This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json) Hash identifier: rcNsWRCmNoj89aJuduU9F10lz987PhNjALcYJgrsgxA= Subject key identifier: 94:B9:2D:8F:C5:00:6A:7A:D7:A7:AB:9A:E2:8D:BD:90:3E:88:E8:69 Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Certificate serial: 019B4EBBA88423CEADBC01F687CED77F841D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 05:01:19 +0000 Manifest this update: Wed 24 Dec 2025 05:01:19 +0000 Manifest next update: Thu 25 Dec 2025 05:01:19 +0000 Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=) 2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: BYex42AviaWWLlIdONDEM2RE2DFPsCkqOQXSBiPgoJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:a8:84:23:ce:ad:bc:01:f6:87:ce:d7:7f:84:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Validity Not Before: Dec 24 05:01:19 2025 GMT Not After : Dec 25 05:01:19 2025 GMT Subject: CN=94b92d8fc5006a7ad7a7ab9ae28dbd903e88e869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:d4:54:02:bb:f0:9e:6c:b5:20:4c:b0:bf: 91:78:a4:89:89:85:39:28:23:2b:e4:98:3a:51:33: ec:ad:88:80:c8:53:b7:b2:b8:dc:5a:1c:76:43:ae: 88:c8:47:d6:8e:c0:84:e8:f5:dc:a8:e2:2d:07:ee: 4e:f0:42:90:8e:5c:9c:49:9f:6e:c2:7d:45:85:1b: 13:a3:d0:40:34:61:f7:a3:52:9f:64:e0:b5:b9:cb: c0:24:76:ce:58:5e:8b:10:65:31:01:fd:89:2a:8f: cc:cd:b8:80:2e:f0:e7:d9:ef:d3:c6:54:c2:55:2f: e8:a9:f9:5a:e2:69:cb:14:10:82:74:a4:0b:b5:7e: 31:11:fe:9c:f9:cc:75:58:44:0b:28:91:e8:7f:05: fe:a2:11:7a:2b:7c:d6:4c:82:88:97:ad:7e:7d:fa: 41:94:4a:76:cf:81:a8:5d:60:87:1d:92:d1:0a:b8: 35:6e:29:d0:f9:5f:4e:44:60:23:26:12:95:8f:ba: db:93:1f:3f:bf:77:6e:5c:fd:64:bf:d9:4d:de:b2: c5:a7:f7:9c:c2:49:6e:57:1c:22:73:37:e0:da:a7: 4e:b1:44:d0:3d:98:86:9e:4c:90:2f:02:1b:65:f4: ff:9c:c8:d6:2c:56:31:51:b4:a6:1d:f9:3d:32:09: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B9:2D:8F:C5:00:6A:7A:D7:A7:AB:9A:E2:8D:BD:90:3E:88:E8:69 X509v3 Authority Key Identifier: keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:91:ab:f2:56:65:d2:be:13:18:25:e7:d9:c5:24:f5:a9:a9: 81:65:61:a9:8b:96:b0:45:98:63:76:1c:13:a9:46:c4:0a:f2: a7:bc:30:86:a6:a1:a8:09:e0:b9:38:37:4f:b4:38:e5:87:03: f3:2f:ea:69:24:af:e2:17:06:f4:bd:42:38:20:58:24:31:2d: 1c:8c:fa:ab:f6:89:e3:c0:02:8a:5c:3f:88:91:97:c7:95:06: 65:e6:7d:07:2c:93:ce:e7:a2:0b:d0:a1:ea:0d:1e:c0:66:74: a1:e1:d8:16:41:cf:cc:4a:30:75:96:eb:6e:dc:48:2e:11:00: ba:01:f0:2b:c2:62:e4:00:12:21:68:ce:6c:d5:95:88:f6:6f: 35:21:70:e9:03:7c:59:e0:4f:11:64:ef:4c:a2:e0:8f:f0:df: 5b:6c:e9:ca:ec:66:d1:bd:f6:7e:f8:c4:45:bc:ec:09:48:da: a1:f7:31:17:83:d2:29:41:c0:96:43:27:df:cb:9b:42:1b:c1: 97:52:70:2d:a3:f2:b6:fa:39:b8:93:e8:ec:ba:ea:ec:d9:ea: 0b:d1:34:74:94:81:9d:b8:2e:d3:29:7c:27:8c:16:5c:1a:ed: b2:bd:3f:41:56:e6:aa:5b:08:3e:4e:40:f2:76:a1:65:a4:37: 16:13:9d:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu6iEI86tvAH2h87Xf4QdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1 ZWNmMWEwHhcNMjUxMjI0MDUwMTE5WhcNMjUxMjI1MDUwMTE5WjAzMTEwLwYDVQQD Eyg5NGI5MmQ4ZmM1MDA2YTdhZDdhN2FiOWFlMjhkYmQ5MDNlODhlODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAnUVAK78J5stSBMsL+ReKSJiYU5 KCMr5Jg6UTPsrYiAyFO3srjcWhx2Q66IyEfWjsCE6PXcqOItB+5O8EKQjlycSZ9u wn1FhRsTo9BANGH3o1KfZOC1ucvAJHbOWF6LEGUxAf2JKo/MzbiALvDn2e/TxlTC VS/oqfla4mnLFBCCdKQLtX4xEf6c+cx1WEQLKJHofwX+ohF6K3zWTIKIl61+ffpB lEp2z4GoXWCHHZLRCrg1binQ+V9ORGAjJhKVj7rbkx8/v3duXP1kv9lN3rLFp/ec wkluVxwiczfg2qdOsUTQPZiGnkyQLwIbZfT/nMjWLFYxUbSmHfk9MgktgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS5LY/FAGp616ermuKNvZA+iOhpMB8GA1UdIwQY MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt MjgyOWFhM2RmMjU4LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4 LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpGr8lZl 0r4TGCXn2cUk9ampgWVhqYuWsEWYY3YcE6lGxAryp7wwhqahqAnguTg3T7Q45YcD 8y/qaSSv4hcG9L1COCBYJDEtHIz6q/aJ48ACilw/iJGXx5UGZeZ9ByyTzueiC9Ch 6g0ewGZ0oeHYFkHPzEowdZbrbtxILhEAugHwK8Ji5AASIWjObNWViPZvNSFw6QN8 WeBPEWTvTKLgj/DfW2zpyuxm0b32fvjERbzsCUjaofcxF4PSKUHAlkMn38ubQhvB l1JwLaPytvo5uJPo7Lrq7NnqC9E0dJSBnbgu0yl8J4wWXBrtsr0/QVbmqlsIPk5A 8nahZaQ3FhOdQA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:59:54 2025 by rpki-client