This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft (raw, json) Hash identifier: TFlo7RHtk0FoxirqvkGt0j7FgqyGBLFKwA1RRTdcaNo= Subject key identifier: C0:59:80:FB:46:1A:A8:1B:CF:68:79:38:CE:47:BF:A1:E1:A7:89:9E Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611 Certificate serial: 019B123823BAFE847655AC6C8C097603B1B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft Manifest number: 11FA Signing time: Fri 12 Dec 2025 11:00:27 +0000 Manifest this update: Fri 12 Dec 2025 11:00:27 +0000 Manifest next update: Sat 13 Dec 2025 11:00:27 +0000 Files and hashes: 1: KP2_oc8mgsgfljoO1nuvZhPkZ0Y.roa (hash: PSZpKzA/dVK4VjiYCM36fNdW8Sa7IO0CzoAwBYd8p8Q=) 2: WLAdp4BUO5ff9F0lr6Jk8VSWpWY.roa (hash: OQTSFNF21T7EtLt4TGNG5Xy1DNbLGA46p0s3D8MDuzk=) 3: c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl (hash: vQma5HVE3svpRimAEtXyW3Bv+J11FealhxqtzvSpu9E=) 4: jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa (hash: f4DN47+xITITW5Z3XzBvZV99OJ3Lahvtt0rfcMK3ExI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:23:ba:fe:84:76:55:ac:6c:8c:09:76:03:b1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611 Validity Not Before: Dec 12 11:00:27 2025 GMT Not After : Dec 13 11:00:27 2025 GMT Subject: CN=c05980fb461aa81bcf687938ce47bfa1e1a7899e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:e5:7e:51:18:1d:dd:63:fc:d3:c8:9c:7b: cc:84:2c:76:6e:62:96:d9:55:9a:d8:a1:cb:78:cc: 2e:7f:4f:e1:6c:cf:d3:2f:74:6b:3a:49:71:da:74: 56:d8:82:7c:f9:e3:5d:03:99:e5:81:7b:a1:57:87: 01:49:0b:5c:fc:b2:28:99:5d:4b:a2:fe:b4:35:9c: 4d:cc:bd:43:a0:58:68:a2:b2:94:ff:b2:b7:cf:61: 5c:40:06:da:54:4d:e6:4d:d4:4a:d8:19:24:88:06: 7f:17:c1:3d:47:0e:89:15:e1:ff:81:5f:8c:3f:8e: 90:5d:15:15:19:07:70:96:a2:dc:87:d7:4b:db:0d: 7d:23:f0:91:27:33:8e:18:04:ed:7e:12:44:32:29: 45:7e:55:6b:48:82:52:13:10:3e:cf:ae:8e:cc:30: 99:d9:2a:cc:39:9d:d7:0f:3c:eb:80:ec:0b:12:3a: 57:3b:f4:65:75:48:27:14:f8:45:e1:c5:32:9a:cc: 45:05:26:71:41:43:79:50:a4:aa:bc:41:37:9a:df: 77:bb:4b:95:59:a1:ba:6c:2a:12:61:b1:73:0a:0a: 95:33:91:14:b2:f1:48:7f:e9:e2:5d:c8:ce:b2:e0: f3:27:9e:82:8b:5e:58:22:72:57:51:80:af:cb:44: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:59:80:FB:46:1A:A8:1B:CF:68:79:38:CE:47:BF:A1:E1:A7:89:9E X509v3 Authority Key Identifier: keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:52:45:7b:26:30:ce:e5:ab:8e:b9:e0:09:08:14:c5:32:d5: e7:63:bf:d4:bc:1a:88:94:a5:a1:77:19:ae:a1:1d:20:7e:78: 9a:dc:3a:03:c2:00:bc:7c:aa:a8:f9:b3:96:76:c2:88:6f:a6: f0:01:5d:22:36:92:54:c3:67:f7:75:b4:49:18:6e:d5:46:04: f2:04:b6:9e:72:58:39:1f:80:7d:b2:18:d1:7e:16:74:30:c4: 09:a0:3c:46:21:15:0c:bc:0e:91:60:61:7d:da:9e:7c:aa:c8: 3d:95:ec:a9:ab:19:76:6f:4d:1c:79:ae:b0:82:40:69:d1:ce: 27:07:d3:80:1a:fb:7e:9a:42:2d:e1:43:df:4a:39:d5:25:69: 57:73:38:d1:a8:d6:87:e2:44:a7:b3:fb:6f:e0:37:e8:2e:70: 2e:00:76:77:7c:ac:25:28:14:67:61:fb:62:4a:e7:9d:d5:56: c3:1a:15:20:03:1a:3c:82:9b:46:fc:b1:61:13:de:02:6a:6f: 5f:ab:11:2c:e6:9a:80:cf:fb:54:e2:59:fb:f9:3d:65:4f:2f: 46:46:f1:c5:89:72:d0:c6:cc:14:d4:aa:83:bd:e0:5e:4a:db: c9:13:39:a7:a6:7f:a7:a8:40:7c:2a:42:94:cd:b1:80:b3:f1: 6a:0d:cc:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOCO6/oR2VaxsjAl2A7G3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZTM3M2ZlZTc4MGVlYWIyYTkwNDIyZDBhZDUxNGUwODRh OGQ2MTEwHhcNMjUxMjEyMTEwMDI3WhcNMjUxMjEzMTEwMDI3WjAzMTEwLwYDVQQD EyhjMDU5ODBmYjQ2MWFhODFiY2Y2ODc5MzhjZTQ3YmZhMWUxYTc4OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW/lflEYHd1j/NPInHvMhCx2bmKW 2VWa2KHLeMwuf0/hbM/TL3RrOklx2nRW2IJ8+eNdA5nlgXuhV4cBSQtc/LIomV1L ov60NZxNzL1DoFhoorKU/7K3z2FcQAbaVE3mTdRK2BkkiAZ/F8E9Rw6JFeH/gV+M P46QXRUVGQdwlqLch9dL2w19I/CRJzOOGATtfhJEMilFflVrSIJSExA+z66OzDCZ 2SrMOZ3XDzzrgOwLEjpXO/RldUgnFPhF4cUymsxFBSZxQUN5UKSqvEE3mt93u0uV WaG6bCoSYbFzCgqVM5EUsvFIf+niXcjOsuDzJ56Ci15YInJXUYCvy0QiXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBZgPtGGqgbz2h5OM5Hv6Hhp4meMB8GA1UdIwQY MBaAFHPjc/7ngO6rKpBCLQrVFOCEqNYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTIt MDQxZmQ0YzZmZmQ0LzEvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTItMDQxZmQ0YzZmZmQ0 LzEvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVJFeyYw zuWrjrngCQgUxTLV52O/1LwaiJSloXcZrqEdIH54mtw6A8IAvHyqqPmzlnbCiG+m 8AFdIjaSVMNn93W0SRhu1UYE8gS2nnJYOR+AfbIY0X4WdDDECaA8RiEVDLwOkWBh fdqefKrIPZXsqasZdm9NHHmusIJAadHOJwfTgBr7fppCLeFD30o51SVpV3M40ajW h+JEp7P7b+A36C5wLgB2d3ysJSgUZ2H7YkrnndVWwxoVIAMaPIKbRvyxYRPeAmpv X6sRLOaagM/7VOJZ+/k9ZU8vRkbxxYly0MbMFNSqg73gXkrbyRM5p6Z/p6hAfCpC lM2xgLPxag3MRQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:20:59 2025 by rpki-client