This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json) Hash identifier: 5b/yKYagF+3JhI4kuHjwxfLFP18U1QZFu1XwADR1d0w= Subject key identifier: 70:CA:ED:90:D6:35:05:6D:81:66:91:4A:88:C6:37:DA:69:EF:8E:A5 Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Certificate serial: 019B4091ADBA934893153512ED74B717063C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft Manifest number: 039A Signing time: Sun 21 Dec 2025 11:00:47 +0000 Manifest this update: Sun 21 Dec 2025 11:00:47 +0000 Manifest next update: Mon 22 Dec 2025 11:00:47 +0000 Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: cMO8ZJylFl03DaS83Su5xGEAPKFz2ZGdlGNsdlPxnSs=) 2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ad:ba:93:48:93:15:35:12:ed:74:b7:17:06:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43 Validity Not Before: Dec 21 11:00:47 2025 GMT Not After : Dec 22 11:00:47 2025 GMT Subject: CN=70caed90d635056d8166914a88c637da69ef8ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:5f:3b:54:6d:6d:97:4c:83:d3:6b:f4:f3: a7:e2:7d:38:18:97:6e:9b:7d:29:55:f1:d7:74:be: a6:11:31:0e:80:30:6c:b6:8f:0e:bf:f0:9f:dc:dd: f5:d8:63:77:b8:eb:b9:ae:d7:47:39:ee:c6:8d:4c: d2:9f:d6:42:56:e2:7c:56:93:28:50:ac:30:3f:3e: b8:8f:f8:f8:dc:89:f6:90:08:5e:d9:19:3b:13:17: 70:bb:cc:15:0a:a3:0a:0b:61:c0:9e:36:63:40:0f: 14:14:f6:b9:01:17:34:2b:56:45:d7:19:02:49:36: 82:a5:b9:50:f3:d6:ba:5f:b9:bd:a5:68:26:d7:ef: ad:ce:17:50:be:e2:cd:c8:a6:4c:c8:e4:0a:2c:85: e0:11:48:77:a2:50:0c:9c:5f:c3:cf:c4:96:0d:be: a3:85:55:87:c3:4d:11:1e:7b:ab:93:a2:81:7e:2c: 5f:71:41:7e:16:dd:0f:a6:5a:4a:ef:31:98:90:42: 65:37:6e:f5:a9:d0:b4:54:16:fc:a4:5e:cc:a0:d7: 69:a0:b7:18:60:2a:ef:8a:c6:e9:d5:35:3e:df:26: b6:b8:12:f1:ba:b5:be:70:4d:fd:8d:53:24:39:eb: 32:4c:a6:2b:a9:57:57:a9:1f:fe:0e:e0:d0:06:35: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CA:ED:90:D6:35:05:6D:81:66:91:4A:88:C6:37:DA:69:EF:8E:A5 X509v3 Authority Key Identifier: keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:99:1e:79:24:f9:e0:f0:2f:84:29:2b:a3:e7:9c:1b:91:54: 10:93:ac:a4:84:8b:f7:01:0a:b8:f6:95:87:82:e9:c1:4b:0a: 84:84:46:47:8e:62:66:c1:18:8e:39:83:29:1c:5f:57:18:2b: 2b:0d:37:33:26:73:7b:6f:c0:92:b8:a8:88:74:55:da:c7:0c: 40:b5:de:45:8f:61:81:f7:bf:87:44:56:50:c9:14:0b:94:d5: c5:2b:d7:e4:2d:04:c4:ef:0a:25:f9:9f:d1:75:85:22:34:8f: 7a:b4:7d:2e:9d:8f:a5:e2:e9:c2:ef:b9:80:48:0e:07:1d:52: e4:46:7e:cc:bd:6e:f3:2f:66:30:8a:da:7a:1d:9a:39:82:ce: b4:da:1d:7f:23:eb:57:30:13:b3:43:d7:47:54:46:3d:23:ab: 48:86:e8:35:0e:22:3d:5a:39:af:ec:1f:b2:5b:94:41:92:6e: b3:9a:39:ff:4a:4e:f0:e4:d7:b5:95:2a:97:d4:30:ee:a5:ad: 86:6c:cd:34:11:36:fe:5e:bd:6f:be:f1:17:99:1c:2d:a2:05: 57:c6:43:3d:e3:8b:9e:ec:d2:d5:c5:47:48:fc:24:c1:e5:91: de:25:4a:37:a2:a5:6d:cd:64:11:86:54:bf:3c:66:d8:3b:d8: 9a:55:b2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAka26k0iTFTUS7XS3FwY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YmUyYWE5YjRmYmY5MDcxNWViY2M5MDUzNGY5ZDJkNTRm N2RhNDMwHhcNMjUxMjIxMTEwMDQ3WhcNMjUxMjIyMTEwMDQ3WjAzMTEwLwYDVQQD Eyg3MGNhZWQ5MGQ2MzUwNTZkODE2NjkxNGE4OGM2MzdkYTY5ZWY4ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbNfO1RtbZdMg9Nr9POn4n04GJdu m30pVfHXdL6mETEOgDBsto8Ov/Cf3N312GN3uOu5rtdHOe7GjUzSn9ZCVuJ8VpMo UKwwPz64j/j43In2kAhe2Rk7Exdwu8wVCqMKC2HAnjZjQA8UFPa5ARc0K1ZF1xkC STaCpblQ89a6X7m9pWgm1++tzhdQvuLNyKZMyOQKLIXgEUh3olAMnF/Dz8SWDb6j hVWHw00RHnurk6KBfixfcUF+Ft0PplpK7zGYkEJlN271qdC0VBb8pF7MoNdpoLcY YCrvisbp1TU+3ya2uBLxurW+cE39jVMkOesyTKYrqVdXqR/+DuDQBjUGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDK7ZDWNQVtgWaRSojGN9pp746lMB8GA1UdIwQY MBaAFDW+Kqm0+/kHFevMkFNPnS1U99pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgt Y2I5ZjA0YzFlMTU0LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni85YTk5NTgtMDlkMC00YTI4LWFlODgtY2I5ZjA0YzFlMTU0 LzEvTmI0cXFiVDctUWNWNjh5UVUwLWRMVlQzMmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpkeeST5 4PAvhCkro+ecG5FUEJOspISL9wEKuPaVh4LpwUsKhIRGR45iZsEYjjmDKRxfVxgr Kw03MyZze2/AkrioiHRV2scMQLXeRY9hgfe/h0RWUMkUC5TVxSvX5C0ExO8KJfmf 0XWFIjSPerR9Lp2PpeLpwu+5gEgOBx1S5EZ+zL1u8y9mMIraeh2aOYLOtNodfyPr VzATs0PXR1RGPSOrSIboNQ4iPVo5r+wfsluUQZJus5o5/0pO8OTXtZUql9Qw7qWt hmzNNBE2/l69b77xF5kcLaIFV8ZDPeOLnuzS1cVHSPwkweWR3iVKN6Klbc1kEYZU vzxm2DvYmlWyng== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:38 2025 by rpki-client