This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json) Hash identifier: Cua1prYcxeFE4Q/0YisY6+DhAs+HomuMK/v7BVk9wuU= Subject key identifier: F5:AA:85:40:08:BF:FB:C6:A1:A1:EA:45:70:31:7C:1E:CB:39:AB:EE Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c Certificate serial: 019B318CB14BD512666051D4DB5CADCA4667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 13:01:02 +0000 Manifest this update: Thu 18 Dec 2025 13:01:02 +0000 Manifest next update: Fri 19 Dec 2025 13:01:02 +0000 Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=) 2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=) 3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: Wm/Zop7B2bn+ZovGc/E3Aw6S9pHwvwG3k+n6YQnw1lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:b1:4b:d5:12:66:60:51:d4:db:5c:ad:ca:46:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c Validity Not Before: Dec 18 13:01:02 2025 GMT Not After : Dec 19 13:01:02 2025 GMT Subject: CN=f5aa854008bffbc6a1a1ea4570317c1ecb39abee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:a5:61:22:43:8e:5d:c7:95:ad:bd:bb:1f: c0:9c:be:0a:c6:3c:65:0c:13:22:7e:58:3c:1d:15: 22:35:83:b5:ed:8e:a6:98:c2:62:15:72:f2:66:1f: 5b:39:d9:b0:17:d9:df:fa:95:f3:ee:b4:18:e4:5a: cd:79:76:95:7c:88:33:e5:ef:f6:d0:a7:c3:2e:47: 58:b4:17:b2:db:b6:bb:b5:cf:59:4c:6a:81:6a:be: d8:5c:a7:84:aa:b2:fc:51:f4:8c:ac:85:7a:27:18: 70:95:83:2e:77:c2:64:f3:3b:5b:b7:c1:29:39:6a: 40:d8:e4:e3:4d:5c:22:ee:57:5e:30:cb:da:a6:49: 8e:15:30:34:3c:47:39:d0:dd:45:03:c5:eb:d6:3c: cd:bd:96:a3:a7:89:34:06:aa:25:34:4a:71:d3:2b: 83:a8:3c:17:c1:2e:9e:84:4c:77:45:63:d9:e9:68: bf:0f:74:5c:53:3d:1b:82:01:cb:98:58:d8:10:94: 47:fa:fa:61:2c:53:b5:51:63:57:c4:21:5e:69:3f: a0:74:4a:66:44:ba:fd:58:c0:1b:92:99:7e:ad:3b: 53:fe:23:0b:86:95:37:52:fe:dc:7e:02:d4:87:46: dc:88:9e:30:b8:4c:b3:27:05:f1:aa:9c:fc:09:d8: e6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AA:85:40:08:BF:FB:C6:A1:A1:EA:45:70:31:7C:1E:CB:39:AB:EE X509v3 Authority Key Identifier: keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:88:06:be:96:0d:4a:0c:71:96:f4:e5:f0:ef:d8:09:77:f4: ba:37:84:39:63:ba:06:04:05:1f:11:db:77:f4:7a:73:17:08: 58:32:89:67:e1:b6:72:ec:12:99:80:f1:1e:7b:b4:79:97:32: e5:76:03:f1:51:5a:e6:a5:3b:fd:e8:80:22:0f:78:ab:ae:da: 25:f6:54:51:e2:88:85:d1:1d:f5:e5:fe:5b:b9:bb:ac:94:da: e5:ac:b4:8e:3b:0e:57:c3:15:cb:60:0b:a0:b7:0c:2f:7e:7c: 87:4a:88:ea:76:12:67:43:27:15:4a:59:62:4e:27:96:68:1d: f0:70:2f:e0:5e:8c:5f:4b:c1:9a:36:19:25:dc:a0:00:92:17: ed:b0:72:64:85:59:bd:7c:bf:03:6f:08:39:55:02:2b:d0:f8: 0a:a4:c4:4b:5b:2c:98:35:c9:c1:bb:e0:a9:f8:9c:44:32:5a: 12:6e:86:96:70:5f:59:c0:9c:3b:e6:d9:17:2e:a1:49:21:fa: 36:0c:13:2f:c5:17:78:74:2d:d3:a3:1f:2f:61:28:64:f3:40: 7c:e1:dc:a4:fc:4c:a4:52:0c:c8:8e:24:93:49:d8:f0:e5:ed: 0d:12:3f:87:4a:c1:90:91:e3:ab:17:48:7f:6b:f9:b3:13:37: de:6f:5b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjLFL1RJmYFHU21ytykZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2 ZTc5M2MwHhcNMjUxMjE4MTMwMTAyWhcNMjUxMjE5MTMwMTAyWjAzMTEwLwYDVQQD EyhmNWFhODU0MDA4YmZmYmM2YTFhMWVhNDU3MDMxN2MxZWNiMzlhYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub+lYSJDjl3Hla29ux/AnL4Kxjxl DBMiflg8HRUiNYO17Y6mmMJiFXLyZh9bOdmwF9nf+pXz7rQY5FrNeXaVfIgz5e/2 0KfDLkdYtBey27a7tc9ZTGqBar7YXKeEqrL8UfSMrIV6JxhwlYMud8Jk8ztbt8Ep OWpA2OTjTVwi7ldeMMvapkmOFTA0PEc50N1FA8Xr1jzNvZajp4k0BqolNEpx0yuD qDwXwS6ehEx3RWPZ6Wi/D3RcUz0bggHLmFjYEJRH+vphLFO1UWNXxCFeaT+gdEpm RLr9WMAbkpl+rTtT/iMLhpU3Uv7cfgLUh0bciJ4wuEyzJwXxqpz8CdjmzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWqhUAIv/vGoaHqRXAxfB7LOavuMB8GA1UdIwQY MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt NzA5ZmJlODRjZGZiLzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYgGvpYN SgxxlvTl8O/YCXf0ujeEOWO6BgQFHxHbd/R6cxcIWDKJZ+G2cuwSmYDxHnu0eZcy 5XYD8VFa5qU7/eiAIg94q67aJfZUUeKIhdEd9eX+W7m7rJTa5ay0jjsOV8MVy2AL oLcML358h0qI6nYSZ0MnFUpZYk4nlmgd8HAv4F6MX0vBmjYZJdygAJIX7bByZIVZ vXy/A28IOVUCK9D4CqTES1ssmDXJwbvgqficRDJaEm6GlnBfWcCcO+bZFy6hSSH6 NgwTL8UXeHQt06MfL2EoZPNAfOHcpPxMpFIMyI4kk0nY8OXtDRI/h0rBkJHjqxdI f2v5sxM33m9b9A== -----END CERTIFICATE-----Generated at Thu Dec 18 15:23:33 2025 by rpki-client