This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json) Hash identifier: VOI8obyeULDkjzEVUQvvA7c9OAR3xoNFcQ2AdmmQtvg= Subject key identifier: 40:7B:78:DE:64:54:11:FA:39:9E:C0:41:4C:84:E9:D3:99:9B:36:DA Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8 Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8 Certificate serial: 019B6D33942F4C54A11AB4368806B6E8ECA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft Manifest number: 1725 Signing time: Tue 30 Dec 2025 03:00:55 +0000 Manifest this update: Tue 30 Dec 2025 03:00:55 +0000 Manifest next update: Wed 31 Dec 2025 03:00:55 +0000 Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=) 2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: 6FaRFuaHUxNG2Eo4IapzO61Qq7lBPeVOJdePTeMXKAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:94:2f:4c:54:a1:1a:b4:36:88:06:b6:e8:ec:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8 Validity Not Before: Dec 30 03:00:55 2025 GMT Not After : Dec 31 03:00:55 2025 GMT Subject: CN=407b78de645411fa399ec0414c84e9d3999b36da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:99:ef:2e:ab:56:ab:30:20:86:7e:85:7b: 05:bb:75:6b:09:17:78:3d:a8:51:75:d0:24:af:69: 7c:63:99:a6:7b:5b:f3:f3:27:22:e5:80:51:9a:70: c9:e0:bf:30:07:d5:f1:55:97:5d:8b:6e:34:6f:a7: 46:d5:d4:3d:4f:dc:ac:ce:16:72:73:b5:d7:13:41: 0b:e1:28:88:93:85:e3:c6:c1:e2:48:28:b3:70:ff: 36:68:22:e3:f6:79:c7:ad:02:01:16:2d:55:a7:ed: d4:0d:0e:d4:ba:aa:2d:63:aa:1f:94:17:68:96:a2: c7:a2:ec:da:47:f6:d5:32:60:4a:b3:0f:41:56:f2: 71:7a:93:2b:15:1c:52:56:b9:72:56:c0:ac:42:b4: ca:f6:a8:c8:7e:72:c6:d5:e3:f0:71:d9:5a:71:10: c6:dc:84:e0:39:86:46:79:60:27:23:4a:c1:68:01: 5c:1b:5f:48:47:05:ea:db:20:b2:46:34:65:a0:2b: cb:8f:f7:de:43:c1:cc:35:a2:5d:dc:fb:84:f1:a1: 5a:20:2e:66:9a:61:1d:94:7f:a6:7f:e4:cb:72:ed: 93:5c:b3:d9:6f:2b:ee:73:02:ec:1a:eb:0f:25:9c: 06:35:dc:6f:1a:0a:bc:b2:cb:2c:3a:fd:1f:30:6b: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:78:DE:64:54:11:FA:39:9E:C0:41:4C:84:E9:D3:99:9B:36:DA X509v3 Authority Key Identifier: keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:3e:a1:b8:b1:44:c3:5c:a9:5a:db:f6:12:7a:34:c7:50:08: 98:0c:8f:f2:8c:7f:08:0f:61:00:a2:6c:2e:56:20:91:c1:4f: 8e:16:5f:7d:0a:4c:55:06:0f:10:2f:aa:a7:2f:00:98:b9:d3: 2f:10:8c:b5:8b:b7:32:41:9e:77:b3:74:ca:00:68:78:9e:83: cd:8c:eb:26:b6:7b:62:ce:9f:5a:f1:6d:df:e8:42:e2:09:26: e3:7b:e8:f6:86:2c:42:56:51:56:89:76:8d:f7:35:f0:1d:6c: 5a:94:eb:78:76:e8:ed:9a:6b:24:ff:1e:30:f6:e3:74:a2:83: e9:38:e7:bb:3d:86:3e:18:2d:8f:f3:fa:c2:b0:e6:39:3c:86: 2c:21:ee:38:14:49:bb:39:51:cc:cc:a8:80:5a:f7:89:49:62: 6d:cd:23:45:87:26:f5:04:48:d3:c6:4f:49:63:a3:da:24:19: 95:aa:5f:63:bb:d9:b0:4e:18:88:8f:ae:4e:99:ee:95:78:d1: 75:b3:ec:7a:cd:1e:7d:80:d0:db:9f:0f:02:34:f3:17:47:cb: 48:45:fc:95:d2:95:64:83:0b:32:5d:ea:cf:20:c4:aa:03:86: 03:88:98:bc:ce:d5:d5:37:06:8e:b8:e2:b5:d7:a5:04:98:49: 3c:3a:27:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM5QvTFShGrQ2iAa26OyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjFmZDY5ZTcxOTZhZWY1ZTI5YmE3OTU2ODBkYWMzZTM0 ODY4YzgwHhcNMjUxMjMwMDMwMDU1WhcNMjUxMjMxMDMwMDU1WjAzMTEwLwYDVQQD Eyg0MDdiNzhkZTY0NTQxMWZhMzk5ZWMwNDE0Yzg0ZTlkMzk5OWIzNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAeZ7y6rVqswIIZ+hXsFu3VrCRd4 PahRddAkr2l8Y5mme1vz8yci5YBRmnDJ4L8wB9XxVZddi240b6dG1dQ9T9yszhZy c7XXE0EL4SiIk4XjxsHiSCizcP82aCLj9nnHrQIBFi1Vp+3UDQ7UuqotY6oflBdo lqLHouzaR/bVMmBKsw9BVvJxepMrFRxSVrlyVsCsQrTK9qjIfnLG1ePwcdlacRDG 3ITgOYZGeWAnI0rBaAFcG19IRwXq2yCyRjRloCvLj/feQ8HMNaJd3PuE8aFaIC5m mmEdlH+mf+TLcu2TXLPZbyvucwLsGusPJZwGNdxvGgq8ssssOv0fMGtc7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB7eN5kVBH6OZ7AQUyE6dOZmzbaMB8GA1UdIwQY MBaAFDXx/WnnGWrvXim6eVaA2sPjSGjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMt ZjljYTcxMjRmMDk4LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMtZjljYTcxMjRmMDk4 LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZD6huLFE w1ypWtv2Eno0x1AImAyP8ox/CA9hAKJsLlYgkcFPjhZffQpMVQYPEC+qpy8AmLnT LxCMtYu3MkGed7N0ygBoeJ6DzYzrJrZ7Ys6fWvFt3+hC4gkm43vo9oYsQlZRVol2 jfc18B1sWpTreHbo7ZprJP8eMPbjdKKD6Tjnuz2GPhgtj/P6wrDmOTyGLCHuOBRJ uzlRzMyogFr3iUlibc0jRYcm9QRI08ZPSWOj2iQZlapfY7vZsE4YiI+uTpnulXjR dbPses0efYDQ258PAjTzF0fLSEX8ldKVZIMLMl3qzyDEqgOGA4iYvM7V1TcGjrji tdelBJhJPDonkQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:25:04 2025 by rpki-client