This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json) Hash identifier: f/MrykCjO1EURj2kzHw03DotfEwyzoPXCpYp4evsZiY= Subject key identifier: B5:CA:07:85:27:AF:FA:14:09:E5:BF:B2:E0:D1:67:C0:DC:19:1B:68 Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Certificate serial: 019B3343DD38BA57EFC8FF3135C85E43DAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft Manifest number: 117E Signing time: Thu 18 Dec 2025 21:00:44 +0000 Manifest this update: Thu 18 Dec 2025 21:00:44 +0000 Manifest next update: Fri 19 Dec 2025 21:00:44 +0000 Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=) 2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: 9EEjl/iKq+SqD0qVCm1OTA7vT2Hoe9raj2FuYTM+5jE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:dd:38:ba:57:ef:c8:ff:31:35:c8:5e:43:da:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Validity Not Before: Dec 18 21:00:44 2025 GMT Not After : Dec 19 21:00:44 2025 GMT Subject: CN=b5ca078527affa1409e5bfb2e0d167c0dc191b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:d3:d5:14:e3:e0:6a:99:ba:bf:8e:77:4e: 50:96:9b:e4:32:67:a8:4d:b6:55:11:eb:30:3e:a5: b1:a9:05:56:b8:56:d4:22:98:d0:78:96:4f:dc:f8: 03:38:65:24:ab:1d:c3:69:49:18:f6:d8:ee:70:83: d3:fa:89:a2:01:57:e9:81:96:e4:1e:9e:09:c2:e1: 9d:b8:5b:e7:d1:d5:13:b2:91:fe:51:c2:10:7f:af: 00:6f:f8:de:96:f4:76:ec:6f:97:c1:f7:29:11:c1: c4:f6:95:4e:27:f7:dd:b5:9d:78:49:f6:95:c5:89: 4b:23:18:a7:a9:8d:4f:c9:8e:70:b3:70:36:70:82: 62:7a:68:af:4f:d9:13:4a:0c:33:25:9a:95:aa:5e: b3:ea:83:5c:c8:d7:a1:a6:74:8e:87:9b:91:ce:93: 20:fc:cb:77:32:b0:62:16:6b:9f:1a:5d:77:8f:f4: b1:ca:cd:67:3a:8c:c6:3e:a6:8a:0d:b6:f9:82:ec: c4:77:6f:16:3b:ab:0d:83:14:6f:78:15:c2:73:91: 09:d6:4c:80:84:53:8a:a5:d8:5b:84:19:f0:cd:40: 69:21:dc:f4:2e:d2:f7:8a:87:48:fb:f0:cd:46:c2: 3c:28:a8:c6:74:5d:78:fd:c5:38:77:97:8d:7e:af: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CA:07:85:27:AF:FA:14:09:E5:BF:B2:E0:D1:67:C0:DC:19:1B:68 X509v3 Authority Key Identifier: keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a1:b1:0f:c5:8e:e5:ef:4d:25:ba:ed:1a:2f:c9:e9:9d:fb: 85:d7:ac:bd:33:e0:f3:b7:83:53:b5:01:2c:48:e1:af:a5:51: f6:70:82:8c:59:00:69:8d:7b:50:78:3d:5e:7c:18:d5:fd:23: 9e:d9:e3:46:48:1f:c1:77:ba:32:43:d2:a8:bc:75:34:0e:6d: 78:dc:d3:cd:60:53:20:aa:84:a2:41:af:46:47:99:2b:65:85: a8:3f:f9:39:ef:bb:63:58:63:8f:b3:00:ee:33:b5:3b:a2:d7: 65:e8:54:b5:c4:9b:97:01:2c:7c:2e:a3:c6:24:2b:bf:81:4f: 42:f6:fe:d4:8b:fb:7a:c5:7c:8c:72:44:af:b4:8e:35:81:18: 9a:95:c5:4b:9c:26:00:07:d7:7f:8e:eb:fb:f3:d8:8b:3d:43: 54:a2:a2:66:47:b8:fb:75:2b:41:e4:0b:b4:1b:71:93:0e:4f: 4b:2a:41:66:1e:01:32:a9:ef:47:94:50:1e:70:f6:9e:94:d0: 9c:d3:60:48:4b:61:23:48:28:8c:f8:28:71:dd:8b:2e:13:a0: 99:53:47:ed:07:93:1a:44:0c:a5:46:a3:88:de:24:60:96:fd: a2:ee:49:9a:da:99:fa:c0:ed:62:43:91:0a:92:fe:5c:67:31: f7:81:f2:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ904ulfvyP8xNcheQ9qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGZhZTZkMmMyNWRkNWYyZmIxNmI0ZmJlYTI4NGU2NjU4 YzEyYmEwHhcNMjUxMjE4MjEwMDQ0WhcNMjUxMjE5MjEwMDQ0WjAzMTEwLwYDVQQD EyhiNWNhMDc4NTI3YWZmYTE0MDllNWJmYjJlMGQxNjdjMGRjMTkxYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiLT1RTj4GqZur+Od05QlpvkMmeo TbZVEeswPqWxqQVWuFbUIpjQeJZP3PgDOGUkqx3DaUkY9tjucIPT+omiAVfpgZbk Hp4JwuGduFvn0dUTspH+UcIQf68Ab/jelvR27G+XwfcpEcHE9pVOJ/fdtZ14SfaV xYlLIxinqY1PyY5ws3A2cIJiemivT9kTSgwzJZqVql6z6oNcyNehpnSOh5uRzpMg /Mt3MrBiFmufGl13j/Sxys1nOozGPqaKDbb5guzEd28WO6sNgxRveBXCc5EJ1kyA hFOKpdhbhBnwzUBpIdz0LtL3iodI+/DNRsI8KKjGdF14/cU4d5eNfq8zbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXKB4Unr/oUCeW/suDRZ8DcGRtoMB8GA1UdIwQY MBaAFJ5Prm0sJd1fL7FrT76ihOZljBK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTkt Mzk0ZmY5MjhmNTcwLzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTktMzk0ZmY5MjhmNTcw LzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKGxD8WO 5e9NJbrtGi/J6Z37hdesvTPg87eDU7UBLEjhr6VR9nCCjFkAaY17UHg9XnwY1f0j ntnjRkgfwXe6MkPSqLx1NA5teNzTzWBTIKqEokGvRkeZK2WFqD/5Oe+7Y1hjj7MA 7jO1O6LXZehUtcSblwEsfC6jxiQrv4FPQvb+1Iv7esV8jHJEr7SONYEYmpXFS5wm AAfXf47r+/PYiz1DVKKiZke4+3UrQeQLtBtxkw5PSypBZh4BMqnvR5RQHnD2npTQ nNNgSEthI0gojPgocd2LLhOgmVNH7QeTGkQMpUajiN4kYJb9ou5JmtqZ+sDtYkOR CpL+XGcx94Hy9A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:41 2025 by rpki-client