This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft File: nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json) Hash identifier: nFmpnJEfTaHkGh57CtELPLcmvv+XleVHzLFqleEUl7o= Subject key identifier: 61:2C:81:68:B9:13:66:3D:69:9C:59:92:F8:AB:A6:F8:10:C3:B9:07 Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44 Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44 Certificate serial: 019B5976CB637D5EE87D153B241095C80D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft Manifest number: 0CBF Signing time: Fri 26 Dec 2025 07:01:56 +0000 Manifest this update: Fri 26 Dec 2025 07:01:56 +0000 Manifest next update: Sat 27 Dec 2025 07:01:56 +0000 Files and hashes: 1: cmsoMlIRCcbLziNipTUjZc3lrew.roa (hash: a1CFCcY0jADOuS6DTKGkRSmsv5gzH4GzUcir7HG6pUE=) 2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: 3Lh2q2YR7/9HzVokKvWwLp2uxHUfxXuSrJ1ZtDbRg6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:cb:63:7d:5e:e8:7d:15:3b:24:10:95:c8:0d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44 Validity Not Before: Dec 26 07:01:56 2025 GMT Not After : Dec 27 07:01:56 2025 GMT Subject: CN=612c8168b913663d699c5992f8aba6f810c3b907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:9d:99:1d:be:67:3c:17:16:28:11:96:c1: 25:1e:78:ee:a5:76:83:10:e9:84:29:82:e9:f3:22: 4f:9f:1a:6f:a8:f2:c1:32:00:9b:f5:85:0a:59:be: 4b:c8:2b:da:db:17:ad:53:8e:a1:4d:f4:c0:af:4c: 0e:9f:9e:34:c9:74:68:2b:ad:e5:36:f2:95:c3:45: 7f:bb:31:01:a0:b5:e5:0d:80:19:18:4b:ff:59:81: 55:cf:d9:cd:69:d1:e8:5d:8c:d1:44:dd:ce:0e:a5: 1a:dd:e2:61:44:c6:21:3c:75:05:81:ef:f5:61:67: f3:f9:93:bd:f9:92:9f:2e:b2:3a:42:26:8e:f2:9c: fb:7b:ee:9c:cf:2a:31:3d:a9:89:13:4f:11:52:f8: 6b:3f:f4:c5:18:d4:9b:07:6d:4c:08:ae:e4:16:40: ba:57:05:f5:d8:0e:49:5a:3d:30:e6:97:7e:e1:cd: e8:b6:2e:a3:a9:a4:93:f3:ce:4a:13:1a:59:ca:3c: aa:95:af:d9:02:0c:59:c5:5d:73:90:35:6f:99:89: 89:11:16:15:04:ae:9d:e4:9d:6d:0c:11:bb:cf:b2: b6:dd:51:0a:ab:35:44:0a:94:ce:e0:50:81:8f:0d: 7b:0e:ac:84:e6:47:c7:03:7c:f4:ae:f5:d3:72:a5: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2C:81:68:B9:13:66:3D:69:9C:59:92:F8:AB:A6:F8:10:C3:B9:07 X509v3 Authority Key Identifier: keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c1:80:11:11:69:e2:74:53:93:26:d4:b3:94:0e:47:1c:a3: 96:7f:bc:33:fe:ce:a2:5a:2e:58:ff:f9:75:f3:83:e5:02:75: b1:e5:c2:c9:89:92:83:5e:7d:a5:e8:98:61:8a:39:0c:ad:1a: 05:29:90:57:69:f2:36:14:90:8a:8e:37:3a:ea:32:25:13:62: 44:73:41:1b:87:3f:46:c1:67:90:f5:36:da:1c:51:3e:0d:e6: ca:dd:49:5c:e6:24:93:1a:77:9a:1d:d7:0d:a2:86:c0:c6:75: 93:48:31:31:58:7c:42:fe:fb:51:7a:4b:92:04:be:47:36:4f: 83:29:cf:34:71:88:27:d9:ee:30:cb:6f:1a:9c:12:58:d8:18: 75:ef:87:52:c0:fe:b9:18:0c:d7:d2:17:d8:4c:f1:23:c9:9a: 67:43:45:14:c2:b2:4d:46:42:1c:d6:89:8b:65:b7:f5:85:b4: 74:00:a2:6e:6e:63:37:4a:b0:9b:c2:d8:5d:c4:ed:5e:d6:43: 34:bd:df:79:5e:81:49:3e:09:05:60:8d:fc:88:3d:08:92:24: 3f:61:34:d5:ea:ed:d5:d3:d0:5c:fa:d9:71:f7:07:37:8d:70: 6f:32:8a:42:ff:5e:5e:51:33:0f:e8:d1:80:ab:b4:af:de:ef: ce:43:3a:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdstjfV7ofRU7JBCVyA1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTU2NzY3MjAxYzUwZjZiMmE5NTVkYjZhMWU2ZTAxMWRm YTVkNDQwHhcNMjUxMjI2MDcwMTU2WhcNMjUxMjI3MDcwMTU2WjAzMTEwLwYDVQQD Eyg2MTJjODE2OGI5MTM2NjNkNjk5YzU5OTJmOGFiYTZmODEwYzNiOTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm56dmR2+ZzwXFigRlsElHnjupXaD EOmEKYLp8yJPnxpvqPLBMgCb9YUKWb5LyCva2xetU46hTfTAr0wOn540yXRoK63l NvKVw0V/uzEBoLXlDYAZGEv/WYFVz9nNadHoXYzRRN3ODqUa3eJhRMYhPHUFge/1 YWfz+ZO9+ZKfLrI6QiaO8pz7e+6czyoxPamJE08RUvhrP/TFGNSbB21MCK7kFkC6 VwX12A5JWj0w5pd+4c3oti6jqaST885KExpZyjyqla/ZAgxZxV1zkDVvmYmJERYV BK6d5J1tDBG7z7K23VEKqzVECpTO4FCBjw17DqyE5kfHA3z0rvXTcqVpIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEsgWi5E2Y9aZxZkvirpvgQw7kHMB8GA1UdIwQY MBaAFJxVZ2cgHFD2sqlV22oebgEd+l1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgt NDk2YmE4MjQ5MmNlLzEvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgtNDk2YmE4MjQ5MmNl LzEvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMGAERFp 4nRTkybUs5QORxyjln+8M/7OolouWP/5dfOD5QJ1seXCyYmSg159peiYYYo5DK0a BSmQV2nyNhSQio43OuoyJRNiRHNBG4c/RsFnkPU22hxRPg3myt1JXOYkkxp3mh3X DaKGwMZ1k0gxMVh8Qv77UXpLkgS+RzZPgynPNHGIJ9nuMMtvGpwSWNgYde+HUsD+ uRgM19IX2EzxI8maZ0NFFMKyTUZCHNaJi2W39YW0dACibm5jN0qwm8LYXcTtXtZD NL3feV6BST4JBWCN/Ig9CJIkP2E01ert1dPQXPrZcfcHN41wbzKKQv9eXlEzD+jR gKu0r97vzkM60Q== -----END CERTIFICATE-----Generated at Fri Dec 26 09:37:45 2025 by rpki-client