This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json) Hash identifier: j04bKy98EsSsJDzI5/CgOa/wDBr9lRsnrtSuRvG9btw= Subject key identifier: 93:D7:FC:E3:9E:B2:2D:62:11:C5:D2:5E:AB:36:90:7C:02:6D:DD:F2 Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Certificate serial: 019B1916028DD0360A13534C418820139A69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft Manifest number: 0CEB Signing time: Sat 13 Dec 2025 19:00:31 +0000 Manifest this update: Sat 13 Dec 2025 19:00:31 +0000 Manifest next update: Sun 14 Dec 2025 19:00:31 +0000 Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: YUYt6VngIuJ22MhVkzf4ZcCuGd4ImOXVvYVjWfMaZq0=) 2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:02:8d:d0:36:0a:13:53:4c:41:88:20:13:9a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5 Validity Not Before: Dec 13 19:00:31 2025 GMT Not After : Dec 14 19:00:31 2025 GMT Subject: CN=93d7fce39eb22d6211c5d25eab36907c026dddf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:93:a5:31:67:9b:32:ea:79:7a:3e:1b:00: ca:63:62:b7:e7:b8:e7:72:5c:c7:23:a0:34:40:ee: 7b:20:52:72:4d:13:ed:1d:61:f2:66:26:57:01:f4: b9:6f:d4:31:8d:e0:19:82:a9:ff:5c:1b:7f:7d:78: 59:c1:a1:0d:68:88:17:bf:a0:c7:60:bb:46:cd:3b: 04:8c:c6:ab:09:f5:2b:77:f5:80:95:c1:81:b9:77: 90:91:42:5f:cb:a0:83:ac:d4:e8:4d:d2:26:5f:39: 58:aa:7c:4a:df:c7:01:ef:01:a6:1b:9c:1d:31:69: f0:a7:0d:cc:37:b0:e4:0b:96:9e:e8:a7:67:d2:ff: b3:5d:43:cb:e2:d5:af:ef:71:82:cc:44:ed:af:62: 3b:44:1a:fd:11:19:59:ef:94:97:ab:34:bb:1b:7b: 78:fa:a3:94:2a:a0:6f:dd:5a:7a:4b:8e:a5:fb:a2: e8:ec:8e:28:35:34:20:d3:f2:e6:96:fb:48:68:dd: 19:a6:5a:b3:ae:d6:5c:f8:61:e7:b3:8b:6b:3e:df: 16:96:9a:58:2d:c3:c5:da:c1:d1:13:ab:23:ad:be: 64:6e:5f:a3:2d:5f:0f:e6:0f:8e:0e:a0:1e:b1:67: 1b:c1:7a:41:8c:dd:84:15:91:55:41:f7:a5:cb:bf: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D7:FC:E3:9E:B2:2D:62:11:C5:D2:5E:AB:36:90:7C:02:6D:DD:F2 X509v3 Authority Key Identifier: keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1e:fe:a3:e6:cb:7d:b3:bf:d9:e8:3f:e5:45:ec:e8:f6:2f: bb:49:32:7b:52:8e:04:4d:95:8c:ac:eb:a8:f3:5a:86:b6:a0: 06:a3:70:0d:1a:45:a6:04:3e:4b:d9:1e:00:af:37:80:d5:db: 5f:b0:12:ab:ee:3f:34:43:01:ed:8e:19:01:a8:17:a3:2f:22: cb:b5:0c:75:88:8b:97:bb:72:cc:20:1b:29:f9:a6:27:68:4e: 5e:19:27:a8:35:c1:0b:dc:7c:80:c4:9c:c5:94:5e:42:f4:be: d1:e0:41:61:08:3f:a2:e9:44:e7:ef:75:be:ea:43:8b:e8:3d: 98:1f:b0:14:60:0f:59:61:4f:55:5b:d0:3c:dc:eb:07:91:b2: fc:b8:3e:0c:7b:bf:92:44:19:b6:99:0b:97:f4:5e:37:3f:77: bc:06:90:32:02:92:c1:66:e4:22:94:a1:74:f7:e7:99:06:2c: 55:a3:08:0f:e8:db:80:c2:82:d2:71:07:a4:3b:90:78:7a:41: ed:cc:44:e0:f2:fb:d5:8e:15:5f:5c:7b:5e:41:b4:87:33:7f: a1:29:83:ae:d8:6f:4a:ba:31:df:fd:2c:2b:d7:64:5c:27:ed: e6:d0:1b:33:64:a8:7a:d2:14:61:ea:2e:d2:46:fd:93:67:16: 1c:61:9a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFgKN0DYKE1NMQYggE5ppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWU2ZTFkNjZmYzA0N2UwZTg5ZmYwNDVjMmQwOGNhMTdk NTVlYTUwHhcNMjUxMjEzMTkwMDMxWhcNMjUxMjE0MTkwMDMxWjAzMTEwLwYDVQQD Eyg5M2Q3ZmNlMzllYjIyZDYyMTFjNWQyNWVhYjM2OTA3YzAyNmRkZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTSTpTFnmzLqeXo+GwDKY2K357jn clzHI6A0QO57IFJyTRPtHWHyZiZXAfS5b9QxjeAZgqn/XBt/fXhZwaENaIgXv6DH YLtGzTsEjMarCfUrd/WAlcGBuXeQkUJfy6CDrNToTdImXzlYqnxK38cB7wGmG5wd MWnwpw3MN7DkC5ae6Kdn0v+zXUPL4tWv73GCzETtr2I7RBr9ERlZ75SXqzS7G3t4 +qOUKqBv3Vp6S46l+6Lo7I4oNTQg0/LmlvtIaN0ZplqzrtZc+GHns4trPt8WlppY LcPF2sHRE6sjrb5kbl+jLV8P5g+ODqAesWcbwXpBjN2EFZFVQfely78fdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPX/OOesi1iEcXSXqs2kHwCbd3yMB8GA1UdIwQY MBaAFDRebh1m/AR+Don/BFwtCMoX1V6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTct ZGRkNzNkNTA5ZTEyLzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGIxOGMtYzI1Ni00OWY1LWJjMTctZGRkNzNkNTA5ZTEy LzEvTkY1dUhXYjhCSDRPaWY4RVhDMEl5aGZWWHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGx7+o+bL fbO/2eg/5UXs6PYvu0kye1KOBE2VjKzrqPNahragBqNwDRpFpgQ+S9keAK83gNXb X7ASq+4/NEMB7Y4ZAagXoy8iy7UMdYiLl7tyzCAbKfmmJ2hOXhknqDXBC9x8gMSc xZReQvS+0eBBYQg/oulE5+91vupDi+g9mB+wFGAPWWFPVVvQPNzrB5Gy/Lg+DHu/ kkQZtpkLl/ReNz93vAaQMgKSwWbkIpShdPfnmQYsVaMID+jbgMKC0nEHpDuQeHpB 7cxE4PL71Y4VX1x7XkG0hzN/oSmDrthvSrox3/0sK9dkXCft5tAbM2SoetIUYeou 0kb9k2cWHGGaaA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:02 2025 by rpki-client