This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json) Hash identifier: y9WwpA5gMW0XJqRy7HKeyGMOwzCk+dueKSRMD9Y0ZgE= Subject key identifier: 1A:72:9E:9C:65:68:94:91:FA:9D:89:32:76:79:A9:13:45:96:74:CF Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Certificate serial: 019B38A141B4E7E12B339F3993C9D101E229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft Manifest number: 16C5 Signing time: Fri 19 Dec 2025 22:00:50 +0000 Manifest this update: Fri 19 Dec 2025 22:00:50 +0000 Manifest next update: Sat 20 Dec 2025 22:00:50 +0000 Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=) 2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: Z/yj4FGnIl+PcCuJLNjFJHrtmfp/2Qw/YgjxAi5QFz0=) 3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:41:b4:e7:e1:2b:33:9f:39:93:c9:d1:01:e2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Validity Not Before: Dec 19 22:00:50 2025 GMT Not After : Dec 20 22:00:50 2025 GMT Subject: CN=1a729e9c65689491fa9d89327679a913459674cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:a6:7b:08:a7:74:15:af:98:8c:3f:b4:58: 1c:b9:35:16:06:a8:0c:69:fb:aa:6e:e3:bd:04:44: 0c:a9:1d:89:f5:14:80:a3:3b:db:90:e2:c3:21:e1: 93:aa:69:45:04:7f:e9:c6:70:d1:10:51:77:7e:9a: 31:11:e3:49:72:36:f8:0c:f2:dc:c3:c9:26:30:2f: 95:21:6e:50:ca:dd:4d:f2:a5:19:d7:a2:84:c0:75: 72:6e:65:ab:80:90:bf:ca:d9:f8:93:70:bc:e4:de: 84:56:fa:5e:04:ed:c4:5b:04:39:b2:00:b4:ca:c3: 83:49:4e:e7:40:ea:3e:a9:43:de:1f:90:80:83:0d: 6f:09:3e:d4:32:e6:f1:53:11:65:6f:8b:3b:65:5f: 4d:27:91:28:75:b6:f5:be:49:15:19:1b:ee:b5:15: f4:53:03:28:98:36:fd:2a:9f:ec:46:97:52:93:18: bd:df:df:32:71:af:61:32:d5:99:dd:7d:a3:76:e2: 1e:78:c5:90:98:8a:59:f0:af:df:52:0d:60:e6:57: ca:91:cb:ad:08:64:52:08:9a:ba:2e:fe:39:31:e9: a6:c4:10:13:3c:94:fd:35:df:87:8f:eb:9b:38:0e: e6:91:3f:fc:f0:0e:d7:d6:4e:3f:25:fd:26:60:78: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:72:9E:9C:65:68:94:91:FA:9D:89:32:76:79:A9:13:45:96:74:CF X509v3 Authority Key Identifier: keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8b:59:ef:67:f8:0e:2a:50:2e:a6:bf:ad:7c:1a:5f:38:be: 5b:28:03:6c:fc:9c:84:cb:c1:c0:a2:ac:7e:1b:23:5d:5a:56: 04:c8:ae:37:c5:d9:a0:7d:1f:45:15:02:fd:ea:c1:d5:f3:e1: d1:a4:ce:ec:3f:9c:d8:5a:14:85:be:22:3c:14:7a:e5:3f:37: 87:a7:53:34:c8:f1:15:e7:e1:23:61:65:74:d6:b3:87:ba:fa: 21:5c:75:e6:16:8b:ce:6c:c1:d0:6a:0a:13:60:86:cd:1c:7b: d2:80:d3:b3:03:ef:3b:bb:74:70:09:38:9f:fc:e0:41:d6:2a: 35:cb:6d:99:c3:31:32:b9:93:43:4a:22:6c:bc:05:0c:d3:d1: bf:25:1a:8b:11:a9:82:45:87:4b:a1:5c:9b:0a:95:71:c4:f6: 42:04:ee:08:bf:73:3d:5f:d2:a6:c4:16:d8:da:33:7c:0a:1f: ea:a2:96:20:d9:6d:e1:3d:67:6e:69:b8:95:e8:a5:ae:80:3a: b5:40:d0:f5:74:6a:e8:ef:1c:13:28:97:4c:33:b7:b6:e3:76: ad:0d:09:44:9c:c4:9e:7d:6f:75:cd:70:53:f4:4a:32:3f:b7: f0:f3:6c:7b:81:fb:e5:8b:7c:02:68:cb:d7:21:c0:5d:e8:b2: 59:c7:b0:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oUG05+ErM585k8nRAeIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh MGNkYzkwHhcNMjUxMjE5MjIwMDUwWhcNMjUxMjIwMjIwMDUwWjAzMTEwLwYDVQQD EygxYTcyOWU5YzY1Njg5NDkxZmE5ZDg5MzI3Njc5YTkxMzQ1OTY3NGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskOmewindBWvmIw/tFgcuTUWBqgM afuqbuO9BEQMqR2J9RSAozvbkOLDIeGTqmlFBH/pxnDREFF3fpoxEeNJcjb4DPLc w8kmMC+VIW5Qyt1N8qUZ16KEwHVybmWrgJC/ytn4k3C85N6EVvpeBO3EWwQ5sgC0 ysODSU7nQOo+qUPeH5CAgw1vCT7UMubxUxFlb4s7ZV9NJ5Eodbb1vkkVGRvutRX0 UwMomDb9Kp/sRpdSkxi9398yca9hMtWZ3X2jduIeeMWQmIpZ8K/fUg1g5lfKkcut CGRSCJq6Lv45MemmxBATPJT9Nd+Hj+ubOA7mkT/88A7X1k4/Jf0mYHg13QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpynpxlaJSR+p2JMnZ5qRNFlnTPMB8GA1UdIwQY MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYtZ72f4 DipQLqa/rXwaXzi+WygDbPychMvBwKKsfhsjXVpWBMiuN8XZoH0fRRUC/erB1fPh 0aTO7D+c2FoUhb4iPBR65T83h6dTNMjxFefhI2FldNazh7r6IVx15haLzmzB0GoK E2CGzRx70oDTswPvO7t0cAk4n/zgQdYqNcttmcMxMrmTQ0oibLwFDNPRvyUaixGp gkWHS6FcmwqVccT2QgTuCL9zPV/SpsQW2NozfAof6qKWINlt4T1nbmm4leilroA6 tUDQ9XRq6O8cEyiXTDO3tuN2rQ0JRJzEnn1vdc1wU/RKMj+38PNse4H75Yt8AmjL 1yHAXeiyWcewHw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:11:05 2025 by rpki-client