This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json) Hash identifier: vBfUMqoQB4mJkpI+0A2hEahBfBS9ys+WKHm6qDSftYs= Subject key identifier: F9:6B:4D:A2:E2:00:E3:BA:8D:43:29:5D:6B:79:5E:82:59:64:46:31 Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Certificate serial: 019B5C090782F7F398ABB3021D48F0001240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft Manifest number: 0C45 Signing time: Fri 26 Dec 2025 19:00:54 +0000 Manifest this update: Fri 26 Dec 2025 19:00:54 +0000 Manifest next update: Sat 27 Dec 2025 19:00:54 +0000 Files and hashes: 1: 43HN-WojVqeLOGbjlvU4KmuDcw8.roa (hash: lA6GODL3wPZINRy3RkLrOMCh7lQspm9tGiMrGo/nCbk=) 2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=) 3: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: 1ZJdSm+/ukaEBOvPkXatFDUfRYBeSb5jRmXOmXiFUu0=) 4: NmLjr4D1oVlMUObOTvLM1xAzd4w.roa (hash: 2JPcfWuMTpLj1ICDWdYsPKsfferPa3mavJOhWQcLuVU=) 5: Qv4r9KoCM0llZGGIu0ESO7fsTrk.roa (hash: 2dbd9G4ssUUV7QjZ8jn5D3p3tWBPiALD7SCeLQ3ju+s=) 6: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:07:82:f7:f3:98:ab:b3:02:1d:48:f0:00:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5 Validity Not Before: Dec 26 19:00:54 2025 GMT Not After : Dec 27 19:00:54 2025 GMT Subject: CN=f96b4da2e200e3ba8d43295d6b795e8259644631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:d0:47:48:32:00:d4:82:7d:9f:12:a2:28: 3a:dc:45:c5:c1:5a:32:3e:b5:24:a3:b1:ea:3c:87: 3f:27:9d:39:cc:6d:11:e9:6a:32:05:e3:4a:36:c5: cc:be:63:f6:35:db:69:3d:e6:e0:73:81:55:7f:75: 06:0c:37:47:8f:fd:e2:cb:47:82:1c:e6:20:4c:27: 3c:a0:cd:aa:e1:f4:e9:2c:7c:07:75:ad:08:ec:45: 74:98:b8:ed:c8:28:8a:33:c3:27:6e:2c:91:88:9c: 1b:03:d3:8b:9c:fa:7d:54:f7:77:5b:69:0e:30:e5: b7:8b:1b:40:35:b7:0c:dc:3f:4d:26:43:c3:06:03: f3:ec:7b:b8:6e:08:8a:d1:31:a5:87:12:43:de:99: 7e:dd:25:b4:1e:06:ba:52:7e:01:2b:a0:38:3e:8b: 4d:51:0a:f0:0f:8a:90:af:bc:0d:3a:74:2d:ed:8d: ac:6d:32:ae:0b:08:24:e6:d1:c7:fc:e3:8a:1f:89: 85:ef:c4:7e:8e:e8:03:a4:2e:62:39:22:b7:61:d9: 0a:e5:ad:1d:3c:c2:39:32:35:d3:0d:83:6f:16:9b: e5:b2:80:ac:00:41:86:ab:cc:97:f0:b7:f8:f9:49: 99:7f:e7:ff:e7:f3:6d:88:62:99:5c:94:3b:51:d9: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6B:4D:A2:E2:00:E3:BA:8D:43:29:5D:6B:79:5E:82:59:64:46:31 X509v3 Authority Key Identifier: keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:32:b1:eb:79:eb:d1:2d:a6:b6:d3:ab:f1:56:8f:0f:78:e3: 0d:b1:81:b2:77:a7:c4:47:9c:fd:51:29:17:d7:bb:d8:a8:04: 49:01:70:2f:e8:0e:a6:83:49:55:69:88:97:3c:80:ec:b5:1c: 77:64:12:8f:52:a6:64:d8:01:6c:90:63:cf:b5:f1:23:db:2c: 78:a9:84:12:ab:80:a2:2f:8c:77:8d:87:04:33:7e:66:cc:48: 47:7f:af:8a:e3:bc:89:75:24:35:42:27:42:0b:56:c0:e6:94: 49:11:cf:3b:6b:6c:43:2b:cf:ce:6f:28:6c:02:e5:b3:44:12: a7:22:39:d5:90:73:d9:ac:15:8b:96:d0:ac:50:19:cc:84:af: 67:bc:9e:13:03:af:f9:90:74:b0:f6:4a:a3:98:16:e5:7e:31: 21:81:06:f1:2b:ea:e6:ab:b6:3b:1c:ec:df:0d:1f:9e:92:1e: d6:99:49:a0:2c:bb:42:41:bf:ad:a0:d0:80:15:9f:47:42:44: 7f:5d:8d:fb:f4:92:60:50:a1:b0:0a:4f:ac:3c:b1:21:dc:a0: 2d:4e:0f:01:32:f0:a8:3c:58:73:e6:31:dd:97:78:cd:9d:8c: 01:e1:99:21:dc:24:66:c9:b6:0f:a6:32:be:ec:91:ea:df:ed: aa:1f:4a:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCQeC9/OYq7MCHUjwABJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl NjFiZDUwHhcNMjUxMjI2MTkwMDU0WhcNMjUxMjI3MTkwMDU0WjAzMTEwLwYDVQQD EyhmOTZiNGRhMmUyMDBlM2JhOGQ0MzI5NWQ2Yjc5NWU4MjU5NjQ0NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFjQR0gyANSCfZ8Soig63EXFwVoy PrUko7HqPIc/J505zG0R6WoyBeNKNsXMvmP2NdtpPebgc4FVf3UGDDdHj/3iy0eC HOYgTCc8oM2q4fTpLHwHda0I7EV0mLjtyCiKM8MnbiyRiJwbA9OLnPp9VPd3W2kO MOW3ixtANbcM3D9NJkPDBgPz7Hu4bgiK0TGlhxJD3pl+3SW0Hga6Un4BK6A4PotN UQrwD4qQr7wNOnQt7Y2sbTKuCwgk5tHH/OOKH4mF78R+jugDpC5iOSK3YdkK5a0d PMI5MjXTDYNvFpvlsoCsAEGGq8yX8Lf4+UmZf+f/5/NtiGKZXJQ7UdmGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlrTaLiAOO6jUMpXWt5XoJZZEYxMB8GA1UdIwQY MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjKx63nr 0S2mttOr8VaPD3jjDbGBsnenxEec/VEpF9e72KgESQFwL+gOpoNJVWmIlzyA7LUc d2QSj1KmZNgBbJBjz7XxI9sseKmEEquAoi+Md42HBDN+ZsxIR3+viuO8iXUkNUIn QgtWwOaUSRHPO2tsQyvPzm8obALls0QSpyI51ZBz2awVi5bQrFAZzISvZ7yeEwOv +ZB0sPZKo5gW5X4xIYEG8Svq5qu2Oxzs3w0fnpIe1plJoCy7QkG/raDQgBWfR0JE f12N+/SSYFChsApPrDyxIdygLU4PATLwqDxYc+Yx3Zd4zZ2MAeGZIdwkZsm2D6Yy vuyR6t/tqh9K9g== -----END CERTIFICATE-----Generated at Fri Dec 26 22:44:55 2025 by rpki-client