This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json) Hash identifier: GHauvS0uBBps6hhfY8w2OLXvU2SHUuqsxtIU7KbAsPU= Subject key identifier: 95:2D:81:17:1D:5F:EE:CE:B0:60:D1:B6:4F:D9:A0:AF:CF:3C:B6:B8 Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Certificate serial: 019B582CA7E74B331F51E335BCA5D87DC72E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft Manifest number: 0C43 Signing time: Fri 26 Dec 2025 01:01:20 +0000 Manifest this update: Fri 26 Dec 2025 01:01:20 +0000 Manifest next update: Sat 27 Dec 2025 01:01:20 +0000 Files and hashes: 1: 43HN-WojVqeLOGbjlvU4KmuDcw8.roa (hash: lA6GODL3wPZINRy3RkLrOMCh7lQspm9tGiMrGo/nCbk=) 2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=) 3: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: s96A9c+VIWyCsO2GLiOrGrFBuhnWhXKSzTgriEclrvc=) 4: NmLjr4D1oVlMUObOTvLM1xAzd4w.roa (hash: 2JPcfWuMTpLj1ICDWdYsPKsfferPa3mavJOhWQcLuVU=) 5: Qv4r9KoCM0llZGGIu0ESO7fsTrk.roa (hash: 2dbd9G4ssUUV7QjZ8jn5D3p3tWBPiALD7SCeLQ3ju+s=) 6: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:2c:a7:e7:4b:33:1f:51:e3:35:bc:a5:d8:7d:c7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Validity Not Before: Dec 26 01:01:20 2025 GMT Not After : Dec 27 01:01:20 2025 GMT Subject: CN=952d81171d5feeceb060d1b64fd9a0afcf3cb6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:be:0c:1e:8b:82:f5:d3:92:f7:9c:19:a1: 98:9f:ba:64:e4:14:aa:be:7a:ec:47:74:6a:1b:73: 79:0c:44:33:56:17:02:87:85:70:a9:6b:de:8e:ad: 76:86:04:79:68:b6:81:b5:bf:2e:96:01:8e:6b:7a: 32:d6:17:14:39:92:da:fc:49:81:cf:ff:0c:4d:ed: 7f:fa:61:a9:ef:0a:b5:93:4d:16:bc:e8:94:b3:bb: f3:26:b1:39:54:de:92:2c:b5:7c:1f:ee:33:05:6e: b0:a1:7a:f6:e9:d9:b1:b0:3e:e8:21:fd:38:34:f0: 9f:f1:dd:40:db:32:55:14:71:d3:30:1f:92:ca:c6: d3:08:73:bf:e5:8b:46:e0:6d:98:93:06:35:d3:87: e2:17:ca:f0:14:7b:ca:c6:10:ea:03:33:92:dc:53: da:02:c5:ad:50:6e:c6:60:30:47:ea:d2:16:7c:1e: 37:2f:a2:6e:e5:e6:91:06:11:91:f8:20:f8:51:ba: 68:03:7c:7d:47:5e:52:05:4d:73:cf:04:43:bf:2f: 0e:45:f4:be:a0:e6:9d:71:6d:de:0a:13:ff:56:ab: cf:d9:15:74:8d:e6:24:c8:da:35:14:d5:54:38:03: 08:eb:a8:6b:ad:19:37:81:1b:d0:e3:28:c1:22:3a: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:81:17:1D:5F:EE:CE:B0:60:D1:B6:4F:D9:A0:AF:CF:3C:B6:B8 X509v3 Authority Key Identifier: keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:81:23:07:46:2f:ac:af:d8:92:d0:df:d7:2d:10:3f:32:cb: e1:14:6b:b7:d5:f1:2b:22:84:f4:4c:00:f2:a1:63:4a:44:a9: f4:6c:3c:e9:3e:c0:84:50:c1:25:2c:7b:50:d7:11:2e:91:6c: 94:7b:71:1d:45:f2:ec:dd:d7:60:9a:1a:0b:0c:ac:26:54:a4: 46:1a:57:80:f7:1d:34:50:f8:e3:cb:41:e8:57:fb:1c:a0:92: b1:f2:fb:0a:f7:6c:06:d1:16:9e:23:40:36:23:08:40:ec:17: 57:67:dc:6d:63:c8:1a:70:7f:6b:f8:38:3d:6b:2a:f3:85:18: 4e:cd:8c:cb:6f:ff:62:62:aa:f3:d5:59:5a:7d:36:2c:99:f5: 76:83:b1:0f:42:0c:16:17:21:b1:ba:34:7b:03:04:37:94:d2: 2c:03:3f:09:ff:e3:a7:d1:12:02:60:e1:a7:e7:ac:9f:36:8e: 59:70:7f:31:2f:79:86:4d:ca:96:a1:15:f8:6f:ac:0e:6c:92: 2d:6b:e7:db:0b:c5:21:65:c4:3e:df:02:30:4a:80:23:7d:00: 82:53:c1:af:a7:d5:d8:4f:30:d3:c5:3e:d9:91:1f:51:6d:dc: 68:69:b9:0f:f5:ad:c5:f4:ad:55:8e:27:4e:71:e1:ed:c1:53: 3f:aa:b6:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYLKfnSzMfUeM1vKXYfccuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl NjFiZDUwHhcNMjUxMjI2MDEwMTIwWhcNMjUxMjI3MDEwMTIwWjAzMTEwLwYDVQQD Eyg5NTJkODExNzFkNWZlZWNlYjA2MGQxYjY0ZmQ5YTBhZmNmM2NiNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2u+DB6LgvXTkvecGaGYn7pk5BSq vnrsR3RqG3N5DEQzVhcCh4VwqWvejq12hgR5aLaBtb8ulgGOa3oy1hcUOZLa/EmB z/8MTe1/+mGp7wq1k00WvOiUs7vzJrE5VN6SLLV8H+4zBW6woXr26dmxsD7oIf04 NPCf8d1A2zJVFHHTMB+SysbTCHO/5YtG4G2YkwY104fiF8rwFHvKxhDqAzOS3FPa AsWtUG7GYDBH6tIWfB43L6Ju5eaRBhGR+CD4UbpoA3x9R15SBU1zzwRDvy8ORfS+ oOadcW3eChP/VqvP2RV0jeYkyNo1FNVUOAMI66hrrRk3gRvQ4yjBIjonXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUtgRcdX+7OsGDRtk/ZoK/PPLa4MB8GA1UdIwQY MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYEjB0Yv rK/YktDf1y0QPzLL4RRrt9XxKyKE9EwA8qFjSkSp9Gw86T7AhFDBJSx7UNcRLpFs lHtxHUXy7N3XYJoaCwysJlSkRhpXgPcdNFD448tB6Ff7HKCSsfL7CvdsBtEWniNA NiMIQOwXV2fcbWPIGnB/a/g4PWsq84UYTs2My2//YmKq89VZWn02LJn1doOxD0IM Fhchsbo0ewMEN5TSLAM/Cf/jp9ESAmDhp+esnzaOWXB/MS95hk3KlqEV+G+sDmyS LWvn2wvFIWXEPt8CMEqAI30AglPBr6fV2E8w08U+2ZEfUW3caGm5D/WtxfStVY4n TnHh7cFTP6q28w== -----END CERTIFICATE-----Generated at Fri Dec 26 09:27:47 2025 by rpki-client