This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json) Hash identifier: oI+eFIpmCSApkQUTLsHtr/xiXOlQE/YkLQoO30JyYAc= Subject key identifier: D8:31:30:2F:97:0E:B9:20:20:44:55:D6:AF:5D:47:BE:30:5C:62:7A Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18 Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18 Certificate serial: 019B0935EDFB56DE2DBD51D556EEFA02FAEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft Manifest number: 0F25 Signing time: Wed 10 Dec 2025 17:01:27 +0000 Manifest this update: Wed 10 Dec 2025 17:01:27 +0000 Manifest next update: Thu 11 Dec 2025 17:01:27 +0000 Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=) 2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: Tl4MSSvKqqBSw0oGmBdszkXQ6lN9KFZemnEYFF94mfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 17:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:ed:fb:56:de:2d:bd:51:d5:56:ee:fa:02:fa:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18 Validity Not Before: Dec 10 17:01:27 2025 GMT Not After : Dec 11 17:01:27 2025 GMT Subject: CN=d831302f970eb920204455d6af5d47be305c627a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:30:a7:96:59:6e:d1:ef:c0:8c:b8:7b:10: a3:23:ab:6a:d8:56:f3:32:ab:49:c0:39:42:e1:f8: 3c:72:eb:9a:c0:a3:a7:a1:14:db:a6:03:37:4c:75: 8c:72:14:fb:b2:32:0e:e0:aa:18:19:4d:b0:ac:fe: 59:df:8a:4b:a5:26:e8:9a:d3:65:d7:d8:db:53:b3: e3:fb:0e:08:4b:25:ec:7d:67:21:4f:0c:32:28:69: 77:28:a5:e2:8a:de:19:da:e0:e7:ca:31:8b:5b:11: 82:fc:12:bf:68:88:02:96:50:d3:e6:97:dd:70:a1: e8:6e:23:86:ad:01:d6:fb:30:39:3e:1d:82:a1:43: f0:7a:a6:37:27:e8:75:41:61:64:83:29:74:d9:3e: 1f:48:2b:95:ae:ce:6e:a6:31:8d:c3:c6:30:53:5f: 7b:67:0f:7c:c4:b9:7f:8f:cf:3b:94:6c:8a:7d:ae: ed:5b:53:28:1f:fd:f3:ef:b1:bb:d8:1d:bd:01:e6: a6:9b:14:32:1a:0d:fd:da:1d:4e:50:cb:00:f8:9e: b4:60:62:49:15:24:68:32:3a:56:bb:1c:db:a0:31: 3c:21:df:96:39:e0:c1:f6:04:61:d1:6e:18:58:1b: 86:74:40:13:75:4c:c5:53:92:37:f5:8e:7e:0c:d4: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:31:30:2F:97:0E:B9:20:20:44:55:D6:AF:5D:47:BE:30:5C:62:7A X509v3 Authority Key Identifier: keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:b5:b8:f1:0b:88:97:49:41:e5:69:10:11:e2:eb:b6:ad:b4: da:9c:83:da:04:bf:99:fd:be:5a:17:bb:c0:e5:94:e5:09:6e: 5d:97:bb:1b:08:3f:88:0d:59:2c:8e:11:c2:99:51:d0:ee:11: ae:4e:59:00:e1:c8:47:e7:1b:62:c3:2e:71:e5:3e:5f:2b:b5: 71:ed:c0:7c:75:0f:e2:d8:07:2d:e1:e8:31:3e:29:a0:78:ae: 6a:50:36:06:cc:6e:95:60:91:58:51:89:9f:a0:11:24:ec:fe: 97:69:ef:22:e4:2f:9c:4b:00:8b:7b:be:1e:7f:48:c8:c8:f8: c2:47:db:49:86:8a:59:b9:4a:b9:32:5e:ce:96:c6:0a:f0:d8: 51:28:1a:20:24:66:44:37:97:30:09:96:f8:57:c3:15:45:0d: 05:b7:eb:1b:1e:02:d0:49:61:12:07:89:9b:36:0c:ea:62:22: 28:8c:88:12:a2:90:c4:c0:83:bd:01:63:c9:b6:7c:43:ed:1b: 94:52:ea:cd:a9:37:97:a9:73:6e:37:18:21:05:86:9b:e7:43: 59:f4:66:4c:e7:b5:83:49:e1:95:03:4b:ec:30:8a:4c:62:e7: 52:b1:60:a6:57:40:df:27:31:c7:fd:48:d2:fb:d9:1d:0d:30: f8:db:e4:a8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsJNe37Vt4tvVHVVu76AvrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDcyMTNmMzU4NWI3MTEyZGZmMGNiNDNjMTkyYjFjYWYz MDdkMTgwHhcNMjUxMjEwMTcwMTI3WhcNMjUxMjExMTcwMTI3WjAzMTEwLwYDVQQD EyhkODMxMzAyZjk3MGViOTIwMjA0NDU1ZDZhZjVkNDdiZTMwNWM2MjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz0wp5ZZbtHvwIy4exCjI6tq2Fbz MqtJwDlC4fg8cuuawKOnoRTbpgM3THWMchT7sjIO4KoYGU2wrP5Z34pLpSbomtNl 19jbU7Pj+w4ISyXsfWchTwwyKGl3KKXiit4Z2uDnyjGLWxGC/BK/aIgCllDT5pfd cKHobiOGrQHW+zA5Ph2CoUPweqY3J+h1QWFkgyl02T4fSCuVrs5upjGNw8YwU197 Zw98xLl/j887lGyKfa7tW1MoH/3z77G72B29AeammxQyGg392h1OUMsA+J60YGJJ FSRoMjpWuxzboDE8Id+WOeDB9gRh0W4YWBuGdEATdUzFU5I39Y5+DNRkjQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNgxMC+XDrkgIERV1q9dR74wXGJ6MB8GA1UdIwQY MBaAFPjXIT81hbcRLf8MtDwZKxyvMH0YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OY2hQeldGdHhFdF93eTBQQmtySEs4d2ZSZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2VlLTkxMGYtNGI4ZS1iNDY0 LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kwUEJrckhLOHdmUmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk5LzQ5NTNlZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAx M2YvMS8xLU5jaFB6V0Z0eEV0X3d5MFBCa3JISzh3ZlJnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybW4 8QuIl0lB5WkQEeLrtq202pyD2gS/mf2+Whe7wOWU5QluXZe7Gwg/iA1ZLI4RwplR 0O4Rrk5ZAOHIR+cbYsMuceU+Xyu1ce3AfHUP4tgHLeHoMT4poHiualA2BsxulWCR WFGJn6ARJOz+l2nvIuQvnEsAi3u+Hn9IyMj4wkfbSYaKWblKuTJezpbGCvDYUSga ICRmRDeXMAmW+FfDFUUNBbfrGx4C0ElhEgeJmzYM6mIiKIyIEqKQxMCDvQFjybZ8 Q+0blFLqzak3l6lzbjcYIQWGm+dDWfRmTOe1g0nhlQNL7DCKTGLnUrFgpldA3ycx x/1I0vvZHQ0w+NvkqA== -----END CERTIFICATE-----Generated at Thu Dec 11 00:19:25 2025 by rpki-client