This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json) Hash identifier: qhBNC3jUt4ayeUk3WfKCejniUL80yoLrJJ7Oiz7u1bk= Subject key identifier: BA:A3:BD:9D:89:48:B7:D1:E7:D5:01:59:66:4B:6B:92:46:03:FE:C0 Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Certificate serial: 019B32D6D2569E2CD607DAC88C6A262B5903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft Manifest number: 0A03 Signing time: Thu 18 Dec 2025 19:01:37 +0000 Manifest this update: Thu 18 Dec 2025 19:01:37 +0000 Manifest next update: Fri 19 Dec 2025 19:01:37 +0000 Files and hashes: 1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=) 2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: yFRjLPulxWJK/GYbRihKYRSZP5W333PPrFTDLLTlcbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:d2:56:9e:2c:d6:07:da:c8:8c:6a:26:2b:59:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Validity Not Before: Dec 18 19:01:37 2025 GMT Not After : Dec 19 19:01:37 2025 GMT Subject: CN=baa3bd9d8948b7d1e7d50159664b6b924603fec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:f7:4c:e5:ef:55:47:d7:9c:bb:0d:99:71: 09:9a:bd:f9:33:6a:ae:c4:e2:03:a1:52:91:b8:d3: ed:c2:aa:1e:a8:22:b6:f4:10:3e:21:eb:58:fa:06: 42:86:a5:4f:cb:9f:91:a2:17:3f:2b:82:5d:a2:13: 20:a7:4e:1c:fc:69:d5:ea:6e:fa:8b:5d:12:00:ba: d2:fa:12:57:d8:50:8c:cb:3b:52:14:03:e6:d7:82: d4:56:f7:9e:cc:08:1c:60:d9:c8:64:9a:af:ae:4a: a9:2d:3d:02:fc:e3:bb:ed:3f:45:41:f4:b0:8e:23: 6d:7f:fa:60:0b:91:85:42:de:be:d5:62:36:9e:72: e5:59:66:9f:89:50:4e:f6:26:28:ad:0f:dc:0f:9d: 60:ed:d3:4c:9f:0c:41:95:7c:73:43:cb:13:42:11: 17:50:1f:54:fc:4b:bd:b2:64:65:38:3c:5e:0d:a9: 26:d4:33:10:51:f5:13:bf:52:93:74:2f:01:f6:f7: d9:79:84:74:3f:17:3a:8b:e6:ad:9a:53:44:80:1d: ae:bf:b9:0f:dc:fc:aa:e5:09:65:7a:80:38:9c:3e: ae:c9:fd:e2:d4:85:25:5e:7a:52:d6:6a:2b:9f:f3: 69:a2:bc:0c:4f:5b:8d:b1:b7:b7:08:34:6a:72:0f: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A3:BD:9D:89:48:B7:D1:E7:D5:01:59:66:4B:6B:92:46:03:FE:C0 X509v3 Authority Key Identifier: keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:65:e1:e5:b6:71:46:ac:0f:73:e7:ea:6f:2a:55:b4:16:6d: d1:96:82:60:41:d0:8e:2a:38:f2:3b:54:60:d7:5e:62:fb:64: 1c:7a:a6:55:a2:6c:ce:26:1b:05:ae:90:fe:b2:92:0a:38:7c: ef:54:35:a0:f7:5d:4e:04:23:a8:7b:30:0e:9b:23:3f:ca:5d: 98:d2:c6:15:cc:a1:ce:f7:9f:1f:d6:02:26:1e:a5:f8:b4:ba: a5:1e:79:24:83:ef:d5:ae:1d:72:20:26:9f:3e:66:08:00:61: cd:79:42:40:3d:da:8e:d6:63:d5:72:7e:7d:cb:eb:e1:af:21: dd:eb:2f:38:5e:d5:a8:d8:29:2a:00:01:03:99:8b:7e:92:72: 86:3f:ee:b3:41:10:93:09:a3:75:e6:d9:25:77:88:70:9e:32: 62:52:1f:1a:eb:e5:e0:89:37:e3:d3:bf:4c:b1:0d:1f:9f:af: 6e:b0:55:bb:b9:b3:9f:f4:7e:fd:8d:d5:4f:d5:14:8d:9a:60: 40:cc:85:b4:0b:2c:82:da:7b:3e:b8:77:94:b6:4d:ab:f9:a9: ef:77:fa:f0:73:2c:ff:f9:17:67:7c:3a:ed:90:62:16:cf:22: 01:ff:0f:13:f5:95:29:74:d8:c6:88:8c:74:de:92:8c:9c:7b: db:1f:f1:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1tJWnizWB9rIjGomK1kDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl NzJhZTkwHhcNMjUxMjE4MTkwMTM3WhcNMjUxMjE5MTkwMTM3WjAzMTEwLwYDVQQD EyhiYWEzYmQ5ZDg5NDhiN2QxZTdkNTAxNTk2NjRiNmI5MjQ2MDNmZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttj3TOXvVUfXnLsNmXEJmr35M2qu xOIDoVKRuNPtwqoeqCK29BA+IetY+gZChqVPy5+Rohc/K4JdohMgp04c/GnV6m76 i10SALrS+hJX2FCMyztSFAPm14LUVveezAgcYNnIZJqvrkqpLT0C/OO77T9FQfSw jiNtf/pgC5GFQt6+1WI2nnLlWWafiVBO9iYorQ/cD51g7dNMnwxBlXxzQ8sTQhEX UB9U/Eu9smRlODxeDakm1DMQUfUTv1KTdC8B9vfZeYR0Pxc6i+atmlNEgB2uv7kP 3Pyq5QlleoA4nD6uyf3i1IUlXnpS1morn/NporwMT1uNsbe3CDRqcg+ZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqjvZ2JSLfR59UBWWZLa5JGA/7AMB8GA1UdIwQY MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et ZjI5OTBjZWI5NGVjLzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGXh5bZx RqwPc+fqbypVtBZt0ZaCYEHQjio48jtUYNdeYvtkHHqmVaJsziYbBa6Q/rKSCjh8 71Q1oPddTgQjqHswDpsjP8pdmNLGFcyhzvefH9YCJh6l+LS6pR55JIPv1a4dciAm nz5mCABhzXlCQD3ajtZj1XJ+fcvr4a8h3esvOF7VqNgpKgABA5mLfpJyhj/us0EQ kwmjdebZJXeIcJ4yYlIfGuvl4Ik349O/TLENH5+vbrBVu7mzn/R+/Y3VT9UUjZpg QMyFtAssgtp7Prh3lLZNq/mp73f68HMs//kXZ3w67ZBiFs8iAf8PE/WVKXTYxoiM dN6SjJx72x/xDA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:07:54 2025 by rpki-client