This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json) Hash identifier: mSJJhszTOD4YXz6nk0S/VyjAdWbeL54CRdYXIs6+e0A= Subject key identifier: E6:D6:22:EA:41:76:20:1B:B2:C0:C6:6C:B8:C8:AE:E5:99:2C:BF:0D Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5 Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5 Certificate serial: 019B3F1137D72D8D2B1A87E4FB2B76758CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft Manifest number: 06B2 Signing time: Sun 21 Dec 2025 04:00:51 +0000 Manifest this update: Sun 21 Dec 2025 04:00:51 +0000 Manifest next update: Mon 22 Dec 2025 04:00:51 +0000 Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=) 2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: TGfBYMuhgCP0jRsIajitUEkFVxGUwwRWSdHWMtKPsEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:37:d7:2d:8d:2b:1a:87:e4:fb:2b:76:75:8c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5 Validity Not Before: Dec 21 04:00:51 2025 GMT Not After : Dec 22 04:00:51 2025 GMT Subject: CN=e6d622ea4176201bb2c0c66cb8c8aee5992cbf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:51:e0:f5:cc:de:97:6d:80:3c:12:63:bf: b4:f9:71:6f:00:2d:30:e8:a6:9b:6c:ad:1f:ac:3f: 37:0e:6b:6e:d9:fe:d5:f2:29:b9:c9:c6:aa:b0:6b: ba:33:cb:0e:ab:01:af:6d:52:7f:67:4f:d9:3a:09: 2d:66:1d:aa:81:78:8d:fa:82:5f:6a:06:ba:9c:27: c9:42:07:77:10:3d:63:1c:29:88:f4:8e:75:e9:ab: b3:88:19:a0:88:89:68:06:e9:d1:77:79:31:2e:bd: 44:37:85:1c:e1:27:b8:58:60:ad:78:63:23:86:6b: 92:07:d5:f8:e8:43:ab:93:55:fa:5f:91:67:57:69: 46:8e:54:79:38:fd:8c:30:3f:24:ae:88:4e:01:23: 7d:01:c6:12:73:a0:6e:d8:42:13:3a:51:e3:af:fe: 63:26:b0:3d:ee:39:7c:f8:46:0e:94:3b:d6:f0:ad: a2:52:86:c5:f8:67:df:2f:25:ec:be:f0:32:94:89: 78:a0:57:db:5c:df:62:24:67:81:a2:51:2f:6c:c7: ee:83:0b:77:f2:d9:50:b8:70:80:ba:b2:63:67:1e: 65:6d:4e:98:b9:37:d8:ae:7e:71:0b:06:bc:98:32: 60:79:3a:ff:c8:79:3e:62:82:40:0a:56:4d:84:9c: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D6:22:EA:41:76:20:1B:B2:C0:C6:6C:B8:C8:AE:E5:99:2C:BF:0D X509v3 Authority Key Identifier: keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:21:06:ae:38:31:77:7b:e7:90:35:c8:71:2a:c9:a8:d2:45: ff:05:0c:cb:f9:e5:f8:b2:c9:1c:4f:94:0b:77:cb:79:3e:bb: 25:72:ec:60:ab:bf:da:c9:91:2a:38:4b:db:cf:bb:2e:9d:48: 93:28:5c:62:03:6d:85:ef:ef:75:97:e4:12:fd:8e:7f:45:c8: 26:1f:fc:86:6b:44:81:73:ed:cb:02:08:2b:0e:f8:7e:4f:5d: 98:48:d8:8c:c5:cc:5a:fa:0d:53:d5:a6:83:52:65:4a:15:0e: e3:88:6c:33:5a:3a:b7:23:fc:44:32:7b:ff:da:d0:0d:d1:f1: e5:0f:3f:2c:54:ca:e7:38:57:99:ee:42:19:15:e6:7b:43:ae: 79:a9:03:83:20:bf:96:b2:c3:20:89:f1:cf:07:5e:18:71:88: 50:56:ab:91:ec:3a:cc:d8:e7:d2:fd:ab:07:51:9a:c5:29:31: 1c:bd:5c:e1:9a:67:05:37:60:b3:56:13:2f:dd:79:e3:03:2a: be:5c:0a:13:5e:98:3c:ef:0b:e3:1e:05:32:e2:dd:9f:34:70: 90:66:d6:0f:8e:fb:4b:d4:33:2e:81:84:ac:88:07:2d:2c:7e: 25:0d:d6:4a:4c:4c:bb:5d:a3:a1:86:c6:bb:ea:f2:78:eb:bf: df:44:95:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETfXLY0rGofk+yt2dYy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzcwOTVlMDQ1OTg2MDUzYjliM2U4Nzg5MDM2NzI2ODM3 ZGQxZjUwHhcNMjUxMjIxMDQwMDUxWhcNMjUxMjIyMDQwMDUxWjAzMTEwLwYDVQQD EyhlNmQ2MjJlYTQxNzYyMDFiYjJjMGM2NmNiOGM4YWVlNTk5MmNiZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxdR4PXM3pdtgDwSY7+0+XFvAC0w 6KabbK0frD83Dmtu2f7V8im5ycaqsGu6M8sOqwGvbVJ/Z0/ZOgktZh2qgXiN+oJf aga6nCfJQgd3ED1jHCmI9I516auziBmgiIloBunRd3kxLr1EN4Uc4Se4WGCteGMj hmuSB9X46EOrk1X6X5FnV2lGjlR5OP2MMD8krohOASN9AcYSc6Bu2EITOlHjr/5j JrA97jl8+EYOlDvW8K2iUobF+GffLyXsvvAylIl4oFfbXN9iJGeBolEvbMfugwt3 8tlQuHCAurJjZx5lbU6YuTfYrn5xCwa8mDJgeTr/yHk+YoJAClZNhJy6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObWIupBdiAbssDGbLjIruWZLL8NMB8GA1UdIwQY MBaAFDbHCV4EWYYFO5s+h4kDZyaDfdH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3Yjgt NmQ4YTY5YTBhZDQzLzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3YjgtNmQ4YTY5YTBhZDQz LzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiEGrjgx d3vnkDXIcSrJqNJF/wUMy/nl+LLJHE+UC3fLeT67JXLsYKu/2smRKjhL28+7Lp1I kyhcYgNthe/vdZfkEv2Of0XIJh/8hmtEgXPtywIIKw74fk9dmEjYjMXMWvoNU9Wm g1JlShUO44hsM1o6tyP8RDJ7/9rQDdHx5Q8/LFTK5zhXme5CGRXme0OueakDgyC/ lrLDIInxzwdeGHGIUFarkew6zNjn0v2rB1GaxSkxHL1c4ZpnBTdgs1YTL9154wMq vlwKE16YPO8L4x4FMuLdnzRwkGbWD477S9QzLoGErIgHLSx+JQ3WSkxMu12joYbG u+ryeOu/30SVEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:58 2025 by rpki-client