This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json) Hash identifier: AvTLRhNN7fxdMv8g8d8wdcrp8JzsrZeQp+Iwr7NPx9c= Subject key identifier: C9:48:7D:26:94:2D:61:14:66:BD:40:47:94:03:8A:DD:0B:FF:47:11 Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Certificate serial: 019AB999F81BE475E4A7A406964F70CFABD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft Manifest number: 174A Signing time: Tue 25 Nov 2025 06:01:06 +0000 Manifest this update: Tue 25 Nov 2025 06:01:06 +0000 Manifest next update: Wed 26 Nov 2025 06:01:06 +0000 Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=) 2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: k8VpnOWjCJcS7sKjMXhsEZtmCi8vRI4BoxWsssdZSC0=) 3: sPxjsNKAZYfgxPi8TQlY-mZZcT4.roa (hash: EWGb5uGqI3pCu9DA248NQJ9YLr39oAfQHZAN5stmGVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:99:f8:1b:e4:75:e4:a7:a4:06:96:4f:70:cf:ab:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Validity Not Before: Nov 25 06:01:06 2025 GMT Not After : Nov 26 06:01:06 2025 GMT Subject: CN=c9487d26942d611466bd404794038add0bff4711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:63:bd:28:95:17:1c:64:b8:c8:ba:9f:b8: 60:14:a8:5c:78:84:29:2c:a1:15:c2:f0:2f:f5:f1: 23:aa:87:11:c0:91:69:d7:41:df:23:8e:64:44:60: dc:92:bd:48:f4:f0:52:44:71:d5:2d:14:a6:ec:45: 91:27:92:c3:55:16:a2:3f:e5:5c:c8:d9:4c:8f:5b: f5:12:ef:ec:e0:e2:25:d6:de:04:48:ea:fd:d9:45: 77:80:80:4a:d5:e5:2d:91:b7:36:b0:3c:6f:35:6c: a0:c5:ad:d4:f1:2a:f6:d8:d3:28:39:39:64:13:83: ed:b2:bc:b5:af:a0:43:b2:23:c7:42:28:95:09:85: 9b:04:d2:e1:92:48:1a:36:4c:fe:1d:4b:10:e7:45: f2:c9:dd:ba:c0:11:52:7b:61:51:78:ab:53:3c:f1: 26:32:a9:cc:17:ac:c8:81:68:e0:31:1f:d4:67:8b: bd:79:d7:9c:b5:55:78:5c:e5:f5:5c:47:be:b9:2c: 63:84:6c:46:44:3d:55:e0:d3:8f:82:23:9d:62:47: 73:af:59:0a:8e:22:fc:fa:f8:73:bc:ba:f4:6b:17: 5c:54:6d:c8:7c:99:26:0d:c7:b1:1e:81:f1:63:bf: 2d:ba:8a:5b:93:50:22:aa:df:31:f1:67:e5:bd:38: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:48:7D:26:94:2D:61:14:66:BD:40:47:94:03:8A:DD:0B:FF:47:11 X509v3 Authority Key Identifier: keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2c:de:5d:ee:b9:32:20:e7:ef:ee:4b:af:70:d0:0a:76:a5: e8:a7:0b:1f:c6:9c:58:2d:8f:c5:a3:4f:07:ae:98:00:0b:11: 83:c5:85:58:a6:04:e9:7a:96:f2:05:49:18:ef:3c:6b:ff:fb: 63:42:df:9c:06:35:3f:ba:eb:c4:f4:a7:87:1f:fd:92:85:a7: fc:aa:57:f4:83:37:fd:3d:5a:53:4e:71:c2:37:f6:dd:a9:6f: ca:ac:bb:a1:ac:e8:57:fd:00:31:d5:d8:a8:f9:46:89:9a:4c: 10:f6:3b:32:e4:60:96:ee:8e:23:5f:fa:15:a9:14:ba:c2:75: 06:0b:b6:23:ae:92:5e:a3:65:84:57:ee:92:60:b5:8f:44:05: 1e:1e:ca:68:a9:cf:f2:4a:b4:c1:38:a0:98:16:b9:bb:16:d8: 2a:99:61:38:63:5c:fc:3a:b2:e1:f3:e8:f6:8e:57:aa:a2:1f: 45:a0:da:4d:18:76:c8:07:30:ce:b2:72:2d:bc:fd:46:2a:5f: b1:89:41:1e:84:01:bd:73:17:19:c1:09:01:6a:fa:13:38:c9: 2d:c4:de:b1:64:d4:5e:23:39:84:9e:3d:1e:0a:69:81:f0:84: a5:51:cc:b2:c8:2e:7c:10:66:b2:4f:d5:5c:ae:8b:6e:45:af: 92:16:5e:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq5mfgb5HXkp6QGlk9wz6vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0 OTBmMGUwHhcNMjUxMTI1MDYwMTA2WhcNMjUxMTI2MDYwMTA2WjAzMTEwLwYDVQQD EyhjOTQ4N2QyNjk0MmQ2MTE0NjZiZDQwNDc5NDAzOGFkZDBiZmY0NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze9jvSiVFxxkuMi6n7hgFKhceIQp LKEVwvAv9fEjqocRwJFp10HfI45kRGDckr1I9PBSRHHVLRSm7EWRJ5LDVRaiP+Vc yNlMj1v1Eu/s4OIl1t4ESOr92UV3gIBK1eUtkbc2sDxvNWygxa3U8Sr22NMoOTlk E4Ptsry1r6BDsiPHQiiVCYWbBNLhkkgaNkz+HUsQ50Xyyd26wBFSe2FReKtTPPEm MqnMF6zIgWjgMR/UZ4u9edectVV4XOX1XEe+uSxjhGxGRD1V4NOPgiOdYkdzr1kK jiL8+vhzvLr0axdcVG3IfJkmDcexHoHxY78tuopbk1Aiqt8x8WflvTg/ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlIfSaULWEUZr1AR5QDit0L/0cRMB8GA1UdIwQY MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCzeXe65 MiDn7+5Lr3DQCnal6KcLH8acWC2PxaNPB66YAAsRg8WFWKYE6XqW8gVJGO88a//7 Y0LfnAY1P7rrxPSnhx/9koWn/KpX9IM3/T1aU05xwjf23alvyqy7oazoV/0AMdXY qPlGiZpMEPY7MuRglu6OI1/6FakUusJ1Bgu2I66SXqNlhFfukmC1j0QFHh7KaKnP 8kq0wTigmBa5uxbYKplhOGNc/Dqy4fPo9o5XqqIfRaDaTRh2yAcwzrJyLbz9Ripf sYlBHoQBvXMXGcEJAWr6EzjJLcTesWTUXiM5hJ49HgppgfCEpVHMssgufBBmsk/V XK6LbkWvkhZekw== -----END CERTIFICATE-----Generated at Tue Nov 25 13:20:12 2025 by rpki-client