This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json) Hash identifier: WOF3HdiWEQ5bfSg06Bmlj4m8aB+Ve7Ds5s/MsfJ8brM= Subject key identifier: C4:9C:F4:96:45:05:F7:B1:E0:56:CA:F1:8B:08:27:58:72:2C:89:F2 Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Certificate serial: 019B3BD8EF4B8F97DFFBFCA56131D4C8F47A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft Manifest number: 0CFD Signing time: Sat 20 Dec 2025 13:00:31 +0000 Manifest this update: Sat 20 Dec 2025 13:00:31 +0000 Manifest next update: Sun 21 Dec 2025 13:00:31 +0000 Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: 3YfkmlzfLw6b/2xGuCoxVtXZrSu9VOgDjDzrCpUsDjA=) 2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:ef:4b:8f:97:df:fb:fc:a5:61:31:d4:c8:f4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Validity Not Before: Dec 20 13:00:31 2025 GMT Not After : Dec 21 13:00:31 2025 GMT Subject: CN=c49cf4964505f7b1e056caf18b082758722c89f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:83:77:2b:a8:f7:fa:ca:52:4a:0f:61:26: a5:63:04:fe:fc:13:18:c3:ed:fb:38:8f:e1:21:b4: 4d:46:65:82:4c:29:ca:3b:bf:06:e7:59:06:e5:16: ad:14:19:55:94:d0:3f:04:4f:7c:06:fc:f5:8c:1f: eb:e7:ae:53:b5:87:0f:49:e5:73:3d:5a:0c:2f:0b: 09:92:be:b4:3a:e9:fe:26:de:0e:55:1b:72:4b:96: ac:5c:a1:51:21:46:38:5d:a1:17:3b:c0:79:58:c0: 33:f0:b6:3a:29:0c:5f:bc:81:25:67:30:2a:f8:b4: 38:68:9a:78:d0:3d:6c:72:78:56:d8:fc:44:d8:6a: 44:da:62:6b:31:fc:93:f9:64:a5:bb:76:16:0b:18: 84:f5:d0:ca:6e:03:d5:52:aa:50:e0:d2:f6:21:b6: 60:0b:fb:2c:c4:df:63:52:25:cd:6a:bb:d0:1b:d1: dc:8b:83:35:d5:e4:6c:79:27:4f:e6:7e:ea:ea:7c: 0c:e8:e5:c5:ef:01:97:8e:d1:98:71:40:49:5f:57: 65:35:77:6c:0e:e5:50:0f:b6:c2:2a:05:dc:3e:82: ec:33:2c:4b:6b:cc:68:ca:aa:ee:08:89:9b:51:29: 01:5b:bc:ef:37:c8:cf:5a:c5:30:3f:4f:a0:67:b4: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9C:F4:96:45:05:F7:B1:E0:56:CA:F1:8B:08:27:58:72:2C:89:F2 X509v3 Authority Key Identifier: keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e3:ee:d8:63:52:4c:05:33:18:16:d6:36:af:7f:83:cd:dd: 2b:2c:52:ca:e8:93:87:4f:99:0b:a1:fa:01:0e:db:71:b7:c8: bd:83:a7:8f:6e:1f:33:37:a4:d6:30:06:37:fd:86:af:9d:9b: bc:da:6a:02:28:9f:06:53:50:c2:4d:5d:75:69:16:5f:d9:d3: 94:ab:2b:6e:8e:96:97:1f:93:48:f1:47:af:27:28:87:c8:58: b8:72:f4:cf:25:fd:2c:e0:0e:de:c3:8a:41:f9:20:0e:9f:6a: 2e:3e:5f:db:8e:a9:75:79:cd:4c:56:1b:35:f8:64:ab:14:55: 56:f1:6a:2e:44:9f:aa:ef:0a:9b:b7:e5:ce:88:79:9f:fb:50: 12:57:c0:12:60:6f:de:86:2a:36:61:9f:21:f3:0c:fa:79:0d: 30:1a:07:8b:eb:62:1b:58:f9:18:54:08:84:a8:42:89:c5:82: 74:6b:d0:8e:a0:1d:3e:8a:d2:8a:62:2b:24:32:c7:a1:17:98: e5:ce:af:35:13:36:f7:1f:e6:cb:3d:95:f0:a2:53:22:cd:b7: 79:1d:e3:d0:2a:d3:99:41:71:98:34:23:a9:d5:01:a1:b7:ae: 9b:b1:c0:63:bc:ab:d5:39:0a:e9:b1:25:a8:8f:96:6c:a1:4a: 92:46:e4:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72O9Lj5ff+/ylYTHUyPR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWU2ZTFkNjZmYzA0N2UwZTg5ZmYwNDVjMmQwOGNhMTdk NTVlYTUwHhcNMjUxMjIwMTMwMDMxWhcNMjUxMjIxMTMwMDMxWjAzMTEwLwYDVQQD EyhjNDljZjQ5NjQ1MDVmN2IxZTA1NmNhZjE4YjA4Mjc1ODcyMmM4OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AqDdyuo9/rKUkoPYSalYwT+/BMY w+37OI/hIbRNRmWCTCnKO78G51kG5RatFBlVlNA/BE98Bvz1jB/r565TtYcPSeVz PVoMLwsJkr60Oun+Jt4OVRtyS5asXKFRIUY4XaEXO8B5WMAz8LY6KQxfvIElZzAq +LQ4aJp40D1scnhW2PxE2GpE2mJrMfyT+WSlu3YWCxiE9dDKbgPVUqpQ4NL2IbZg C/ssxN9jUiXNarvQG9Hci4M11eRseSdP5n7q6nwM6OXF7wGXjtGYcUBJX1dlNXds DuVQD7bCKgXcPoLsMyxLa8xoyqruCImbUSkBW7zvN8jPWsUwP0+gZ7R/HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSc9JZFBfex4FbK8YsIJ1hyLInyMB8GA1UdIwQY MBaAFDRebh1m/AR+Don/BFwtCMoX1V6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTct ZGRkNzNkNTA5ZTEyLzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTctZGRkNzNkNTA5ZTEy LzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAePu2GNS TAUzGBbWNq9/g83dKyxSyuiTh0+ZC6H6AQ7bcbfIvYOnj24fMzek1jAGN/2Gr52b vNpqAiifBlNQwk1ddWkWX9nTlKsrbo6Wlx+TSPFHrycoh8hYuHL0zyX9LOAO3sOK QfkgDp9qLj5f246pdXnNTFYbNfhkqxRVVvFqLkSfqu8Km7flzoh5n/tQElfAEmBv 3oYqNmGfIfMM+nkNMBoHi+tiG1j5GFQIhKhCicWCdGvQjqAdPorSimIrJDLHoReY 5c6vNRM29x/myz2V8KJTIs23eR3j0CrTmUFxmDQjqdUBobeum7HAY7yr1TkK6bEl qI+WbKFKkkbk2w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:46:21 2025 by rpki-client