This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json) Hash identifier: oIiwvvHL/n0JVjWZDnMF1s/HFp/IJBo0cAl3Jl4oFLE= Subject key identifier: DA:B4:75:F8:17:2D:08:CB:48:FE:0D:D3:21:20:04:31:91:37:FB:AA Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a Certificate serial: 019B3F7ED2254E3941E354A825A58005CAAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft Manifest number: 1596 Signing time: Sun 21 Dec 2025 06:00:34 +0000 Manifest this update: Sun 21 Dec 2025 06:00:34 +0000 Manifest next update: Mon 22 Dec 2025 06:00:34 +0000 Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: 3S4+ENSo/3FffHHJgriehIS6wV9TTfLNxKEZXh/z8bg=) 2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:d2:25:4e:39:41:e3:54:a8:25:a5:80:05:ca:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a Validity Not Before: Dec 21 06:00:34 2025 GMT Not After : Dec 22 06:00:34 2025 GMT Subject: CN=dab475f8172d08cb48fe0dd3212004319137fbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:96:2b:d4:07:f0:9b:3f:79:38:8c:a3:19: 52:3e:42:07:ef:d3:96:2e:f8:9a:aa:af:b9:a9:a6: 4a:1b:04:1d:70:52:ac:73:dc:07:03:73:7d:03:ee: 64:2a:50:04:9f:26:82:48:dd:e8:2c:b9:88:eb:39: 15:49:c7:cb:88:9e:c6:00:97:b5:9f:0c:85:bb:66: 57:d2:27:dc:9a:4d:b5:82:72:19:fe:4b:9e:1d:b6: 4b:c0:8b:b1:07:73:85:be:b9:2b:27:5e:ac:b2:0d: e2:7c:f7:8d:82:6c:7c:2b:5b:7f:e9:7c:b7:a6:fc: b9:6d:ff:45:e9:01:f8:46:e0:b5:a5:65:2d:6d:09: 70:1b:c5:b6:a4:53:90:69:6c:5f:94:47:f7:16:0e: 0b:54:33:04:2c:75:39:fa:a6:3a:24:b6:a6:c4:3d: 51:22:76:fb:3d:7c:39:6c:62:a1:b3:07:e7:45:0b: 66:8a:55:68:28:7f:e8:38:4c:2e:5c:c7:f1:1d:ab: 4f:22:9c:15:45:45:4b:31:7b:ea:0d:ee:f2:09:e1: c4:e3:85:77:c9:46:68:6d:80:03:a5:55:53:56:89: 2f:dc:68:bb:73:73:a4:4c:d3:32:4a:e1:ef:80:fe: cd:fc:c0:ae:f3:66:dc:87:c0:56:47:a2:b7:61:c0: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B4:75:F8:17:2D:08:CB:48:FE:0D:D3:21:20:04:31:91:37:FB:AA X509v3 Authority Key Identifier: keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2d:87:0a:69:e5:bd:82:03:9a:da:29:0f:25:08:fb:bd:af: 1e:64:6e:97:ee:fa:ba:8d:d1:26:70:ff:62:d4:c7:c7:c1:4b: 4f:bc:36:57:b6:34:d9:17:52:5a:1e:e4:e7:1c:0c:a0:2f:c8: 76:5c:12:12:a2:3d:61:11:fd:15:21:f3:91:10:c4:44:de:11: 70:32:a7:b1:05:84:98:81:dd:05:18:d6:87:74:f1:a6:30:f0: b5:c5:7e:f3:f3:3c:28:e5:82:54:60:bc:0d:c3:b5:23:e6:d0: 58:95:3e:91:ec:fb:a0:2b:76:70:53:75:68:b9:4a:d9:88:88: 63:45:48:c6:f5:ea:ad:fc:c6:50:5a:b2:48:0e:0b:95:76:6b: d7:68:28:d3:02:61:d3:4a:63:5b:19:c8:ed:4d:d5:18:2e:e4: 67:46:ff:aa:65:1d:9d:e3:62:ec:aa:f0:40:3c:9e:e4:b7:a7: 94:72:9a:1c:9c:a8:57:e9:3f:7e:af:2a:1d:bc:92:d3:91:90: a3:30:03:f9:38:fb:e8:91:88:4c:ed:45:53:4e:f3:54:84:ed: 19:aa:d8:4b:af:19:1e:e6:d7:f8:5a:71:c0:c0:41:6e:6e:76: e8:1d:d6:e7:77:79:e3:40:0c:90:ce:c3:0b:e7:7f:51:4d:aa: 54:ba:82:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ftIlTjlB41SoJaWABcqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw ODk3NWEwHhcNMjUxMjIxMDYwMDM0WhcNMjUxMjIyMDYwMDM0WjAzMTEwLwYDVQQD EyhkYWI0NzVmODE3MmQwOGNiNDhmZTBkZDMyMTIwMDQzMTkxMzdmYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZyWK9QH8Js/eTiMoxlSPkIH79OW Lviaqq+5qaZKGwQdcFKsc9wHA3N9A+5kKlAEnyaCSN3oLLmI6zkVScfLiJ7GAJe1 nwyFu2ZX0ifcmk21gnIZ/kueHbZLwIuxB3OFvrkrJ16ssg3ifPeNgmx8K1t/6Xy3 pvy5bf9F6QH4RuC1pWUtbQlwG8W2pFOQaWxflEf3Fg4LVDMELHU5+qY6JLamxD1R Inb7PXw5bGKhswfnRQtmilVoKH/oOEwuXMfxHatPIpwVRUVLMXvqDe7yCeHE44V3 yUZobYADpVVTVokv3Gi7c3OkTNMySuHvgP7N/MCu82bch8BWR6K3YcCfQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq0dfgXLQjLSP4N0yEgBDGRN/uqMB8GA1UdIwQY MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApC2HCmnl vYIDmtopDyUI+72vHmRul+76uo3RJnD/YtTHx8FLT7w2V7Y02RdSWh7k5xwMoC/I dlwSEqI9YRH9FSHzkRDERN4RcDKnsQWEmIHdBRjWh3TxpjDwtcV+8/M8KOWCVGC8 DcO1I+bQWJU+kez7oCt2cFN1aLlK2YiIY0VIxvXqrfzGUFqySA4LlXZr12go0wJh 00pjWxnI7U3VGC7kZ0b/qmUdneNi7KrwQDye5LenlHKaHJyoV+k/fq8qHbyS05GQ ozAD+Tj76JGITO1FU07zVITtGarYS68ZHubX+FpxwMBBbm526B3W53d540AMkM7D C+d/UU2qVLqC3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 15:40:42 2025 by rpki-client