This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json) Hash identifier: hWAX/5QJ8+440c1gksouUtNLmN10CiIHFIP46hPfgxg= Subject key identifier: C4:F9:AD:2C:F0:B7:AC:EC:F2:EE:82:FC:8D:FB:29:76:93:FB:F1:F2 Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744 Certificate serial: 019B3D90865A03F93C2A7610CC1252B02938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft Manifest number: 0AB4 Signing time: Sat 20 Dec 2025 21:00:40 +0000 Manifest this update: Sat 20 Dec 2025 21:00:40 +0000 Manifest next update: Sun 21 Dec 2025 21:00:40 +0000 Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: 3Ld+FdJFu+OPQqLPT5CRxuZFysxrA4eUHxvK/IUnMXw=) 2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:86:5a:03:f9:3c:2a:76:10:cc:12:52:b0:29:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744 Validity Not Before: Dec 20 21:00:40 2025 GMT Not After : Dec 21 21:00:40 2025 GMT Subject: CN=c4f9ad2cf0b7acecf2ee82fc8dfb297693fbf1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:9a:6d:50:dc:5c:96:af:00:36:8c:15:18: 0a:d4:f9:77:05:93:c8:57:e1:ef:6e:cc:ba:fa:79: 81:9f:95:27:d2:a1:62:e8:20:ba:72:d6:f2:0c:3f: 4f:ea:46:3a:74:39:1b:9a:40:ca:64:d6:2a:27:eb: b6:da:84:80:a1:b3:ff:81:37:16:e7:58:df:5e:27: a0:1c:0c:78:b2:9e:be:0a:52:ab:9f:d8:68:c7:c4: 73:dc:87:c0:ad:a3:c0:92:e2:7d:f0:db:69:f6:e2: 26:63:fd:b5:be:67:72:d5:82:fb:8c:3f:73:fd:c9: 01:69:23:da:4f:fe:d3:63:9c:44:33:a2:03:b6:18: 42:ef:23:2d:0f:62:cf:79:9b:91:14:06:86:52:aa: 0b:00:0e:1b:78:db:a2:02:5a:57:c4:4d:6a:2c:83: 52:35:49:af:14:f7:e8:be:1d:0a:60:f5:9e:95:56: a7:d6:79:c9:93:97:ce:8e:a0:39:d3:ad:ec:07:63: 41:90:82:2d:34:b7:1d:ac:63:1b:d6:b5:22:1c:1e: 36:d3:68:90:39:37:4e:5f:0d:92:44:2b:23:08:fd: 1b:b6:53:40:a9:c1:f5:d3:d3:85:7c:ae:fa:c6:e3: 5a:cc:75:0a:df:23:06:3b:33:57:b1:16:67:81:87: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:AD:2C:F0:B7:AC:EC:F2:EE:82:FC:8D:FB:29:76:93:FB:F1:F2 X509v3 Authority Key Identifier: keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e8:6a:bd:36:51:c8:eb:6b:8d:4e:4a:4f:a6:73:e7:91:93: ba:2a:55:5a:6c:94:8d:f2:c5:ec:2e:7e:5a:83:72:ef:68:4b: a9:f4:c1:59:3d:67:66:a8:3a:0c:9a:74:62:97:f5:4a:6e:ae: c4:87:bd:a2:0d:29:20:50:0d:8e:2c:90:22:75:a7:67:61:b1: f9:a3:1a:4a:43:49:95:2e:9f:23:ea:66:ea:28:16:77:9b:b1: fe:08:6e:77:5c:5f:ab:47:90:c2:df:53:4b:33:a2:17:13:56: 9c:45:6f:1e:81:2f:ab:61:35:be:e2:b5:e3:aa:3f:c2:f6:ce: 37:8e:29:25:f6:b3:5e:33:41:6b:7c:f2:43:29:dd:b8:98:6e: eb:5f:8f:bf:ee:34:5f:2a:3a:0f:5f:9e:9e:3b:45:3f:fd:27: d4:a6:6b:fa:04:db:c5:1a:cd:80:76:f7:c3:eb:65:21:97:9d: 5b:e9:66:89:fa:e3:56:59:d9:45:e5:bf:1a:e5:ee:ba:ad:69: 51:90:f2:e1:19:ee:47:2a:a1:b8:80:e7:70:97:ca:ca:8f:bf: de:92:ab:5f:75:90:fd:71:ed:ca:3c:27:9c:ae:f0:00:06:e0: 22:33:e5:7f:48:cf:93:61:7e:63:67:e7:be:ee:c1:a5:0a:ef: 6a:e9:00:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kIZaA/k8KnYQzBJSsCk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllY2IyMjJiODEyNmEyMWRmMzJkMDE1ZTRjNDg1Mzk1N2Qx ZDk3NDQwHhcNMjUxMjIwMjEwMDQwWhcNMjUxMjIxMjEwMDQwWjAzMTEwLwYDVQQD EyhjNGY5YWQyY2YwYjdhY2VjZjJlZTgyZmM4ZGZiMjk3NjkzZmJmMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe6abVDcXJavADaMFRgK1Pl3BZPI V+Hvbsy6+nmBn5Un0qFi6CC6ctbyDD9P6kY6dDkbmkDKZNYqJ+u22oSAobP/gTcW 51jfXiegHAx4sp6+ClKrn9hox8Rz3IfAraPAkuJ98Ntp9uImY/21vmdy1YL7jD9z /ckBaSPaT/7TY5xEM6IDthhC7yMtD2LPeZuRFAaGUqoLAA4beNuiAlpXxE1qLINS NUmvFPfovh0KYPWelVan1nnJk5fOjqA5063sB2NBkIItNLcdrGMb1rUiHB4202iQ OTdOXw2SRCsjCP0btlNAqcH109OFfK76xuNazHUK3yMGOzNXsRZngYdjIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT5rSzwt6zs8u6C/I37KXaT+/HyMB8GA1UdIwQY MBaAFJ7LIiuBJqId8y0BXkxIU5V9HZdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzIt NThlNGYyNGZhYmVhLzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzItNThlNGYyNGZhYmVh LzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxehqvTZR yOtrjU5KT6Zz55GTuipVWmyUjfLF7C5+WoNy72hLqfTBWT1nZqg6DJp0Ypf1Sm6u xIe9og0pIFANjiyQInWnZ2Gx+aMaSkNJlS6fI+pm6igWd5ux/ghud1xfq0eQwt9T SzOiFxNWnEVvHoEvq2E1vuK146o/wvbON44pJfazXjNBa3zyQynduJhu61+Pv+40 Xyo6D1+enjtFP/0n1KZr+gTbxRrNgHb3w+tlIZedW+lmifrjVlnZReW/GuXuuq1p UZDy4RnuRyqhuIDncJfKyo+/3pKrX3WQ/XHtyjwnnK7wAAbgIjPlf0jPk2F+Y2fn vu7BpQrvaukAZg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:59 2025 by rpki-client