This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: 0ayeYT3hlzMmciYM22ohUZyb02jGG3gpK8LX7eOmX4I= Subject key identifier: 47:A0:C0:13:A9:FF:A9:FB:4B:63:72:C0:41:4B:F1:3A:48:31:C8:33 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B0DB6ABE5E49423CA060CF78D69F4A21E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1767 Signing time: Thu 11 Dec 2025 14:00:33 +0000 Manifest this update: Thu 11 Dec 2025 14:00:33 +0000 Manifest next update: Fri 12 Dec 2025 14:00:33 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: dc8/5oG7xqIX3TuppEBCd4tSvs2VMrF0FVjGJbUQDRA=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ab:e5:e4:94:23:ca:06:0c:f7:8d:69:f4:a2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Dec 11 14:00:33 2025 GMT Not After : Dec 12 14:00:33 2025 GMT Subject: CN=47a0c013a9ffa9fb4b6372c0414bf13a4831c833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:4d:b5:52:58:1e:d6:dd:2e:91:48:f1:88: b9:fc:a2:90:57:88:e7:3f:12:c8:8f:df:f8:ee:fc: f7:e7:81:04:ed:17:8a:33:e2:fd:0e:bd:49:9b:59: aa:3e:73:cc:b5:60:d4:4e:58:87:14:82:da:24:78: 37:17:65:77:c3:92:0e:79:b1:ed:4f:16:75:b0:ef: 8b:9f:02:12:c9:80:94:ae:76:9b:47:b6:68:b8:6e: cc:51:be:19:45:d9:92:35:1a:ca:f7:9e:2b:10:e5: ae:11:b6:96:c4:4f:9f:cf:52:ea:2b:df:9f:e4:e7: 52:fa:e7:41:0c:0e:f3:2c:e8:a9:65:96:ec:e4:7a: c3:97:e0:c9:52:64:07:99:92:87:3d:22:9f:e0:f1: 12:a6:44:fa:dc:9b:1b:ea:20:d8:e8:41:ef:4c:1e: 22:4f:19:72:83:a8:cd:34:7e:f7:ec:54:94:fb:55: 4e:be:97:4b:1d:04:02:0c:42:ef:ec:33:f2:42:48: eb:31:6c:c8:7e:97:ff:c3:42:66:37:c4:2e:2c:b5: c5:89:be:8e:25:ab:f7:37:4f:e8:81:51:c9:ba:ee: 72:66:eb:c7:3f:fc:b4:b6:97:f1:f3:1a:fd:51:46: fb:4b:4f:b5:30:19:39:8e:8d:3e:eb:6d:bc:2e:77: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:C0:13:A9:FF:A9:FB:4B:63:72:C0:41:4B:F1:3A:48:31:C8:33 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:26:2e:0b:f0:8b:52:a5:d4:dd:cd:53:16:c0:5b:15:ea:59: db:0c:50:7c:25:d8:d3:45:5e:6f:95:34:5b:f1:76:ba:5d:19: df:6e:bc:be:ae:db:18:b7:1d:e0:fb:53:76:19:a5:f3:3e:9a: 19:7a:1c:06:64:6a:e3:85:f3:63:9d:73:ee:f4:c1:a2:1e:78: 3e:c7:c2:25:06:99:23:94:60:4f:42:38:cd:38:63:2f:72:f3: ba:f6:cc:f4:63:55:f8:3b:65:8a:0d:e9:0b:f6:95:33:31:8a: a9:49:93:79:cf:8a:3e:05:84:c7:c9:ef:a5:26:c2:11:22:82: 27:2b:76:16:ef:09:ae:c5:0d:c9:f3:ab:62:19:cb:4f:f8:3a: 4c:ca:44:38:53:19:44:54:a4:8b:b2:f5:2c:ab:a0:5d:5e:37: 0f:0d:4e:8b:7c:a1:c8:12:64:10:4c:53:38:18:36:3c:aa:c5: 3b:7f:b5:ca:d7:d0:95:19:fa:24:29:c0:2c:15:44:5d:97:18: 7a:3b:a5:94:3d:52:8c:db:87:f9:66:ab:33:78:db:06:e1:23: 08:43:99:58:7d:97:1c:c1:dc:df:60:0d:1f:96:36:f9:57:fe: 6c:d3:b9:19:e0:cc:10:88:9c:36:eb:d1:77:ec:99:e1:7f:6a: 47:23:42:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtqvl5JQjygYM941p9KIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUxMjExMTQwMDMzWhcNMjUxMjEyMTQwMDMzWjAzMTEwLwYDVQQD Eyg0N2EwYzAxM2E5ZmZhOWZiNGI2MzcyYzA0MTRiZjEzYTQ4MzFjODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgtNtVJYHtbdLpFI8Yi5/KKQV4jn PxLIj9/47vz354EE7ReKM+L9Dr1Jm1mqPnPMtWDUTliHFILaJHg3F2V3w5IOebHt TxZ1sO+LnwISyYCUrnabR7ZouG7MUb4ZRdmSNRrK954rEOWuEbaWxE+fz1LqK9+f 5OdS+udBDA7zLOipZZbs5HrDl+DJUmQHmZKHPSKf4PESpkT63Jsb6iDY6EHvTB4i Txlyg6jNNH737FSU+1VOvpdLHQQCDELv7DPyQkjrMWzIfpf/w0JmN8QuLLXFib6O Jav3N0/ogVHJuu5yZuvHP/y0tpfx8xr9UUb7S0+1MBk5jo0+6228LnfkzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEegwBOp/6n7S2NywEFL8TpIMcgzMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCYuC/CL UqXU3c1TFsBbFepZ2wxQfCXY00Veb5U0W/F2ul0Z3268vq7bGLcd4PtTdhml8z6a GXocBmRq44XzY51z7vTBoh54PsfCJQaZI5RgT0I4zThjL3LzuvbM9GNV+Dtlig3p C/aVMzGKqUmTec+KPgWEx8nvpSbCESKCJyt2Fu8JrsUNyfOrYhnLT/g6TMpEOFMZ RFSki7L1LKugXV43Dw1Oi3yhyBJkEExTOBg2PKrFO3+1ytfQlRn6JCnALBVEXZcY ejullD1SjNuH+WarM3jbBuEjCEOZWH2XHMHc32ANH5Y2+Vf+bNO5GeDMEIicNuvR d+yZ4X9qRyNCMg== -----END CERTIFICATE-----Generated at Thu Dec 11 19:02:11 2025 by rpki-client