This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json) Hash identifier: zsgS6/X3T/uHQNNLlb9nYswm7eGoTZk/JkynaxPZoXA= Subject key identifier: F0:D0:13:CC:9A:FA:AA:98:55:66:DE:E2:28:8D:85:E9:7D:3D:3B:09 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B378E5CC8D6E7A094602C2554B65C8542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft Manifest number: 1791 Signing time: Fri 19 Dec 2025 17:00:35 +0000 Manifest this update: Fri 19 Dec 2025 17:00:35 +0000 Manifest next update: Sat 20 Dec 2025 17:00:35 +0000 Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=) 2: h2ciFwHBRByajg4A3C5BQnvL2O0.roa (hash: ejWacPS5kszb6sTjATtpdEzyGWF31SZfA+pzMv0Tr6g=) 3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=) 4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=) 5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 9vlz3Fc3wEfF89BRO5jTSi5DHrwehRHcorCNJa9DLUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:5c:c8:d6:e7:a0:94:60:2c:25:54:b6:5c:85:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Dec 19 17:00:35 2025 GMT Not After : Dec 20 17:00:35 2025 GMT Subject: CN=f0d013cc9afaaa985566dee2288d85e97d3d3b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:69:c9:9e:6d:c5:c3:b2:99:90:2f:ab:d5: 88:0e:b4:c8:da:61:59:56:9b:9b:36:6f:82:66:1d: 5e:f3:10:d8:e0:e8:83:99:0c:ee:89:88:88:d2:e1: 2a:21:9b:9a:b6:e2:60:55:e2:92:f5:c3:3f:ec:8a: 9c:9a:4e:b2:62:5b:38:fb:44:9c:7b:f6:4f:88:9d: 5d:54:94:15:50:bc:87:32:bb:6a:40:d2:d5:f8:78: 0f:d6:0c:b0:61:08:9b:e4:1b:16:69:d9:f8:94:a1: 4f:11:11:8d:53:9e:35:3f:f0:b4:2b:21:f0:b0:89: 3e:e7:72:6f:8a:45:cd:cd:aa:a4:10:4a:50:db:b8: 58:eb:79:62:95:59:f9:8c:ac:bd:dc:46:90:58:01: ad:dc:f7:b8:4c:17:11:31:9e:6a:0e:89:40:09:fa: a4:ce:c3:22:55:c1:59:64:b4:15:86:85:32:c0:a0: 87:de:1e:47:d8:bf:70:80:f9:37:e4:00:88:b9:ed: 01:a5:28:92:3e:8c:c6:5c:a7:5d:47:b0:c6:12:0d: 94:e4:27:f4:ae:5d:8b:32:40:66:29:18:6f:59:50: 30:86:61:ac:e8:d2:55:c9:5c:b4:51:03:24:0f:39: 11:50:4f:06:45:1e:83:6b:05:32:c4:c7:08:04:34: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D0:13:CC:9A:FA:AA:98:55:66:DE:E2:28:8D:85:E9:7D:3D:3B:09 X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d1:4f:5b:80:70:6d:2c:4f:41:d9:e9:c7:1c:3f:cc:2a:8a: 6e:f0:79:7b:3f:b5:ef:29:ba:7e:59:eb:89:dc:eb:62:f6:c0: 2e:e8:a5:1c:e6:da:44:74:c8:76:b4:5b:e3:b8:e6:d8:f7:bb: 37:72:cc:a6:64:4e:cb:21:44:0f:ee:05:0a:dc:1a:ec:0a:f0: 91:46:f5:1c:e5:d0:7c:13:73:9d:ca:a1:c0:57:4e:08:c3:d4: fd:c4:ea:77:96:f1:21:0f:52:66:94:71:35:6a:84:ea:bb:e9: 39:a3:4f:c2:3e:24:30:10:1d:f0:d8:50:06:ea:83:6a:bf:0b: d4:21:9f:a1:32:6d:7c:76:ee:d3:e9:c4:a0:40:7f:a0:62:56: 1a:ad:ec:d3:db:19:d7:41:1e:6e:3e:8a:88:7e:3a:4b:1d:a8: a3:f6:44:cd:be:d9:17:55:6b:01:b6:8b:71:ba:c9:c0:d7:ab: 38:ae:9c:3c:0d:97:9f:70:85:cc:9b:fc:73:aa:f7:93:7e:f2: 12:9d:f0:9b:0b:ca:9b:7c:99:03:5c:f5:8c:03:9b:00:1d:64: 40:09:26:43:fa:e1:7f:61:53:ee:45:f0:a9:05:07:72:e2:21: fc:e4:6d:a1:ff:1c:d2:f2:fb:b7:5e:21:03:79:e7:56:32:a2: e1:be:da:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jlzI1ueglGAsJVS2XIVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjUxMjE5MTcwMDM1WhcNMjUxMjIwMTcwMDM1WjAzMTEwLwYDVQQD EyhmMGQwMTNjYzlhZmFhYTk4NTU2NmRlZTIyODhkODVlOTdkM2QzYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwphpyZ5txcOymZAvq9WIDrTI2mFZ VpubNm+CZh1e8xDY4OiDmQzuiYiI0uEqIZuatuJgVeKS9cM/7Iqcmk6yYls4+0Sc e/ZPiJ1dVJQVULyHMrtqQNLV+HgP1gywYQib5BsWadn4lKFPERGNU541P/C0KyHw sIk+53JvikXNzaqkEEpQ27hY63lilVn5jKy93EaQWAGt3Pe4TBcRMZ5qDolACfqk zsMiVcFZZLQVhoUywKCH3h5H2L9wgPk35ACIue0BpSiSPozGXKddR7DGEg2U5Cf0 rl2LMkBmKRhvWVAwhmGs6NJVyVy0UQMkDzkRUE8GRR6DawUyxMcIBDTk8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDQE8ya+qqYVWbe4iiNhel9PTsJMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtFPW4Bw bSxPQdnpxxw/zCqKbvB5ez+17ym6flnridzrYvbALuilHObaRHTIdrRb47jm2Pe7 N3LMpmROyyFED+4FCtwa7ArwkUb1HOXQfBNzncqhwFdOCMPU/cTqd5bxIQ9SZpRx NWqE6rvpOaNPwj4kMBAd8NhQBuqDar8L1CGfoTJtfHbu0+nEoEB/oGJWGq3s09sZ 10Eebj6KiH46Sx2oo/ZEzb7ZF1VrAbaLcbrJwNerOK6cPA2Xn3CFzJv8c6r3k37y Ep3wmwvKm3yZA1z1jAObAB1kQAkmQ/rhf2FT7kXwqQUHcuIh/ORtof8c0vL7t14h A3nnVjKi4b7ang== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:31 2025 by rpki-client