This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json) Hash identifier: VnOrjVfcMDQEKgbTmyIB04cHE0EZK4GgwJ8QsTEm1Bg= Subject key identifier: D3:9C:40:97:E2:E2:40:8D:66:86:C1:A8:5B:B5:2F:D0:5B:58:2E:A7 Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18 Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018 Certificate serial: 019B3EDA6C379CC68A96A16E062E029B6608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft Manifest number: 16D7 Signing time: Sun 21 Dec 2025 03:01:00 +0000 Manifest this update: Sun 21 Dec 2025 03:01:00 +0000 Manifest next update: Mon 22 Dec 2025 03:01:00 +0000 Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=) 2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=) 3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: Ypiv64lkD7r3loN5iiFNKAKlP1DAldTIxvRf+JD1K7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:6c:37:9c:c6:8a:96:a1:6e:06:2e:02:9b:66:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018 Validity Not Before: Dec 21 03:01:00 2025 GMT Not After : Dec 22 03:01:00 2025 GMT Subject: CN=d39c4097e2e2408d6686c1a85bb52fd05b582ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:e2:1b:b2:55:6a:80:0f:aa:20:c1:73:d1: 9c:ff:50:90:80:97:f9:91:16:8e:e6:a2:a0:09:09: 7e:94:77:07:5f:31:70:c8:a1:44:b2:af:c0:68:24: 6d:6e:df:af:6c:03:d8:3e:0a:35:6a:7a:d9:fe:28: 21:07:91:82:aa:1f:df:32:8e:ae:92:9b:07:a1:1c: cb:bc:8f:b2:e8:eb:ba:55:e8:a6:e2:9f:07:c0:05: 9c:a4:21:27:f2:55:7a:23:07:f0:a4:91:12:2a:f5: 77:c7:e9:12:17:f5:bc:b1:1a:1a:1c:41:a4:8c:5e: 40:74:4b:34:15:9f:85:ee:5a:3a:a3:dd:34:9e:58: 4c:22:9e:0e:77:c6:55:25:db:e2:64:09:b9:cd:0c: 9e:45:cf:a3:7d:c0:af:8e:9e:60:fe:ed:be:19:2d: 2c:9f:9b:ce:8b:9e:fa:3c:fa:1d:f3:ec:30:39:24: 3c:5e:f8:13:3f:17:8a:f9:d2:ec:92:c5:8d:db:16: 70:c3:ae:1e:c3:55:a4:3a:de:25:70:32:b0:a9:1f: c0:17:7c:32:84:39:52:95:41:e2:4e:5f:19:b9:72: f9:51:2d:76:d7:5d:c4:e0:65:05:94:73:0f:ad:e0: 5d:17:3f:92:31:f0:a2:2c:a1:ed:5c:a4:cc:0d:44: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9C:40:97:E2:E2:40:8D:66:86:C1:A8:5B:B5:2F:D0:5B:58:2E:A7 X509v3 Authority Key Identifier: keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c4:db:47:cf:0e:38:3f:55:a7:a6:72:3e:62:ac:a0:ba:92: d8:63:06:82:99:f5:c9:0f:e8:33:0c:2b:86:41:59:b8:fd:0d: e1:04:87:20:f2:08:ed:81:5e:78:67:69:53:36:c1:ff:d2:ce: e9:10:9f:a7:86:6c:14:76:f2:8c:f1:82:25:d4:e9:e7:af:cb: 52:e6:c8:26:f1:a4:ed:e2:10:97:79:fb:7f:33:10:50:8c:a1: dd:7e:b1:d8:17:c2:cd:7a:38:79:8c:1a:70:cc:51:db:ba:f3: 35:1b:2c:a8:aa:91:4e:47:e9:8b:69:8a:85:b5:d7:f4:a8:dc: de:41:fd:7f:08:2d:2f:40:30:ef:e9:53:96:5e:15:22:39:1b: 33:79:d1:1e:ea:20:94:65:65:82:d3:e2:36:74:ca:e9:47:14: 8e:e4:56:d1:b6:62:5f:5b:e4:aa:bb:15:6a:2f:cb:22:7c:ca: 0a:c9:37:cb:a1:c6:6d:2b:08:ef:06:6f:00:99:e7:bf:56:db: 90:41:03:2e:8d:c0:bd:ec:ab:58:c5:7c:b9:33:59:33:ca:b8: 7a:8e:8b:f0:e2:7a:37:96:40:bc:92:07:0d:34:1f:98:df:f4: b4:df:3e:47:d3:6a:9b:83:37:8f:07:77:11:93:89:3d:bd:97: 45:a8:04:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2mw3nMaKlqFuBi4Cm2YIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZDA3NTg4MjVkZDg5Y2ZlZTVmZGVjYzdkY2I2NTFmMGE1 ZDEwMTgwHhcNMjUxMjIxMDMwMTAwWhcNMjUxMjIyMDMwMTAwWjAzMTEwLwYDVQQD EyhkMzljNDA5N2UyZTI0MDhkNjY4NmMxYTg1YmI1MmZkMDViNTgyZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaXiG7JVaoAPqiDBc9Gc/1CQgJf5 kRaO5qKgCQl+lHcHXzFwyKFEsq/AaCRtbt+vbAPYPgo1anrZ/ighB5GCqh/fMo6u kpsHoRzLvI+y6Ou6Veim4p8HwAWcpCEn8lV6IwfwpJESKvV3x+kSF/W8sRoaHEGk jF5AdEs0FZ+F7lo6o900nlhMIp4Od8ZVJdviZAm5zQyeRc+jfcCvjp5g/u2+GS0s n5vOi576PPod8+wwOSQ8XvgTPxeK+dLsksWN2xZww64ew1WkOt4lcDKwqR/AF3wy hDlSlUHiTl8ZuXL5US12113E4GUFlHMPreBdFz+SMfCiLKHtXKTMDURiAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOcQJfi4kCNZobBqFu1L9BbWC6nMB8GA1UdIwQY MBaAFJzQdYgl3YnP7l/ezH3LZR8KXRAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3Yjkt YTU0ZjhlNDgxM2U3LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3YjktYTU0ZjhlNDgxM2U3 LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8TbR88O OD9Vp6ZyPmKsoLqS2GMGgpn1yQ/oMwwrhkFZuP0N4QSHIPII7YFeeGdpUzbB/9LO 6RCfp4ZsFHbyjPGCJdTp56/LUubIJvGk7eIQl3n7fzMQUIyh3X6x2BfCzXo4eYwa cMxR27rzNRssqKqRTkfpi2mKhbXX9Kjc3kH9fwgtL0Aw7+lTll4VIjkbM3nRHuog lGVlgtPiNnTK6UcUjuRW0bZiX1vkqrsVai/LInzKCsk3y6HGbSsI7wZvAJnnv1bb kEEDLo3AveyrWMV8uTNZM8q4eo6L8OJ6N5ZAvJIHDTQfmN/0tN8+R9Nqm4M3jwd3 EZOJPb2XRagEOQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:02:14 2025 by rpki-client