This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft File: nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json) Hash identifier: VUX6YhILnM3DGyeFg9Zc/l9S95LA20By/qWh4J5SJjU= Subject key identifier: 9E:B1:4F:18:83:37:48:16:A4:8B:11:7A:6E:1F:9B:A4:78:FB:00:2C Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b Certificate serial: 019B4FCF505A3889E73B4B59765CB585D162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 10:02:24 +0000 Manifest this update: Wed 24 Dec 2025 10:02:24 +0000 Manifest next update: Thu 25 Dec 2025 10:02:24 +0000 Files and hashes: 1: EP3bkF_F-0JN_ikpcovpxVorS-8.roa (hash: hqxhbHTgDziJ5finpaZT0guvZfxkt53C1CG9ZliF94Y=) 2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: NhgEfEbloqYeZHLR96JkYiXgqmsMUFbL5ASSIxxFouI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:50:5a:38:89:e7:3b:4b:59:76:5c:b5:85:d1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b Validity Not Before: Dec 24 10:02:24 2025 GMT Not After : Dec 25 10:02:24 2025 GMT Subject: CN=9eb14f1883374816a48b117a6e1f9ba478fb002c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:da:7f:59:fc:d7:ee:50:55:5a:56:af:32: 7c:20:a9:bb:01:e5:31:09:32:d6:51:26:df:2c:60: c9:86:dd:32:55:28:5e:ac:45:21:95:15:4e:3b:2f: 73:d0:1b:20:6f:e1:a1:d7:a8:30:2f:35:7c:98:2d: 44:29:b8:0e:4d:a3:66:fa:86:e0:be:c2:5d:bb:94: 1f:db:9c:42:91:bb:d9:84:0b:36:ce:8b:f6:56:14: 8d:5b:7a:54:c5:d1:03:3b:4c:2d:ca:4c:04:c1:a8: 68:a7:a8:8e:5e:55:76:75:cf:71:a5:0a:08:51:b7: 7d:66:14:c3:3e:c5:3c:7b:e9:09:1a:17:f3:c8:99: f9:08:31:da:e0:9a:a8:cc:81:dc:81:99:a0:7e:13: 6a:4e:77:6d:5f:0b:17:08:4f:49:79:b1:ef:e8:38: 23:f5:6e:90:77:f0:8f:93:c6:0f:62:ef:e5:de:80: 43:2d:52:d2:cc:34:bb:34:a5:4f:0a:07:54:da:8e: ed:75:0c:ca:b5:71:67:20:e2:d9:89:f8:2f:85:45: 5d:73:ba:cc:a4:00:55:0a:d1:46:9f:6b:94:76:59: 9a:17:7c:02:0f:67:56:68:2e:6d:4d:8d:5a:16:dc: 20:ee:76:97:8a:6e:a4:41:82:49:a0:72:4d:87:a1: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:4F:18:83:37:48:16:A4:8B:11:7A:6E:1F:9B:A4:78:FB:00:2C X509v3 Authority Key Identifier: keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:70:b4:f8:67:50:d9:f4:81:b5:d8:68:86:99:ad:3d:f5:10: 2d:14:8b:23:c5:d3:cb:3f:f4:7e:98:2b:c8:be:01:c1:81:06: c1:7b:96:b5:c0:69:65:e9:a3:c8:94:e1:93:47:89:b6:c8:9a: 9a:b3:75:76:70:15:0c:71:a9:af:5b:c4:02:89:f9:02:3a:bc: 63:b7:ec:dd:00:36:ef:be:ec:f7:64:ed:37:7a:cf:f7:70:81: a2:7a:ac:a7:60:c2:1f:64:ad:17:9e:c4:12:37:08:0c:f4:b8: 1c:a5:bb:24:62:f4:db:47:92:a1:92:14:3b:8e:72:ba:19:fe: 15:87:27:a5:fb:84:6c:ba:2e:f1:1b:63:75:c0:d9:1f:cb:94: e7:e9:df:1b:59:88:9b:18:82:48:c8:60:a8:22:97:11:ee:6a: be:2e:00:19:93:38:6c:94:50:8d:be:23:09:c2:b4:ad:df:d6: bb:ce:bf:fd:69:9e:87:dd:80:93:44:10:bb:8a:01:57:a9:0e: 7f:5f:c1:0f:6a:d8:6c:a1:29:a2:7c:22:db:3c:4d:af:ed:1b: 61:94:9d:02:88:1d:2c:7e:c4:b9:e2:19:64:77:f4:a7:a7:c0: 83:7c:49:cb:80:0a:32:57:90:c0:cf:d4:c1:6a:fc:f1:e8:ed: 29:f3:bc:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz1BaOInnO0tZdly1hdFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzYwZWQ4ODE0MThhMjE3ZThkZDNjMWZhNTIzZTI1NjVj YWViOWIwHhcNMjUxMjI0MTAwMjI0WhcNMjUxMjI1MTAwMjI0WjAzMTEwLwYDVQQD Eyg5ZWIxNGYxODgzMzc0ODE2YTQ4YjExN2E2ZTFmOWJhNDc4ZmIwMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AHaf1n81+5QVVpWrzJ8IKm7AeUx CTLWUSbfLGDJht0yVSherEUhlRVOOy9z0Bsgb+Gh16gwLzV8mC1EKbgOTaNm+obg vsJdu5Qf25xCkbvZhAs2zov2VhSNW3pUxdEDO0wtykwEwahop6iOXlV2dc9xpQoI Ubd9ZhTDPsU8e+kJGhfzyJn5CDHa4JqozIHcgZmgfhNqTndtXwsXCE9JebHv6Dgj 9W6Qd/CPk8YPYu/l3oBDLVLSzDS7NKVPCgdU2o7tdQzKtXFnIOLZifgvhUVdc7rM pABVCtFGn2uUdlmaF3wCD2dWaC5tTY1aFtwg7naXim6kQYJJoHJNh6FXJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6xTxiDN0gWpIsRem4fm6R4+wAsMB8GA1UdIwQY MBaAFJzGDtiBQYohfo3TwfpSPiVlyuubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2Ut NGNhODQyYmFjZGE1LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2UtNGNhODQyYmFjZGE1 LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHC0+GdQ 2fSBtdhohpmtPfUQLRSLI8XTyz/0fpgryL4BwYEGwXuWtcBpZemjyJThk0eJtsia mrN1dnAVDHGpr1vEAon5Ajq8Y7fs3QA2777s92TtN3rP93CBonqsp2DCH2StF57E EjcIDPS4HKW7JGL020eSoZIUO45yuhn+FYcnpfuEbLou8RtjdcDZH8uU5+nfG1mI mxiCSMhgqCKXEe5qvi4AGZM4bJRQjb4jCcK0rd/Wu86//Wmeh92Ak0QQu4oBV6kO f1/BD2rYbKEponwi2zxNr+0bYZSdAogdLH7EueIZZHf0p6fAg3xJy4AKMleQwM/U wWr88ejtKfO8XA== -----END CERTIFICATE-----Generated at Wed Dec 24 19:26:56 2025 by rpki-client