This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json) Hash identifier: dN0ofhxQo9Ln5Zy67C8tW0YnII7oJm0YKRfmtV2qRS8= Subject key identifier: 05:DD:41:0D:23:D7:3B:BA:75:59:19:CD:19:6A:B7:98:58:1B:C3:03 Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Certificate serial: 019B2E1DC9C39355931FFF6E81E25C3EF3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft Manifest number: 11E4 Signing time: Wed 17 Dec 2025 21:01:02 +0000 Manifest this update: Wed 17 Dec 2025 21:01:02 +0000 Manifest next update: Thu 18 Dec 2025 21:01:02 +0000 Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: xz5EZTYBocsfOt40Xc8zJZ+ejx1rhwwoD0Y02ZPjs9I=) 2: SgjnIjuq3AeuRbPMRDHnDCjAALI.roa (hash: Pfy5puiab8wDSE6eVbJ+tlKeXTAJeJMbBe/7aBk5Ysw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:c9:c3:93:55:93:1f:ff:6e:81:e2:5c:3e:f3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7 Validity Not Before: Dec 17 21:01:02 2025 GMT Not After : Dec 18 21:01:02 2025 GMT Subject: CN=05dd410d23d73bba755919cd196ab798581bc303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:39:8d:a8:90:e9:7c:29:b8:c3:0e:21:41:8e: 04:c3:36:52:2a:c9:62:23:e5:f4:1f:76:dc:e6:f8: ba:58:c9:5a:1c:f2:de:3c:ff:0d:b1:32:2c:16:f0: bb:23:9c:1f:12:30:ff:17:30:fa:73:06:ac:af:a1: 74:18:c5:46:25:ac:c3:e9:bc:b6:87:8e:27:3e:59: 6a:d2:2a:2f:d9:f9:3f:c1:ec:99:43:79:0e:fe:4c: 74:0a:1f:53:44:19:2b:85:f2:3c:e3:4a:ee:8e:6e: 2b:51:f8:4d:32:a0:9e:0a:45:4f:ff:d3:50:75:6f: 4a:6d:56:1c:30:35:10:38:1c:21:85:8a:e9:74:3e: 91:db:5c:8e:11:e0:20:10:f9:62:96:74:d4:51:8a: d8:55:fe:a3:7f:b8:0e:45:c7:57:d7:57:05:6b:84: f2:d9:31:cb:7b:a3:8c:3d:fe:7f:fe:ef:a5:9c:eb: d2:69:cd:7e:dc:67:93:72:f3:b9:d6:d7:e5:ab:49: fa:47:26:76:d0:f6:8c:72:8b:8e:14:1a:de:0d:86: c8:01:98:cc:97:71:f6:74:a1:32:a1:e3:3a:b6:47: 41:f4:98:26:9a:17:c1:85:a0:e7:03:d2:49:22:09: 38:79:92:4f:97:9c:3b:99:f9:79:a8:12:ec:39:2a: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DD:41:0D:23:D7:3B:BA:75:59:19:CD:19:6A:B7:98:58:1B:C3:03 X509v3 Authority Key Identifier: keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:cd:d0:10:2d:57:fe:66:09:d6:91:2a:f1:27:b6:32:9d:56: 30:5f:c7:50:db:e5:22:a1:ee:22:55:f3:9a:da:cd:2f:4c:5e: 4d:75:fe:40:9f:c2:5c:1a:ab:3f:07:36:04:ec:e2:8d:93:bf: c9:6c:ec:21:ff:7c:a9:25:4d:de:20:34:2c:1b:ea:ed:ea:66: 8a:82:8a:d5:34:04:d5:4d:91:67:11:13:0e:c8:5c:e9:97:19: a3:7d:56:d2:cc:a9:a4:08:85:97:3f:a4:96:7c:a3:54:68:e1: a6:91:3d:79:53:8d:02:b2:09:e1:23:54:0b:ac:70:43:bc:6e: 41:05:21:40:8e:ba:7c:f3:63:f4:c6:e0:83:f3:53:55:90:74: d3:b0:3f:1d:c0:d2:1a:c9:ce:74:25:45:ce:23:9c:a7:9e:4d: 79:31:29:b0:0c:9d:fc:0a:0d:af:e0:c5:a1:61:1e:70:74:77: c2:51:13:c2:94:a6:16:86:1e:e9:ec:76:df:25:23:af:61:1b: b6:1b:26:c1:cb:0a:1f:69:96:bf:9a:0e:a1:17:83:f7:fc:e2: 71:b6:08:fd:58:45:b9:02:96:9b:5a:aa:d1:54:3e:d6:a4:89: 93:49:20:f0:8a:99:e2:50:89:98:7a:59:85:d1:6c:7c:d9:e4: 89:6c:ab:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHcnDk1WTH/9ugeJcPvPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm YWQyZjcwHhcNMjUxMjE3MjEwMTAyWhcNMjUxMjE4MjEwMTAyWjAzMTEwLwYDVQQD EygwNWRkNDEwZDIzZDczYmJhNzU1OTE5Y2QxOTZhYjc5ODU4MWJjMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zmNqJDpfCm4ww4hQY4EwzZSKsli I+X0H3bc5vi6WMlaHPLePP8NsTIsFvC7I5wfEjD/FzD6cwasr6F0GMVGJazD6by2 h44nPllq0iov2fk/weyZQ3kO/kx0Ch9TRBkrhfI840rujm4rUfhNMqCeCkVP/9NQ dW9KbVYcMDUQOBwhhYrpdD6R21yOEeAgEPlilnTUUYrYVf6jf7gORcdX11cFa4Ty 2THLe6OMPf5//u+lnOvSac1+3GeTcvO51tflq0n6RyZ20PaMcouOFBreDYbIAZjM l3H2dKEyoeM6tkdB9JgmmhfBhaDnA9JJIgk4eZJPl5w7mfl5qBLsOSqi+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXdQQ0j1zu6dVkZzRlqt5hYG8MDMB8GA1UdIwQY MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4 LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApc3QEC1X /mYJ1pEq8Se2Mp1WMF/HUNvlIqHuIlXzmtrNL0xeTXX+QJ/CXBqrPwc2BOzijZO/ yWzsIf98qSVN3iA0LBvq7epmioKK1TQE1U2RZxETDshc6ZcZo31W0syppAiFlz+k lnyjVGjhppE9eVONArIJ4SNUC6xwQ7xuQQUhQI66fPNj9Mbgg/NTVZB007A/HcDS GsnOdCVFziOcp55NeTEpsAyd/AoNr+DFoWEecHR3wlETwpSmFoYe6ex23yUjr2Eb thsmwcsKH2mWv5oOoReD9/zicbYI/VhFuQKWm1qq0VQ+1qSJk0kg8IqZ4lCJmHpZ hdFsfNnkiWyr3g== -----END CERTIFICATE-----Generated at Thu Dec 18 06:09:17 2025 by rpki-client