This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json) Hash identifier: 8nXZtHATRh2pnjEMo8e6IY4uwUmKETCF6T0lbAiyCZw= Subject key identifier: 9F:2A:2E:77:B7:A8:9C:45:43:F6:F9:1C:28:66:E5:89:E5:2B:5C:E2 Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b Certificate serial: 019B3A8F885978DE97F38D0E6CBADC55E853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft Manifest number: 068B Signing time: Sat 20 Dec 2025 07:00:43 +0000 Manifest this update: Sat 20 Dec 2025 07:00:43 +0000 Manifest next update: Sun 21 Dec 2025 07:00:43 +0000 Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: 9+aOXYBPjZfE8vvjYeZoBshCAMg4nbgunDMDRpgHwUo=) 2: SyLhnxhgc8vZc79X1cGjlk1Zi_M.roa (hash: gX8l58xrXAT4li7r86mali9lBzeeH/ZmL4mOVXRHAGY=) 3: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:88:59:78:de:97:f3:8d:0e:6c:ba:dc:55:e8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b Validity Not Before: Dec 20 07:00:43 2025 GMT Not After : Dec 21 07:00:43 2025 GMT Subject: CN=9f2a2e77b7a89c4543f6f91c2866e589e52b5ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:49:d3:7a:eb:9b:e5:22:3c:50:40:4f:49: fe:fe:00:13:16:2f:b4:2a:98:44:e5:f5:7c:f5:eb: 1b:4a:dc:97:1b:f7:6c:de:44:53:db:79:fa:d8:c7: 0f:62:15:a2:83:a7:c8:e5:c7:25:3f:97:0d:20:9d: d0:dd:0d:84:a9:ab:5c:1b:17:29:c0:27:79:e1:b5: 04:d3:77:fa:36:b2:97:04:37:30:a7:d5:0e:22:28: 12:9d:2e:51:49:28:c8:77:1e:0c:cd:ab:22:e4:fe: b8:a6:40:a8:6d:8d:d3:64:93:f5:15:dd:3d:69:65: ab:b5:40:63:d1:29:6d:06:c7:7a:5b:ab:30:f7:f4: 85:88:18:88:51:c8:28:2a:70:04:49:77:63:aa:c2: cd:53:43:7e:41:aa:0a:c6:b7:1c:e6:5a:2c:01:60: 32:00:bf:29:d9:e9:4f:ee:b4:ad:33:51:8b:ca:c5: c9:f2:12:30:e5:5f:3a:08:dc:24:f1:c4:a3:06:7b: be:f9:0b:77:45:4c:2f:19:35:e8:24:bf:93:00:e0: 84:c3:8a:a4:d6:98:f4:e6:7a:30:e4:2b:a9:56:47: e9:49:b2:9b:6a:89:c1:15:4a:72:65:58:0e:90:d3: 1a:8f:e7:85:9e:1d:54:db:84:f8:5b:16:6a:25:cc: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:2E:77:B7:A8:9C:45:43:F6:F9:1C:28:66:E5:89:E5:2B:5C:E2 X509v3 Authority Key Identifier: keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:37:c5:cf:42:3c:cb:4d:c0:0e:b0:6a:00:8b:6e:7b:23:3e: 6a:81:b5:ea:f0:53:f9:68:1f:09:34:c1:da:d2:40:49:41:f8: 57:b5:df:64:fb:94:ce:bb:83:80:c3:8d:b8:ba:ee:54:71:10: 0a:a4:72:b2:90:ec:89:a8:96:70:0f:d7:d8:3a:07:2b:50:8a: 0f:e6:86:b3:e0:d3:15:92:4a:28:63:79:cf:e2:7c:2b:33:56: 98:0c:e6:04:8f:c6:ab:0a:a1:74:97:1c:80:e2:32:84:3a:2c: 9c:06:c3:66:b4:cc:c7:2c:e1:d0:af:ef:30:20:d1:5a:a2:66: 8a:9e:9c:38:cf:d5:a8:c2:7e:e9:c7:ca:b2:65:2d:76:c5:e1: e6:60:c7:82:f4:0c:2d:50:6b:1f:82:3b:b9:18:ca:ad:3e:81: 85:4b:32:4e:f1:8e:28:e7:02:4b:13:3e:8f:5b:23:97:91:72: cf:28:27:4a:62:1d:2c:0d:22:cd:44:6d:1d:2c:f0:37:a8:27: 6e:59:ee:ca:2f:47:24:7a:d5:5d:a3:fa:5d:80:80:0c:af:7d: f1:80:fd:3f:ac:6c:af:d9:f4:e8:72:3b:b9:a4:e9:54:e6:5f: 72:4f:05:6b:12:37:39:78:c7:c0:ed:8c:d5:36:55:5f:b0:fc: 7d:5f:89:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4hZeN6X840ObLrcVehTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0 MWMxMmIwHhcNMjUxMjIwMDcwMDQzWhcNMjUxMjIxMDcwMDQzWjAzMTEwLwYDVQQD Eyg5ZjJhMmU3N2I3YTg5YzQ1NDNmNmY5MWMyODY2ZTU4OWU1MmI1Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW1J03rrm+UiPFBAT0n+/gATFi+0 KphE5fV89esbStyXG/ds3kRT23n62McPYhWig6fI5cclP5cNIJ3Q3Q2EqatcGxcp wCd54bUE03f6NrKXBDcwp9UOIigSnS5RSSjIdx4Mzasi5P64pkCobY3TZJP1Fd09 aWWrtUBj0SltBsd6W6sw9/SFiBiIUcgoKnAESXdjqsLNU0N+QaoKxrcc5losAWAy AL8p2elP7rStM1GLysXJ8hIw5V86CNwk8cSjBnu++Qt3RUwvGTXoJL+TAOCEw4qk 1pj05now5CupVkfpSbKbaonBFUpyZVgOkNMaj+eFnh1U24T4WxZqJcwF3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8qLne3qJxFQ/b5HChm5YnlK1ziMB8GA1UdIwQY MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDfFz0I8 y03ADrBqAItueyM+aoG16vBT+WgfCTTB2tJASUH4V7XfZPuUzruDgMONuLruVHEQ CqRyspDsiaiWcA/X2DoHK1CKD+aGs+DTFZJKKGN5z+J8KzNWmAzmBI/GqwqhdJcc gOIyhDosnAbDZrTMxyzh0K/vMCDRWqJmip6cOM/VqMJ+6cfKsmUtdsXh5mDHgvQM LVBrH4I7uRjKrT6BhUsyTvGOKOcCSxM+j1sjl5FyzygnSmIdLA0izURtHSzwN6gn blnuyi9HJHrVXaP6XYCADK998YD9P6xsr9n06HI7uaTpVOZfck8FaxI3OXjHwO2M 1TZVX7D8fV+JcA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:00 2025 by rpki-client