This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json) Hash identifier: LSnci2CnQpz8DXbKYHHeaWtICV5k+z3kxPReSJGTKUg= Subject key identifier: F1:11:E7:6E:59:3A:FB:51:29:76:EE:06:58:17:8D:27:DB:57:36:60 Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f Certificate serial: 019B50051B73305020F4D89FA3D97D4BC323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft Manifest number: 0A42 Signing time: Wed 24 Dec 2025 11:01:10 +0000 Manifest this update: Wed 24 Dec 2025 11:01:10 +0000 Manifest next update: Thu 25 Dec 2025 11:01:10 +0000 Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=) 2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: ZOhsRBT0V04QYlQeTMJt2v7SqvJxVCjiPjd7iNL90VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:1b:73:30:50:20:f4:d8:9f:a3:d9:7d:4b:c3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f Validity Not Before: Dec 24 11:01:10 2025 GMT Not After : Dec 25 11:01:10 2025 GMT Subject: CN=f111e76e593afb512976ee0658178d27db573660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:e2:8d:2c:a5:7b:f0:ee:ed:9b:14:42:73: a5:41:5c:91:dd:d6:00:13:4c:b3:d5:ff:d4:8c:b5: 81:27:a9:39:97:7d:ad:8a:b1:5f:ae:1c:b8:a1:a1: 03:84:a9:90:40:67:01:32:e0:05:0c:5f:04:57:de: 2c:f1:02:c0:25:c3:fc:70:b4:75:47:f6:65:f9:4d: 7a:d0:bc:06:19:1e:d5:48:da:f1:c3:27:30:3e:06: 0e:a3:68:f6:c4:b4:73:c9:9b:94:1e:4e:d4:a3:1e: 8d:e8:9c:65:02:0e:cc:d9:2a:c2:3f:40:80:22:cd: 93:e7:91:0f:81:7f:6a:a5:a0:e9:ab:e0:73:48:77: 39:75:2c:7c:b4:4b:56:25:cd:ec:62:08:10:41:38: 4d:f9:3b:ea:dc:58:d3:38:13:c4:84:a8:34:e9:e0: 46:8f:77:94:1d:f4:c4:c8:45:e7:4a:16:ef:e9:be: 15:ba:55:9d:db:09:24:39:24:7a:52:ab:6c:e6:90: 28:cd:a3:46:d0:26:a1:f7:08:22:92:a4:b5:1f:6b: c8:b2:f3:3b:ee:fa:dd:5d:a0:85:f4:9e:10:e4:04: c2:0d:e4:f0:5e:27:7e:b8:4a:a4:c3:25:06:34:20: d3:73:fb:61:47:14:3e:b7:36:3b:60:4a:54:03:a2: a6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:11:E7:6E:59:3A:FB:51:29:76:EE:06:58:17:8D:27:DB:57:36:60 X509v3 Authority Key Identifier: keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:e9:e6:65:07:3c:d0:10:70:3a:41:c9:ab:9f:3e:02:c9: 36:50:5b:46:c6:b7:d8:0f:8a:32:cd:f9:18:81:ac:65:83:5a: 46:91:59:ca:29:65:36:60:e1:38:3d:34:03:91:1f:dd:60:6c: 5f:db:f3:af:88:0e:97:15:f7:96:b9:35:d0:58:9f:4e:fa:79: 6d:09:ea:cd:78:53:09:de:c6:10:47:8c:68:78:51:a5:18:46: a8:60:ad:a5:c9:66:49:29:8b:79:3e:fc:8b:9b:eb:94:db:78: b0:61:99:4d:8e:29:07:d0:a9:20:38:d0:a3:0f:e0:73:ca:06: 04:ac:06:a6:68:bb:8f:e4:5d:30:0c:ab:67:cb:89:94:db:93: 7d:51:32:76:d8:18:a9:f6:1a:b9:db:fe:8d:60:3f:19:8f:8a: b5:eb:58:3e:fa:04:dd:dc:57:c5:dd:da:e8:0a:4b:1f:75:2d: f6:ba:75:1a:c4:53:47:dd:73:b3:65:c8:39:7d:5b:96:de:41: cf:10:f4:3e:3d:05:22:27:19:14:42:34:99:84:b5:d7:50:33: dc:13:a3:bd:bc:0b:6f:aa:88:f7:ea:b5:ad:23:11:51:88:9f: 0a:65:ab:a0:ad:2f:fd:18:01:d7:2e:f3:70:04:7f:37:72:f2: 3e:2c:08:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBRtzMFAg9Nifo9l9S8MjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4 ZjQ3MGYwHhcNMjUxMjI0MTEwMTEwWhcNMjUxMjI1MTEwMTEwWjAzMTEwLwYDVQQD EyhmMTExZTc2ZTU5M2FmYjUxMjk3NmVlMDY1ODE3OGQyN2RiNTczNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS/ijSyle/Du7ZsUQnOlQVyR3dYA E0yz1f/UjLWBJ6k5l32tirFfrhy4oaEDhKmQQGcBMuAFDF8EV94s8QLAJcP8cLR1 R/Zl+U160LwGGR7VSNrxwycwPgYOo2j2xLRzyZuUHk7Uox6N6JxlAg7M2SrCP0CA Is2T55EPgX9qpaDpq+BzSHc5dSx8tEtWJc3sYggQQThN+Tvq3FjTOBPEhKg06eBG j3eUHfTEyEXnShbv6b4VulWd2wkkOSR6Uqts5pAozaNG0Cah9wgikqS1H2vIsvM7 7vrdXaCF9J4Q5ATCDeTwXid+uEqkwyUGNCDTc/thRxQ+tzY7YEpUA6KmFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPER525ZOvtRKXbuBlgXjSfbVzZgMB8GA1UdIwQY MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoHp5mUH PNAQcDpByaufPgLJNlBbRsa32A+KMs35GIGsZYNaRpFZyillNmDhOD00A5Ef3WBs X9vzr4gOlxX3lrk10FifTvp5bQnqzXhTCd7GEEeMaHhRpRhGqGCtpclmSSmLeT78 i5vrlNt4sGGZTY4pB9CpIDjQow/gc8oGBKwGpmi7j+RdMAyrZ8uJlNuTfVEydtgY qfYaudv+jWA/GY+KtetYPvoE3dxXxd3a6ApLH3Ut9rp1GsRTR91zs2XIOX1blt5B zxD0Pj0FIicZFEI0mYS111Az3BOjvbwLb6qI9+q1rSMRUYifCmWroK0v/RgB1y7z cAR/N3LyPiwILQ== -----END CERTIFICATE-----Generated at Wed Dec 24 16:40:23 2025 by rpki-client