This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json) Hash identifier: a3bSZxZEBaG3P//929hdv1g63ytsFxEdrNZAflUzdZE= Subject key identifier: 23:F6:DD:33:4D:67:1F:B0:24:42:18:D8:E1:F7:9A:E1:11:46:BA:11 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B4ADE734C95B452FBBE5E43E48B16C773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft Manifest number: 179C Signing time: Tue 23 Dec 2025 11:00:50 +0000 Manifest this update: Tue 23 Dec 2025 11:00:50 +0000 Manifest next update: Wed 24 Dec 2025 11:00:50 +0000 Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=) 2: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=) 3: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=) 4: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: Cjog75onJvixko/tjGqsfa5B/25H48YdG/pRwbv3d/M=) 5: rdfMscZbXiPJlf2KSASmREjs5hg.roa (hash: mdBiFmrkLN06e+ZLJfsQJI8nVe20fMx57FxVrDcP3Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:73:4c:95:b4:52:fb:be:5e:43:e4:8b:16:c7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Dec 23 11:00:50 2025 GMT Not After : Dec 24 11:00:50 2025 GMT Subject: CN=23f6dd334d671fb0244218d8e1f79ae11146ba11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:cb:da:7d:f6:91:70:93:95:9a:f2:88:eb: 29:37:15:ec:61:62:87:52:bf:dc:30:d3:31:ef:79: 14:e2:1b:2f:71:07:08:90:d7:49:41:07:1b:0f:dc: 66:da:17:bb:4f:3a:5b:e4:52:35:a7:21:82:be:14: 5b:c4:15:04:f7:a9:2f:ff:1b:fe:7d:d5:d0:4a:90: 75:80:8d:41:eb:6a:fa:5c:ad:a1:13:c2:e6:72:35: d6:a5:8a:20:59:cc:d4:d6:b6:37:c4:ab:9f:9e:0d: c5:ec:1d:ea:e1:fc:1e:af:41:a1:d4:ef:33:e3:62: fe:4b:98:7d:d9:8d:c0:f4:0d:e8:64:b5:18:11:b5: 56:57:0a:3b:98:01:62:cb:7c:9c:6e:cf:89:55:62: fb:87:53:8b:f7:91:bb:68:51:f3:27:f0:9b:ef:d0: 1f:a0:c1:e6:67:0a:f3:32:46:68:02:76:cc:94:6e: dc:cf:3d:96:8e:e6:b7:31:17:55:29:fb:c7:10:4c: b1:c4:18:05:cd:b9:85:93:66:73:a6:fb:b9:ee:58: d8:79:c4:cc:f3:b9:b8:09:4d:44:7c:ac:3a:c5:17: 1c:fd:25:a8:e4:49:84:f7:0f:92:0f:ee:d2:31:0d: 25:4c:bb:fb:af:2c:53:ce:e2:4c:71:94:65:c7:bf: 05:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F6:DD:33:4D:67:1F:B0:24:42:18:D8:E1:F7:9A:E1:11:46:BA:11 X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:aa:4a:98:c7:fa:7f:18:e1:b6:ec:a4:d0:40:7f:5f:42:e9: 25:60:91:3f:ec:65:28:e6:07:3d:b6:62:30:57:e7:de:8c:21: 29:e2:b5:0e:14:59:8d:55:7e:3c:61:dd:e4:31:2e:33:a3:f0: 27:d3:52:fb:51:8c:32:bf:fb:5b:a5:99:53:41:20:c8:95:8d: 37:c1:c5:72:fb:07:05:13:36:53:c9:02:56:3e:66:60:b0:c1: ef:af:7c:ba:21:a6:12:35:45:b4:5a:a2:b2:a0:09:e3:6a:47: 90:c4:5e:c8:08:9c:00:51:de:0e:97:7e:3d:8a:53:66:5c:4e: 24:0d:6d:cd:08:ff:bc:c6:78:63:03:2c:51:95:3d:3c:aa:5b: 4a:3d:f5:58:3c:15:0e:de:fd:ff:29:92:96:4b:5d:2c:d5:79: 2b:6e:a9:da:72:df:fc:aa:6d:b0:2c:0b:96:98:57:b0:52:86: 61:71:5f:c3:0f:c1:56:86:8c:5e:24:30:1c:92:ba:28:10:2d: 10:98:a3:4f:f2:97:e1:74:fe:70:64:9f:c1:3b:d1:69:7f:14: 61:f9:0e:38:df:57:a9:56:ab:ef:7c:b8:15:db:ba:20:97:e4: d6:ba:54:12:fe:c0:ac:94:42:c2:e8:a3:b1:ee:b2:9e:f7:91: 59:a4:15:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3nNMlbRS+75eQ+SLFsdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjUxMjIzMTEwMDUwWhcNMjUxMjI0MTEwMDUwWjAzMTEwLwYDVQQD EygyM2Y2ZGQzMzRkNjcxZmIwMjQ0MjE4ZDhlMWY3OWFlMTExNDZiYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgfL2n32kXCTlZryiOspNxXsYWKH Ur/cMNMx73kU4hsvcQcIkNdJQQcbD9xm2he7Tzpb5FI1pyGCvhRbxBUE96kv/xv+ fdXQSpB1gI1B62r6XK2hE8LmcjXWpYogWczU1rY3xKufng3F7B3q4fwer0Gh1O8z 42L+S5h92Y3A9A3oZLUYEbVWVwo7mAFiy3ycbs+JVWL7h1OL95G7aFHzJ/Cb79Af oMHmZwrzMkZoAnbMlG7czz2Wjua3MRdVKfvHEEyxxBgFzbmFk2Zzpvu57ljYecTM 87m4CU1EfKw6xRcc/SWo5EmE9w+SD+7SMQ0lTLv7ryxTzuJMcZRlx78F4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP23TNNZx+wJEIY2OH3muERRroRMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKpKmMf6 fxjhtuyk0EB/X0LpJWCRP+xlKOYHPbZiMFfn3owhKeK1DhRZjVV+PGHd5DEuM6Pw J9NS+1GMMr/7W6WZU0EgyJWNN8HFcvsHBRM2U8kCVj5mYLDB7698uiGmEjVFtFqi sqAJ42pHkMReyAicAFHeDpd+PYpTZlxOJA1tzQj/vMZ4YwMsUZU9PKpbSj31WDwV Dt79/ymSlktdLNV5K26p2nLf/KptsCwLlphXsFKGYXFfww/BVoaMXiQwHJK6KBAt EJijT/KX4XT+cGSfwTvRaX8UYfkOON9XqVar73y4Fdu6IJfk1rpUEv7ArJRCwuij se6ynveRWaQVWQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:14:53 2025 by rpki-client