This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json) Hash identifier: SE+975Qaa4h9wjJLqm7aWU9BlRc2fpALxKNHW4ckQ7w= Subject key identifier: 65:7D:0E:77:A8:57:8A:C3:85:E9:1B:14:B9:42:F5:B4:5F:80:19:B7 Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Certificate serial: 019B3D5A2611AE9A7798F5473BEE3600576E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:01:16 +0000 Manifest this update: Sat 20 Dec 2025 20:01:16 +0000 Manifest next update: Sun 21 Dec 2025 20:01:16 +0000 Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=) 2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: uNHm0c/AX48ZQ+TKhV1mXxfZAyLPQFZYfVSre6ERF7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:26:11:ae:9a:77:98:f5:47:3b:ee:36:00:57:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Validity Not Before: Dec 20 20:01:16 2025 GMT Not After : Dec 21 20:01:16 2025 GMT Subject: CN=657d0e77a8578ac385e91b14b942f5b45f8019b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:6c:17:09:96:40:01:6a:ff:6d:7c:57:e0: 68:2d:aa:da:1b:13:53:9a:40:fd:f6:ec:64:d3:69: 42:09:2d:5d:a7:a2:84:c6:1f:d9:3e:49:1b:08:f0: 64:50:82:aa:dc:6b:4f:eb:3e:d2:9c:02:9e:6d:4a: 6f:08:40:b4:9d:b2:d5:96:d9:64:8e:6a:e1:31:7e: bb:00:17:0c:c0:8d:01:7a:06:70:f1:e6:56:38:b6: ba:15:b2:a8:70:38:b2:10:0d:84:49:92:4e:1c:ee: 92:95:d7:b2:60:5c:00:23:a4:50:77:68:32:f8:1c: 07:60:68:6e:b7:92:f7:a1:b9:71:aa:aa:14:3f:df: 87:e2:10:35:a0:a8:a4:a4:7b:f1:c2:33:b6:5f:28: 78:37:7e:b0:75:12:72:96:6d:dd:47:7e:ac:17:dd: b7:3a:5d:1a:ea:82:9d:e6:cc:e2:90:3b:9c:fa:aa: 6f:61:1f:d0:cc:b0:91:4e:4d:ba:41:a5:b4:a9:56: 4a:b9:b5:54:ee:21:61:02:b4:3e:1a:3d:2d:9a:5d: 96:ae:cb:c0:39:0b:c9:19:ce:28:a3:07:39:22:c4: 0b:03:65:8f:34:db:51:dd:20:dc:e7:d4:4d:13:07: 02:b0:7d:eb:fd:b1:a7:4f:fd:47:f4:ae:9e:1d:10: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7D:0E:77:A8:57:8A:C3:85:E9:1B:14:B9:42:F5:B4:5F:80:19:B7 X509v3 Authority Key Identifier: keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c8:d4:5f:72:d3:af:f8:9c:80:fc:66:0e:fc:b6:bb:a3:09: 5b:3c:10:10:a1:f2:a2:a6:a7:83:e5:5d:bb:50:77:a5:cf:f9: 66:05:aa:d8:74:89:2b:0c:40:a1:e3:c3:ce:17:80:22:c9:c9: 85:46:c9:44:12:d8:fa:65:81:b7:40:4c:3c:7a:37:19:10:72: 68:28:e7:6b:1b:11:d3:f0:53:c9:80:23:d4:b5:5f:ec:44:ed: 7b:61:95:0a:44:cb:d0:21:20:a2:93:4d:d2:00:8e:e4:10:b3: 44:db:90:85:35:2d:26:3b:c8:43:9b:18:c8:28:55:11:0b:5a: b5:64:e6:8c:a3:ff:1e:50:ac:d8:77:87:6f:84:12:c2:b4:03: 29:3e:1f:67:8e:3a:5a:9b:0e:e6:dc:49:97:93:c4:7b:ed:5f: 43:86:9d:d4:9f:66:89:77:ae:f5:66:e7:fa:5e:0c:fc:43:d1: 90:77:33:6a:55:dd:7f:87:e3:3a:78:ee:0e:05:93:70:ed:e2: 80:68:f0:85:02:6d:d6:c1:eb:72:35:0b:fe:54:43:60:88:34: 52:18:8d:96:6f:c7:59:c7:74:05:5f:6c:d5:12:f6:cf:af:d8: 65:eb:2f:fb:cb:3b:6c:5a:02:a1:78:7c:24:72:ae:ce:19:33: 7d:7d:bb:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WiYRrpp3mPVHO+42AFduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1 ZWNmMWEwHhcNMjUxMjIwMjAwMTE2WhcNMjUxMjIxMjAwMTE2WjAzMTEwLwYDVQQD Eyg2NTdkMGU3N2E4NTc4YWMzODVlOTFiMTRiOTQyZjViNDVmODAxOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzZsFwmWQAFq/218V+BoLaraGxNT mkD99uxk02lCCS1dp6KExh/ZPkkbCPBkUIKq3GtP6z7SnAKebUpvCEC0nbLVltlk jmrhMX67ABcMwI0BegZw8eZWOLa6FbKocDiyEA2ESZJOHO6SldeyYFwAI6RQd2gy +BwHYGhut5L3oblxqqoUP9+H4hA1oKikpHvxwjO2Xyh4N36wdRJylm3dR36sF923 Ol0a6oKd5szikDuc+qpvYR/QzLCRTk26QaW0qVZKubVU7iFhArQ+Gj0tml2WrsvA OQvJGc4oowc5IsQLA2WPNNtR3SDc59RNEwcCsH3r/bGnT/1H9K6eHRBTYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV9DneoV4rDhekbFLlC9bRfgBm3MB8GA1UdIwQY MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt MjgyOWFhM2RmMjU4LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4 LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsjUX3LT r/icgPxmDvy2u6MJWzwQEKHyoqang+Vdu1B3pc/5ZgWq2HSJKwxAoePDzheAIsnJ hUbJRBLY+mWBt0BMPHo3GRByaCjnaxsR0/BTyYAj1LVf7ETte2GVCkTL0CEgopNN 0gCO5BCzRNuQhTUtJjvIQ5sYyChVEQtatWTmjKP/HlCs2HeHb4QSwrQDKT4fZ446 WpsO5txJl5PEe+1fQ4ad1J9miXeu9Wbn+l4M/EPRkHczalXdf4fjOnjuDgWTcO3i gGjwhQJt1sHrcjUL/lRDYIg0UhiNlm/HWcd0BV9s1RL2z6/YZesv+8s7bFoCoXh8 JHKuzhkzfX27zw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:02 2025 by rpki-client