This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json) Hash identifier: TEoLeA2IvOo2vS8eQT2sUig6tBIAu0gGoc4cTwCxbWo= Subject key identifier: B0:43:18:FA:4D:0F:D5:64:D9:34:54:1D:86:A0:79:A3:DE:3F:01:03 Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Certificate serial: 019B39462F32D6819C00821F6C0A9113572F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft Manifest number: 03C5 Signing time: Sat 20 Dec 2025 01:00:59 +0000 Manifest this update: Sat 20 Dec 2025 01:00:59 +0000 Manifest next update: Sun 21 Dec 2025 01:00:59 +0000 Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: /HwCWh3dto/3IlPs17KC7XDGKxh1wNCseeLCiADa5a8=) 2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=) 3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:2f:32:d6:81:9c:00:82:1f:6c:0a:91:13:57:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Validity Not Before: Dec 20 01:00:59 2025 GMT Not After : Dec 21 01:00:59 2025 GMT Subject: CN=b04318fa4d0fd564d934541d86a079a3de3f0103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:09:84:4d:bf:8f:fe:2f:7d:d7:1d:78:0a: 83:4e:2a:bd:27:7a:2b:01:ca:da:81:bd:cd:76:df: 42:b5:38:b4:bb:8e:06:33:67:79:0e:16:32:d0:ed: 3f:25:f0:cd:de:bc:0f:99:06:11:30:ca:6f:17:4f: a4:9b:ad:fe:4a:04:4f:9c:1f:be:f4:7e:6e:bf:ab: ce:97:e9:3e:d9:ea:19:ce:52:35:e6:aa:0b:13:83: 90:14:a5:d7:c6:99:8d:10:43:88:c7:ca:d2:41:36: ab:b9:c2:b1:0f:bd:73:82:df:9e:84:32:8c:1c:6a: 68:8f:90:ca:2b:1e:13:67:b9:0d:f0:5b:58:d4:18: db:1a:7f:d1:9b:ee:77:f8:7b:1e:f9:ce:88:59:bb: 6b:90:82:af:d1:95:83:cc:aa:4b:87:35:67:19:9d: 01:ce:f7:b8:aa:bd:a7:f5:27:73:63:48:f7:d6:ea: 18:58:ab:7c:6f:e1:0e:dd:99:2a:aa:c3:c8:35:b9: ee:8b:f6:98:d6:63:45:74:90:e1:2e:b7:8d:52:b3: 83:07:39:a6:00:44:36:79:7b:91:f9:31:43:74:0d: 34:33:06:6a:f5:8f:4b:60:0d:bc:f3:88:81:e5:51: 74:f8:42:12:8d:a0:f3:5b:cb:91:ac:0c:2f:75:df: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:43:18:FA:4D:0F:D5:64:D9:34:54:1D:86:A0:79:A3:DE:3F:01:03 X509v3 Authority Key Identifier: keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:45:13:21:4f:78:52:ce:3b:b3:32:85:a7:d1:95:7e:03:ca: 31:6b:9e:14:f1:dc:ac:bb:dd:85:77:37:48:fd:f1:bc:c4:28: b7:18:81:2b:47:2b:c1:6d:70:18:bc:53:d7:56:2e:43:16:b9: fc:28:49:a8:50:e5:e4:6d:bf:5d:50:01:d4:38:31:4f:90:20: 45:e2:04:c8:58:d7:60:fc:aa:04:9b:d5:05:94:2c:9a:c0:c9: 89:a4:61:a1:05:3a:04:66:61:79:de:8f:fe:29:76:6c:30:3b: b0:49:40:12:33:70:a4:bc:c2:0b:92:4c:32:8b:7d:6e:a4:e2: b3:ad:ce:36:5b:0b:88:ac:29:2a:da:35:ae:60:bd:3e:7d:48: 97:90:3f:41:6f:2a:a8:0c:0d:0b:09:07:98:16:b4:90:aa:c8: 90:5e:03:51:84:55:40:20:d4:15:da:63:5d:bc:a6:7b:73:56: 52:34:21:28:58:66:27:07:cf:25:68:32:dc:0c:0a:e7:3f:ff: e9:3c:cc:c9:89:c6:a0:52:f4:b1:da:49:10:b6:38:04:e5:bb: fd:5a:30:d2:c5:5d:9c:ef:c5:0b:8c:77:ff:dd:6f:01:31:83: d9:78:a6:83:7c:f0:70:5d:e2:bc:a7:53:7c:9c:22:52:44:b2: 88:72:af:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Ri8y1oGcAIIfbAqRE1cvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk NWJhOTYwHhcNMjUxMjIwMDEwMDU5WhcNMjUxMjIxMDEwMDU5WjAzMTEwLwYDVQQD EyhiMDQzMThmYTRkMGZkNTY0ZDkzNDU0MWQ4NmEwNzlhM2RlM2YwMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQJhE2/j/4vfdcdeAqDTiq9J3or Acragb3Ndt9CtTi0u44GM2d5DhYy0O0/JfDN3rwPmQYRMMpvF0+km63+SgRPnB++ 9H5uv6vOl+k+2eoZzlI15qoLE4OQFKXXxpmNEEOIx8rSQTarucKxD71zgt+ehDKM HGpoj5DKKx4TZ7kN8FtY1BjbGn/Rm+53+Hse+c6IWbtrkIKv0ZWDzKpLhzVnGZ0B zve4qr2n9SdzY0j31uoYWKt8b+EO3ZkqqsPINbnui/aY1mNFdJDhLreNUrODBzmm AEQ2eXuR+TFDdA00MwZq9Y9LYA2884iB5VF0+EISjaDzW8uRrAwvdd+htQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBDGPpND9Vk2TRUHYageaPePwEDMB8GA1UdIwQY MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt NjFhNmQ3MmFjNDljLzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEUTIU94 Us47szKFp9GVfgPKMWueFPHcrLvdhXc3SP3xvMQotxiBK0crwW1wGLxT11YuQxa5 /ChJqFDl5G2/XVAB1DgxT5AgReIEyFjXYPyqBJvVBZQsmsDJiaRhoQU6BGZhed6P /il2bDA7sElAEjNwpLzCC5JMMot9bqTis63ONlsLiKwpKto1rmC9Pn1Il5A/QW8q qAwNCwkHmBa0kKrIkF4DUYRVQCDUFdpjXbyme3NWUjQhKFhmJwfPJWgy3AwK5z// 6TzMyYnGoFL0sdpJELY4BOW7/Vow0sVdnO/FC4x3/91vATGD2Ximg3zwcF3ivKdT fJwiUkSyiHKvhA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:44:40 2025 by rpki-client