This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json) Hash identifier: xrJpgPWN8J5lDl6txmCH9szSJ0yz47RHUU7MNB/CcIQ= Subject key identifier: 1E:0F:37:33:A1:02:21:B7:0B:CD:FC:D9:24:0C:AB:AC:37:AD:36:AF Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Certificate serial: 019AABA856D7E3C943BD24DD0C35BFCF2A1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft Manifest number: 167C Signing time: Sat 22 Nov 2025 13:02:07 +0000 Manifest this update: Sat 22 Nov 2025 13:02:07 +0000 Manifest next update: Sun 23 Nov 2025 13:02:07 +0000 Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=) 2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: ufo5wCH6YTYddlR1YYjFE7NyCIp0RcniifL47B6wJEs=) 3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a8:56:d7:e3:c9:43:bd:24:dd:0c:35:bf:cf:2a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9 Validity Not Before: Nov 22 13:02:07 2025 GMT Not After : Nov 23 13:02:07 2025 GMT Subject: CN=1e0f3733a10221b70bcdfcd9240cabac37ad36af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:91:61:49:5a:4e:9a:78:bd:8f:61:38:94: 9a:a7:25:2e:93:7d:cf:eb:95:4a:a4:00:09:9f:58: de:49:f9:e3:7a:e5:79:40:61:ad:56:7b:f5:33:e2: ac:03:7a:81:9a:10:64:6f:7d:da:80:9b:e9:20:b7: 6a:77:53:b1:bf:2c:e5:e6:ad:11:d9:d5:3a:98:d9: eb:96:21:79:84:4e:98:8a:5b:ef:12:62:db:fc:7e: 79:c0:b7:ee:d1:3f:bd:68:82:ec:50:82:d9:7a:af: 4c:ad:88:d3:bb:c7:a8:be:8d:db:13:cf:6e:7d:f0: 9a:f5:1b:07:f7:4a:10:ab:a0:9c:60:06:4c:6e:63: ad:f4:26:c5:77:99:ea:8b:8e:6f:e5:05:bb:56:44: 79:5e:e9:b2:30:53:e1:6b:9d:8f:99:92:d1:68:8c: 5a:2f:7b:cd:18:e7:52:fd:bb:3f:59:0c:72:9d:9e: e1:64:ed:b8:db:19:1f:e0:80:a1:81:89:0f:3f:f5: 6f:8f:a5:1a:dd:4f:2e:56:d1:8b:1d:f9:18:fa:8f: 63:a3:d2:d0:09:a2:e4:12:2d:b8:46:fe:2b:bc:0a: 80:da:90:11:1e:c8:c4:73:8a:bd:e2:db:be:54:e7: c3:07:03:ed:fa:ef:75:7e:08:3f:6e:17:9e:fb:62: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0F:37:33:A1:02:21:B7:0B:CD:FC:D9:24:0C:AB:AC:37:AD:36:AF X509v3 Authority Key Identifier: keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:90:aa:4e:3c:74:6a:54:e7:ea:fb:a9:ac:24:a2:77:75:1c: 02:c2:dc:06:e1:b0:26:60:ba:93:46:c3:d7:a8:ff:8e:11:11: 5a:4d:8f:19:4b:6d:f3:f5:45:52:98:77:66:a6:0f:fd:88:0d: 1a:25:b5:23:4f:0c:98:73:d4:c9:33:2a:34:0b:43:00:dc:fd: bb:a3:92:02:4d:bf:2a:67:a8:4f:bd:49:e6:3e:6e:2b:8f:74: 53:2b:27:7f:9a:38:4f:ff:23:54:aa:f6:55:58:41:ec:c3:3c: cc:5e:9f:cc:34:95:07:01:ba:2a:df:6b:40:1d:4e:89:cb:35: 04:16:d2:c7:40:c5:75:4f:23:5c:87:ab:b0:0a:22:ae:11:b9: 47:38:ad:fa:18:04:9b:b7:35:ef:99:d9:e4:94:66:34:42:72: 2a:c8:7a:ae:b8:90:7d:8e:ec:ff:5a:1b:c0:d0:30:a8:93:71: 74:ba:28:c4:d7:a7:51:ed:d4:14:3b:2b:60:69:95:9d:32:35: e8:97:aa:0d:46:a2:be:11:e8:7d:59:63:63:b3:6c:02:5a:bc: 1b:82:e1:fc:9f:1c:ce:dc:73:10:fc:27:93:12:dd:48:da:5a: 0e:fd:94:7a:8e:b4:e3:75:aa:99:d6:30:af:3a:16:4f:fe:69: 81:46:b7:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrqFbX48lDvSTdDDW/zyodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh MGNkYzkwHhcNMjUxMTIyMTMwMjA3WhcNMjUxMTIzMTMwMjA3WjAzMTEwLwYDVQQD EygxZTBmMzczM2ExMDIyMWI3MGJjZGZjZDkyNDBjYWJhYzM3YWQzNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iiRYUlaTpp4vY9hOJSapyUuk33P 65VKpAAJn1jeSfnjeuV5QGGtVnv1M+KsA3qBmhBkb33agJvpILdqd1Oxvyzl5q0R 2dU6mNnrliF5hE6YilvvEmLb/H55wLfu0T+9aILsUILZeq9MrYjTu8eovo3bE89u ffCa9RsH90oQq6CcYAZMbmOt9CbFd5nqi45v5QW7VkR5XumyMFPha52PmZLRaIxa L3vNGOdS/bs/WQxynZ7hZO242xkf4IChgYkPP/Vvj6Ua3U8uVtGLHfkY+o9jo9LQ CaLkEi24Rv4rvAqA2pARHsjEc4q94tu+VOfDBwPt+u91fgg/bhee+2J4sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4PNzOhAiG3C8382SQMq6w3rTavMB8GA1UdIwQY MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpCqTjx0 alTn6vuprCSid3UcAsLcBuGwJmC6k0bD16j/jhERWk2PGUtt8/VFUph3ZqYP/YgN GiW1I08MmHPUyTMqNAtDANz9u6OSAk2/KmeoT71J5j5uK490Uysnf5o4T/8jVKr2 VVhB7MM8zF6fzDSVBwG6Kt9rQB1Oics1BBbSx0DFdU8jXIersAoirhG5Rzit+hgE m7c175nZ5JRmNEJyKsh6rriQfY7s/1obwNAwqJNxdLooxNenUe3UFDsrYGmVnTI1 6JeqDUaivhHofVljY7NsAlq8G4Lh/J8cztxzEPwnkxLdSNpaDv2Ueo6043WqmdYw rzoWT/5pgUa3Sw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:52:55 2025 by rpki-client