This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json) Hash identifier: SWBUcALt8jnrl1OhU+2PeDRn++lv0dOb/tJiATLuDRY= Subject key identifier: F5:77:E8:0D:36:D6:74:C2:DA:CA:1E:37:B1:47:AF:B3:53:8E:D8:21 Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Certificate serial: 019B356968752A57EEC5AD55AC0AA002D2F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft Manifest number: 03C3 Signing time: Fri 19 Dec 2025 07:00:59 +0000 Manifest this update: Fri 19 Dec 2025 07:00:59 +0000 Manifest next update: Sat 20 Dec 2025 07:00:59 +0000 Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: o0IdmqjOfAdZYMZQ957d+kiCzmYn2wIk5Hmt8eTF1Qw=) 2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=) 3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:68:75:2a:57:ee:c5:ad:55:ac:0a:a0:02:d2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Validity Not Before: Dec 19 07:00:59 2025 GMT Not After : Dec 20 07:00:59 2025 GMT Subject: CN=f577e80d36d674c2daca1e37b147afb3538ed821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:f0:0d:e9:d8:17:9d:ce:e9:57:87:2a:fc: a8:02:7c:d2:bc:29:c5:45:3d:a5:0b:4d:2f:ac:99: 7f:60:d4:b8:db:a7:a6:15:d3:44:40:d9:2b:2a:80: 0d:d9:d7:e0:e4:24:0e:4d:14:ed:3b:17:bd:3b:ea: 64:e7:00:8d:bb:ed:43:6c:53:c2:2c:91:07:87:6e: 53:de:8d:f8:05:47:d6:f6:0d:c3:03:42:5d:c7:41: b3:6e:44:51:3f:b9:65:79:df:48:46:05:0b:0f:2a: a8:11:7e:b4:0a:73:59:99:74:83:8d:2b:39:c9:71: 29:04:59:9a:b0:32:72:e2:6a:57:d7:36:ed:cb:f6: 9f:a2:2e:7e:b4:6a:c1:02:4b:3d:6d:41:a0:b6:4d: f0:ee:a7:f5:4c:4f:7a:03:74:10:4a:0f:19:bb:65: 26:c1:15:78:aa:c1:4a:bc:68:f1:00:04:94:b5:16: 84:75:8e:50:07:cd:22:34:71:06:cb:8a:ab:10:7c: 9f:b0:57:47:57:24:57:be:00:3c:a0:38:c6:b9:a2: 9f:58:95:81:5d:c0:f1:a2:48:c5:57:d6:f4:cc:c2: 60:3a:43:97:39:40:e1:fe:14:d4:48:9c:e3:1e:a6: 7a:1c:1f:22:98:1d:c5:d8:9c:d9:2b:86:03:1f:26: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:77:E8:0D:36:D6:74:C2:DA:CA:1E:37:B1:47:AF:B3:53:8E:D8:21 X509v3 Authority Key Identifier: keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7e:ed:ac:bf:fb:9a:34:3e:f5:e7:62:f9:30:ed:7a:e2:ba: ca:75:8e:cf:2c:e6:16:e6:52:7c:e0:8d:dc:86:63:68:e0:dd: 66:63:0e:6b:c2:a6:7c:7d:08:d2:07:59:28:44:4d:3f:28:f0: 29:0b:d2:38:01:23:ec:77:7f:54:c3:d7:b2:20:db:a6:c9:3d: 86:aa:3e:4b:07:08:ed:de:14:8b:81:16:32:fc:e2:70:48:6c: 34:89:fe:11:6e:78:cf:a3:6b:85:e0:71:63:65:3f:c6:af:b8: 24:20:34:7d:06:e8:85:f8:87:cc:d1:fe:6c:48:37:a7:0f:f7: 5a:91:cb:b4:27:04:52:ee:d4:d9:5c:61:1b:fd:61:e1:99:62: 97:e8:a4:8b:9a:96:f6:ca:ea:17:a6:b8:3d:dd:ce:07:11:e4: 35:9f:10:a4:10:29:0b:49:e5:f3:32:ea:16:54:32:78:6b:50: ae:c3:69:06:47:c0:99:17:bb:1d:4c:65:0d:3c:d8:f8:af:1e: a2:24:12:e9:1e:6d:39:67:9c:49:11:64:2d:c1:c6:9b:aa:b7: 5d:98:0f:ad:d4:96:90:b6:bd:bb:5a:21:d0:64:03:68:1a:6c: 27:48:95:1a:8a:90:9f:ff:5d:24:e8:56:45:2a:d6:9a:fd:43: 40:ae:bb:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aWh1Klfuxa1VrAqgAtL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk NWJhOTYwHhcNMjUxMjE5MDcwMDU5WhcNMjUxMjIwMDcwMDU5WjAzMTEwLwYDVQQD EyhmNTc3ZTgwZDM2ZDY3NGMyZGFjYTFlMzdiMTQ3YWZiMzUzOGVkODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUHwDenYF53O6VeHKvyoAnzSvCnF RT2lC00vrJl/YNS426emFdNEQNkrKoAN2dfg5CQOTRTtOxe9O+pk5wCNu+1DbFPC LJEHh25T3o34BUfW9g3DA0Jdx0GzbkRRP7lled9IRgULDyqoEX60CnNZmXSDjSs5 yXEpBFmasDJy4mpX1zbty/afoi5+tGrBAks9bUGgtk3w7qf1TE96A3QQSg8Zu2Um wRV4qsFKvGjxAASUtRaEdY5QB80iNHEGy4qrEHyfsFdHVyRXvgA8oDjGuaKfWJWB XcDxokjFV9b0zMJgOkOXOUDh/hTUSJzjHqZ6HB8imB3F2JzZK4YDHya8wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPV36A021nTC2soeN7FHr7NTjtghMB8GA1UdIwQY MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt NjFhNmQ3MmFjNDljLzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX7trL/7 mjQ+9edi+TDteuK6ynWOzyzmFuZSfOCN3IZjaODdZmMOa8KmfH0I0gdZKERNPyjw KQvSOAEj7Hd/VMPXsiDbpsk9hqo+SwcI7d4Ui4EWMvzicEhsNIn+EW54z6NrheBx Y2U/xq+4JCA0fQbohfiHzNH+bEg3pw/3WpHLtCcEUu7U2VxhG/1h4Zlil+iki5qW 9srqF6a4Pd3OBxHkNZ8QpBApC0nl8zLqFlQyeGtQrsNpBkfAmRe7HUxlDTzY+K8e oiQS6R5tOWecSRFkLcHGm6q3XZgPrdSWkLa9u1oh0GQDaBpsJ0iVGoqQn/9dJOhW RSrWmv1DQK67XQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:54:44 2025 by rpki-client