This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json) Hash identifier: CtW3A1yVx3w5c+Oy8xylFmFM6CvA0re3vd43Du/iHfc= Subject key identifier: D9:3F:56:C1:35:FF:2D:4C:31:D0:16:52:A6:AD:EA:66:A9:66:30:1A Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Certificate serial: 019B378ED6815CFA70C09B2B324E7B976CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft Manifest number: 0DED Signing time: Fri 19 Dec 2025 17:01:06 +0000 Manifest this update: Fri 19 Dec 2025 17:01:06 +0000 Manifest next update: Sat 20 Dec 2025 17:01:06 +0000 Files and hashes: 1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=) 2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=) 3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: aJSP0oG5256hP7a4HkNlDJXgSdtvurNs1vsEZBc+Zx4=) 4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=) 5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:d6:81:5c:fa:70:c0:9b:2b:32:4e:7b:97:6c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Validity Not Before: Dec 19 17:01:06 2025 GMT Not After : Dec 20 17:01:06 2025 GMT Subject: CN=d93f56c135ff2d4c31d01652a6adea66a966301a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a3:c8:12:db:47:93:91:73:17:a1:54:f8:84: 6a:b7:34:2e:3d:ee:4d:c3:39:a0:eb:ad:e4:f1:a2: c8:8c:dc:76:36:04:3a:07:87:93:bf:69:0c:a0:75: 8a:6e:3c:3f:d3:86:d3:3c:5e:28:5a:a3:c4:74:49: a1:8f:e0:56:68:d1:2f:33:5f:b3:90:79:e7:b0:54: b2:e9:0b:5f:3d:d8:07:58:f6:10:0a:98:7c:11:36: 6c:09:4a:5d:c4:27:1f:9f:f4:85:c2:56:51:79:7d: d5:a3:29:3d:53:90:fd:41:a2:dc:88:a1:df:f4:86: da:1c:14:db:f1:1b:a5:af:fa:de:72:af:08:12:96: 9a:60:82:f0:22:e8:87:a7:7c:5a:70:3c:32:c4:5f: 53:57:ae:c3:40:75:7a:6a:13:f4:37:af:45:38:e3: e4:f2:ce:f1:0b:04:40:91:5b:03:03:2e:4e:ae:e4: 94:92:d9:f2:af:5a:7d:65:a9:cb:cb:10:d7:f8:bf: 07:da:63:1e:1e:8a:c9:c7:2e:a7:27:f9:38:74:fb: cc:3c:24:42:7d:17:6f:ef:fb:08:6c:1c:a8:b3:e2: 59:89:14:41:7b:06:85:6a:0b:16:f4:01:d2:05:49: 65:7a:a2:93:9f:49:2b:3d:06:54:5a:95:e7:92:2c: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:56:C1:35:FF:2D:4C:31:D0:16:52:A6:AD:EA:66:A9:66:30:1A X509v3 Authority Key Identifier: keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:76:b3:68:91:d3:08:2b:fc:06:84:bf:8a:52:ff:28:ed:ac: 14:29:bf:57:fa:48:f1:6e:e3:d6:5c:d1:15:55:80:a3:92:8b: d6:42:22:89:0e:2f:85:c7:da:c0:20:30:65:b5:06:9d:64:97: 98:1b:ce:b2:69:0b:41:89:6f:7a:e2:68:0f:df:75:94:80:53: 9a:c1:b9:24:07:85:29:dd:cc:8b:d2:54:3b:04:53:59:cd:13: ec:09:9e:93:9b:4e:bc:8b:74:aa:51:7c:c6:64:c3:b6:17:73: b8:73:8d:d4:ec:7e:05:d4:f4:cf:3e:f4:5d:37:57:1c:b6:2f: 03:72:58:8e:10:23:1c:7a:73:bd:2f:9e:f4:18:f0:a9:43:14: 31:b9:81:c8:b4:02:7b:70:8d:4b:87:75:00:21:c7:a9:b0:d8: 01:2e:b7:9a:32:12:3c:5e:27:33:8a:35:02:c7:d5:38:ce:f7: 33:1f:aa:f1:9a:6b:17:8b:3c:2c:ad:3a:ac:34:cc:68:1f:b0: fc:15:60:d5:4e:30:77:77:37:fb:35:be:9e:21:7e:7e:c2:42: 50:43:3f:fb:e5:5d:de:84:f9:ac:77:b9:0a:49:60:6c:f4:ff: 33:5f:e9:7f:41:6b:88:c2:1c:fd:df:d0:ca:44:da:d3:7a:49: 04:56:66:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtaBXPpwwJsrMk57l2y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy YTBlZDYwHhcNMjUxMjE5MTcwMTA2WhcNMjUxMjIwMTcwMTA2WjAzMTEwLwYDVQQD EyhkOTNmNTZjMTM1ZmYyZDRjMzFkMDE2NTJhNmFkZWE2NmE5NjYzMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqPIEttHk5FzF6FU+IRqtzQuPe5N wzmg663k8aLIjNx2NgQ6B4eTv2kMoHWKbjw/04bTPF4oWqPEdEmhj+BWaNEvM1+z kHnnsFSy6QtfPdgHWPYQCph8ETZsCUpdxCcfn/SFwlZReX3Voyk9U5D9QaLciKHf 9IbaHBTb8Rulr/recq8IEpaaYILwIuiHp3xacDwyxF9TV67DQHV6ahP0N69FOOPk 8s7xCwRAkVsDAy5OruSUktnyr1p9ZanLyxDX+L8H2mMeHorJxy6nJ/k4dPvMPCRC fRdv7/sIbByos+JZiRRBewaFagsW9AHSBUlleqKTn0krPQZUWpXnkiwf7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk/VsE1/y1MMdAWUqat6mapZjAaMB8GA1UdIwQY MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt ZmQzYjMwMDJjMGJiLzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXazaJHT CCv8BoS/ilL/KO2sFCm/V/pI8W7j1lzRFVWAo5KL1kIiiQ4vhcfawCAwZbUGnWSX mBvOsmkLQYlveuJoD991lIBTmsG5JAeFKd3Mi9JUOwRTWc0T7Amek5tOvIt0qlF8 xmTDthdzuHON1Ox+BdT0zz70XTdXHLYvA3JYjhAjHHpzvS+e9BjwqUMUMbmByLQC e3CNS4d1ACHHqbDYAS63mjISPF4nM4o1AsfVOM73Mx+q8ZprF4s8LK06rDTMaB+w /BVg1U4wd3c3+zW+niF+fsJCUEM/++Vd3oT5rHe5CklgbPT/M1/pf0FriMIc/d/Q ykTa03pJBFZmcw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:42:57 2025 by rpki-client