This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json) Hash identifier: CzSe5WaH5bGtm0UCiRnBxr5PM308mQpxew9n3dW7bGU= Subject key identifier: D2:F2:44:E1:6C:F1:82:5B:FD:EF:24:24:7F:10:5A:46:59:8B:F9:70 Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef Certificate serial: 019B4C5F0A5DF0770A554F307A9D69136202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft Manifest number: 1723 Signing time: Tue 23 Dec 2025 18:00:55 +0000 Manifest this update: Tue 23 Dec 2025 18:00:55 +0000 Manifest next update: Wed 24 Dec 2025 18:00:55 +0000 Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: 4QgZ2CbTEI67MAYYw6hhuw22tcrC2tCpFhu//AMXAoM=) 2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:0a:5d:f0:77:0a:55:4f:30:7a:9d:69:13:62:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef Validity Not Before: Dec 23 18:00:55 2025 GMT Not After : Dec 24 18:00:55 2025 GMT Subject: CN=d2f244e16cf1825bfdef24247f105a46598bf970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6c:38:f6:56:47:82:00:88:34:10:83:9f:23: 94:4d:54:92:39:96:84:78:d4:0c:9a:ef:d0:0c:cb: 54:83:35:7d:5f:ac:cf:02:89:55:d4:00:32:dc:a6: 89:a3:51:b5:4e:01:f8:05:74:fa:1b:30:60:9f:dd: 4e:04:cf:a1:f5:01:65:b7:5d:97:82:09:15:4c:ba: d2:a9:52:8b:c5:1f:f8:52:37:d8:35:77:7b:50:5c: 3a:8f:ef:8a:9b:b2:2d:12:af:61:72:3d:0a:b8:05: be:d1:5b:dd:7b:72:05:f6:75:e2:b7:53:de:a7:ee: 9a:4a:2f:4a:55:3a:fa:c9:17:8e:60:ef:4c:56:c2: 9b:66:12:23:c3:d9:2a:48:bc:b7:8d:21:9f:32:83: 48:f8:8d:16:56:62:74:9a:53:e8:92:dd:c1:b0:da: 01:92:07:87:86:7c:b6:5b:9e:62:63:d7:a0:ed:28: 60:0f:5f:5a:a6:a0:ec:bd:ae:bc:a3:9c:a4:c3:82: 7b:ec:fa:ca:18:da:d4:13:0e:0e:e3:26:bc:f1:27: bf:6c:18:16:9b:b4:7d:04:11:cc:a0:63:6b:79:57: aa:0a:3e:78:82:73:43:56:6d:a8:ed:52:08:f2:06: 19:cf:09:ca:a7:ef:97:fc:53:4f:c9:d9:d5:78:53: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F2:44:E1:6C:F1:82:5B:FD:EF:24:24:7F:10:5A:46:59:8B:F9:70 X509v3 Authority Key Identifier: keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d1:17:87:33:52:4d:08:bb:24:57:89:af:4d:fc:46:c0:e6: 28:13:04:7c:c0:b5:23:d1:08:43:c5:30:74:22:32:1f:c0:60: e7:8f:4e:1a:ca:a9:a9:51:15:29:82:b7:aa:c0:57:0f:39:8d: 8d:92:75:cf:f6:7e:f0:53:00:af:60:94:85:d2:cb:da:c1:95: 19:0f:9d:16:a5:8e:5d:39:9e:f6:92:14:26:ab:3b:5f:4e:1e: c3:19:2a:c7:9b:e1:a4:70:a7:8d:d7:3e:3d:83:3b:18:10:87: 44:9a:d7:71:cc:34:01:c7:d1:df:32:16:cf:d8:1b:a7:87:59: 45:40:94:ef:7a:19:c9:36:9e:81:b1:dc:33:e4:dc:b5:8d:af: fa:89:e1:01:24:17:6f:8d:7b:b6:fc:d9:4e:d6:ce:1b:06:7f: 07:14:2f:2b:91:96:ac:b2:d3:44:7f:74:6e:82:4c:0e:e5:2f: c8:bf:ba:1a:e4:3d:9f:4d:2b:f8:32:1b:1f:56:46:e0:25:53: ee:8e:96:77:42:90:dc:49:89:c7:a7:59:e5:81:9b:53:43:f4: 2b:9c:5e:e4:6d:a7:03:96:34:ce:ca:29:78:f1:6b:bf:ea:3d: 55:ab:3b:3c:5f:39:fe:4c:df:e0:80:db:c2:32:9d:6d:ed:f3: 8f:88:aa:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXwpd8HcKVU8wep1pE2ICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl NTE0ZWYwHhcNMjUxMjIzMTgwMDU1WhcNMjUxMjI0MTgwMDU1WjAzMTEwLwYDVQQD EyhkMmYyNDRlMTZjZjE4MjViZmRlZjI0MjQ3ZjEwNWE0NjU5OGJmOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmw49lZHggCINBCDnyOUTVSSOZaE eNQMmu/QDMtUgzV9X6zPAolV1AAy3KaJo1G1TgH4BXT6GzBgn91OBM+h9QFlt12X ggkVTLrSqVKLxR/4UjfYNXd7UFw6j++Km7ItEq9hcj0KuAW+0Vvde3IF9nXit1Pe p+6aSi9KVTr6yReOYO9MVsKbZhIjw9kqSLy3jSGfMoNI+I0WVmJ0mlPokt3BsNoB kgeHhny2W55iY9eg7ShgD19apqDsva68o5ykw4J77PrKGNrUEw4O4ya88Se/bBgW m7R9BBHMoGNreVeqCj54gnNDVm2o7VII8gYZzwnKp++X/FNPydnVeFO/YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLyROFs8YJb/e8kJH8QWkZZi/lwMB8GA1UdIwQY MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt NWQzM2UxOGE2OWEwLzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNEXhzNS TQi7JFeJr038RsDmKBMEfMC1I9EIQ8UwdCIyH8Bg549OGsqpqVEVKYK3qsBXDzmN jZJ1z/Z+8FMAr2CUhdLL2sGVGQ+dFqWOXTme9pIUJqs7X04ewxkqx5vhpHCnjdc+ PYM7GBCHRJrXccw0AcfR3zIWz9gbp4dZRUCU73oZyTaegbHcM+TctY2v+onhASQX b417tvzZTtbOGwZ/BxQvK5GWrLLTRH90boJMDuUvyL+6GuQ9n00r+DIbH1ZG4CVT 7o6Wd0KQ3EmJx6dZ5YGbU0P0K5xe5G2nA5Y0zsopePFrv+o9Vas7PF85/kzf4IDb wjKdbe3zj4iqig== -----END CERTIFICATE-----Generated at Wed Dec 24 02:01:11 2025 by rpki-client