This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json) Hash identifier: TBcNKRZkiItQPJO9edx7dQyO6ekq82xyoN8GYZsk5EE= Subject key identifier: F3:5E:FC:DE:DD:4D:01:C6:57:01:B0:8E:CC:61:1D:F7:C5:AD:B2:61 Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37 Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37 Certificate serial: 019B5907A4BE292719841B76DB606E4828B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 05:00:31 +0000 Manifest this update: Fri 26 Dec 2025 05:00:31 +0000 Manifest next update: Sat 27 Dec 2025 05:00:31 +0000 Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=) 2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: XIbNrhyr1/gKOo3mHO74BqfuDMbz5Mc5UV15CVNG9ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:a4:be:29:27:19:84:1b:76:db:60:6e:48:28:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37 Validity Not Before: Dec 26 05:00:31 2025 GMT Not After : Dec 27 05:00:31 2025 GMT Subject: CN=f35efcdedd4d01c65701b08ecc611df7c5adb261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:e0:9b:fa:b1:91:fe:1d:42:66:15:54:35: 45:37:e2:f6:be:d3:12:f1:8b:63:c6:20:3a:fa:d6: 9d:c9:7c:67:6d:94:24:bb:d4:96:e7:e4:6f:97:23: de:c9:be:4a:07:1a:6d:9a:84:c4:d2:47:77:54:a5: ce:12:f8:61:50:4e:4a:e6:f4:c9:e8:78:ea:24:52: 08:6a:3e:68:84:99:88:ef:9f:3b:0a:ec:a9:33:48: 74:ee:73:af:e1:96:56:45:1f:4f:2d:25:80:ff:7d: dc:dc:01:15:30:f5:11:bf:ec:44:e6:7f:5c:73:40: dc:c8:3c:0b:90:8f:66:18:8b:2f:8c:b1:ce:d3:49: ae:ae:eb:6f:96:6d:f0:5d:a3:4f:ed:0c:d0:7c:29: fb:77:2b:98:68:b4:a1:33:19:18:b7:a8:55:d9:61: d1:e4:20:34:dc:e7:ac:4d:b0:e4:2f:13:2a:c1:1f: 39:d2:9a:92:69:e0:d2:ba:20:50:ec:c4:04:b0:92: ca:43:e6:c3:67:0a:99:5b:ca:a0:dc:ce:a5:9e:dd: b9:d0:39:22:d7:36:60:fe:03:95:77:75:76:30:f1: 7b:e3:c3:80:a9:2d:3a:d6:a5:e1:06:04:c3:69:d3: cc:e6:c1:62:48:d9:7e:2d:14:4e:29:db:95:c4:a3: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:FC:DE:DD:4D:01:C6:57:01:B0:8E:CC:61:1D:F7:C5:AD:B2:61 X509v3 Authority Key Identifier: keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:04:53:ec:84:72:82:a8:85:7f:62:ca:4f:6d:82:79:47:40: 0b:d0:82:a2:f5:f2:25:8f:3d:65:f7:5d:9c:d4:cc:48:9f:ad: 02:52:8b:d3:2b:73:85:f4:0f:1d:86:dd:67:9e:85:16:ef:15: 79:18:a2:c8:93:9e:dc:93:90:9e:70:35:34:8a:29:90:1e:70: 4f:94:25:e1:f4:ea:b5:74:9e:33:2f:31:9d:9e:b8:ee:90:79: 4d:d8:85:59:99:88:b5:0b:3d:c6:ab:e9:4d:00:46:19:94:4a: 60:dc:8a:ab:6d:83:aa:6b:33:b2:e4:1b:65:0d:e6:53:59:dc: 0a:e3:b9:2f:d7:f6:8f:5c:49:c7:c2:2d:06:4e:b2:50:3c:94: 99:c3:73:54:a0:3f:cf:82:6d:fb:ac:67:d1:9d:3d:ef:b7:4a: b6:29:53:bf:50:64:70:74:3d:9c:fe:b7:65:ec:58:04:3f:e7: 1e:eb:b7:a7:8b:a7:46:5c:82:1b:c4:33:06:26:38:b8:30:56: 57:4c:73:1a:42:54:62:03:72:e1:62:0f:81:ab:fc:7c:35:87: dd:e9:c0:10:bc:3e:ae:98:9b:cb:0e:8b:5e:5b:7b:87:16:1d: eb:55:ff:38:14:07:c9:be:af:f0:30:f0:f4:27:d3:ab:f0:ff: aa:5f:f5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB6S+KScZhBt222BuSCi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YjAzZWM4NWQwODYwN2E2YjFkZGYxZmU3OWRjNjUxY2Nm ZTNmMzcwHhcNMjUxMjI2MDUwMDMxWhcNMjUxMjI3MDUwMDMxWjAzMTEwLwYDVQQD EyhmMzVlZmNkZWRkNGQwMWM2NTcwMWIwOGVjYzYxMWRmN2M1YWRiMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF/gm/qxkf4dQmYVVDVFN+L2vtMS 8YtjxiA6+tadyXxnbZQku9SW5+RvlyPeyb5KBxptmoTE0kd3VKXOEvhhUE5K5vTJ 6HjqJFIIaj5ohJmI7587CuypM0h07nOv4ZZWRR9PLSWA/33c3AEVMPURv+xE5n9c c0DcyDwLkI9mGIsvjLHO00murutvlm3wXaNP7QzQfCn7dyuYaLShMxkYt6hV2WHR 5CA03OesTbDkLxMqwR850pqSaeDSuiBQ7MQEsJLKQ+bDZwqZW8qg3M6lnt250Dki 1zZg/gOVd3V2MPF748OAqS061qXhBgTDadPM5sFiSNl+LRROKduVxKMqUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNe/N7dTQHGVwGwjsxhHffFrbJhMB8GA1UdIwQY MBaAFDWwPshdCGB6ax3fH+edxlHM/j83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEt YWI1N2NhYmMxOGY3LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEtYWI1N2NhYmMxOGY3 LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwRT7IRy gqiFf2LKT22CeUdAC9CCovXyJY89ZfddnNTMSJ+tAlKL0ytzhfQPHYbdZ56FFu8V eRiiyJOe3JOQnnA1NIopkB5wT5Ql4fTqtXSeMy8xnZ647pB5TdiFWZmItQs9xqvp TQBGGZRKYNyKq22DqmszsuQbZQ3mU1ncCuO5L9f2j1xJx8ItBk6yUDyUmcNzVKA/ z4Jt+6xn0Z0977dKtilTv1BkcHQ9nP63ZexYBD/nHuu3p4unRlyCG8QzBiY4uDBW V0xzGkJUYgNy4WIPgav8fDWH3enAELw+rpibyw6LXlt7hxYd61X/OBQHyb6v8DDw 9CfTq/D/ql/1qw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:57 2025 by rpki-client