This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: +8K+lyxY0kSjSl317lSPeVQYX1q3xyw2Ulvb9lK14Y8= Subject key identifier: AE:F5:6E:FA:EB:41:49:41:8A:16:E2:B6:72:7F:D1:69:BA:95:A7:75 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019B07EBCEA62EDAD377FF81B66DE5E9283E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 1770 Signing time: Wed 10 Dec 2025 11:00:52 +0000 Manifest this update: Wed 10 Dec 2025 11:00:52 +0000 Manifest next update: Thu 11 Dec 2025 11:00:52 +0000 Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=) 2: FpUONkQdaqv2Rv9yYXuuU5484b4.roa (hash: s8fjXQWhK2u6VImvQBksJDBrALRZJPf8LAm3HxwOROQ=) 3: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=) 4: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=) 5: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: mkK1DtYk4iJnYFklB0Sqfb2zhTF25APMAdN8Aacfw2k=) 6: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=) 7: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=) 8: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=) 9: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:ce:a6:2e:da:d3:77:ff:81:b6:6d:e5:e9:28:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Dec 10 11:00:52 2025 GMT Not After : Dec 11 11:00:52 2025 GMT Subject: CN=aef56efaeb4149418a16e2b6727fd169ba95a775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:ea:87:90:6d:6d:93:d6:7b:f4:1a:37:01: 4a:99:fe:67:b1:0b:91:d5:fb:bb:c0:fd:99:2a:a6: 01:46:92:4a:70:97:14:e1:75:75:f6:1f:b6:79:54: a5:5c:bf:32:94:9e:3c:24:a8:81:05:d1:29:c8:68: 36:8b:13:83:be:8b:8d:a5:f2:c9:d3:9b:58:88:ea: 99:3d:c6:83:6f:9a:a7:55:ba:8b:3a:c0:e5:57:e1: b9:c4:2b:67:08:d4:cf:f0:88:da:37:a2:fb:67:e4: b4:2d:60:55:c6:86:a8:df:42:fe:f8:1e:43:ec:b9: 32:15:bd:02:e3:0a:4e:86:e9:c4:08:41:b7:1d:c6: dd:a7:6e:16:6d:d6:fc:31:8d:71:27:43:71:48:bc: 74:c4:b1:b6:4b:9d:9d:72:15:ad:9b:8b:d8:0e:50: 8e:69:1c:27:dd:eb:6b:d0:ac:08:06:f5:55:c7:eb: 24:cf:77:44:d8:b9:5a:a0:a5:bd:f8:fb:2c:69:ff: 12:27:e4:a0:eb:ea:6e:08:dc:8b:b0:c4:6d:a3:ff: a9:44:78:f4:47:e1:0c:f0:7c:52:65:a2:d8:a1:b4: ef:db:fd:b4:46:5e:d8:94:01:c1:fc:30:9d:63:fb: ba:b0:a6:87:12:04:3f:b9:76:f8:84:74:52:2a:4d: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:6E:FA:EB:41:49:41:8A:16:E2:B6:72:7F:D1:69:BA:95:A7:75 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8d:65:cb:9b:4d:64:02:2a:d5:a4:8f:2a:bf:a7:02:28:73: 00:79:fc:7e:29:80:c3:1e:8f:63:d6:6f:ef:8a:23:dd:ef:96: aa:16:cb:20:ab:21:f1:78:6c:cb:f4:29:fc:2e:02:c2:1a:6e: 30:d9:d6:2b:bf:ce:94:56:93:c5:a4:fd:0d:be:62:51:43:0f: 30:b4:65:b5:3c:a9:ab:d9:98:f7:16:d4:47:ab:08:70:4f:90: 16:d3:76:98:2b:c6:c0:a1:8d:bf:92:fc:6c:8b:85:c0:e0:c7: 20:f7:42:cc:a7:0a:1f:6d:a0:42:aa:e2:2b:b6:76:9f:81:89: ae:3c:9d:40:8c:e8:ef:5f:be:8e:bc:a3:20:91:f8:44:a6:cd: ac:97:69:6b:58:51:e0:e7:9f:61:81:63:88:37:83:f0:91:88: 50:eb:bd:ff:5c:27:ab:00:6c:66:2d:9e:9d:f1:84:f3:70:0b: 26:31:49:40:f4:ff:f4:1c:0e:1c:7a:18:eb:89:d5:5c:02:6f: ab:3a:2c:62:e4:b5:fe:2e:d4:ee:12:4c:aa:cc:44:73:eb:e3: 59:55:b1:69:6e:da:bc:b5:71:bd:6e:ce:66:3c:a1:23:66:14: a6:b2:19:ce:f9:cc:ab:fe:68:5e:c5:dc:6d:a8:24:1c:1f:c3: 02:e0:f3:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH686mLtrTd/+Btm3l6Sg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjUxMjEwMTEwMDUyWhcNMjUxMjExMTEwMDUyWjAzMTEwLwYDVQQD EyhhZWY1NmVmYWViNDE0OTQxOGExNmUyYjY3MjdmZDE2OWJhOTVhNzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8nqh5BtbZPWe/QaNwFKmf5nsQuR 1fu7wP2ZKqYBRpJKcJcU4XV19h+2eVSlXL8ylJ48JKiBBdEpyGg2ixODvouNpfLJ 05tYiOqZPcaDb5qnVbqLOsDlV+G5xCtnCNTP8IjaN6L7Z+S0LWBVxoao30L++B5D 7LkyFb0C4wpOhunECEG3Hcbdp24Wbdb8MY1xJ0NxSLx0xLG2S52dchWtm4vYDlCO aRwn3etr0KwIBvVVx+skz3dE2LlaoKW9+Pssaf8SJ+Sg6+puCNyLsMRto/+pRHj0 R+EM8HxSZaLYobTv2/20Rl7YlAHB/DCdY/u6sKaHEgQ/uXb4hHRSKk126QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK71bvrrQUlBihbitnJ/0Wm6lad1MB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn41ly5tN ZAIq1aSPKr+nAihzAHn8fimAwx6PY9Zv74oj3e+WqhbLIKsh8Xhsy/Qp/C4Cwhpu MNnWK7/OlFaTxaT9Db5iUUMPMLRltTypq9mY9xbUR6sIcE+QFtN2mCvGwKGNv5L8 bIuFwODHIPdCzKcKH22gQqriK7Z2n4GJrjydQIzo71++jryjIJH4RKbNrJdpa1hR 4OefYYFjiDeD8JGIUOu9/1wnqwBsZi2enfGE83ALJjFJQPT/9BwOHHoY64nVXAJv qzosYuS1/i7U7hJMqsxEc+vjWVWxaW7avLVxvW7OZjyhI2YUprIZzvnMq/5oXsXc bagkHB/DAuDzxA== -----END CERTIFICATE-----Generated at Wed Dec 10 19:56:08 2025 by rpki-client