This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json) Hash identifier: B+WYhijI/9JBHpxB3BYxtroTcFfSTtlB+4H8OsY7LAs= Subject key identifier: 82:AC:7D:34:85:38:47:2F:01:F1:88:6C:86:46:70:74:26:B2:59:D8 Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74 Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074 Certificate serial: 019B1C175DAA1C3F38A035E727E60EBBFFC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 09:00:51 +0000 Manifest this update: Sun 14 Dec 2025 09:00:51 +0000 Manifest next update: Mon 15 Dec 2025 09:00:51 +0000 Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=) 2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=) 3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: fH7Jr0CEhQNXVMy04pA4TZjh+JII5iNWX+5CFHZS85M=) 4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:5d:aa:1c:3f:38:a0:35:e7:27:e6:0e:bb:ff:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074 Validity Not Before: Dec 14 09:00:51 2025 GMT Not After : Dec 15 09:00:51 2025 GMT Subject: CN=82ac7d348538472f01f1886c8646707426b259d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:9c:1e:ac:ac:72:af:cc:6c:70:6d:fd:cf: db:63:cc:53:db:3d:3f:68:41:76:6b:09:d0:26:4f: cc:6c:1c:92:4f:76:aa:bf:4f:5d:fb:9d:dd:2b:97: 7a:07:68:e1:9f:27:9c:81:95:32:b2:be:3e:3b:dc: 33:4e:b9:60:77:29:73:10:e4:8f:d4:10:59:46:76: 60:02:33:4f:c7:e9:10:c0:89:fc:a4:06:51:c6:3c: 1b:72:6d:f5:8a:06:3e:4b:5d:20:77:5f:5f:25:17: ad:6f:7b:da:4f:08:4c:9b:02:42:f6:66:95:d9:31: 1c:e6:00:29:9e:2d:c3:23:b9:5b:9d:a9:59:c2:66: da:1b:90:63:9d:d8:2a:9a:60:f8:5e:d8:f1:5b:e8: 5b:32:48:d4:8d:b4:2e:46:f6:5f:e6:94:fa:b1:ac: dc:be:be:d9:58:95:92:4b:04:7b:a5:95:a4:14:fe: 23:86:3b:93:36:aa:57:7e:e4:78:1a:59:55:26:f0: 68:4c:7b:f3:20:d2:84:36:b0:3a:1d:14:cb:e7:85: fc:98:ad:44:fe:27:ff:9d:fd:98:44:b3:3e:d4:05: 6d:70:61:6f:1e:fa:d0:b4:66:7b:d4:10:2d:08:2e: 95:ef:50:19:c4:af:22:f4:7a:16:b4:16:3f:78:11: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AC:7D:34:85:38:47:2F:01:F1:88:6C:86:46:70:74:26:B2:59:D8 X509v3 Authority Key Identifier: keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:00:60:9c:0a:ca:06:65:d2:77:07:82:76:fd:78:a3:6f:62: dd:9c:b5:90:29:db:d0:81:19:f5:ed:5b:d7:12:53:e9:37:65: fe:22:5e:f7:6b:a7:3f:f8:73:90:cd:19:48:a8:0a:65:f9:03: 2c:09:72:ee:70:7a:93:02:ff:74:d3:60:78:5c:18:0f:38:ec: 84:be:fd:bc:d6:30:29:00:00:e5:88:f7:90:b8:c7:54:fb:84: 5d:d2:df:ab:d9:d0:17:98:97:8c:68:96:fe:7d:55:7f:e8:ae: be:e1:96:96:f2:6f:5a:6a:97:ad:3d:f9:11:91:c4:92:19:79: 51:33:ef:5f:68:bc:42:c4:a1:9a:65:62:5c:a0:c9:a2:63:77: 7a:45:ab:2b:7a:a8:96:79:29:ca:17:ec:6c:3b:f0:ec:64:74: f5:f8:ab:12:35:2c:a2:fb:1e:ca:f6:77:7d:c3:15:d3:ee:42: c3:ef:3e:a9:40:ae:63:35:96:08:16:64:1e:73:0c:56:4d:31: 26:18:1a:b9:9a:9e:ce:88:ab:d0:0d:bd:f3:95:76:ab:65:e7: e9:91:3e:63:a6:12:cf:f2:4e:0c:3a:62:41:89:27:2b:52:c9: a2:57:35:c1:28:ff:15:4b:9a:6c:ab:81:64:a5:88:46:26:fc: 9b:03:7b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF12qHD84oDXnJ+YOu//JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NTc0YmU2YWU3NmNkNTIzYjMzNzg3Y2ZiZGI2OTI2NDI2 M2QwNzQwHhcNMjUxMjE0MDkwMDUxWhcNMjUxMjE1MDkwMDUxWjAzMTEwLwYDVQQD Eyg4MmFjN2QzNDg1Mzg0NzJmMDFmMTg4NmM4NjQ2NzA3NDI2YjI1OWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTGcHqyscq/MbHBt/c/bY8xT2z0/ aEF2awnQJk/MbByST3aqv09d+53dK5d6B2jhnyecgZUysr4+O9wzTrlgdylzEOSP 1BBZRnZgAjNPx+kQwIn8pAZRxjwbcm31igY+S10gd19fJRetb3vaTwhMmwJC9maV 2TEc5gApni3DI7lbnalZwmbaG5BjndgqmmD4XtjxW+hbMkjUjbQuRvZf5pT6sazc vr7ZWJWSSwR7pZWkFP4jhjuTNqpXfuR4GllVJvBoTHvzINKENrA6HRTL54X8mK1E /if/nf2YRLM+1AVtcGFvHvrQtGZ71BAtCC6V71AZxK8i9HoWtBY/eBFrZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKsfTSFOEcvAfGIbIZGcHQmslnYMB8GA1UdIwQY MBaAFDZXS+auds1SOzN4fPvbaSZCY9B0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZTFkOTQtMTg1NC00NzNkLTg3NTMt MThkZWQ4MGI0YjVkLzEvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83ZTFkOTQtMTg1NC00NzNkLTg3NTMtMThkZWQ4MGI0YjVk LzEvTmxkTDVxNTJ6Vkk3TTNoOC05dHBKa0pqMEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgBgnArK BmXSdweCdv14o29i3Zy1kCnb0IEZ9e1b1xJT6Tdl/iJe92unP/hzkM0ZSKgKZfkD LAly7nB6kwL/dNNgeFwYDzjshL79vNYwKQAA5Yj3kLjHVPuEXdLfq9nQF5iXjGiW /n1Vf+iuvuGWlvJvWmqXrT35EZHEkhl5UTPvX2i8QsShmmViXKDJomN3ekWrK3qo lnkpyhfsbDvw7GR09firEjUsovseyvZ3fcMV0+5Cw+8+qUCuYzWWCBZkHnMMVk0x JhgauZqezoir0A2985V2q2Xn6ZE+Y6YSz/JODDpiQYknK1LJolc1wSj/FUuabKuB ZKWIRib8mwN7tw== -----END CERTIFICATE-----Generated at Sun Dec 14 12:26:52 2025 by rpki-client