This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json) Hash identifier: kncFlbykDMDKKlSCfiDVHDqMM4brK2W4HOqtUWCSc6A= Subject key identifier: C0:5B:8F:17:DF:16:AA:2C:46:F2:F5:89:00:70:E2:86:2E:7B:55:D4 Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Certificate serial: 019B06D99C98664F5D30AD5466835A2C048B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 06:01:23 +0000 Manifest this update: Wed 10 Dec 2025 06:01:23 +0000 Manifest next update: Thu 11 Dec 2025 06:01:23 +0000 Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: tbLkWGINCmn+cB1pR9MEe1n2mMYS0OB4YPWCaJXsxRw=) 2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=) 3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:9c:98:66:4f:5d:30:ad:54:66:83:5a:2c:04:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190 Validity Not Before: Dec 10 06:01:23 2025 GMT Not After : Dec 11 06:01:23 2025 GMT Subject: CN=c05b8f17df16aa2c46f2f5890070e2862e7b55d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:04:d8:85:6f:8e:16:2f:56:f0:43:0b:3b: 41:ef:5f:0b:a5:24:50:bd:76:8c:0f:ce:c8:e9:0a: e3:ac:fd:2a:aa:10:cc:1b:00:5d:47:61:cd:01:5c: c5:1a:c4:e1:c4:06:8c:cd:ec:06:c8:0b:57:fb:9f: 99:c8:cb:67:b2:31:6e:03:8d:ce:4b:73:23:cf:56: dd:99:a1:af:4d:a1:05:6b:02:1e:d5:2f:d9:b7:4a: ac:89:0c:ad:87:1d:0f:b7:bc:19:be:01:37:12:ca: 42:7e:dc:42:9d:9a:30:ac:24:f2:60:bb:6d:78:a6: f7:68:d2:72:eb:fa:f0:c4:70:b2:b5:68:f5:c9:57: bc:24:7b:0e:19:0e:52:dd:3f:80:c8:0d:98:10:2a: df:b4:8c:f5:0c:7c:c0:e5:b5:cc:62:fd:de:61:c2: 98:34:b4:41:bb:d3:07:1e:1e:24:65:64:22:3e:e0: f7:81:da:ee:4c:5f:9e:2d:5b:e1:4c:17:54:14:69: e0:02:76:f3:aa:70:f6:f4:34:5b:67:3d:14:fe:72: c5:f0:85:4f:7e:00:43:1f:a2:87:8b:3e:ef:74:8c: 5b:7c:0a:bb:26:3a:14:ca:0d:08:fc:d3:39:51:62: b9:f1:ae:18:a8:b3:45:d6:30:0d:b0:ca:35:c7:0f: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5B:8F:17:DF:16:AA:2C:46:F2:F5:89:00:70:E2:86:2E:7B:55:D4 X509v3 Authority Key Identifier: keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:97:09:c3:60:13:53:64:9b:61:eb:64:70:d4:25:ba:ba:8b: c6:38:36:d5:11:4d:84:cf:c2:e8:b3:b0:91:87:2b:59:6e:47: 63:e4:71:87:e6:58:c3:72:53:fe:5a:b8:72:78:08:4e:3f:fa: 50:36:35:e2:70:e7:0b:a5:f1:69:bf:25:9e:af:f6:ce:1d:46: 4e:7d:4a:39:f5:62:76:9c:06:5d:07:88:65:71:08:a7:c2:74: 49:9a:33:51:0a:b4:ff:a9:35:9f:3c:50:66:ad:c1:ab:c3:41: b9:5e:a3:69:0c:8f:5e:97:f2:98:a6:d9:73:9d:85:a6:ab:68: 36:53:fd:05:bf:01:01:9e:01:37:61:88:c4:82:b1:9b:e1:fb: 08:12:b1:7a:82:83:ea:df:52:94:07:86:fd:9f:80:48:f0:58: e1:57:85:17:78:51:68:bf:a1:82:22:81:5e:a4:4e:97:23:04: 9e:36:f1:dd:99:24:3c:68:c0:38:0e:5b:ad:c2:46:de:74:31: ed:16:f7:6d:21:b0:bc:4d:fb:8d:a6:75:d5:67:f2:fd:82:7c: ca:5e:17:f1:75:56:20:64:81:4a:77:dd:33:fc:53:0c:7c:5e: 12:3b:31:a0:b5:4b:e1:76:46:30:fb:8f:dc:64:98:be:fe:0e: 99:ac:ac:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2ZyYZk9dMK1UZoNaLASLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj MDgxOTAwHhcNMjUxMjEwMDYwMTIzWhcNMjUxMjExMDYwMTIzWjAzMTEwLwYDVQQD EyhjMDViOGYxN2RmMTZhYTJjNDZmMmY1ODkwMDcwZTI4NjJlN2I1NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgEE2IVvjhYvVvBDCztB718LpSRQ vXaMD87I6QrjrP0qqhDMGwBdR2HNAVzFGsThxAaMzewGyAtX+5+ZyMtnsjFuA43O S3Mjz1bdmaGvTaEFawIe1S/Zt0qsiQythx0Pt7wZvgE3EspCftxCnZowrCTyYLtt eKb3aNJy6/rwxHCytWj1yVe8JHsOGQ5S3T+AyA2YECrftIz1DHzA5bXMYv3eYcKY NLRBu9MHHh4kZWQiPuD3gdruTF+eLVvhTBdUFGngAnbzqnD29DRbZz0U/nLF8IVP fgBDH6KHiz7vdIxbfAq7JjoUyg0I/NM5UWK58a4YqLNF1jANsMo1xw8BVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBbjxffFqosRvL1iQBw4oYue1XUMB8GA1UdIwQY MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZcJw2AT U2SbYetkcNQlurqLxjg21RFNhM/C6LOwkYcrWW5HY+Rxh+ZYw3JT/lq4cngITj/6 UDY14nDnC6Xxab8lnq/2zh1GTn1KOfVidpwGXQeIZXEIp8J0SZozUQq0/6k1nzxQ Zq3Bq8NBuV6jaQyPXpfymKbZc52FpqtoNlP9Bb8BAZ4BN2GIxIKxm+H7CBKxeoKD 6t9SlAeG/Z+ASPBY4VeFF3hRaL+hgiKBXqROlyMEnjbx3ZkkPGjAOA5brcJG3nQx 7Rb3bSGwvE37jaZ11Wfy/YJ8yl4X8XVWIGSBSnfdM/xTDHxeEjsxoLVL4XZGMPuP 3GSYvv4OmaysUw== -----END CERTIFICATE-----Generated at Wed Dec 10 13:06:21 2025 by rpki-client