This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json) Hash identifier: gKTmZdrMwntIod+jZA2u++3M5catgjHOvBxuovZZhL0= Subject key identifier: C3:CB:B5:C1:AB:C4:F3:F5:61:A3:0B:4E:B0:D3:D3:28:3C:86:AD:26 Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Certificate serial: 019B20CFEB89E4C7ED84915F8218511723B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft Manifest number: 0B4F Signing time: Mon 15 Dec 2025 07:00:55 +0000 Manifest this update: Mon 15 Dec 2025 07:00:55 +0000 Manifest next update: Tue 16 Dec 2025 07:00:55 +0000 Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=) 2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=) 3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: aNvlhJ8/8Rh6MYImJcSYIaqLJJUKaVj37zIVK1Eh2oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:eb:89:e4:c7:ed:84:91:5f:82:18:51:17:23:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Validity Not Before: Dec 15 07:00:55 2025 GMT Not After : Dec 16 07:00:55 2025 GMT Subject: CN=c3cbb5c1abc4f3f561a30b4eb0d3d3283c86ad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:75:ca:d1:f1:ee:92:9c:39:a4:80:83:1f: 2e:c1:20:78:2d:06:ec:fb:84:b8:1a:7f:6d:21:f0: 30:bb:f6:57:50:7f:7e:b5:80:24:5f:5d:75:19:2e: 21:ef:c0:60:5f:84:69:7b:ce:ee:44:21:4c:35:45: 47:9c:2f:36:2e:62:ab:66:78:70:10:f2:f9:ac:33: ea:8b:7e:bd:ff:40:16:63:d7:1f:6d:18:6a:40:fc: aa:fd:fa:d6:cf:cc:81:ca:cc:05:4c:2f:c2:9f:05: 39:0b:48:a3:9f:95:75:2b:fa:b3:8b:4f:b0:45:80: da:76:b9:db:7f:67:b3:cd:d1:b1:98:e6:39:d3:3a: e8:51:1c:96:68:54:4c:0a:f4:60:9d:a0:0b:de:b4: e1:2c:99:81:09:53:31:c0:1c:55:89:cb:3e:a0:56: c7:dd:ad:28:b1:bd:74:40:29:92:5c:3b:f2:fb:a4: cd:f6:41:b4:2a:43:98:c6:54:c9:d5:cf:e1:09:8b: ab:54:3b:3c:c5:a7:62:5c:5f:3c:cc:d6:0c:d4:26: ec:da:7c:a1:e3:5a:e7:f3:ba:d7:fb:ec:a7:22:76: ba:bd:57:46:92:d9:b4:c3:c4:bb:b4:a2:1d:55:05: a9:4e:cb:4d:b3:6e:d8:36:5a:56:dd:2c:a9:9e:06: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:B5:C1:AB:C4:F3:F5:61:A3:0B:4E:B0:D3:D3:28:3C:86:AD:26 X509v3 Authority Key Identifier: keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:14:e3:f5:32:7d:7b:a9:ae:35:65:71:51:13:59:ca:39:4e: e4:e9:f4:1d:59:fe:14:9e:2a:bc:3e:7f:50:98:31:fc:f5:1c: 06:c3:ab:5f:8e:10:52:c4:7e:1b:7b:1e:d2:0e:09:b4:3f:a9: c6:aa:7e:98:0d:d0:df:d5:7b:c4:d5:5e:34:c8:fb:bf:5c:63: 6f:72:5c:46:1e:36:e0:4b:e2:23:21:09:9b:b4:ff:5b:e3:72: 87:c3:d0:2f:34:9d:6e:76:88:38:30:9d:5a:2c:a6:d9:0f:6f: c8:d5:59:52:e3:5d:97:e2:cc:ab:95:ae:71:0d:e4:0c:ea:9c: 0d:d2:f3:0f:2a:76:da:4a:20:a8:95:3e:1d:35:bd:94:9b:d4: 6d:6e:da:d2:06:d4:01:22:77:ea:bf:81:2c:9f:26:fd:c2:03: 7b:50:ce:87:02:cc:f0:51:9b:7f:58:5b:3b:bf:6a:1f:7d:73: 77:76:e0:fe:ab:db:a9:19:93:f0:54:b1:a4:ef:90:13:48:41: 6b:68:02:d9:c9:25:0d:0e:d4:d3:a0:a7:57:f3:c7:18:a7:1b: df:9f:1b:0f:41:0d:6b:93:21:2e:9a:20:10:30:1c:64:37:08: 8d:21:ef:c3:ae:78:bf:01:e1:36:10:aa:ec:e5:2c:44:18:5b: 17:ba:47:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz+uJ5MfthJFfghhRFyOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh M2ExODMwHhcNMjUxMjE1MDcwMDU1WhcNMjUxMjE2MDcwMDU1WjAzMTEwLwYDVQQD EyhjM2NiYjVjMWFiYzRmM2Y1NjFhMzBiNGViMGQzZDMyODNjODZhZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdt1ytHx7pKcOaSAgx8uwSB4LQbs +4S4Gn9tIfAwu/ZXUH9+tYAkX111GS4h78BgX4Rpe87uRCFMNUVHnC82LmKrZnhw EPL5rDPqi369/0AWY9cfbRhqQPyq/frWz8yByswFTC/CnwU5C0ijn5V1K/qzi0+w RYDadrnbf2ezzdGxmOY50zroURyWaFRMCvRgnaAL3rThLJmBCVMxwBxVics+oFbH 3a0osb10QCmSXDvy+6TN9kG0KkOYxlTJ1c/hCYurVDs8xadiXF88zNYM1Cbs2nyh 41rn87rX++ynIna6vVdGktm0w8S7tKIdVQWpTstNs27YNlpW3SypngYlRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPLtcGrxPP1YaMLTrDT0yg8hq0mMB8GA1UdIwQY MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt ZDU4YjA5NGRmMDZjLzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxTj9TJ9 e6muNWVxURNZyjlO5On0HVn+FJ4qvD5/UJgx/PUcBsOrX44QUsR+G3se0g4JtD+p xqp+mA3Q39V7xNVeNMj7v1xjb3JcRh424EviIyEJm7T/W+Nyh8PQLzSdbnaIODCd Wiym2Q9vyNVZUuNdl+LMq5WucQ3kDOqcDdLzDyp22kogqJU+HTW9lJvUbW7a0gbU ASJ36r+BLJ8m/cIDe1DOhwLM8FGbf1hbO79qH31zd3bg/qvbqRmT8FSxpO+QE0hB a2gC2cklDQ7U06CnV/PHGKcb358bD0ENa5MhLpogEDAcZDcIjSHvw654vwHhNhCq 7OUsRBhbF7pHsA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:57:26 2025 by rpki-client