This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json) Hash identifier: ugjvssfmaTea36QjyBwpXeDaIHdjCBfGka+KxASYMJk= Subject key identifier: 87:A4:88:4E:F4:55:CA:25:89:90:39:76:9F:5A:47:BA:71:97:EE:7C Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d Certificate serial: 019B4E4DEF01501293A6691A5DBE87DB1D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft Manifest number: 1065 Signing time: Wed 24 Dec 2025 03:01:28 +0000 Manifest this update: Wed 24 Dec 2025 03:01:28 +0000 Manifest next update: Thu 25 Dec 2025 03:01:28 +0000 Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=) 2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: VjcCRrZpdaOQTSUa1NuUtCS1Hw1Rd3mvl7aoQPd5jMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:ef:01:50:12:93:a6:69:1a:5d:be:87:db:1d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d Validity Not Before: Dec 24 03:01:28 2025 GMT Not After : Dec 25 03:01:28 2025 GMT Subject: CN=87a4884ef455ca25899039769f5a47ba7197ee7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:33:f4:0c:86:38:b7:36:b4:f1:cb:aa:6b: 7b:00:c5:81:7a:13:30:29:d3:cd:f9:30:ec:46:9a: d6:3b:79:22:eb:13:dd:d5:99:5d:e5:c6:39:20:78: 14:45:55:9d:64:88:47:05:17:74:52:f7:02:d3:16: 6c:ad:4f:75:a2:48:a7:23:d7:45:33:9e:bd:b9:04: 15:f5:fa:96:14:98:c0:e3:c9:37:8d:03:45:85:83: c4:72:98:71:a8:5c:d1:9f:03:41:13:98:c9:74:28: 5b:02:c0:ba:64:77:13:ef:28:63:cc:f9:d4:9e:ff: f8:dc:08:ef:9b:e0:89:e0:50:12:fd:89:dc:75:36: 02:82:b3:82:c9:b1:90:4b:60:ca:42:3a:85:3e:bc: 5b:1a:7d:b4:65:6c:21:cd:56:b9:52:bd:02:4c:90: ed:20:0c:25:8f:89:dc:b4:e6:9d:c0:3d:a9:5f:2c: bb:e4:22:3e:55:b1:99:db:02:b4:0e:3c:e6:81:f1: e9:64:7b:33:ba:bc:43:5f:ce:fa:83:02:6b:80:21: 04:b7:b9:4a:74:6a:91:b2:e0:1a:4d:44:66:b4:fb: b4:8f:b8:ae:fb:2c:68:d7:ab:a5:87:3c:29:ed:81: ad:7f:14:0b:aa:81:c9:bc:85:c3:77:64:d0:52:e7: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A4:88:4E:F4:55:CA:25:89:90:39:76:9F:5A:47:BA:71:97:EE:7C X509v3 Authority Key Identifier: keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:d8:ac:8d:d2:74:28:e7:5f:7a:0b:bc:9a:1f:b5:db:f0:c0: d6:94:59:6a:df:e9:7f:78:12:10:cb:80:02:e1:d0:45:b6:e1: e1:81:8a:b9:75:d2:f3:2d:8c:ea:bd:1d:1c:e9:9a:4d:10:b3: 82:d4:1e:8c:46:4e:5a:37:ac:5c:fb:18:e0:c8:e2:41:75:59: 42:13:93:bf:d0:e6:a8:8d:87:b6:6e:a7:bd:71:3b:55:77:0d: b3:4b:03:47:4f:56:5c:42:0e:97:ce:2f:9b:c8:2b:24:93:97: 07:cb:58:2c:0e:2a:48:12:f2:d9:2b:13:39:7d:71:ef:22:61: 4a:7e:cb:a1:5a:b7:46:e3:6e:f6:d3:ae:65:6b:3d:2e:04:23: e3:ad:e8:e6:93:8d:9b:e4:df:6e:d2:a8:b5:43:1c:0b:9f:19: f6:de:13:80:2e:09:71:eb:58:63:f4:7f:ad:64:2b:ec:e4:e1: 30:08:43:f8:8a:99:1e:3c:93:6d:77:2d:2f:1d:93:12:34:32: 95:43:89:40:ee:6c:19:c9:4f:13:36:70:b7:93:3f:1a:f8:68: 22:fb:f3:37:17:25:a9:c7:bf:fc:f9:bd:79:fb:79:6c:26:ce: 3e:60:65:d5:dd:93:f0:39:7b:5d:a7:22:4a:e6:9f:d4:ae:f9: ef:5f:21:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTe8BUBKTpmkaXb6H2x1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjRlODBiNGNhZDRlNTBiNzg4ZWRmMTY5NzY3MTJkZWVm ZjZjMGQwHhcNMjUxMjI0MDMwMTI4WhcNMjUxMjI1MDMwMTI4WjAzMTEwLwYDVQQD Eyg4N2E0ODg0ZWY0NTVjYTI1ODk5MDM5NzY5ZjVhNDdiYTcxOTdlZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW0z9AyGOLc2tPHLqmt7AMWBehMw KdPN+TDsRprWO3ki6xPd1Zld5cY5IHgURVWdZIhHBRd0UvcC0xZsrU91okinI9dF M569uQQV9fqWFJjA48k3jQNFhYPEcphxqFzRnwNBE5jJdChbAsC6ZHcT7yhjzPnU nv/43Ajvm+CJ4FAS/YncdTYCgrOCybGQS2DKQjqFPrxbGn20ZWwhzVa5Ur0CTJDt IAwlj4nctOadwD2pXyy75CI+VbGZ2wK0DjzmgfHpZHszurxDX876gwJrgCEEt7lK dGqRsuAaTURmtPu0j7iu+yxo16ulhzwp7YGtfxQLqoHJvIXDd2TQUudb4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIekiE70VcoliZA5dp9aR7pxl+58MB8GA1UdIwQY MBaAFJ306AtMrU5Qt4jt8Wl2cS3u/2wNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMt YzlmYzVmNDUyOTk1LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMtYzlmYzVmNDUyOTk1 LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0disjdJ0 KOdfegu8mh+12/DA1pRZat/pf3gSEMuAAuHQRbbh4YGKuXXS8y2M6r0dHOmaTRCz gtQejEZOWjesXPsY4MjiQXVZQhOTv9DmqI2Htm6nvXE7VXcNs0sDR09WXEIOl84v m8grJJOXB8tYLA4qSBLy2SsTOX1x7yJhSn7LoVq3RuNu9tOuZWs9LgQj463o5pON m+TfbtKotUMcC58Z9t4TgC4JcetYY/R/rWQr7OThMAhD+IqZHjyTbXctLx2TEjQy lUOJQO5sGclPEzZwt5M/GvhoIvvzNxclqce//Pm9eft5bCbOPmBl1d2T8Dl7Xaci Suaf1K75718h6w== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:09 2025 by rpki-client