This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json) Hash identifier: n3zuoanOuKxdbGYtexU0Hbbz70vHcjvXIL5y1kUrxO8= Subject key identifier: 54:9D:B1:95:D8:09:CA:8A:81:01:EA:6F:0C:53:5D:86:61:03:4E:5E Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Certificate serial: 019B104A79E9747A0B994C85C7175CAE2814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft Manifest number: 0ABC Signing time: Fri 12 Dec 2025 02:01:14 +0000 Manifest this update: Fri 12 Dec 2025 02:01:14 +0000 Manifest next update: Sat 13 Dec 2025 02:01:14 +0000 Files and hashes: 1: 4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa (hash: VBD+7i2pGd2GcSGT6qMiuwjn3HP93susB4QpbZwY04c=) 2: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=) 3: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: fueOW67nzjCWl5HmapOXDSt4zSmPzKC4Spij3K2WiWI=) 4: OsSemMFuJIzlguBNFL5i99h59ac.roa (hash: wej6G9fzYwe+kpr/KR/AvxkzN1danDVs2QQt2gCzdwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:79:e9:74:7a:0b:99:4c:85:c7:17:5c:ae:28:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Validity Not Before: Dec 12 02:01:14 2025 GMT Not After : Dec 13 02:01:14 2025 GMT Subject: CN=549db195d809ca8a8101ea6f0c535d8661034e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:07:98:7c:73:cf:d6:b8:f1:7e:30:53:61: 6e:4c:f5:ae:18:0c:6f:0b:dd:7a:84:00:1a:6c:8c: 35:cc:ca:40:84:6f:15:53:28:cf:dd:f1:18:5a:76: 68:9f:4a:9f:4e:2b:7b:c5:6c:f0:9f:82:bd:33:9f: 81:93:94:f0:8b:53:01:ad:2a:48:d4:65:8c:b6:0f: a5:bf:97:c0:6c:e0:d5:dc:f1:90:22:cd:6f:20:24: 2d:07:f2:04:d6:78:65:5f:39:09:8e:38:52:9c:e0: 9a:bf:ef:dd:1d:b0:32:06:3a:24:8e:97:67:18:78: e8:83:14:4f:ef:c7:e0:72:e2:05:13:6f:4b:cf:fa: 0c:67:ef:75:65:3e:2a:ce:57:21:b6:9b:ba:43:f1: e6:eb:40:14:86:85:38:a4:dc:fd:43:fd:15:7a:e1: 10:0d:a4:d5:b0:80:e2:8e:4c:fb:e1:89:0c:73:81: 86:41:c5:7c:75:09:d1:b0:a2:d9:c1:e1:90:9d:95: 9a:ea:9a:7d:0e:ea:92:b0:66:ae:9f:6e:bd:64:cf: 4f:b4:18:91:7c:32:6b:15:c6:66:29:0c:cd:c7:e8: 1e:af:ff:ac:32:6f:74:e7:86:e7:52:a4:46:76:e1: 83:64:cb:f9:cf:f0:44:94:ee:51:e9:ea:ca:ba:d9: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9D:B1:95:D8:09:CA:8A:81:01:EA:6F:0C:53:5D:86:61:03:4E:5E X509v3 Authority Key Identifier: keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:87:af:f7:3e:ea:5b:54:d5:b1:43:46:ef:a2:42:78:62:09: 36:54:22:12:cc:a8:49:fc:90:aa:8b:d4:a8:db:6f:5b:f5:c5: d0:1e:39:63:93:16:09:a6:49:9b:96:cf:c4:8b:56:b3:05:b7: 90:51:08:83:f9:ef:c3:02:ca:c8:9b:ca:04:98:b1:06:28:51: 0e:9a:5b:3d:c6:36:68:c5:f4:19:0f:1a:38:7a:fb:6a:e8:c6: 79:4f:81:7a:ae:2d:69:51:85:ba:33:07:47:26:3d:c0:8c:e4: e7:2d:48:6f:9b:2a:bc:e5:9e:e6:66:83:7c:d9:3f:2d:d0:29: a2:12:fb:ea:74:63:a2:42:f7:53:37:8d:94:f7:38:3e:5a:6a: 59:2c:ef:ae:4b:b5:14:b0:00:80:a5:86:bb:2f:60:63:fe:5b: 36:ff:b8:17:b7:a8:91:2b:a8:3a:8b:80:cd:da:d1:ac:a3:b0: 10:59:32:03:c7:2e:77:41:17:f8:8a:3b:e3:c8:95:29:58:80: 86:65:ef:3d:fb:73:a8:b8:5d:39:09:42:84:96:42:23:65:b7: 71:81:92:97:cd:ca:23:d1:7f:5f:fc:01:0a:56:c9:46:b4:3a: 4b:6b:8b:87:04:d5:8d:37:5d:e3:e2:09:5b:ae:97:95:b1:42: 9f:3a:b1:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSnnpdHoLmUyFxxdcrigUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj Y2JlMmIwHhcNMjUxMjEyMDIwMTE0WhcNMjUxMjEzMDIwMTE0WjAzMTEwLwYDVQQD Eyg1NDlkYjE5NWQ4MDljYThhODEwMWVhNmYwYzUzNWQ4NjYxMDM0ZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AAHmHxzz9a48X4wU2FuTPWuGAxv C916hAAabIw1zMpAhG8VUyjP3fEYWnZon0qfTit7xWzwn4K9M5+Bk5Twi1MBrSpI 1GWMtg+lv5fAbODV3PGQIs1vICQtB/IE1nhlXzkJjjhSnOCav+/dHbAyBjokjpdn GHjogxRP78fgcuIFE29Lz/oMZ+91ZT4qzlchtpu6Q/Hm60AUhoU4pNz9Q/0VeuEQ DaTVsIDijkz74YkMc4GGQcV8dQnRsKLZweGQnZWa6pp9DuqSsGaun269ZM9PtBiR fDJrFcZmKQzNx+ger/+sMm9054bnUqRGduGDZMv5z/BElO5R6erKutla1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSdsZXYCcqKgQHqbwxTXYZhA05eMB8GA1UdIwQY MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt OWZlY2JkMjVkNDM0LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0 LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIev9z7q W1TVsUNG76JCeGIJNlQiEsyoSfyQqovUqNtvW/XF0B45Y5MWCaZJm5bPxItWswW3 kFEIg/nvwwLKyJvKBJixBihRDppbPcY2aMX0GQ8aOHr7aujGeU+Beq4taVGFujMH RyY9wIzk5y1Ib5sqvOWe5maDfNk/LdApohL76nRjokL3UzeNlPc4PlpqWSzvrku1 FLAAgKWGuy9gY/5bNv+4F7eokSuoOouAzdrRrKOwEFkyA8cud0EX+Io748iVKViA hmXvPftzqLhdOQlChJZCI2W3cYGSl83KI9F/X/wBClbJRrQ6S2uLhwTVjTdd4+IJ W66XlbFCnzqxfw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:12:29 2025 by rpki-client