This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json) Hash identifier: vdqu3JDgSe3dzemlR5qU5weYJVyQ9k9IMR5Wo4Sc8WE= Subject key identifier: 5A:46:65:6D:99:56:DE:FA:CF:65:51:F8:9F:B7:E9:2C:1B:7E:1A:73 Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Certificate serial: 019B0FA53A6803D31102E36C28B12D7BA6CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft Manifest number: 0F21 Signing time: Thu 11 Dec 2025 23:00:44 +0000 Manifest this update: Thu 11 Dec 2025 23:00:44 +0000 Manifest next update: Fri 12 Dec 2025 23:00:44 +0000 Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=) 2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=) 3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: 6CKUfCw/u0g9lj+ggH63uQjwpTpYIK1oRAM7dZwMi0Q=) 4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:3a:68:03:d3:11:02:e3:6c:28:b1:2d:7b:a6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518 Validity Not Before: Dec 11 23:00:44 2025 GMT Not After : Dec 12 23:00:44 2025 GMT Subject: CN=5a46656d9956defacf6551f89fb7e92c1b7e1a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:ac:f7:36:6f:43:db:3e:9a:e1:a8:db:ef: b4:4f:15:68:4c:62:f7:c5:b1:a3:07:9e:03:eb:c0: de:9a:93:c9:15:ca:4a:5c:6a:ef:98:44:c3:18:87: be:fd:d4:c2:9f:31:81:e9:32:fb:52:dd:af:6e:35: 9e:e8:dc:6f:1d:5e:b3:6a:6a:67:84:a6:1b:55:2b: 9b:fc:a5:a1:23:bb:71:a4:48:68:00:81:c2:2b:78: 09:c2:4d:77:95:2c:85:4a:50:9f:37:f9:44:3d:85: 60:66:8b:c6:45:80:9d:6e:ac:b9:59:f7:55:7a:84: 05:0d:47:9c:4f:e5:e4:75:1c:01:ae:05:df:e5:c1: 7d:33:98:68:a5:3f:75:e2:c4:29:75:44:ed:7c:9c: 62:e7:cd:c1:26:a4:de:ee:60:41:7e:81:1d:ac:68: dd:2c:3f:6c:6d:a5:b1:f9:b0:91:0b:86:c6:9f:39: 7c:3e:8e:65:cf:5d:47:bc:81:7b:6a:ee:80:74:d4: 38:7c:b2:e3:2c:67:cd:2b:a4:f1:ac:0c:95:1f:81: c7:15:13:26:af:0e:d9:b1:a0:f7:41:f9:ab:65:c0: ba:be:e5:8e:ba:d6:ac:4c:83:91:e1:2f:70:cf:57: 4b:f2:3e:85:bb:11:eb:28:10:1a:97:25:dd:46:75: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:65:6D:99:56:DE:FA:CF:65:51:F8:9F:B7:E9:2C:1B:7E:1A:73 X509v3 Authority Key Identifier: keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:dd:d4:6f:7b:64:87:fe:26:13:63:99:b6:86:d2:e8:49:36: 56:1b:9a:dc:f3:20:69:29:79:34:b8:0f:5b:22:23:8e:4a:49: 17:2f:11:57:4d:88:88:5a:2d:9c:3d:02:ec:ba:6f:c7:9a:a5: 0d:88:5c:b4:b2:33:6d:1a:be:0d:bc:8d:11:43:61:fe:e7:99: f7:e6:52:18:3c:85:53:1a:eb:5a:04:a6:23:bd:ea:bf:30:a8: fc:64:ba:2d:bb:f2:1d:a1:c3:00:8f:31:14:e7:3d:63:80:40: 36:51:2f:c1:ef:dd:9c:3f:b3:4e:58:4b:f6:ed:19:a7:4d:87: 6e:f8:c0:ed:60:4f:18:48:75:94:42:46:84:81:f4:b5:04:b3: fb:dc:cb:a6:89:69:76:92:44:37:c2:0a:96:dc:b8:ec:59:fe: aa:d7:3e:cd:55:b1:97:0e:29:c7:70:90:dc:6e:18:51:95:94: f1:3c:c2:5e:46:bc:ee:37:cd:6d:31:4f:1f:87:b1:5a:5a:f9: db:78:15:cf:cc:a1:38:92:d3:3c:6f:ca:31:ed:8b:d5:0a:58: 55:32:8e:b3:bb:31:f2:90:5c:ae:a4:8d:4b:09:5b:c6:50:66: 65:f6:b7:e1:bf:9a:4d:e0:20:a3:dd:f1:2e:c1:fa:93:97:17: 47:14:03:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpTpoA9MRAuNsKLEte6bLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NTMxYzU0YjFlNzk1NmMyY2MzNzFiMjNlMGE3NTU2N2Fh Mjc1MTgwHhcNMjUxMjExMjMwMDQ0WhcNMjUxMjEyMjMwMDQ0WjAzMTEwLwYDVQQD Eyg1YTQ2NjU2ZDk5NTZkZWZhY2Y2NTUxZjg5ZmI3ZTkyYzFiN2UxYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fms9zZvQ9s+muGo2++0TxVoTGL3 xbGjB54D68DempPJFcpKXGrvmETDGIe+/dTCnzGB6TL7Ut2vbjWe6NxvHV6zampn hKYbVSub/KWhI7txpEhoAIHCK3gJwk13lSyFSlCfN/lEPYVgZovGRYCdbqy5WfdV eoQFDUecT+XkdRwBrgXf5cF9M5hopT914sQpdUTtfJxi583BJqTe7mBBfoEdrGjd LD9sbaWx+bCRC4bGnzl8Po5lz11HvIF7au6AdNQ4fLLjLGfNK6TxrAyVH4HHFRMm rw7ZsaD3QfmrZcC6vuWOutasTIOR4S9wz1dL8j6FuxHrKBAalyXdRnWSlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpGZW2ZVt76z2VR+J+36SwbfhpzMB8GA1UdIwQY MBaAFDRTHFSx55VsLMNxsj4KdVZ6onUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEt NDkwNjEwM2RiZDE2LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEtNDkwNjEwM2RiZDE2 LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoN3Ub3tk h/4mE2OZtobS6Ek2Vhua3PMgaSl5NLgPWyIjjkpJFy8RV02IiFotnD0C7Lpvx5ql DYhctLIzbRq+DbyNEUNh/ueZ9+ZSGDyFUxrrWgSmI73qvzCo/GS6LbvyHaHDAI8x FOc9Y4BANlEvwe/dnD+zTlhL9u0Zp02HbvjA7WBPGEh1lEJGhIH0tQSz+9zLpolp dpJEN8IKlty47Fn+qtc+zVWxlw4px3CQ3G4YUZWU8TzCXka87jfNbTFPH4exWlr5 23gVz8yhOJLTPG/KMe2L1QpYVTKOs7sx8pBcrqSNSwlbxlBmZfa34b+aTeAgo93x LsH6k5cXRxQD4Q== -----END CERTIFICATE-----Generated at Fri Dec 12 01:43:14 2025 by rpki-client