This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json) Hash identifier: uEU+f5Z1/88J1AY0fad+0EIYjPrHjwxJ+gZTLJLQq9Q= Subject key identifier: F2:A8:B3:85:8B:E7:EE:A4:2A:EB:66:FF:F4:A6:84:2A:41:59:AF:3E Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Certificate serial: 019B5A51F4E94D413300A71EE1F9B87C53E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft Manifest number: 02F1 Signing time: Fri 26 Dec 2025 11:01:19 +0000 Manifest this update: Fri 26 Dec 2025 11:01:19 +0000 Manifest next update: Sat 27 Dec 2025 11:01:19 +0000 Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: P+TzvTzuJyc4dFb/gXzNL4peq4Qt5uCmMPB+6XCm8MA=) 2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=) 3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:f4:e9:4d:41:33:00:a7:1e:e1:f9:b8:7c:53:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6 Validity Not Before: Dec 26 11:01:19 2025 GMT Not After : Dec 27 11:01:19 2025 GMT Subject: CN=f2a8b3858be7eea42aeb66fff4a6842a4159af3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:eb:34:96:ef:5f:73:f8:38:2a:00:69:5e: a5:65:f8:0d:bb:45:7d:d3:eb:d6:d8:8b:43:1a:2b: 08:99:2b:35:d4:6b:e5:bf:a0:5e:3f:c6:1a:1f:f0: 8b:ef:40:5b:e8:5d:3f:02:93:1f:23:d2:88:d9:71: 43:db:cb:5d:de:52:8d:e7:58:d6:fd:5f:2f:a3:e2: 13:b2:2a:84:ad:84:33:23:d8:e9:25:d9:0e:b4:50: 0a:ce:57:6a:8c:38:7e:17:73:00:de:ec:1c:8c:8b: 0a:47:4f:c9:f0:34:8b:26:7f:39:3a:f0:56:4a:51: ac:de:14:91:1d:f7:48:c9:7e:f9:5e:0b:0f:e1:66: fc:74:b8:e9:d7:a8:aa:9c:44:16:06:d2:5a:0d:f5: 11:38:e8:75:a6:00:49:b5:0c:e6:4e:71:3a:81:ae: e0:5e:60:ef:f3:8c:4a:87:74:d0:d2:c3:82:b1:81: 67:38:39:c0:9c:f8:6b:7d:e4:64:d7:70:52:24:0c: 90:2c:ef:07:52:e3:c7:1f:f3:1b:39:1b:71:21:6b: 5e:25:eb:d8:9a:03:5e:71:19:62:bf:43:4b:87:e8: 69:b7:d4:2d:1b:40:d8:00:71:62:13:8d:3d:9e:0e: f6:eb:a4:4a:c1:82:00:a6:ec:08:a8:61:6b:3f:56: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:B3:85:8B:E7:EE:A4:2A:EB:66:FF:F4:A6:84:2A:41:59:AF:3E X509v3 Authority Key Identifier: keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0f:90:61:a1:a1:97:b5:f6:cf:37:5d:28:ca:d0:76:76:7f: d9:4d:67:6c:a2:5b:52:ad:a1:7f:d7:c4:2c:c5:f3:b2:37:98: 22:37:29:6d:15:f1:94:fc:5f:68:d8:68:46:99:43:df:bc:45: e8:fd:9f:02:72:95:a3:07:f4:2d:be:6c:2b:99:1b:6b:26:2e: cc:15:dc:8a:df:cc:c5:96:7f:72:fd:73:a1:5b:89:51:ea:2b: 1c:e2:6d:63:e4:15:41:77:e1:b6:4f:1b:9a:f7:13:7e:13:82: 9a:7a:37:8b:12:49:10:b4:a7:67:71:bc:c2:31:62:eb:f5:56: a3:7c:17:bc:28:1f:bd:6a:4a:10:c8:14:ec:0b:c4:56:b3:97: 30:ef:2d:87:4b:d9:be:38:9d:56:5d:b0:33:b1:19:7e:52:8c: 5c:e6:32:e6:18:24:cf:3f:8a:e1:ad:a9:58:4a:52:e8:e2:2c: 6f:44:b4:09:e4:be:e9:a7:90:82:c3:89:65:86:ba:1e:0b:7e: 58:0e:06:89:e7:25:88:de:71:ce:30:b6:e3:52:ea:dd:11:70: 10:31:a3:fc:28:3f:73:44:e0:70:93:7b:55:76:76:86:03:2a: 80:95:39:63:86:5d:85:12:74:14:9e:dd:fa:e0:72:d3:4c:11: 20:0c:63:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUfTpTUEzAKce4fm4fFPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw ZjNlZDYwHhcNMjUxMjI2MTEwMTE5WhcNMjUxMjI3MTEwMTE5WjAzMTEwLwYDVQQD EyhmMmE4YjM4NThiZTdlZWE0MmFlYjY2ZmZmNGE2ODQyYTQxNTlhZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3PrNJbvX3P4OCoAaV6lZfgNu0V9 0+vW2ItDGisImSs11Gvlv6BeP8YaH/CL70Bb6F0/ApMfI9KI2XFD28td3lKN51jW /V8vo+ITsiqErYQzI9jpJdkOtFAKzldqjDh+F3MA3uwcjIsKR0/J8DSLJn85OvBW SlGs3hSRHfdIyX75XgsP4Wb8dLjp16iqnEQWBtJaDfUROOh1pgBJtQzmTnE6ga7g XmDv84xKh3TQ0sOCsYFnODnAnPhrfeRk13BSJAyQLO8HUuPHH/MbORtxIWteJevY mgNecRliv0NLh+hpt9QtG0DYAHFiE409ng7266RKwYIApuwIqGFrP1ZwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKos4WL5+6kKutm//SmhCpBWa8+MB8GA1UdIwQY MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg+QYaGh l7X2zzddKMrQdnZ/2U1nbKJbUq2hf9fELMXzsjeYIjcpbRXxlPxfaNhoRplD37xF 6P2fAnKVowf0Lb5sK5kbayYuzBXcit/MxZZ/cv1zoVuJUeorHOJtY+QVQXfhtk8b mvcTfhOCmno3ixJJELSnZ3G8wjFi6/VWo3wXvCgfvWpKEMgU7AvEVrOXMO8th0vZ vjidVl2wM7EZflKMXOYy5hgkzz+K4a2pWEpS6OIsb0S0CeS+6aeQgsOJZYa6Hgt+ WA4GiecliN5xzjC241Lq3RFwEDGj/Cg/c0TgcJN7VXZ2hgMqgJU5Y4ZdhRJ0FJ7d +uBy00wRIAxjFA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:26 2025 by rpki-client