This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json) Hash identifier: Lud9zA5k3gSN7MHJtgfOsHUdH0/oYzv74PV4X8Fk1jo= Subject key identifier: A5:A9:2D:09:A4:2A:B0:69:A7:27:2F:5E:63:B8:88:2C:7B:41:1C:26 Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16 Certificate serial: 019B34C44C576B3160738240983EFB532172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft Manifest number: 0B99 Signing time: Fri 19 Dec 2025 04:00:38 +0000 Manifest this update: Fri 19 Dec 2025 04:00:38 +0000 Manifest next update: Sat 20 Dec 2025 04:00:38 +0000 Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=) 2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: T/yip4zn1KM5eXkKzDJrwZudvS/s5JoKfkYL0rOike4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:4c:57:6b:31:60:73:82:40:98:3e:fb:53:21:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16 Validity Not Before: Dec 19 04:00:38 2025 GMT Not After : Dec 20 04:00:38 2025 GMT Subject: CN=a5a92d09a42ab069a7272f5e63b8882c7b411c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:02:c0:7f:60:07:3a:9f:81:ba:03:15:05: b7:47:a1:8b:1f:1a:80:52:9f:7a:b9:5f:63:ff:d8: 5e:96:37:a3:4c:be:14:9c:71:7f:93:9e:ec:9f:c4: de:8b:10:ce:a6:01:b4:bb:da:42:48:af:82:27:3c: e2:c0:2e:46:61:99:1a:69:f1:60:f9:25:9d:01:37: 8f:1d:a9:ac:c5:3b:d8:01:f6:15:6e:5a:c1:d5:6c: 62:f3:1d:c4:30:e2:c0:6d:14:bf:88:7d:da:42:af: ff:30:c2:9e:c0:d0:76:50:f9:08:73:75:4a:b3:7c: 9e:58:f9:28:3a:aa:af:0b:3b:89:22:a0:1e:d4:35: dc:1d:32:20:5b:3d:10:fc:36:1c:ee:2e:bd:81:6a: ff:28:47:f9:73:dc:a9:4c:c0:77:95:75:22:32:2c: a5:97:2b:fc:6e:5d:38:81:78:fd:67:00:ef:f7:d2: e4:c9:3a:9b:3e:62:bd:84:78:75:17:02:fe:2d:1a: 3e:31:84:77:7f:b0:04:86:d5:bb:84:f4:b5:28:d6: 7c:9a:3e:3d:3d:0e:47:3c:fc:82:2b:2c:f5:66:1a: 47:ec:3f:cd:af:7a:5e:dc:43:66:18:20:ba:4e:9a: 8a:bf:95:99:98:bb:3c:f3:f2:af:88:5d:7e:4a:08: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A9:2D:09:A4:2A:B0:69:A7:27:2F:5E:63:B8:88:2C:7B:41:1C:26 X509v3 Authority Key Identifier: keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:32:e1:46:e0:26:81:38:ab:b8:e3:e3:8b:c4:65:67:64:84: e3:48:bb:79:70:ff:49:11:91:92:61:a9:3e:a1:78:0c:a6:db: 87:87:05:53:c9:fa:ef:eb:21:2e:a3:81:63:51:8d:9f:fb:3b: aa:cc:44:87:55:df:36:ad:70:cc:ae:b4:66:d9:cc:5c:a3:55: 15:9c:15:e4:7c:fd:e3:07:a0:99:fd:89:d9:34:8a:e0:af:8b: 54:b8:16:ef:d4:46:ac:57:17:5d:92:98:0f:ea:3b:63:3c:85: 5e:ce:95:08:b6:c9:5a:c5:bc:5d:66:8a:f6:cf:69:e8:87:9f: 9c:ae:92:58:38:73:71:e3:49:ee:43:cc:89:a2:1c:38:30:3f: 8d:62:f7:9a:08:5b:6e:99:09:af:6d:e6:89:59:f0:de:41:ad: 4d:66:2c:ad:02:dc:de:eb:98:31:27:cc:6b:bd:aa:2e:90:2c: 71:a9:8e:f5:18:78:d6:35:68:b8:e2:e8:6c:23:22:6e:11:d3: ce:40:fc:e8:c7:6a:b4:c0:ad:6f:3d:63:3f:c1:fe:28:18:1c: 67:94:a6:93:cb:36:9d:e0:f1:ba:ca:7f:9c:34:12:cb:ba:6d: af:50:9f:09:dd:b2:92:3e:c4:a3:99:01:44:84:f6:10:d0:01: 58:98:f8:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xExXazFgc4JAmD77UyFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMTE1ZmU5YzllOWNmZGVmMTdlOTI0MTY1NTkyYzAyM2Vm YjJiMTYwHhcNMjUxMjE5MDQwMDM4WhcNMjUxMjIwMDQwMDM4WjAzMTEwLwYDVQQD EyhhNWE5MmQwOWE0MmFiMDY5YTcyNzJmNWU2M2I4ODgyYzdiNDExYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsoCwH9gBzqfgboDFQW3R6GLHxqA Up96uV9j/9heljejTL4UnHF/k57sn8TeixDOpgG0u9pCSK+CJzziwC5GYZkaafFg +SWdATePHamsxTvYAfYVblrB1Wxi8x3EMOLAbRS/iH3aQq//MMKewNB2UPkIc3VK s3yeWPkoOqqvCzuJIqAe1DXcHTIgWz0Q/DYc7i69gWr/KEf5c9ypTMB3lXUiMiyl lyv8bl04gXj9ZwDv99LkyTqbPmK9hHh1FwL+LRo+MYR3f7AEhtW7hPS1KNZ8mj49 PQ5HPPyCKyz1ZhpH7D/Nr3pe3ENmGCC6TpqKv5WZmLs88/KviF1+SgiB0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWpLQmkKrBppycvXmO4iCx7QRwmMB8GA1UdIwQY MBaAFJ0RX+nJ6c/e8X6SQWVZLAI++ysWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMt YmI3OTdjZTdlMTA4LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMtYmI3OTdjZTdlMTA4 LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjLhRuAm gTiruOPji8RlZ2SE40i7eXD/SRGRkmGpPqF4DKbbh4cFU8n67+shLqOBY1GNn/s7 qsxEh1XfNq1wzK60ZtnMXKNVFZwV5Hz94wegmf2J2TSK4K+LVLgW79RGrFcXXZKY D+o7YzyFXs6VCLbJWsW8XWaK9s9p6IefnK6SWDhzceNJ7kPMiaIcODA/jWL3mghb bpkJr23miVnw3kGtTWYsrQLc3uuYMSfMa72qLpAscamO9Rh41jVouOLobCMibhHT zkD86MdqtMCtbz1jP8H+KBgcZ5Smk8s2neDxusp/nDQSy7ptr1CfCd2ykj7Eo5kB RIT2ENABWJj40w== -----END CERTIFICATE-----Generated at Fri Dec 19 12:57:17 2025 by rpki-client