 3: sPxjsNKAZYfgxPi8TQlY-mZZcT4.roa (hash: EWGb5uGqI3pCu9DA248NQJ9YLr39oAfQHZAN5stmGVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:17:02:a0:5b:86:58:90:61:63:9e:3a:f4:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Validity Not Before: Dec 20 18:01:03 2025 GMT Not After : Dec 21 18:01:03 2025 GMT Subject: CN=d773c748b24aa7d75f929fa5c3a7a43d47280950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:bd:a4:76:32:4d:72:c0:ee:0f:17:46:bc: 8a:9c:7a:f2:96:2b:ef:d0:27:5c:1f:20:3e:5c:86: f5:97:e2:6c:6f:f0:3f:18:74:38:7f:9a:44:b4:db: 48:bf:1f:8d:4c:02:5a:62:9b:c3:c3:fa:4c:55:2f: b5:00:7d:4a:bb:43:4c:01:5b:21:d3:33:92:b5:2c: 0f:2c:62:e8:80:44:47:e6:c7:1a:17:f7:ee:19:1b: 12:65:d9:f4:28:0e:dc:6d:b4:66:1c:24:e4:29:fc: 4a:8a:ff:25:ea:87:58:a4:cf:eb:21:22:ea:09:b8: cd:5e:7b:48:47:ca:86:74:d4:11:cd:95:43:b4:7d: bf:15:b4:37:0d:61:c1:42:7e:55:2f:b4:96:20:72: 4d:2c:8a:13:bf:47:e9:97:6a:fa:25:ee:1f:06:36: 21:8d:c9:cf:5a:cb:98:6c:43:1c:43:4c:b2:7d:84: 99:51:19:df:68:45:7c:d9:81:17:cc:6a:04:61:0e: d6:55:29:3c:bf:04:9f:ff:34:7f:a8:3b:80:8f:2c: 1a:11:8f:a7:ff:53:dd:84:fc:cd:e9:24:3b:2e:17: a7:11:c7:c8:4f:08:47:b6:4b:50:e2:ab:73:0a:a8: 83:55:f6:2a:89:66:bc:5e:1e:35:53:62:78:17:29: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:73:C7:48:B2:4A:A7:D7:5F:92:9F:A5:C3:A7:A4:3D:47:28:09:50 X509v3 Authority Key Identifier: keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2a:56:7e:d7:f4:67:ec:7f:96:47:b8:78:49:cc:53:be:ad: bc:10:d1:1b:f5:55:17:8e:57:16:1f:49:20:fa:9e:59:29:7c: 2d:ec:23:42:09:1d:dd:55:6a:35:c4:5a:c9:da:ba:88:d5:5d: 37:33:df:8b:45:25:39:28:74:d2:7d:f0:4d:15:e3:52:23:c3: 1e:88:70:cb:a3:74:2f:07:9e:c9:7f:1c:1c:a4:7f:75:21:1b: cb:13:c1:b0:d7:32:f8:d8:da:8b:7d:58:2c:7f:dc:43:34:35: a9:15:9b:e4:7a:b8:0c:7c:09:ce:da:8e:87:ea:34:61:87:20: 5e:14:23:02:f6:6f:db:72:87:47:87:1c:d9:5d:e7:34:45:88: 4d:1b:87:e5:2f:2e:c4:f6:b1:5c:c2:e9:78:61:bb:4e:a9:cd: cd:58:37:e8:09:75:7c:f2:d6:79:c7:a6:82:cd:20:f4:93:02: a6:1b:01:b8:50:23:7a:c6:01:9b:2e:c2:0b:78:ea:96:39:39: d8:31:1a:e6:4c:84:78:64:57:47:ec:c2:72:b4:b7:8f:c6:38: 63:26:2a:8f:c4:98:2f:83:5c:cd:48:9f:4d:6e:e9:45:34:72: 50:a8:ba:8f:1b:1c:08:84:5d:37:17:e4:b6:51:14:46:4d:3e: 86:fa:a2:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87BcCoFuGWJBhY5469PM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0 OTBmMGUwHhcNMjUxMjIwMTgwMTAzWhcNMjUxMjIxMTgwMTAzWjAzMTEwLwYDVQQD EyhkNzczYzc0OGIyNGFhN2Q3NWY5MjlmYTVjM2E3YTQzZDQ3MjgwOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0va9pHYyTXLA7g8XRryKnHrylivv 0CdcHyA+XIb1l+Jsb/A/GHQ4f5pEtNtIvx+NTAJaYpvDw/pMVS+1AH1Ku0NMAVsh 0zOStSwPLGLogERH5scaF/fuGRsSZdn0KA7cbbRmHCTkKfxKiv8l6odYpM/rISLq CbjNXntIR8qGdNQRzZVDtH2/FbQ3DWHBQn5VL7SWIHJNLIoTv0fpl2r6Je4fBjYh jcnPWsuYbEMcQ0yyfYSZURnfaEV82YEXzGoEYQ7WVSk8vwSf/zR/qDuAjywaEY+n /1PdhPzN6SQ7LhenEcfITwhHtktQ4qtzCqiDVfYqiWa8Xh41U2J4FynJMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdzx0iySqfXX5KfpcOnpD1HKAlQMB8GA1UdIwQY MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeipWftf0 Z+x/lke4eEnMU76tvBDRG/VVF45XFh9JIPqeWSl8LewjQgkd3VVqNcRaydq6iNVd NzPfi0UlOSh00n3wTRXjUiPDHohwy6N0LweeyX8cHKR/dSEbyxPBsNcy+Njai31Y LH/cQzQ1qRWb5Hq4DHwJztqOh+o0YYcgXhQjAvZv23KHR4cc2V3nNEWITRuH5S8u xPaxXMLpeGG7TqnNzVg36Al1fPLWecemgs0g9JMCphsBuFAjesYBmy7CC3jqljk5 2DEa5kyEeGRXR+zCcrS3j8Y4YyYqj8SYL4NczUifTW7pRTRyUKi6jxscCIRdNxfk tlEURk0+hvqi1A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:07:32 2025 by rpki-client