This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft File: nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json) Hash identifier: zZgiZ1B+j52pkqmHNN4fhrHqzshE44acwzRgprDuW5g= Subject key identifier: B4:56:3D:51:7C:FB:F8:79:8A:A3:73:0D:63:60:1F:F2:1C:1A:DE:87 Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Certificate serial: 019B4B8367FA991487EF69D781D546C9968C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 14:01:01 +0000 Manifest this update: Tue 23 Dec 2025 14:01:01 +0000 Manifest next update: Wed 24 Dec 2025 14:01:01 +0000 Files and hashes: 1: YH77N0FEznpizquL2OaCl5vYAjI.roa (hash: YndCp+4019jEGglb/4lGICFoI/oofyeIHhlA4OhtUTc=) 2: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: b6wz23B6Jg2ycy5gvHYX9PYeVyozCfZw2fJAiIj+xdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:67:fa:99:14:87:ef:69:d7:81:d5:46:c9:96:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Validity Not Before: Dec 23 14:01:01 2025 GMT Not After : Dec 24 14:01:01 2025 GMT Subject: CN=b4563d517cfbf8798aa3730d63601ff21c1ade87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:b8:9d:89:db:4e:2e:3e:80:22:3e:6d:e2: c6:0c:87:7f:b7:3d:35:fb:65:72:5a:15:78:66:ab: e5:45:f3:f6:30:48:11:9d:b5:ea:f2:40:6e:71:cb: 67:16:33:ca:50:68:ee:0b:6c:9b:16:3d:45:b9:d6: de:84:1b:5b:2b:65:53:c7:7d:2d:c9:45:d6:7e:39: cf:38:32:7e:0d:6f:56:96:3c:f8:c1:50:1f:58:fe: 70:ae:10:27:e2:a4:a9:0a:44:5b:b9:1f:e9:e7:5c: b9:a8:2d:cc:71:03:05:0b:78:1a:c3:d0:0e:c3:08: ed:56:2f:1e:c1:08:46:f5:97:ff:03:63:b0:be:eb: db:3f:c7:c5:06:7e:08:c2:d2:64:81:36:43:ef:70: 27:7e:ef:28:4b:6f:f7:45:df:db:de:3c:f3:ce:7e: e7:5a:a9:da:40:78:b4:c4:cc:b3:55:7b:71:e4:7d: 6b:bd:03:65:1f:d7:be:13:41:2c:ad:b8:a1:c3:4a: d7:7b:3b:be:01:7e:c6:d3:d0:cc:e0:3c:36:fb:67: 4e:2d:e2:1f:0e:a3:e2:b1:28:f9:de:6d:87:e1:0e: 5f:9e:0e:65:8d:d2:a0:13:f0:4f:c8:95:4c:47:e3: d5:89:dc:41:63:86:e9:0f:81:20:91:5a:1c:b9:24: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:56:3D:51:7C:FB:F8:79:8A:A3:73:0D:63:60:1F:F2:1C:1A:DE:87 X509v3 Authority Key Identifier: keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c4:93:43:63:23:4f:09:e9:c4:b7:c4:fd:c9:ee:35:0b:a9: b2:b4:82:99:82:d4:dd:66:a7:74:ee:23:2a:5c:79:f7:9d:0d: d5:1b:82:54:7f:78:f7:e2:39:b6:c2:e1:f2:52:8a:62:43:f2: 3c:7a:25:a6:ac:0c:99:cf:c9:35:86:b1:82:32:66:3a:79:d3: 34:9f:a9:ac:b0:78:fe:94:a3:e9:c1:16:58:d9:1d:39:b1:26: 00:99:c8:15:76:4b:58:9f:82:86:45:76:53:04:8c:d8:2f:8a: a6:2b:2f:86:04:6b:02:9e:50:1f:dd:f8:5f:68:61:ae:67:4a: f1:55:3d:15:40:f0:6e:15:d3:70:c4:12:a3:35:cb:62:ac:7f: e3:63:0d:46:1b:30:32:6b:33:da:07:69:f6:01:f6:75:16:9e: e2:f3:f6:69:0a:fe:39:c3:d1:62:a6:c3:fa:11:fc:d7:39:82: 96:ea:03:c0:42:0b:64:c0:8f:63:dd:7e:05:77:d2:97:4f:3d: d2:b5:e2:50:56:37:89:07:ef:d5:5e:5d:5d:2c:75:f0:41:95: 55:f7:4d:d5:19:69:26:5a:04:c0:da:24:4a:90:65:39:f0:4b: 3e:5f:bd:61:07:c2:ce:fe:b4:90:ad:5f:1b:03:32:3e:ca:22: 22:51:bd:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg2f6mRSH72nXgdVGyZaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZmUzMGEwMTQ3ODQ2MjVkYjJjOWRjOTBhZTNjZTE1ZTU0 YTg4ZWMwHhcNMjUxMjIzMTQwMTAxWhcNMjUxMjI0MTQwMTAxWjAzMTEwLwYDVQQD EyhiNDU2M2Q1MTdjZmJmODc5OGFhMzczMGQ2MzYwMWZmMjFjMWFkZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/+4nYnbTi4+gCI+beLGDId/tz01 +2VyWhV4ZqvlRfP2MEgRnbXq8kBucctnFjPKUGjuC2ybFj1FudbehBtbK2VTx30t yUXWfjnPODJ+DW9Wljz4wVAfWP5wrhAn4qSpCkRbuR/p51y5qC3McQMFC3gaw9AO wwjtVi8ewQhG9Zf/A2OwvuvbP8fFBn4IwtJkgTZD73Anfu8oS2/3Rd/b3jzzzn7n WqnaQHi0xMyzVXtx5H1rvQNlH9e+E0Esrbihw0rXezu+AX7G09DM4Dw2+2dOLeIf DqPisSj53m2H4Q5fng5ljdKgE/BPyJVMR+PVidxBY4bpD4EgkVocuSTSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRWPVF8+/h5iqNzDWNgH/IcGt6HMB8GA1UdIwQY MBaAFJ3+MKAUeEYl2yydyQrjzhXlSojsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTIt NjA0ZTIzNzQ3NzY5LzEvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTItNjA0ZTIzNzQ3NzY5 LzEvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecSTQ2Mj TwnpxLfE/cnuNQupsrSCmYLU3WandO4jKlx5950N1RuCVH949+I5tsLh8lKKYkPy PHolpqwMmc/JNYaxgjJmOnnTNJ+prLB4/pSj6cEWWNkdObEmAJnIFXZLWJ+ChkV2 UwSM2C+KpisvhgRrAp5QH934X2hhrmdK8VU9FUDwbhXTcMQSozXLYqx/42MNRhsw Mmsz2gdp9gH2dRae4vP2aQr+OcPRYqbD+hH81zmCluoDwEILZMCPY91+BXfSl089 0rXiUFY3iQfv1V5dXSx18EGVVfdN1RlpJloEwNokSpBlOfBLPl+9YQfCzv60kK1f GwMyPsoiIlG9eA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:47 2025 by rpki-client