This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft File: nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json) Hash identifier: MKZKgw3spz876Oa7CVY2pgzZ+WFiJMT7Xjpgk6bibRc= Subject key identifier: 5A:BF:63:D1:A9:40:56:8F:99:35:A6:30:F9:60:EA:91:B8:78:20:0B Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Certificate serial: 019B552B570DA2BC851171CA9B112AF8B9A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft Manifest number: 1792 Signing time: Thu 25 Dec 2025 11:01:02 +0000 Manifest this update: Thu 25 Dec 2025 11:01:02 +0000 Manifest next update: Fri 26 Dec 2025 11:01:02 +0000 Files and hashes: 1: YH77N0FEznpizquL2OaCl5vYAjI.roa (hash: YndCp+4019jEGglb/4lGICFoI/oofyeIHhlA4OhtUTc=) 2: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: uLVdChDA0UAq8zshXaDDv9Q9ytXotMMtat1wxKg32Fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:57:0d:a2:bc:85:11:71:ca:9b:11:2a:f8:b9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Validity Not Before: Dec 25 11:01:02 2025 GMT Not After : Dec 26 11:01:02 2025 GMT Subject: CN=5abf63d1a940568f9935a630f960ea91b878200b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:fa:7e:71:e4:ea:96:80:c9:4f:bc:24:eb: 6c:55:0b:7f:28:6e:5f:42:3b:e8:c4:db:08:be:ff: f7:f9:fb:fc:db:05:b0:12:be:f5:b5:7a:85:fe:9f: f3:d0:bc:ed:06:b1:d1:2e:77:cc:99:1b:d3:d2:86: b6:be:76:43:b2:5d:90:f1:bd:0c:13:49:5e:14:c2: 7c:4c:6b:76:b6:34:6f:41:a1:e7:e7:f3:d6:f1:2d: 90:df:a8:53:e4:74:88:c0:14:43:0e:93:c1:1a:50: bb:34:a2:d8:05:6d:55:d6:1c:46:5e:5f:c7:2a:d7: c8:f0:61:d9:55:99:47:82:90:a9:e0:0b:b0:83:1c: 1e:fc:d0:84:f0:bd:d3:24:4c:af:93:6a:c7:5e:10: cb:05:f3:ec:56:da:f6:ba:a9:f5:0c:16:57:de:b6: 77:ba:10:88:a6:34:43:14:a4:bf:41:fb:12:b5:ab: 54:35:8d:91:d8:5f:b7:45:10:9d:a0:10:b9:3a:1f: d8:b0:ad:8b:0f:dc:63:33:a8:ca:7d:95:72:8a:a4: 9d:78:1f:03:33:a7:91:df:74:a1:5b:e4:af:10:3e: 84:c9:9c:da:d3:b9:2c:c2:c5:71:f3:c4:c2:63:f4: 71:c8:78:12:5f:c0:cc:75:06:ca:ad:f0:88:d3:d2: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:63:D1:A9:40:56:8F:99:35:A6:30:F9:60:EA:91:B8:78:20:0B X509v3 Authority Key Identifier: keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:f6:62:c5:56:cc:4d:ab:38:b5:62:ed:62:a6:60:70:77: c1:03:e0:90:43:dc:c4:fb:16:f8:5e:68:91:12:1c:8b:3d:c0: cf:fd:4f:52:f6:e1:eb:03:4c:5f:34:be:7d:33:41:b5:7a:45: a0:06:d2:fb:41:6e:a2:b2:24:2f:b9:4f:93:a7:a8:e1:79:51: ef:8f:40:62:b1:97:4c:e7:f1:2f:ae:c5:aa:c3:0b:39:03:ef: df:c6:cf:2e:ab:43:19:21:4e:4e:e6:80:1e:53:4c:95:0d:b9: 36:00:ed:41:8d:0c:ba:0b:d8:3a:9f:a2:eb:9c:b6:d7:6b:19: 71:12:55:fe:49:3c:47:93:a4:eb:6e:72:87:da:0a:8f:f0:ad: 6f:f0:98:86:92:44:c8:b5:c5:bf:01:7e:56:e1:57:6c:62:e7: 9e:ea:88:37:21:5c:36:63:e5:ac:41:2c:18:29:bb:4d:a9:2e: 16:31:b8:81:6e:eb:97:46:67:71:10:86:fd:c2:90:5a:4b:0c: 50:bd:b7:8c:ae:16:36:3c:28:6f:65:e5:2c:b6:3d:b5:e7:a5: 65:cc:cd:47:06:27:9c:3a:37:f3:15:31:f3:de:f4:93:a2:d1: 51:16:56:ba:1f:2e:17:a2:70:4a:42:b4:f3:fa:42:45:d2:0b: 3b:a2:93:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK1cNoryFEXHKmxEq+LmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZmUzMGEwMTQ3ODQ2MjVkYjJjOWRjOTBhZTNjZTE1ZTU0 YTg4ZWMwHhcNMjUxMjI1MTEwMTAyWhcNMjUxMjI2MTEwMTAyWjAzMTEwLwYDVQQD Eyg1YWJmNjNkMWE5NDA1NjhmOTkzNWE2MzBmOTYwZWE5MWI4NzgyMDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiX6fnHk6paAyU+8JOtsVQt/KG5f QjvoxNsIvv/3+fv82wWwEr71tXqF/p/z0LztBrHRLnfMmRvT0oa2vnZDsl2Q8b0M E0leFMJ8TGt2tjRvQaHn5/PW8S2Q36hT5HSIwBRDDpPBGlC7NKLYBW1V1hxGXl/H KtfI8GHZVZlHgpCp4Auwgxwe/NCE8L3TJEyvk2rHXhDLBfPsVtr2uqn1DBZX3rZ3 uhCIpjRDFKS/QfsStatUNY2R2F+3RRCdoBC5Oh/YsK2LD9xjM6jKfZVyiqSdeB8D M6eR33ShW+SvED6EyZza07kswsVx88TCY/RxyHgSX8DMdQbKrfCI09JSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq/Y9GpQFaPmTWmMPlg6pG4eCALMB8GA1UdIwQY MBaAFJ3+MKAUeEYl2yydyQrjzhXlSojsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTIt NjA0ZTIzNzQ3NzY5LzEvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTItNjA0ZTIzNzQ3NzY5 LzEvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCL2YsVW zE2rOLVi7WKmYHB3wQPgkEPcxPsW+F5okRIciz3Az/1PUvbh6wNMXzS+fTNBtXpF oAbS+0FuorIkL7lPk6eo4XlR749AYrGXTOfxL67FqsMLOQPv38bPLqtDGSFOTuaA HlNMlQ25NgDtQY0MugvYOp+i65y212sZcRJV/kk8R5Ok625yh9oKj/Ctb/CYhpJE yLXFvwF+VuFXbGLnnuqINyFcNmPlrEEsGCm7TakuFjG4gW7rl0ZncRCG/cKQWksM UL23jK4WNjwob2XlLLY9teelZczNRwYnnDo38xUx8970k6LRURZWuh8uF6JwSkK0 8/pCRdILO6KTiA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:52 2025 by rpki-client