This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json) Hash identifier: cVDfwQ5RYOcvkuAwmi7ID3MiVVj/JAfVG5bcSsMgPps= Subject key identifier: 0C:74:7E:FF:C4:6A:19:6D:85:82:DA:EB:C6:7E:D5:BA:C4:90:C5:F6 Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8 Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8 Certificate serial: 019B59E4579E73E74D2A7CB6C86462870653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft Manifest number: 171B Signing time: Fri 26 Dec 2025 09:01:35 +0000 Manifest this update: Fri 26 Dec 2025 09:01:35 +0000 Manifest next update: Sat 27 Dec 2025 09:01:35 +0000 Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=) 2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: mCirw6wenie9Rl6k+YWeB0t23Q5OtxyCkwpUxMeAxYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:57:9e:73:e7:4d:2a:7c:b6:c8:64:62:87:06:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8 Validity Not Before: Dec 26 09:01:35 2025 GMT Not After : Dec 27 09:01:35 2025 GMT Subject: CN=0c747effc46a196d8582daebc67ed5bac490c5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:e9:ab:eb:2f:34:21:52:e1:87:ea:25:33: be:62:d1:27:eb:88:59:74:a3:ab:8d:30:e9:58:ae: 3b:7d:aa:9f:63:ec:6d:17:a3:a1:fa:7c:d0:76:71: ac:e1:8f:c7:d0:61:64:eb:1b:2f:f7:4e:ef:d0:e2: 00:25:02:01:ce:1e:42:bc:1c:33:f7:c5:61:d9:4e: 75:bc:df:12:11:f4:f3:a9:a2:5b:11:df:1d:57:5f: 1e:ba:ca:7d:c2:54:5a:00:34:10:79:51:1b:a0:f4: 28:14:60:1d:58:70:34:b3:97:d5:10:ec:40:f5:50: e0:ad:0a:5e:c7:57:5d:da:fe:36:d2:3d:38:4d:91: 90:13:fd:f1:95:99:cf:3f:dd:ee:0d:63:50:e4:c0: e3:9e:06:18:51:df:8a:6c:01:80:7c:35:1e:66:25: ab:e9:53:6f:11:19:b0:2e:e3:38:3f:ae:42:46:37: 85:95:e8:1d:d6:ae:48:2f:ad:3c:d9:67:9a:0b:f1: ab:4d:b1:66:d7:a0:1f:0d:9a:65:cd:f1:ae:c3:bc: b4:87:dc:be:4f:87:84:6c:b5:09:d8:b3:83:e6:46: 10:7a:08:60:f0:5a:d8:4c:b1:68:da:29:a6:ca:a7: 26:fd:01:2a:91:7a:3c:44:0f:a4:18:dd:27:6e:9e: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:74:7E:FF:C4:6A:19:6D:85:82:DA:EB:C6:7E:D5:BA:C4:90:C5:F6 X509v3 Authority Key Identifier: keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:64:6d:61:2c:ce:73:56:6a:9b:88:01:91:0d:57:de:16:37: 50:2a:58:2f:bb:e8:1d:c5:fd:a4:07:05:20:4b:df:a4:3f:e7: 4d:d5:8b:c1:4b:ce:6a:7b:6c:fd:2b:7f:3b:f1:6c:bc:68:e1: df:6d:18:c2:c5:ed:3b:cb:85:4a:58:1c:b1:b6:bc:3b:08:2e: d9:c0:ea:db:8e:e5:ee:a6:66:08:d9:37:13:95:23:a2:c5:72: 1c:91:f9:c1:72:19:c2:78:71:6f:45:ba:b2:cb:e7:09:d2:07: 27:a9:55:33:83:c1:dd:cf:0e:64:59:8a:56:9d:a6:a0:63:00: e6:64:56:e9:72:8a:7b:cc:4a:f7:90:26:15:08:b1:cb:8d:d4: 7e:c0:ac:4c:24:b4:e1:8c:e0:7c:5d:ac:98:40:47:ee:fb:7f: 3b:91:04:ab:5b:4c:cc:8c:06:37:5c:be:76:10:e6:93:48:aa: 72:36:58:37:e4:1b:50:31:ec:02:43:71:ab:37:2e:c4:05:84: 9c:d0:31:bf:2a:f0:aa:43:b1:8a:e8:c2:76:b4:1e:8f:a7:9d: 88:dc:9a:df:87:88:6b:41:03:5f:b0:fc:6d:49:90:5c:eb:5a: 91:57:02:1d:c9:ad:49:a9:36:97:45:60:45:9f:36:db:07:fc: a2:62:7f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Feec+dNKny2yGRihwZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjFmZDY5ZTcxOTZhZWY1ZTI5YmE3OTU2ODBkYWMzZTM0 ODY4YzgwHhcNMjUxMjI2MDkwMTM1WhcNMjUxMjI3MDkwMTM1WjAzMTEwLwYDVQQD EygwYzc0N2VmZmM0NmExOTZkODU4MmRhZWJjNjdlZDViYWM0OTBjNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUrpq+svNCFS4YfqJTO+YtEn64hZ dKOrjTDpWK47faqfY+xtF6Oh+nzQdnGs4Y/H0GFk6xsv907v0OIAJQIBzh5CvBwz 98Vh2U51vN8SEfTzqaJbEd8dV18eusp9wlRaADQQeVEboPQoFGAdWHA0s5fVEOxA 9VDgrQpex1dd2v420j04TZGQE/3xlZnPP93uDWNQ5MDjngYYUd+KbAGAfDUeZiWr 6VNvERmwLuM4P65CRjeFlegd1q5IL6082WeaC/GrTbFm16AfDZplzfGuw7y0h9y+ T4eEbLUJ2LOD5kYQeghg8FrYTLFo2immyqcm/QEqkXo8RA+kGN0nbp4Z+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAx0fv/EahlthYLa68Z+1brEkMX2MB8GA1UdIwQY MBaAFDXx/WnnGWrvXim6eVaA2sPjSGjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMt ZjljYTcxMjRmMDk4LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMtZjljYTcxMjRmMDk4 LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWRtYSzO c1Zqm4gBkQ1X3hY3UCpYL7voHcX9pAcFIEvfpD/nTdWLwUvOants/St/O/FsvGjh 320YwsXtO8uFSlgcsba8Owgu2cDq247l7qZmCNk3E5UjosVyHJH5wXIZwnhxb0W6 ssvnCdIHJ6lVM4PB3c8OZFmKVp2moGMA5mRW6XKKe8xK95AmFQixy43UfsCsTCS0 4YzgfF2smEBH7vt/O5EEq1tMzIwGN1y+dhDmk0iqcjZYN+QbUDHsAkNxqzcuxAWE nNAxvyrwqkOxiujCdrQej6ediNya34eIa0EDX7D8bUmQXOtakVcCHcmtSak2l0Vg RZ822wf8omJ/sg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:07 2025 by rpki-client