This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json) Hash identifier: aDTdfhQrVJIcrnfFGxqWiDmX6vFbsl2A1vpY7Tf8S8w= Subject key identifier: A1:3D:F6:78:93:7B:15:C4:B5:F5:2C:5B:66:97:FF:72:B6:04:1C:1D Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Certificate serial: 019B33446589C044454905F147047A7F4EBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft Manifest number: 178C Signing time: Thu 18 Dec 2025 21:01:18 +0000 Manifest this update: Thu 18 Dec 2025 21:01:18 +0000 Manifest next update: Fri 19 Dec 2025 21:01:18 +0000 Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=) 2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: UwCEg/HuDmSlyXEHnpsQEUXrXY7rLLEC1+7SQ3rcPYM=) 3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:65:89:c0:44:45:49:05:f1:47:04:7a:7f:4e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f Validity Not Before: Dec 18 21:01:18 2025 GMT Not After : Dec 19 21:01:18 2025 GMT Subject: CN=a13df678937b15c4b5f52c5b6697ff72b6041c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8e:02:1d:b0:42:df:c4:9c:c6:56:02:0b:22: d1:1d:9c:6b:87:bb:3b:6a:ab:8c:33:a4:b8:81:76: be:50:54:c0:85:4e:24:96:39:f4:ab:06:fe:a2:99: 72:7a:92:04:f1:8a:c5:c3:4e:32:91:94:5f:bb:2f: 89:03:cb:2b:42:cf:56:3d:72:a5:2e:85:bb:93:a0: c4:ee:74:60:8c:f7:c1:12:b7:26:dc:85:c7:87:12: 1f:a9:45:96:90:8d:35:1f:b3:2c:81:99:b7:ec:7a: db:6f:53:f9:e0:16:e8:b8:6a:cf:f1:c2:ad:49:ed: 74:56:f1:bf:8e:c1:1d:9d:b6:48:e6:a8:a4:30:f9: 66:ca:31:64:81:1f:db:29:8a:87:0c:1e:c5:60:66: 3d:65:27:f2:93:08:83:73:9c:2b:cb:43:98:cf:ad: 7f:05:fb:7a:67:b1:dc:d1:53:81:a1:a6:4d:38:73: 1f:8c:43:4b:63:23:9e:9e:c3:4a:2a:8a:f8:5c:06: 01:08:43:95:7c:8c:21:f5:61:d9:14:d1:a8:51:62: 75:e1:c4:fe:6e:02:1f:16:a4:a2:64:11:93:94:69: d0:19:49:2f:65:04:e2:90:a8:04:8e:99:9b:d9:ce: 24:e2:06:a7:9d:ff:32:4f:d6:b5:d4:b8:51:6f:05: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:F6:78:93:7B:15:C4:B5:F5:2C:5B:66:97:FF:72:B6:04:1C:1D X509v3 Authority Key Identifier: keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f0:df:23:e6:a8:0e:7b:41:95:b2:0d:09:c4:5b:ba:1f:06: 42:f8:b5:fc:57:f7:67:9a:92:de:cd:46:73:f2:c8:c4:70:47: fd:e2:22:33:bb:f7:c6:9b:8b:de:91:d7:dd:97:a9:6d:b2:af: ca:fe:56:b4:e6:cc:6b:02:3a:95:22:9f:3d:d0:da:98:5e:46: e0:12:2f:29:78:4b:8c:0a:45:51:9d:30:6a:77:cb:c0:42:9d: ae:37:8b:ed:f1:e9:e8:cc:88:ae:c0:3b:f7:4d:3d:c3:d3:01: 7d:5a:f1:2e:85:9d:2e:e5:99:c2:01:ca:fa:7e:ab:2e:0f:97: 0c:f1:ad:28:20:ed:2c:e4:f8:cd:a8:a0:5e:14:2a:26:d0:10: 23:23:df:4f:bf:a5:28:4e:62:62:36:39:ff:59:a3:d8:c5:42: 68:69:d2:12:98:16:93:9c:da:65:cb:86:20:38:3f:11:e4:31: 6f:5c:5a:87:59:29:7a:ea:64:e6:5c:81:6d:cb:54:48:59:23: e3:da:5e:49:10:84:0b:ae:5c:df:e6:26:fe:ea:48:f3:76:b1: 16:78:30:cf:4c:b0:a0:a3:a6:75:7f:bd:77:ca:3d:e2:ca:ed: 90:9a:3f:8b:86:89:5d:50:82:96:f7:45:bd:5a:1f:81:5f:81: 43:c0:c8:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRGWJwERFSQXxRwR6f067MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi MTM0M2YwHhcNMjUxMjE4MjEwMTE4WhcNMjUxMjE5MjEwMTE4WjAzMTEwLwYDVQQD EyhhMTNkZjY3ODkzN2IxNWM0YjVmNTJjNWI2Njk3ZmY3MmI2MDQxYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA444CHbBC38ScxlYCCyLRHZxrh7s7 aquMM6S4gXa+UFTAhU4kljn0qwb+oplyepIE8YrFw04ykZRfuy+JA8srQs9WPXKl LoW7k6DE7nRgjPfBErcm3IXHhxIfqUWWkI01H7MsgZm37Hrbb1P54BbouGrP8cKt Se10VvG/jsEdnbZI5qikMPlmyjFkgR/bKYqHDB7FYGY9ZSfykwiDc5wry0OYz61/ Bft6Z7Hc0VOBoaZNOHMfjENLYyOensNKKor4XAYBCEOVfIwh9WHZFNGoUWJ14cT+ bgIfFqSiZBGTlGnQGUkvZQTikKgEjpmb2c4k4gannf8yT9a11LhRbwV9MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE99niTexXEtfUsW2aX/3K2BBwdMB8GA1UdIwQY MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt Y2I3Y2JjYTdjMWUwLzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/DfI+ao DntBlbINCcRbuh8GQvi1/Ff3Z5qS3s1Gc/LIxHBH/eIiM7v3xpuL3pHX3ZepbbKv yv5WtObMawI6lSKfPdDamF5G4BIvKXhLjApFUZ0wanfLwEKdrjeL7fHp6MyIrsA7 9009w9MBfVrxLoWdLuWZwgHK+n6rLg+XDPGtKCDtLOT4zaigXhQqJtAQIyPfT7+l KE5iYjY5/1mj2MVCaGnSEpgWk5zaZcuGIDg/EeQxb1xah1kpeupk5lyBbctUSFkj 49peSRCEC65c3+Ym/upI83axFngwz0ywoKOmdX+9d8o94srtkJo/i4aJXVCClvdF vVofgV+BQ8DIgQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:50:00 2025 by rpki-client