This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json) Hash identifier: GZv6b6sQavV13jE4RMypVRatpg036HxVYdkH8h/cr1Y= Subject key identifier: E9:48:5F:32:88:02:28:13:BF:19:BC:F9:FE:49:D9:85:33:C5:51:76 Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71 Certificate serial: 019B52CEE6F1E24EB97812B8CBDF4626A77A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft Manifest number: 0B2D Signing time: Thu 25 Dec 2025 00:00:49 +0000 Manifest this update: Thu 25 Dec 2025 00:00:49 +0000 Manifest next update: Fri 26 Dec 2025 00:00:49 +0000 Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=) 2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: oQsaqxfMnHGAEnKzfd20TEhBWun+iwJyQ1DXJvqKxWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:e6:f1:e2:4e:b9:78:12:b8:cb:df:46:26:a7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71 Validity Not Before: Dec 25 00:00:49 2025 GMT Not After : Dec 26 00:00:49 2025 GMT Subject: CN=e9485f3288022813bf19bcf9fe49d98533c55176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:11:d1:3b:5d:d2:75:c5:a3:dc:38:0f:13: b4:47:e9:5d:24:30:b9:20:aa:05:69:d8:bd:34:cf: 65:f6:41:64:79:13:ec:1f:3f:17:60:a5:af:4f:0d: cb:70:54:bf:3c:43:0b:d9:14:56:1a:b6:c5:46:64: d0:8e:df:05:47:fb:1f:53:ac:7a:04:d0:73:6b:40: b4:84:ea:79:c3:8b:01:9d:23:aa:88:2f:67:81:5d: 3f:d4:e6:60:2d:20:38:8c:48:97:0a:5f:43:9d:0e: 4e:f8:d7:fc:9a:2c:cd:ec:a6:8f:db:eb:9d:fd:ee: 25:c6:ab:9e:2b:b6:37:78:11:dd:f9:3f:a6:b5:df: 16:f1:2b:63:14:62:fc:06:20:9c:8f:da:e0:b0:a9: 2b:31:98:60:33:af:6e:ab:d0:c6:ba:28:90:aa:34: 67:4e:7d:0a:64:26:13:e2:f5:5d:b6:fe:74:db:30: c4:81:93:70:e5:c2:18:d8:06:19:08:f9:59:90:0a: 12:83:5a:08:b8:5e:a7:f3:72:a5:32:4a:c8:5d:d8: da:1f:5a:3b:70:3d:90:8a:db:34:37:b3:fb:44:c4: d5:54:27:b2:13:13:d9:25:a4:68:de:c9:e9:8e:b0: 49:9c:de:e4:d6:20:b1:59:20:51:09:3f:1d:48:e4: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:48:5F:32:88:02:28:13:BF:19:BC:F9:FE:49:D9:85:33:C5:51:76 X509v3 Authority Key Identifier: keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:94:ed:32:20:40:d0:fc:ec:14:7f:70:9c:31:5d:38:7d:94: 93:97:d7:7f:e5:d8:53:04:73:85:79:c0:c2:4e:2c:c0:4b:04: 3a:b9:79:64:90:09:de:39:f1:40:98:49:39:1c:5e:39:14:b6: dc:ce:e3:66:6c:4d:60:07:a3:a1:87:cd:fb:17:ec:64:82:37: 3c:66:9e:66:2c:0c:1c:66:d9:85:db:7e:1f:6b:c1:43:e8:70: 90:d7:e2:1c:2a:e0:9e:9e:74:32:dc:75:bd:22:08:47:a0:de: 10:36:75:ba:4f:dd:c6:52:ca:55:bd:d1:52:3e:7f:cb:e1:9d: 03:19:ea:84:ff:97:ae:3c:6c:c8:e2:ae:a2:f2:7c:18:51:63: ae:7c:6c:d7:0a:2b:9d:87:0e:45:34:74:ed:fc:b6:1f:dc:f7: af:39:78:1d:46:9d:91:98:dd:6e:43:69:25:b3:6d:d7:1b:e0: 4d:d1:02:0c:82:50:7b:82:19:59:f3:f7:f8:3b:7b:34:a3:91: 57:0c:b3:cd:f4:d0:91:b1:8c:86:44:95:d1:10:0e:78:9d:0f: 13:36:33:5b:31:23:ba:a8:e2:15:4a:5f:c4:be:60:02:47:e9: 1b:62:16:ec:26:01:25:40:21:29:71:1f:b1:45:ca:af:f5:d0: 4f:42:39:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzubx4k65eBK4y99GJqd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2ViYmE5ZmEyY2FkMjg2YWM5MTI3NjU3NTc0NWY2MTVl OGZhNzEwHhcNMjUxMjI1MDAwMDQ5WhcNMjUxMjI2MDAwMDQ5WjAzMTEwLwYDVQQD EyhlOTQ4NWYzMjg4MDIyODEzYmYxOWJjZjlmZTQ5ZDk4NTMzYzU1MTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxcR0Ttd0nXFo9w4DxO0R+ldJDC5 IKoFadi9NM9l9kFkeRPsHz8XYKWvTw3LcFS/PEML2RRWGrbFRmTQjt8FR/sfU6x6 BNBza0C0hOp5w4sBnSOqiC9ngV0/1OZgLSA4jEiXCl9DnQ5O+Nf8mizN7KaP2+ud /e4lxqueK7Y3eBHd+T+mtd8W8StjFGL8BiCcj9rgsKkrMZhgM69uq9DGuiiQqjRn Tn0KZCYT4vVdtv502zDEgZNw5cIY2AYZCPlZkAoSg1oIuF6n83KlMkrIXdjaH1o7 cD2Qits0N7P7RMTVVCeyExPZJaRo3snpjrBJnN7k1iCxWSBRCT8dSOS+SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlIXzKIAigTvxm8+f5J2YUzxVF2MB8GA1UdIwQY MBaAFJ0+u6n6LK0oaskSdldXRfYV6PpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEt OWQ5NTlhYmNlNTI2LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEtOWQ5NTlhYmNlNTI2 LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5TtMiBA 0PzsFH9wnDFdOH2Uk5fXf+XYUwRzhXnAwk4swEsEOrl5ZJAJ3jnxQJhJORxeORS2 3M7jZmxNYAejoYfN+xfsZII3PGaeZiwMHGbZhdt+H2vBQ+hwkNfiHCrgnp50Mtx1 vSIIR6DeEDZ1uk/dxlLKVb3RUj5/y+GdAxnqhP+XrjxsyOKuovJ8GFFjrnxs1wor nYcORTR07fy2H9z3rzl4HUadkZjdbkNpJbNt1xvgTdECDIJQe4IZWfP3+Dt7NKOR VwyzzfTQkbGMhkSV0RAOeJ0PEzYzWzEjuqjiFUpfxL5gAkfpG2IW7CYBJUAhKXEf sUXKr/XQT0I5IQ== -----END CERTIFICATE-----Generated at Thu Dec 25 06:57:25 2025 by rpki-client