This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json) Hash identifier: HnyJd/THPlcjFMJnpMhp88tl1NuRjZYGmDH2qd3cbmw= Subject key identifier: C1:55:A2:93:D8:79:7F:52:27:19:2C:3B:FD:B0:33:25:BD:C7:2E:0B Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Certificate serial: 019B2B8B272B9869E96A1F08B52AA43185B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft Manifest number: 1223 Signing time: Wed 17 Dec 2025 09:01:38 +0000 Manifest this update: Wed 17 Dec 2025 09:01:38 +0000 Manifest next update: Thu 18 Dec 2025 09:01:38 +0000 Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=) 2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=) 3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: t8Fb2Kv21kHbnbkTrQfzgCCBBN6WMNI84/TXNkpAUTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:27:2b:98:69:e9:6a:1f:08:b5:2a:a4:31:85:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Validity Not Before: Dec 17 09:01:38 2025 GMT Not After : Dec 18 09:01:38 2025 GMT Subject: CN=c155a293d8797f5227192c3bfdb03325bdc72e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:d2:77:f8:45:fc:9a:ba:70:70:8b:ea:0a: fb:b6:76:9c:97:ae:75:a2:84:66:c1:ee:af:b0:4e: 5a:12:7b:10:24:be:8a:ed:80:c6:e5:6a:d0:f5:28: 67:c5:a1:a3:17:fe:60:e5:b9:8d:69:7e:df:61:ce: 8c:6c:ed:38:c6:9d:e0:e6:43:82:ee:d5:0d:ba:4c: 55:4f:73:1d:b4:31:34:6e:2c:5b:91:dc:19:90:8e: c5:13:4b:a3:25:5c:96:30:b7:c3:9d:73:45:b0:6f: 22:ba:0d:89:13:b3:c7:c5:01:63:5a:ff:36:fb:48: 20:a5:3c:fd:45:80:3f:fd:81:de:10:73:52:fa:d4: c0:94:45:14:d7:11:fb:7b:c5:92:e5:0e:31:a5:54: 3b:ec:99:3b:4f:b6:38:d3:e5:d0:cc:bb:22:74:aa: 1d:cb:af:36:a9:f4:e2:87:79:84:29:cb:77:d6:97: 20:12:b7:e3:83:ae:d8:3e:f9:89:b8:dd:92:b1:b5: fd:9c:a9:e8:ce:84:2a:77:03:c9:db:af:46:4f:89: fa:c9:93:ba:1f:b6:18:bc:54:2c:75:10:51:41:d0: 4c:6f:c5:6d:e2:20:93:fe:49:42:82:9c:33:ac:5f: 96:1b:53:2a:4f:3e:0f:17:3b:3a:e0:3b:55:56:d2: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:55:A2:93:D8:79:7F:52:27:19:2C:3B:FD:B0:33:25:BD:C7:2E:0B X509v3 Authority Key Identifier: keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:41:a9:c2:b7:b5:2f:39:f3:36:19:b1:59:81:01:86:c9:6e: 99:9f:c0:16:1a:3e:c4:41:90:b5:92:4e:4b:9b:33:aa:91:51: bb:02:f8:34:79:d3:14:d3:03:22:83:ed:73:f1:ab:c5:93:a3: 23:c2:43:b6:85:c7:2d:2f:e4:5a:a0:54:6a:5a:e7:5c:8f:2d: bb:f4:b8:37:89:bc:ad:bc:47:db:c9:74:bd:09:6f:56:92:ee: fa:ed:f2:bc:e6:ca:f1:4a:5a:01:ab:17:37:43:3a:f5:1e:79: 11:f8:b7:b4:7e:e3:97:1d:a0:e7:55:07:ee:bb:7f:b7:fb:ef: 7b:7c:7f:1e:bd:f6:82:9e:a3:c8:a3:94:a9:9e:ee:e7:c3:60: cf:bf:a9:9a:2d:5c:01:2f:41:54:21:67:56:b2:25:db:57:4a: 8e:cd:80:28:a4:c3:57:6d:88:e0:10:8c:2f:94:a3:e0:d0:d2: b6:cd:7a:97:34:c8:48:d1:d9:49:e6:79:12:ea:f5:c9:f8:bd: f0:05:20:38:c5:3b:4f:7b:27:be:ae:e5:94:74:f7:0a:7a:3d: 62:36:37:d3:bb:a3:5a:28:08:03:fd:38:d8:de:6d:2e:3f:b4: af:37:13:ea:48:82:68:69:45:d8:8a:cd:a5:8e:d6:d2:01:b5: fa:5e:57:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriycrmGnpah8ItSqkMYW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy YWQ0ODEwHhcNMjUxMjE3MDkwMTM4WhcNMjUxMjE4MDkwMTM4WjAzMTEwLwYDVQQD EyhjMTU1YTI5M2Q4Nzk3ZjUyMjcxOTJjM2JmZGIwMzMyNWJkYzcyZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKnSd/hF/Jq6cHCL6gr7tnacl651 ooRmwe6vsE5aEnsQJL6K7YDG5WrQ9ShnxaGjF/5g5bmNaX7fYc6MbO04xp3g5kOC 7tUNukxVT3MdtDE0bixbkdwZkI7FE0ujJVyWMLfDnXNFsG8iug2JE7PHxQFjWv82 +0ggpTz9RYA//YHeEHNS+tTAlEUU1xH7e8WS5Q4xpVQ77Jk7T7Y40+XQzLsidKod y682qfTih3mEKct31pcgErfjg67YPvmJuN2SsbX9nKnozoQqdwPJ269GT4n6yZO6 H7YYvFQsdRBRQdBMb8Vt4iCT/klCgpwzrF+WG1MqTz4PFzs64DtVVtI31wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFVopPYeX9SJxksO/2wMyW9xy4LMB8GA1UdIwQY MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt NDA4NThiOTVmY2Y1LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1 LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkGpwre1 LznzNhmxWYEBhslumZ/AFho+xEGQtZJOS5szqpFRuwL4NHnTFNMDIoPtc/GrxZOj I8JDtoXHLS/kWqBUalrnXI8tu/S4N4m8rbxH28l0vQlvVpLu+u3yvObK8UpaAasX N0M69R55Efi3tH7jlx2g51UH7rt/t/vve3x/Hr32gp6jyKOUqZ7u58Ngz7+pmi1c AS9BVCFnVrIl21dKjs2AKKTDV22I4BCML5Sj4NDSts16lzTISNHZSeZ5Eur1yfi9 8AUgOMU7T3snvq7llHT3Cno9YjY307ujWigIA/042N5tLj+0rzcT6kiCaGlF2IrN pY7W0gG1+l5XYw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:10:06 2025 by rpki-client