This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json) Hash identifier: iCOVKlc4oUh7d/LgX+G654U0K2eTwMKbkxL/mQvd7i8= Subject key identifier: 73:0A:4D:65:77:0E:94:9D:98:3C:06:00:44:26:D5:90:65:30:77:F4 Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60 Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60 Certificate serial: 019B1F866713585AC9448B9A453F68A7DAAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft Manifest number: 0827 Signing time: Mon 15 Dec 2025 01:01:00 +0000 Manifest this update: Mon 15 Dec 2025 01:01:00 +0000 Manifest next update: Tue 16 Dec 2025 01:01:00 +0000 Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: WNrlbtOPChSmTN6dH6kwzGU4i8yceD9LTGP5OvmZsng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:67:13:58:5a:c9:44:8b:9a:45:3f:68:a7:da:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60 Validity Not Before: Dec 15 01:01:00 2025 GMT Not After : Dec 16 01:01:00 2025 GMT Subject: CN=730a4d65770e949d983c06004426d590653077f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:53:c2:c4:b1:9d:47:6e:f4:da:c0:c6:e1: 01:10:ed:72:a0:00:cf:cd:21:4a:48:df:4d:4d:27: 3d:da:d1:8a:6f:37:ad:89:c0:85:08:a2:13:63:f2: bc:3a:94:f0:a7:c3:c7:73:a7:ba:b4:8b:3d:a1:13: 5b:17:eb:24:0d:80:a9:c0:16:dd:8b:4d:e2:4c:87: 68:62:54:7e:10:91:bd:f3:47:6b:ce:eb:a4:bd:de: bf:c9:d2:b0:6b:22:ae:84:45:b5:85:e5:93:43:52: ef:33:1f:8c:73:23:ab:6b:1f:07:15:22:3f:ad:62: 42:aa:71:69:bb:e7:44:df:bd:d3:fb:33:e4:bc:be: 74:e5:1c:ff:90:86:a5:5b:61:b7:d2:65:92:9c:a2: a4:0d:a4:18:a6:36:1f:e8:fb:16:8a:c3:86:73:ee: 13:26:25:ca:74:df:a9:98:0a:a9:88:f9:76:64:75: d4:6f:64:53:dd:78:eb:de:49:79:a4:95:a9:81:3c: 34:48:de:cc:1a:47:11:c8:ba:7e:47:0e:1c:d0:93: 2d:82:24:8b:47:38:91:47:50:49:c6:3c:64:68:ad: 42:d8:c9:22:35:dd:46:35:55:ff:1f:06:39:77:79: 1a:c1:27:59:7b:46:07:2d:24:7a:59:e8:da:cc:b7: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0A:4D:65:77:0E:94:9D:98:3C:06:00:44:26:D5:90:65:30:77:F4 X509v3 Authority Key Identifier: keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2d:40:c4:6f:a3:ee:53:51:b0:56:54:99:67:6c:5e:71:d7: f0:fb:b1:33:58:45:48:95:7e:51:09:f3:dd:a2:da:af:be:df: ab:de:fb:15:6b:89:f9:e5:12:1e:6f:13:b8:8f:12:2c:6e:19: 0a:78:cb:ca:9f:b7:47:41:2d:4b:b2:03:a4:c9:63:54:e7:3d: 9f:a9:c1:fa:e5:1b:7c:78:f4:99:72:3b:5d:8a:9b:23:77:87: c2:a0:52:16:76:44:78:f5:dd:f9:12:f0:36:4b:bc:00:0b:96: 17:3e:3c:6c:6b:52:d0:83:f5:5b:8f:04:1e:86:77:97:55:73: a6:c7:ad:c0:84:59:ac:32:7f:f1:ea:e9:a7:e2:c3:73:d2:32: cb:70:7e:37:69:c3:c8:69:87:fd:0e:e3:11:3e:be:47:8f:19: 05:db:54:45:3c:0b:92:70:63:81:06:84:ff:d6:a8:92:cf:d4: 16:52:c8:fe:0c:3f:57:d0:e8:a1:93:b9:00:4d:03:33:42:70: a5:d7:8b:1f:89:b8:32:d6:27:df:4c:dc:29:eb:e8:c4:8f:09: 40:43:f5:3b:6f:67:0e:bf:76:e3:5b:74:4b:21:cc:f6:c8:b0: 38:4f:e9:81:5c:bc:0a:2e:a1:dd:5e:c6:8f:73:9e:92:db:8d: f9:de:35:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhmcTWFrJRIuaRT9op9qrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZWRhMjU0MWNmY2NmNjgyZTI5ZGRhZTYzMWVkYzhkMWU3 YjZmNjAwHhcNMjUxMjE1MDEwMTAwWhcNMjUxMjE2MDEwMTAwWjAzMTEwLwYDVQQD Eyg3MzBhNGQ2NTc3MGU5NDlkOTgzYzA2MDA0NDI2ZDU5MDY1MzA3N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJpTwsSxnUdu9NrAxuEBEO1yoADP zSFKSN9NTSc92tGKbzeticCFCKITY/K8OpTwp8PHc6e6tIs9oRNbF+skDYCpwBbd i03iTIdoYlR+EJG980drzuukvd6/ydKwayKuhEW1heWTQ1LvMx+McyOrax8HFSI/ rWJCqnFpu+dE373T+zPkvL505Rz/kIalW2G30mWSnKKkDaQYpjYf6PsWisOGc+4T JiXKdN+pmAqpiPl2ZHXUb2RT3Xjr3kl5pJWpgTw0SN7MGkcRyLp+Rw4c0JMtgiSL RziRR1BJxjxkaK1C2MkiNd1GNVX/HwY5d3kawSdZe0YHLSR6WejazLfdJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMKTWV3DpSdmDwGAEQm1ZBlMHf0MB8GA1UdIwQY MBaAFDTtolQc/M9oLindrmMe3I0ee29gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk8yaVZCejh6Mmd1S2QydVl4N2NqUjU3YjJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jNzI0NGUtYjEwMy00M2IxLTkxMmYt YWE2MzJkZGI3NjE1LzEvTk8yaVZCejh6Mmd1S2QydVl4N2NqUjU3YjJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jNzI0NGUtYjEwMy00M2IxLTkxMmYtYWE2MzJkZGI3NjE1 LzEvTk8yaVZCejh6Mmd1S2QydVl4N2NqUjU3YjJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey1AxG+j 7lNRsFZUmWdsXnHX8PuxM1hFSJV+UQnz3aLar77fq977FWuJ+eUSHm8TuI8SLG4Z CnjLyp+3R0EtS7IDpMljVOc9n6nB+uUbfHj0mXI7XYqbI3eHwqBSFnZEePXd+RLw Nku8AAuWFz48bGtS0IP1W48EHoZ3l1VzpsetwIRZrDJ/8erpp+LDc9Iyy3B+N2nD yGmH/Q7jET6+R48ZBdtURTwLknBjgQaE/9aoks/UFlLI/gw/V9DooZO5AE0DM0Jw pdeLH4m4MtYn30zcKevoxI8JQEP1O29nDr9241t0SyHM9siwOE/pgVy8Ci6h3V7G j3OektuN+d41+w== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:29 2025 by rpki-client