This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json) Hash identifier: BzWFfypqSgq6eyzQ1gzR2iD7GImZt9P4vUBPwz80esM= Subject key identifier: 88:87:0B:24:03:F0:98:1C:19:59:AD:71:0C:C3:26:D2:6B:CC:29:10 Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74 Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74 Certificate serial: 019B3343A5DB37E5D7C4A5297A04B9664976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft Manifest number: 02A1 Signing time: Thu 18 Dec 2025 21:00:29 +0000 Manifest this update: Thu 18 Dec 2025 21:00:29 +0000 Manifest next update: Fri 19 Dec 2025 21:00:29 +0000 Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: Tp/Z3MD2bFL8HV9IQ1i/3fF5EQ+mtHppQp3SF5+iOAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:a5:db:37:e5:d7:c4:a5:29:7a:04:b9:66:49:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74 Validity Not Before: Dec 18 21:00:29 2025 GMT Not After : Dec 19 21:00:29 2025 GMT Subject: CN=88870b2403f0981c1959ad710cc326d26bcc2910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:25:e3:26:bf:6e:d6:9a:6a:38:37:37:1b: 8c:48:ef:59:76:84:1f:ff:8e:0b:1c:0d:7f:57:aa: 47:af:fd:2d:1d:22:ed:8c:0e:c8:97:a8:dc:05:1c: cd:90:cd:32:9e:71:28:77:70:33:ff:c1:3c:3b:c5: d4:4d:16:f5:60:93:8c:55:8f:7e:34:19:76:05:b3: 0d:69:86:b9:1e:d7:e8:16:2f:d7:08:e4:e1:b0:c8: 64:bd:bb:85:51:90:ba:3d:a3:33:ef:6f:ed:9e:dc: c6:85:1a:f4:24:4d:00:00:e2:f4:4c:0a:50:6c:b8: a9:1a:e5:94:8f:a4:db:6e:05:ff:ad:5d:69:09:36: 43:47:70:ab:fc:60:a0:f0:7c:3b:80:86:c9:bd:d3: 2f:e5:9c:9e:1f:90:69:49:c7:c5:61:3b:c3:c5:63: 1f:f2:26:25:25:62:5c:87:57:e8:6e:86:21:3a:56: 52:40:fc:28:f6:c3:40:d4:ed:6d:b7:46:02:ed:3f: 3b:d8:9f:b8:fd:66:00:64:5a:f8:70:23:34:f4:d6: 2a:0e:60:9d:86:0e:60:d4:51:e4:09:51:52:70:3f: 04:ca:17:3d:0e:cd:b2:f6:ce:da:74:ce:aa:0b:59: eb:b2:5a:b3:d2:a8:0d:f7:89:96:fe:3b:3d:01:50: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:87:0B:24:03:F0:98:1C:19:59:AD:71:0C:C3:26:D2:6B:CC:29:10 X509v3 Authority Key Identifier: keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e3:da:c1:15:5a:f3:b3:10:9b:ca:77:1a:06:c7:03:d3:1a: 7f:35:2b:b7:cc:f4:ba:f7:0d:93:15:c9:3e:4c:62:55:18:40: f7:f0:a4:d2:75:56:bb:da:93:2a:e8:b6:c0:92:ab:09:4f:4d: 57:a8:09:02:69:0c:0e:3a:d4:77:3d:85:32:db:27:88:46:eb: 55:cb:4b:30:b7:83:05:86:65:f2:1a:9f:88:75:7d:ca:d4:35: 2d:86:5b:ca:70:9c:c5:54:35:77:9f:b4:7d:52:5f:eb:d5:ee: 0d:85:35:45:35:ba:a1:96:cd:fb:91:a4:c3:70:93:e5:5b:52: 3d:18:81:a0:98:30:5f:0e:96:cf:11:d3:79:08:78:d9:65:fd: b3:e2:1b:f2:20:76:05:25:83:4a:ce:5b:82:ea:53:07:46:4e: 5c:c5:d2:3d:b6:64:4f:1a:77:f2:d1:33:75:34:40:c4:90:6e: 76:25:6e:0a:e0:90:12:55:a2:8c:4d:29:15:43:8b:c4:2e:f6: 64:63:c7:bd:f7:52:f8:1d:6a:ef:ff:6d:e0:66:40:9c:0f:14: ad:05:13:ca:e4:08:dd:7a:5d:fc:4c:6c:b5:06:e5:0d:97:65: ff:f2:1c:13:02:d4:e4:95:df:91:34:9d:85:3c:9d:66:c9:61: 59:70:cf:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ6XbN+XXxKUpegS5Zkl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VkMDU0OWY1YjM1ZGFmYTc0ZDkwYjA0NjgyMDAxNzg1 NDVkNzQwHhcNMjUxMjE4MjEwMDI5WhcNMjUxMjE5MjEwMDI5WjAzMTEwLwYDVQQD Eyg4ODg3MGIyNDAzZjA5ODFjMTk1OWFkNzEwY2MzMjZkMjZiY2MyOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Al4ya/btaaajg3NxuMSO9ZdoQf /44LHA1/V6pHr/0tHSLtjA7Il6jcBRzNkM0ynnEod3Az/8E8O8XUTRb1YJOMVY9+ NBl2BbMNaYa5HtfoFi/XCOThsMhkvbuFUZC6PaMz72/tntzGhRr0JE0AAOL0TApQ bLipGuWUj6TbbgX/rV1pCTZDR3Cr/GCg8Hw7gIbJvdMv5ZyeH5BpScfFYTvDxWMf 8iYlJWJch1foboYhOlZSQPwo9sNA1O1tt0YC7T872J+4/WYAZFr4cCM09NYqDmCd hg5g1FHkCVFScD8Eyhc9Ds2y9s7adM6qC1nrslqz0qgN94mW/js9AVBy0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiHCyQD8JgcGVmtcQzDJtJrzCkQMB8GA1UdIwQY MBaAFDXO0FSfWzXa+nTZCwRoIAF4VF10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODIt ZWZjMTJhOWZkNmUxLzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODItZWZjMTJhOWZkNmUx LzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+PawRVa 87MQm8p3GgbHA9MafzUrt8z0uvcNkxXJPkxiVRhA9/Ck0nVWu9qTKui2wJKrCU9N V6gJAmkMDjrUdz2FMtsniEbrVctLMLeDBYZl8hqfiHV9ytQ1LYZbynCcxVQ1d5+0 fVJf69XuDYU1RTW6oZbN+5Gkw3CT5VtSPRiBoJgwXw6WzxHTeQh42WX9s+Ib8iB2 BSWDSs5bgupTB0ZOXMXSPbZkTxp38tEzdTRAxJBudiVuCuCQElWijE0pFUOLxC72 ZGPHvfdS+B1q7/9t4GZAnA8UrQUTyuQI3Xpd/ExstQblDZdl//IcEwLU5JXfkTSd hTydZslhWXDPGQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:39 2025 by rpki-client