This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json) Hash identifier: O0AbGBmegS9uDaa78YVn6gkBWh3g++VW4TK6Csw3Xno= Subject key identifier: EC:EF:81:E5:8B:7D:9C:D8:B8:BB:C9:DE:37:67:5D:23:AB:14:5B:A1 Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Certificate serial: 019B164CC08641AA2C423A1A0C75C34AD8E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft Manifest number: 177A Signing time: Sat 13 Dec 2025 06:01:27 +0000 Manifest this update: Sat 13 Dec 2025 06:01:27 +0000 Manifest next update: Sun 14 Dec 2025 06:01:27 +0000 Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: rhJ7OTou+4RmTK93A/im19H4HVeyTP+bgEwGq4168UY=) 2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=) 3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=) 4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=) 5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 06:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:4c:c0:86:41:aa:2c:42:3a:1a:0c:75:c3:4a:d8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Validity Not Before: Dec 13 06:01:27 2025 GMT Not After : Dec 14 06:01:27 2025 GMT Subject: CN=ecef81e58b7d9cd8b8bbc9de37675d23ab145ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:eb:af:5a:14:27:b8:2a:f1:7e:1f:18:e0: 8e:ea:2e:84:5d:ab:fe:76:58:58:e6:e6:7d:e7:1b: 96:95:15:3c:e1:aa:e3:ed:49:25:3b:f5:e3:d2:de: 7c:92:ac:76:db:b9:1d:81:90:8d:a3:89:26:65:16: 65:d5:8d:64:67:67:95:da:56:90:4b:ae:61:8e:4a: 07:65:14:b6:92:48:a5:e6:ef:11:5a:23:89:47:16: 38:3e:c5:84:35:f8:f1:83:99:26:85:52:d8:84:09: 4c:97:11:79:31:ef:02:ed:3c:c3:4e:db:0c:68:c7: 88:1c:3b:a2:f9:ad:44:10:5a:c4:0f:86:21:7a:65: c6:de:b7:37:96:db:9c:96:d4:cb:49:90:84:46:e7: a9:72:06:8a:bc:ac:a8:b5:95:16:b3:6d:0f:3d:03: 40:ab:11:be:5d:b1:36:b6:04:2e:6c:e0:3b:6c:ef: 48:be:5f:20:6f:4e:5e:59:5a:5a:0c:c2:ae:8c:46: 18:bc:d2:dc:de:04:41:2e:8e:a5:b3:db:ee:1a:ee: 9e:b6:ca:cc:90:d2:0c:6c:29:f7:a8:2e:63:e3:01: b7:94:15:e0:25:b3:b5:50:1c:6f:ae:1f:a2:77:63: ca:ef:6b:a0:14:ec:5e:04:4f:cd:4c:52:c7:dc:f9: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EF:81:E5:8B:7D:9C:D8:B8:BB:C9:DE:37:67:5D:23:AB:14:5B:A1 X509v3 Authority Key Identifier: keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:15:cc:10:be:30:53:3a:a8:ad:98:2a:e8:9d:7c:6e:69:5f: 93:af:86:e4:0c:7a:a6:e3:f7:ae:e6:6a:21:0d:93:c2:da:31: 6f:6a:95:cb:23:94:b6:38:79:fc:55:ae:58:e6:39:99:99:15: 95:3d:c7:2a:b5:b3:04:3d:3a:7e:8e:8d:15:70:db:d1:78:bd: e4:bf:95:63:22:1c:26:b4:14:ee:4d:a5:a9:58:87:81:8c:8a: 94:bf:81:86:c4:be:03:10:0d:e7:fa:e4:ce:3b:ab:2d:6e:6a: 91:38:04:70:25:d2:1c:1b:1d:a8:6a:79:cb:a6:6e:87:c9:36: 19:39:b5:f0:aa:90:32:a9:12:ec:da:a6:61:d8:05:d3:5a:43: 62:e1:b7:18:3a:72:c1:f0:52:0b:cd:83:a3:68:4d:e8:08:99: b2:f1:b1:04:a2:b2:5b:75:95:a6:4f:9d:66:4f:0b:92:90:61: 17:cf:f0:47:e0:28:ea:3f:0d:bf:7c:85:99:bf:1f:bf:f9:f9: bf:3c:0e:7e:8a:d8:5a:61:96:30:dc:48:be:6d:fa:89:06:31: 97:aa:e7:2e:e4:17:d9:ba:86:a9:02:3f:20:64:6d:9d:0e:c2: d2:01:6e:76:92:bc:06:64:4e:27:45:54:5f:35:19:83:05:f4: 48:ea:79:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWTMCGQaosQjoaDHXDStjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWFlNjQ2ZWEzNGFkMjY4OGFjYTJmZGQxYTZmMzM0MDM1 NjQ5NWUwHhcNMjUxMjEzMDYwMTI3WhcNMjUxMjE0MDYwMTI3WjAzMTEwLwYDVQQD EyhlY2VmODFlNThiN2Q5Y2Q4YjhiYmM5ZGUzNzY3NWQyM2FiMTQ1YmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMbrr1oUJ7gq8X4fGOCO6i6EXav+ dlhY5uZ95xuWlRU84arj7UklO/Xj0t58kqx227kdgZCNo4kmZRZl1Y1kZ2eV2laQ S65hjkoHZRS2kkil5u8RWiOJRxY4PsWENfjxg5kmhVLYhAlMlxF5Me8C7TzDTtsM aMeIHDui+a1EEFrED4YhemXG3rc3ltucltTLSZCERuepcgaKvKyotZUWs20PPQNA qxG+XbE2tgQubOA7bO9Ivl8gb05eWVpaDMKujEYYvNLc3gRBLo6ls9vuGu6etsrM kNIMbCn3qC5j4wG3lBXgJbO1UBxvrh+id2PK72ugFOxeBE/NTFLH3PnKZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzvgeWLfZzYuLvJ3jdnXSOrFFuhMB8GA1UdIwQY MBaAFDRa5kbqNK0miKyi/dGm8zQDVkleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMt ZjQ5MTIwYmVkNTFjLzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMtZjQ5MTIwYmVkNTFj LzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARXMEL4w UzqorZgq6J18bmlfk6+G5Ax6puP3ruZqIQ2Twtoxb2qVyyOUtjh5/FWuWOY5mZkV lT3HKrWzBD06fo6NFXDb0Xi95L+VYyIcJrQU7k2lqViHgYyKlL+BhsS+AxAN5/rk zjurLW5qkTgEcCXSHBsdqGp5y6Zuh8k2GTm18KqQMqkS7NqmYdgF01pDYuG3GDpy wfBSC82Do2hN6AiZsvGxBKKyW3WVpk+dZk8LkpBhF8/wR+Ao6j8Nv3yFmb8fv/n5 vzwOforYWmGWMNxIvm36iQYxl6rnLuQX2bqGqQI/IGRtnQ7C0gFudpK8BmROJ0VU XzUZgwX0SOp5zg== -----END CERTIFICATE-----Generated at Sat Dec 13 12:44:11 2025 by rpki-client