This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft File: nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json) Hash identifier: en5B7bg1r4nkG87NvncEjWMTOmsDhykk17JFLR35Sv0= Subject key identifier: DD:53:BC:8A:88:3C:CA:37:EC:2C:5C:89:58:29:53:79:D9:01:0B:77 Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Certificate serial: 019B668CC65F7919BBE4272BE07870D9E21B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 20:01:00 +0000 Manifest this update: Sun 28 Dec 2025 20:01:00 +0000 Manifest next update: Mon 29 Dec 2025 20:01:00 +0000 Files and hashes: 1: YH77N0FEznpizquL2OaCl5vYAjI.roa (hash: YndCp+4019jEGglb/4lGICFoI/oofyeIHhlA4OhtUTc=) 2: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: svXBwn43ppwNEcJ1di6vU1zrHTTaNR8znn5qavkCCA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:c6:5f:79:19:bb:e4:27:2b:e0:78:70:d9:e2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Validity Not Before: Dec 28 20:01:00 2025 GMT Not After : Dec 29 20:01:00 2025 GMT Subject: CN=dd53bc8a883cca37ec2c5c8958295379d9010b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:e3:38:62:5c:ea:3a:8c:28:50:9f:ca:ca: e5:a8:d0:74:10:be:8c:94:26:54:ce:28:df:7c:42: e8:8a:19:0b:fc:c4:44:85:ba:bb:2b:49:49:ec:c7: 03:bd:ed:65:62:c4:f8:e6:e0:a2:01:a0:95:9f:c0: 33:c2:d9:89:83:6f:6f:13:d2:d8:2f:99:4f:80:50: 16:2e:ee:36:bb:b4:46:0b:c7:1e:47:cc:24:7f:1f: b3:bb:d4:3e:3c:cb:d0:e8:25:5e:04:60:4c:cf:97: 89:98:33:f7:4f:87:b2:b6:8a:d4:68:a6:bf:5d:bb: 6f:a6:d9:40:5b:37:85:f4:db:20:c2:45:51:9d:48: 32:43:2b:f5:99:d2:32:0a:73:94:b5:32:e3:fb:dd: 18:f5:47:ba:a4:c8:28:2f:6c:91:67:f8:1c:08:c7: a5:d0:be:aa:89:17:e1:a6:54:fa:86:0d:d4:b9:68: 17:c8:b5:6b:e4:19:5c:d9:df:a6:77:5d:76:d2:1c: 9e:fd:7b:c4:0f:fa:27:c2:14:39:b3:42:b0:8a:91: 88:10:17:78:92:63:20:59:14:6c:34:ad:54:c6:34: e3:44:e1:5a:54:07:3b:ae:aa:80:aa:1a:f5:c6:c7: d5:f3:f6:9e:a4:cd:bb:91:44:27:50:30:1b:cd:68: c3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:BC:8A:88:3C:CA:37:EC:2C:5C:89:58:29:53:79:D9:01:0B:77 X509v3 Authority Key Identifier: keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ee:fc:ea:b7:ee:da:27:ce:4f:51:c2:dc:c0:ec:8c:2f:6d: 14:8f:10:84:f8:82:3c:7f:9d:d2:b7:b9:a1:e8:92:71:e7:14: c2:41:b0:72:dc:cb:0a:a5:ec:11:ec:f9:2b:3f:df:83:83:37: 07:73:f0:b6:3c:75:e5:b9:88:6e:d7:61:7f:cf:e0:78:4e:92: b8:3f:bd:ed:f2:81:a7:4c:94:d6:3d:c7:0f:72:0c:be:a1:03: 33:39:a5:cd:55:6f:e8:73:21:56:ae:d7:3d:3d:80:a3:d4:24: 47:b8:38:71:0e:e4:75:40:b4:f3:0e:65:25:aa:ab:02:eb:bb: e2:d5:16:44:c3:db:ae:5b:c2:2d:c3:c4:27:55:a1:96:11:17: 0c:c0:12:c9:51:a2:16:10:e9:59:a0:ac:4a:96:5c:8d:c9:9a: ab:8a:12:ef:fc:a0:40:15:3f:ce:e1:7f:e1:fa:81:a0:1e:f2: 85:6f:98:8e:c2:6f:fb:73:35:1e:17:ca:f5:99:b3:a2:7e:48: 9d:4e:60:66:59:6e:03:37:a8:a9:6f:e9:b3:c0:64:6f:93:87: ba:46:91:69:7e:1c:d6:44:86:4d:b1:06:8f:0f:d6:b1:a5:7b: 1a:c9:a0:bf:70:57:2f:0c:e4:11:e3:74:a6:7c:ce:4e:0a:0b: 2e:01:7a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjMZfeRm75Ccr4Hhw2eIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZmUzMGEwMTQ3ODQ2MjVkYjJjOWRjOTBhZTNjZTE1ZTU0 YTg4ZWMwHhcNMjUxMjI4MjAwMTAwWhcNMjUxMjI5MjAwMTAwWjAzMTEwLwYDVQQD EyhkZDUzYmM4YTg4M2NjYTM3ZWMyYzVjODk1ODI5NTM3OWQ5MDEwYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvfjOGJc6jqMKFCfysrlqNB0EL6M lCZUzijffELoihkL/MREhbq7K0lJ7McDve1lYsT45uCiAaCVn8AzwtmJg29vE9LY L5lPgFAWLu42u7RGC8ceR8wkfx+zu9Q+PMvQ6CVeBGBMz5eJmDP3T4eytorUaKa/ XbtvptlAWzeF9NsgwkVRnUgyQyv1mdIyCnOUtTLj+90Y9Ue6pMgoL2yRZ/gcCMel 0L6qiRfhplT6hg3UuWgXyLVr5Blc2d+md1120hye/XvED/onwhQ5s0KwipGIEBd4 kmMgWRRsNK1UxjTjROFaVAc7rqqAqhr1xsfV8/aepM27kUQnUDAbzWjD3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1TvIqIPMo37CxciVgpU3nZAQt3MB8GA1UdIwQY MBaAFJ3+MKAUeEYl2yydyQrjzhXlSojsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTIt NjA0ZTIzNzQ3NzY5LzEvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTItNjA0ZTIzNzQ3NzY5 LzEvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+786rfu 2ifOT1HC3MDsjC9tFI8QhPiCPH+d0re5oeiScecUwkGwctzLCqXsEez5Kz/fg4M3 B3Pwtjx15bmIbtdhf8/geE6SuD+97fKBp0yU1j3HD3IMvqEDMzmlzVVv6HMhVq7X PT2Ao9QkR7g4cQ7kdUC08w5lJaqrAuu74tUWRMPbrlvCLcPEJ1WhlhEXDMASyVGi FhDpWaCsSpZcjcmaq4oS7/ygQBU/zuF/4fqBoB7yhW+YjsJv+3M1HhfK9Zmzon5I nU5gZlluAzeoqW/ps8Bkb5OHukaRaX4c1kSGTbEGjw/WsaV7Gsmgv3BXLwzkEeN0 pnzOTgoLLgF6mw== -----END CERTIFICATE-----Generated at Mon Dec 29 03:29:16 2025 by rpki-client