This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json) Hash identifier: AFF/Y2zOaGEh0hLg8KlrAzActIb0tfdtEY5j7A6ORJU= Subject key identifier: DF:AA:CB:68:DA:8A:20:53:AA:2F:E3:12:2E:7E:AE:AA:01:08:64:49 Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29 Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29 Certificate serial: 019B1A28E13B7344C3024029994943DE6BE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft Manifest number: 04A1 Signing time: Sun 14 Dec 2025 00:00:45 +0000 Manifest this update: Sun 14 Dec 2025 00:00:45 +0000 Manifest next update: Mon 15 Dec 2025 00:00:45 +0000 Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: LpbhdqG2sHaPnFElseWWU/bgYE1ZHl1Ni1Nl0xdXCy0=) 2: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (hash: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=) 3: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (hash: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:e1:3b:73:44:c3:02:40:29:99:49:43:de:6b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29 Validity Not Before: Dec 14 00:00:45 2025 GMT Not After : Dec 15 00:00:45 2025 GMT Subject: CN=dfaacb68da8a2053aa2fe3122e7eaeaa01086449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:a4:5d:a0:51:a4:4b:f8:72:42:6f:83:aa: 77:e1:23:8c:36:c6:43:96:c1:f8:db:76:04:5d:d7: 91:f2:71:2f:0a:52:74:f3:f3:3e:44:59:50:63:4a: 15:ef:73:cd:18:1e:b1:cd:8c:bd:eb:3b:b9:b9:1b: 93:a3:ac:1e:de:f2:dc:af:77:57:19:9c:c2:1b:04: b8:57:8f:98:43:11:33:80:62:0f:97:b1:fa:dc:fc: 51:04:62:af:3b:b5:be:23:e0:38:31:54:6f:f6:fb: cf:ee:fc:40:9e:25:0d:48:e8:d8:d0:0c:3c:1c:96: 3d:e2:1c:35:ac:22:7b:56:66:0c:30:03:7f:bd:a0: 05:4d:e7:31:6e:bb:b6:68:cb:e7:69:72:c8:94:ed: 2f:1e:45:4c:e4:7d:05:60:4c:b4:28:de:50:61:68: ce:a4:73:ce:c1:27:73:86:be:b8:18:6d:76:88:95: 38:25:4d:40:c2:bf:7a:43:13:82:b6:8c:cd:5b:98: 04:b8:ad:2c:0e:bc:9e:0e:8e:55:34:f1:c8:91:70: 6f:73:ee:dc:94:d3:29:d1:3f:0a:da:f4:5e:05:eb: 44:23:2c:c4:9e:c9:1a:4b:b5:08:4b:15:d2:13:90: b3:9a:65:c8:86:30:e2:8c:6b:77:f6:aa:88:06:85: 6e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:CB:68:DA:8A:20:53:AA:2F:E3:12:2E:7E:AE:AA:01:08:64:49 X509v3 Authority Key Identifier: keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9f:38:a8:0b:6e:fd:e6:cd:b8:59:9f:15:20:46:82:f5:b3: cc:ff:38:b3:c7:1b:6f:fb:78:ef:ce:45:ee:c4:cd:55:a5:9f: 3c:b6:83:21:73:91:3b:a1:1b:81:01:26:df:bf:e7:1c:83:41: 4e:db:48:5f:b6:9c:a7:18:16:a3:f9:ea:2e:c0:a0:3d:ee:83: a0:81:1f:1a:ca:28:b3:3d:21:8c:ce:eb:34:07:7b:c2:cc:79: 5a:af:f2:04:1b:43:c8:b0:35:5a:e6:a1:4c:53:c6:7a:43:91: f0:b1:e6:3b:e6:ba:0d:91:1b:ee:a5:4f:8f:43:6a:da:69:63: ec:ca:01:03:1c:e1:d3:eb:b5:b2:11:00:57:6d:b4:4b:46:6a: 0f:ec:b1:be:4e:ef:1a:3a:50:01:f6:c5:57:ff:d7:d1:0d:ee: e2:f7:c6:a6:57:f4:71:a5:c2:0f:4d:51:83:16:b8:99:54:a1: 98:32:ee:1d:2e:77:9a:d5:20:da:8f:f7:0f:00:ea:73:ad:87: 57:b6:98:61:e9:43:70:a9:2f:5a:55:a8:af:34:2e:4e:9e:68: 9a:e7:dd:da:4b:3a:96:f6:61:66:ef:d8:3c:7c:27:5c:1a:f1: e0:d3:8d:13:14:d8:0f:6d:26:54:e2:28:9e:15:8c:cb:44:29: 89:40:cc:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKOE7c0TDAkApmUlD3mvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk ZjlkMjkwHhcNMjUxMjE0MDAwMDQ1WhcNMjUxMjE1MDAwMDQ1WjAzMTEwLwYDVQQD EyhkZmFhY2I2OGRhOGEyMDUzYWEyZmUzMTIyZTdlYWVhYTAxMDg2NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukukXaBRpEv4ckJvg6p34SOMNsZD lsH423YEXdeR8nEvClJ08/M+RFlQY0oV73PNGB6xzYy96zu5uRuTo6we3vLcr3dX GZzCGwS4V4+YQxEzgGIPl7H63PxRBGKvO7W+I+A4MVRv9vvP7vxAniUNSOjY0Aw8 HJY94hw1rCJ7VmYMMAN/vaAFTecxbru2aMvnaXLIlO0vHkVM5H0FYEy0KN5QYWjO pHPOwSdzhr64GG12iJU4JU1Awr96QxOCtozNW5gEuK0sDryeDo5VNPHIkXBvc+7c lNMp0T8K2vReBetEIyzEnskaS7UISxXSE5CzmmXIhjDijGt39qqIBoVuVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+qy2jaiiBTqi/jEi5+rqoBCGRJMB8GA1UdIwQY MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt YWYwMTRmYWJmNGJlLzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOp84qAtu /ebNuFmfFSBGgvWzzP84s8cbb/t4785F7sTNVaWfPLaDIXORO6EbgQEm37/nHINB TttIX7acpxgWo/nqLsCgPe6DoIEfGsoosz0hjM7rNAd7wsx5Wq/yBBtDyLA1Wuah TFPGekOR8LHmO+a6DZEb7qVPj0Nq2mlj7MoBAxzh0+u1shEAV220S0ZqD+yxvk7v GjpQAfbFV//X0Q3u4vfGplf0caXCD01Rgxa4mVShmDLuHS53mtUg2o/3DwDqc62H V7aYYelDcKkvWlWorzQuTp5omufd2ks6lvZhZu/YPHwnXBrx4NONExTYD20mVOIo nhWMy0QpiUDMNQ== -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:28 2025 by rpki-client