This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json) Hash identifier: 8NSLq8xwCsWYxPRq8s2vAWYnuO2VVAP/pJ5FFDHbBuc= Subject key identifier: D8:AD:B8:48:93:C7:DF:1D:34:75:4D:1E:35:FD:B8:C7:EE:2D:70:54 Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Certificate serial: 019B44A6090505737711739FF6D880467744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 06:01:30 +0000 Manifest this update: Mon 22 Dec 2025 06:01:30 +0000 Manifest next update: Tue 23 Dec 2025 06:01:30 +0000 Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: Eyneb8S8/azqtmhxaM1uuaHHbfEJ7a019G51ldE4BKQ=) 2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=) 3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:09:05:05:73:77:11:73:9f:f6:d8:80:46:77:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Validity Not Before: Dec 22 06:01:30 2025 GMT Not After : Dec 23 06:01:30 2025 GMT Subject: CN=d8adb84893c7df1d34754d1e35fdb8c7ee2d7054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:41:a6:05:62:bd:2b:17:f5:38:4d:a0:f1: 64:bd:1e:75:e8:72:68:d3:e3:cc:f3:e7:c8:7b:70: 01:a7:d8:0b:2c:97:ce:84:e4:c4:c8:d6:af:2e:59: d9:b7:d7:64:04:5d:65:d3:05:a2:e7:cb:09:62:ac: 34:2c:f8:22:f6:73:64:7e:7d:41:81:99:9c:15:2e: 18:07:21:15:b4:c5:09:61:82:8e:33:81:e3:d3:8c: db:6f:ea:4f:36:d0:46:d3:87:1a:d7:9b:d3:cc:f5: bb:c2:d4:08:96:47:ce:39:34:44:a3:a5:da:05:0d: 2c:57:3e:3e:21:4c:2f:ee:02:68:d0:1b:6f:27:cd: c9:33:13:a0:73:fa:14:a3:15:5d:d6:65:1c:a6:37: cc:c1:e8:62:cf:91:3a:90:17:38:75:26:3f:5b:6d: 03:2d:f7:97:43:fb:c5:00:02:57:07:de:ff:26:0b: e1:61:5e:fa:76:8a:e8:2f:dd:0b:5f:25:64:9c:fc: 18:b6:97:51:a9:f8:3d:92:4d:39:ec:03:c1:6b:8a: 8a:8b:82:86:ce:0f:5e:e8:f2:4e:40:82:22:e4:23: b5:46:c8:de:74:3f:dc:8b:25:e5:5f:d0:d1:7d:67: 9f:f5:c5:69:38:00:1c:bb:73:7e:b8:f4:0e:6c:7d: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:B8:48:93:C7:DF:1D:34:75:4D:1E:35:FD:B8:C7:EE:2D:70:54 X509v3 Authority Key Identifier: keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4f:91:97:e3:70:44:1f:61:9c:85:65:6c:f5:91:1e:d8:6a: 42:29:11:d3:34:fa:67:05:8b:d9:9f:37:9a:be:47:31:e7:4c: 52:6d:51:f6:d1:bd:a8:d6:7e:17:cd:fe:b7:37:f7:83:8b:de: 6c:37:dd:9c:12:43:83:d3:2b:ba:b1:26:fc:b2:c6:98:c7:7c: 38:89:12:41:3f:0d:ee:b2:0c:8f:81:56:78:ad:d5:8f:c8:e3: 93:1d:f8:75:da:c3:dc:f4:8d:e4:84:21:7a:bb:7a:e9:f5:75: 86:66:df:f6:76:4e:2c:28:93:3c:61:ce:35:11:43:15:5f:bd: 5d:47:6c:a9:0c:7f:fe:cf:f4:18:70:9e:81:21:14:f0:1e:00: 66:6c:f8:cc:ab:7d:14:77:fd:45:11:87:aa:f1:7e:28:0d:e3: 1b:df:13:55:86:ec:9d:5d:0c:68:f4:1a:f5:c1:f9:24:2d:71: 59:01:84:97:c1:15:e7:92:7d:fa:b9:04:8e:79:19:61:fa:1a: ab:37:70:8f:2e:67:f3:51:84:67:d0:11:57:fe:96:b5:84:10: 47:91:e6:bd:34:23:b6:8c:76:11:33:ff:e6:75:1e:29:c1:18: e1:ef:12:21:ce:30:0e:b6:d4:d0:d5:e6:f5:ea:e3:4a:11:99: b0:fb:96:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpgkFBXN3EXOf9tiARndEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj MDgxOTAwHhcNMjUxMjIyMDYwMTMwWhcNMjUxMjIzMDYwMTMwWjAzMTEwLwYDVQQD EyhkOGFkYjg0ODkzYzdkZjFkMzQ3NTRkMWUzNWZkYjhjN2VlMmQ3MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUpBpgVivSsX9ThNoPFkvR516HJo 0+PM8+fIe3ABp9gLLJfOhOTEyNavLlnZt9dkBF1l0wWi58sJYqw0LPgi9nNkfn1B gZmcFS4YByEVtMUJYYKOM4Hj04zbb+pPNtBG04ca15vTzPW7wtQIlkfOOTREo6Xa BQ0sVz4+IUwv7gJo0BtvJ83JMxOgc/oUoxVd1mUcpjfMwehiz5E6kBc4dSY/W20D LfeXQ/vFAAJXB97/JgvhYV76doroL90LXyVknPwYtpdRqfg9kk057APBa4qKi4KG zg9e6PJOQIIi5CO1RsjedD/ciyXlX9DRfWef9cVpOAAcu3N+uPQObH21nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNituEiTx98dNHVNHjX9uMfuLXBUMB8GA1UdIwQY MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfE+Rl+Nw RB9hnIVlbPWRHthqQikR0zT6ZwWL2Z83mr5HMedMUm1R9tG9qNZ+F83+tzf3g4ve bDfdnBJDg9MrurEm/LLGmMd8OIkSQT8N7rIMj4FWeK3Vj8jjkx34ddrD3PSN5IQh ert66fV1hmbf9nZOLCiTPGHONRFDFV+9XUdsqQx//s/0GHCegSEU8B4AZmz4zKt9 FHf9RRGHqvF+KA3jG98TVYbsnV0MaPQa9cH5JC1xWQGEl8EV55J9+rkEjnkZYfoa qzdwjy5n81GEZ9ARV/6WtYQQR5HmvTQjtox2ETP/5nUeKcEY4e8SIc4wDrbU0NXm 9erjShGZsPuWIA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:32:45 2025 by rpki-client