This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft File: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json) Hash identifier: rxOb/c+PJ3PZxBlsmmJw1n385rAuIRr+MzyPz61S1xI= Subject key identifier: 8D:54:2A:51:DB:25:C9:22:D3:69:D0:64:72:4C:91:67:16:A1:B8:ED Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB Certificate issuer: /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb Certificate serial: 019B650D269C103D535E100FE24BAEA8D277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft Manifest number: 0646 Signing time: Sun 28 Dec 2025 13:01:59 +0000 Manifest this update: Sun 28 Dec 2025 13:01:59 +0000 Manifest next update: Mon 29 Dec 2025 13:01:59 +0000 Files and hashes: 1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: 3XJXN7YmN8UMZaJhPfeskLwspAkdWxYJA1OFYBf2QZk=) 2: h4IDWh5GVC7RbE5zSCDWjjHj0_w.roa (hash: mtJ3QHHj/MXmx1AqDIJUZFeqCYJYqfmAn/WwFLDw0/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:26:9c:10:3d:53:5e:10:0f:e2:4b:ae:a8:d2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb Validity Not Before: Dec 28 13:01:59 2025 GMT Not After : Dec 29 13:01:59 2025 GMT Subject: CN=8d542a51db25c922d369d064724c916716a1b8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:70:a0:89:23:0e:48:64:2f:df:77:84:0d: bf:12:e8:95:52:92:ad:a2:b9:34:cb:e8:e1:5c:71: 17:5e:e6:df:33:36:aa:84:c8:02:bb:87:88:f6:8b: c1:a0:c6:e9:7e:a0:dc:51:98:bc:b1:70:45:5b:67: e9:24:22:db:8b:e0:2d:66:52:d5:a0:ea:37:5c:d7: f2:37:6e:2d:3e:6e:6c:b3:61:26:fe:60:b3:97:14: a7:6f:8b:1f:c9:f0:3d:86:28:e9:6b:83:17:53:db: ab:6d:d0:87:f9:e6:55:e5:6a:c3:8e:4d:d6:3e:d6: d3:d9:9d:f9:fe:ff:be:4e:89:9a:ab:a4:5f:10:f0: d0:83:69:0b:be:05:eb:86:97:b3:1e:a0:54:ae:9f: b0:d6:46:dc:1b:fd:34:cc:c7:67:ec:70:2a:b1:82: 32:6d:75:12:44:de:a0:4c:55:e1:23:3d:d2:6e:cc: 8f:8c:8a:e1:77:92:b6:d4:42:4f:b1:70:d6:07:bc: 1d:b7:34:1e:60:f0:2b:2f:c6:3d:ad:13:33:ef:b6: a0:0b:3a:39:9e:3c:61:26:0e:9a:ac:52:f0:87:1b: 25:a7:9d:a5:7a:9b:4b:e9:65:8c:40:72:c1:c3:63: 93:ae:13:74:70:04:13:8e:3d:bc:cf:5f:ee:f2:5c: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:2A:51:DB:25:C9:22:D3:69:D0:64:72:4C:91:67:16:A1:B8:ED X509v3 Authority Key Identifier: keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9e:2d:f4:9f:f1:4a:96:3d:30:9c:31:d5:f9:72:50:e7:ee: f6:0b:32:0f:20:e3:4f:fd:ed:82:7a:b5:ef:fc:6f:d9:ea:d6: 44:5f:e8:ea:b5:97:69:9a:c8:42:50:a1:e7:9d:82:76:94:0e: 1e:0b:d0:8f:50:73:f1:a1:f9:e0:64:8b:25:24:b5:35:4a:15: 08:a8:8d:f2:48:c9:ba:44:be:db:43:6a:e3:64:f3:3c:7a:83: a0:a4:73:0f:8a:d1:39:a9:1b:be:df:1a:ae:86:a7:c8:0a:22: a1:9d:01:09:50:85:26:6c:5e:9f:d6:be:fb:94:18:45:dd:c0: f1:79:98:5f:ee:22:9d:cf:88:18:da:b7:4c:d4:f1:e2:a8:57: b3:44:b6:27:23:c0:28:b2:fe:bd:d5:4d:1d:5c:43:45:c3:38: fd:02:4b:5f:50:a2:e3:13:2b:3f:25:6f:49:11:97:ae:d4:90: f5:9e:7f:a3:d2:24:bd:2c:e5:0c:a9:40:fc:01:c3:ba:62:71: 74:bc:84:f6:18:6d:8d:42:b6:4a:c9:f4:0f:d4:1b:2a:ef:f1: 17:ae:c8:5e:79:fb:20:15:02:84:0f:76:0f:5d:85:6b:56:5b: c4:65:a8:36:0d:22:b0:85:3e:2a:78:9e:78:94:af:b4:9e:70: 15:d0:62:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDSacED1TXhAP4kuuqNJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NWNjMTc4Y2RmNWFkOTI3OTkzOWU1NzY4YWU4ODgzZmZi ZjM1ZWIwHhcNMjUxMjI4MTMwMTU5WhcNMjUxMjI5MTMwMTU5WjAzMTEwLwYDVQQD Eyg4ZDU0MmE1MWRiMjVjOTIyZDM2OWQwNjQ3MjRjOTE2NzE2YTFiOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKBwoIkjDkhkL993hA2/EuiVUpKt ork0y+jhXHEXXubfMzaqhMgCu4eI9ovBoMbpfqDcUZi8sXBFW2fpJCLbi+AtZlLV oOo3XNfyN24tPm5ss2Em/mCzlxSnb4sfyfA9hijpa4MXU9urbdCH+eZV5WrDjk3W PtbT2Z35/v++Tomaq6RfEPDQg2kLvgXrhpezHqBUrp+w1kbcG/00zMdn7HAqsYIy bXUSRN6gTFXhIz3SbsyPjIrhd5K21EJPsXDWB7wdtzQeYPArL8Y9rRMz77agCzo5 njxhJg6arFLwhxslp52leptL6WWMQHLBw2OTrhN0cAQTjj28z1/u8lypwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1UKlHbJcki02nQZHJMkWcWobjtMB8GA1UdIwQY MBaAFOlcwXjN9a2SeZOeV2iuiIP/vzXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYt MmRmOTlkODEyM2I3LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYtMmRmOTlkODEyM2I3 LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJ4t9J/x SpY9MJwx1flyUOfu9gsyDyDjT/3tgnq17/xv2erWRF/o6rWXaZrIQlCh552CdpQO HgvQj1Bz8aH54GSLJSS1NUoVCKiN8kjJukS+20Nq42TzPHqDoKRzD4rROakbvt8a roanyAoioZ0BCVCFJmxen9a++5QYRd3A8XmYX+4inc+IGNq3TNTx4qhXs0S2JyPA KLL+vdVNHVxDRcM4/QJLX1Ci4xMrPyVvSRGXrtSQ9Z5/o9IkvSzlDKlA/AHDumJx dLyE9hhtjUK2Ssn0D9QbKu/xF67IXnn7IBUChA92D12Fa1ZbxGWoNg0isIU+Knie eJSvtJ5wFdBixg== -----END CERTIFICATE-----Generated at Sun Dec 28 20:15:19 2025 by rpki-client