This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json) Hash identifier: 2PWnA00QTI/z4P/uXbEy2+znWFEjuMTtEDnIIiVPB9g= Subject key identifier: 64:E8:71:1E:54:B1:8E:22:32:28:6F:12:99:32:9B:78:1A:71:7A:6F Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d Certificate serial: 019B4C283BBC45CA435562A52E208A7EAA04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft Manifest number: 105F Signing time: Tue 23 Dec 2025 17:01:03 +0000 Manifest this update: Tue 23 Dec 2025 17:01:03 +0000 Manifest next update: Wed 24 Dec 2025 17:01:03 +0000 Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=) 2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: WCZtvYvG3Eko2rwW2hZeHIT6s4aZTsi3zty3T3XCOsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:3b:bc:45:ca:43:55:62:a5:2e:20:8a:7e:aa:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d Validity Not Before: Dec 23 17:01:03 2025 GMT Not After : Dec 24 17:01:03 2025 GMT Subject: CN=64e8711e54b18e2232286f1299329b781a717a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:15:18:17:97:01:0d:ca:e0:d7:52:34:b1: e9:bd:66:38:52:61:1d:9b:07:cf:2e:ec:99:ee:c1: 82:db:bf:34:19:ee:67:c5:93:5d:33:d7:cd:a9:ab: 61:0b:52:38:77:07:17:f6:77:61:be:22:07:51:6d: 3f:22:d9:be:05:e0:45:d8:6b:56:13:50:d8:a2:00: 86:09:0a:80:68:0f:7a:51:43:3b:a0:2a:17:87:05: 05:04:4e:45:11:c8:01:28:22:ac:70:cb:85:21:b0: 7f:d0:c0:35:d3:05:eb:7d:98:35:15:71:10:21:7d: 1c:45:c5:63:0b:d6:a6:c0:77:0b:d4:7f:cb:46:43: b4:27:73:db:d9:eb:12:89:c3:51:04:e8:0c:d9:78: 62:b8:22:ac:35:0c:8f:54:92:78:4e:38:c7:ee:c6: 1c:81:4e:36:7a:0b:d9:e4:f4:af:1c:58:24:11:4f: 36:76:a0:0a:d0:b9:fb:6d:b0:14:2f:78:f5:be:d2: c6:a1:a8:10:ce:1a:12:d5:e7:9a:49:c6:e1:69:64: 58:b4:13:08:5d:1b:71:32:1e:5f:c3:e2:01:dc:2c: d5:d7:19:ba:43:81:c3:d1:ad:62:7c:ca:df:e7:82: fd:c0:b5:53:3b:47:fd:57:38:c9:7b:eb:c6:6a:5e: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E8:71:1E:54:B1:8E:22:32:28:6F:12:99:32:9B:78:1A:71:7A:6F X509v3 Authority Key Identifier: keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bf:b6:fe:08:66:ff:b0:cf:bc:e1:3a:73:a0:a5:6e:95:03: 93:f3:f7:dc:43:6f:e3:87:f2:97:11:5f:b7:fe:91:be:3f:91: 01:7a:8b:21:4a:bf:87:ff:d2:dc:8b:04:7d:20:76:d7:83:ff: d9:79:da:a6:31:95:3b:72:1f:9e:c7:41:c0:d2:fa:4a:de:30: 21:d2:90:96:a7:3f:0c:69:e3:04:79:b6:23:cc:aa:a4:01:e5: 37:fe:b9:14:5f:59:a1:c4:a4:3f:c3:b6:9c:be:b9:a4:6e:a4: 46:43:80:58:89:77:4d:8f:7b:20:e1:65:80:ba:b0:b4:66:48: d7:8e:cc:7f:46:2b:94:c2:12:96:b5:c6:d6:86:6e:6b:b6:d2: e2:a3:b0:10:f2:5a:f0:dc:1a:a1:92:b2:d9:31:0c:43:fa:ca: 71:83:b9:89:fe:3a:29:db:be:4d:ed:19:03:dd:ea:1f:19:52: 3e:58:c1:17:9f:b5:b7:76:94:6c:0d:c4:ab:e2:cb:34:d3:67: 8c:5a:8f:fb:84:7a:fb:b2:80:e8:3f:52:ed:e6:47:61:69:9c: e1:44:a5:cb:e4:d2:6b:9d:19:03:9c:b9:60:21:87:92:d5:db: 76:b7:08:ce:42:77:90:e9:69:05:9a:24:70:1a:4f:3d:14:1a: 99:cc:21:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKDu8RcpDVWKlLiCKfqoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjU4OTY3MmJjMmEzNDVkYzExZTlmZjE2MjUwMGVjMTVk YWRkMWQwHhcNMjUxMjIzMTcwMTAzWhcNMjUxMjI0MTcwMTAzWjAzMTEwLwYDVQQD Eyg2NGU4NzExZTU0YjE4ZTIyMzIyODZmMTI5OTMyOWI3ODFhNzE3YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRQVGBeXAQ3K4NdSNLHpvWY4UmEd mwfPLuyZ7sGC2780Ge5nxZNdM9fNqathC1I4dwcX9ndhviIHUW0/Itm+BeBF2GtW E1DYogCGCQqAaA96UUM7oCoXhwUFBE5FEcgBKCKscMuFIbB/0MA10wXrfZg1FXEQ IX0cRcVjC9amwHcL1H/LRkO0J3Pb2esSicNRBOgM2XhiuCKsNQyPVJJ4TjjH7sYc gU42egvZ5PSvHFgkEU82dqAK0Ln7bbAUL3j1vtLGoagQzhoS1eeaScbhaWRYtBMI XRtxMh5fw+IB3CzV1xm6Q4HD0a1ifMrf54L9wLVTO0f9VzjJe+vGal7OjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTocR5UsY4iMihvEpkym3gacXpvMB8GA1UdIwQY MBaAFJ31iWcrwqNF3BHp/xYlAOwV2t0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjct OWMzMGY2NTZmZDViLzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjctOWMzMGY2NTZmZDVi LzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7+2/ghm /7DPvOE6c6ClbpUDk/P33ENv44fylxFft/6Rvj+RAXqLIUq/h//S3IsEfSB214P/ 2XnapjGVO3IfnsdBwNL6St4wIdKQlqc/DGnjBHm2I8yqpAHlN/65FF9ZocSkP8O2 nL65pG6kRkOAWIl3TY97IOFlgLqwtGZI147Mf0YrlMISlrXG1oZua7bS4qOwEPJa 8NwaoZKy2TEMQ/rKcYO5if46Kdu+Te0ZA93qHxlSPljBF5+1t3aUbA3Eq+LLNNNn jFqP+4R6+7KA6D9S7eZHYWmc4USly+TSa50ZA5y5YCGHktXbdrcIzkJ3kOlpBZok cBpPPRQamcwhsA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:51 2025 by rpki-client