This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json) Hash identifier: Lk7mX8UfixtaF94jVdQAlP6m2iQTxOn56CShV1I5t/M= Subject key identifier: A7:26:0D:08:80:67:3C:48:28:7B:16:7D:BC:D9:46:1A:C9:AB:78:46 Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261 Certificate serial: 019B318C65323CCD92BFA83A7C82C83C5CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft Manifest number: 0D73 Signing time: Thu 18 Dec 2025 13:00:42 +0000 Manifest this update: Thu 18 Dec 2025 13:00:42 +0000 Manifest next update: Fri 19 Dec 2025 13:00:42 +0000 Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: DQn36Sq0uLXX5fAmA+Smnor+eIVko39sz56NHNPs0rk=) 2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:65:32:3c:cd:92:bf:a8:3a:7c:82:c8:3c:5c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261 Validity Not Before: Dec 18 13:00:42 2025 GMT Not After : Dec 19 13:00:42 2025 GMT Subject: CN=a7260d0880673c48287b167dbcd9461ac9ab7846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ff:2a:0b:36:b7:20:e6:d7:17:28:54:fe:c2: 4d:1e:bf:78:7f:1b:df:59:a4:63:74:6b:c9:6f:a8: 9d:a6:7b:e6:6b:bc:46:de:75:c7:99:fc:55:b9:c1: 28:46:3e:9e:b8:27:3f:3a:79:99:a0:e9:e2:a5:3d: 5f:31:34:82:56:1b:08:6d:56:22:a2:46:61:69:5e: 41:c2:3d:57:2a:34:a2:53:d3:82:01:e8:7a:5d:9f: 2a:b0:a3:73:0a:3b:ae:67:12:c2:52:8b:e8:e3:7d: dc:ae:99:88:92:de:8e:5a:e4:e3:6c:1f:12:58:d5: a1:f6:f8:f8:95:31:b2:70:16:bd:68:fe:66:a3:d6: 8f:f8:6e:fd:13:90:74:39:8f:24:f1:f0:c2:0e:75: 96:b6:8a:ca:4e:a2:a8:e1:5d:0b:bb:43:4a:b8:40: c8:aa:c1:cd:84:1d:9a:b1:62:9b:c1:29:c1:c1:0a: 92:71:09:87:ad:f0:fd:32:2d:f3:d6:01:2d:ae:60: d8:28:66:59:bf:8f:fc:a8:7d:c5:2a:37:18:30:fc: 71:c4:ec:08:de:0f:9b:b2:ce:40:90:3c:5f:43:d9: 59:53:42:13:6b:5c:54:3f:8e:e0:3f:e1:d2:7b:24: 0e:e2:4f:9f:29:73:dc:59:ca:f6:b0:a9:18:b1:d9: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:26:0D:08:80:67:3C:48:28:7B:16:7D:BC:D9:46:1A:C9:AB:78:46 X509v3 Authority Key Identifier: keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:04:49:0f:4f:35:21:e7:e6:61:b7:ab:dd:18:0b:c0:c3:fa: 05:6d:da:4e:27:27:7e:2a:70:0b:6e:a8:0c:4e:23:82:66:65: 99:53:1d:5a:98:bf:cb:5f:41:33:b3:20:80:14:2e:34:c6:f5: 4a:44:f5:a2:f2:2c:93:ea:be:d8:90:ec:67:85:b3:64:12:50: 06:16:74:16:a8:48:d7:8c:39:da:39:15:fe:0c:e2:54:5c:d6: cc:a8:bb:2a:e7:f8:3a:ef:24:be:aa:8a:de:a0:0d:82:eb:77: 33:e7:d3:c7:b0:4b:63:dd:c2:6f:ae:50:76:8a:e2:c9:f5:f5: 7a:b8:8c:60:0b:8b:90:5b:2c:fc:8e:2e:16:33:a9:05:c4:7a: bd:ac:3a:5c:ff:63:47:82:42:24:8f:47:70:58:2f:67:e8:ce: be:c1:c4:a2:c1:86:7c:8a:02:23:5c:93:2b:a5:65:65:fd:6d: 0c:b7:69:ab:f1:0f:a0:7d:b8:44:24:26:1e:cb:00:9f:e6:80: e3:83:3d:24:55:25:2c:5b:0c:56:6f:3e:cc:ca:10:67:ef:dc: 4c:3f:1b:a2:e2:b5:67:c4:e1:ec:84:ea:ce:8e:cd:5b:03:a8: b8:79:6d:4e:60:58:57:bf:5c:80:77:a2:35:4e:c0:69:be:f0: 45:2e:78:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjGUyPM2Sv6g6fILIPFyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZDY3ZDEwMzNjYTQ3MmI1YmI4MGZkNTk2YmI4MzZkMTJl MjIyNjEwHhcNMjUxMjE4MTMwMDQyWhcNMjUxMjE5MTMwMDQyWjAzMTEwLwYDVQQD EyhhNzI2MGQwODgwNjczYzQ4Mjg3YjE2N2RiY2Q5NDYxYWM5YWI3ODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7P8qCza3IObXFyhU/sJNHr94fxvf WaRjdGvJb6idpnvma7xG3nXHmfxVucEoRj6euCc/OnmZoOnipT1fMTSCVhsIbVYi okZhaV5Bwj1XKjSiU9OCAeh6XZ8qsKNzCjuuZxLCUovo433crpmIkt6OWuTjbB8S WNWh9vj4lTGycBa9aP5mo9aP+G79E5B0OY8k8fDCDnWWtorKTqKo4V0Lu0NKuEDI qsHNhB2asWKbwSnBwQqScQmHrfD9Mi3z1gEtrmDYKGZZv4/8qH3FKjcYMPxxxOwI 3g+bss5AkDxfQ9lZU0ITa1xUP47gP+HSeyQO4k+fKXPcWcr2sKkYsdnpgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcmDQiAZzxIKHsWfbzZRhrJq3hGMB8GA1UdIwQY MBaAFJzWfRAzykcrW7gP1Za7g20S4iJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUt ZWFhNWFjZjM1ZmQxLzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUtZWFhNWFjZjM1ZmQx LzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgRJD081 IefmYber3RgLwMP6BW3aTicnfipwC26oDE4jgmZlmVMdWpi/y19BM7MggBQuNMb1 SkT1ovIsk+q+2JDsZ4WzZBJQBhZ0FqhI14w52jkV/gziVFzWzKi7Kuf4Ou8kvqqK 3qANgut3M+fTx7BLY93Cb65QdoriyfX1eriMYAuLkFss/I4uFjOpBcR6vaw6XP9j R4JCJI9HcFgvZ+jOvsHEosGGfIoCI1yTK6VlZf1tDLdpq/EPoH24RCQmHssAn+aA 44M9JFUlLFsMVm8+zMoQZ+/cTD8bouK1Z8Th7ITqzo7NWwOouHltTmBYV79cgHei NU7Aab7wRS549Q== -----END CERTIFICATE-----Generated at Thu Dec 18 18:39:32 2025 by rpki-client