This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json) Hash identifier: Zc5Mg6wI/QTg6mhlTkM07CQaiv1cN85kfLDcgnVIdYc= Subject key identifier: B2:59:F0:C7:2E:23:68:E9:4E:CF:51:57:86:77:B2:2B:06:FC:FF:33 Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Certificate serial: 019B4E4DCF15564F48630E7862491E13CBC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft Manifest number: 118C Signing time: Wed 24 Dec 2025 03:01:20 +0000 Manifest this update: Wed 24 Dec 2025 03:01:20 +0000 Manifest next update: Thu 25 Dec 2025 03:01:20 +0000 Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=) 2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: Jb7G7jhxOLMaSzhIjb5AYcgFzbFt+/4REm5sQB3p7mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:cf:15:56:4f:48:63:0e:78:62:49:1e:13:cb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Validity Not Before: Dec 24 03:01:20 2025 GMT Not After : Dec 25 03:01:20 2025 GMT Subject: CN=b259f0c72e2368e94ecf51578677b22b06fcff33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1d:5e:2a:78:3d:9b:d4:3d:97:8f:3a:d7:91: 0e:4f:2b:99:8c:01:d1:46:13:49:b2:e7:7a:4f:ed: f8:00:68:8d:bd:d6:97:73:05:34:98:05:3d:36:80: 66:2a:f4:37:3d:82:9f:ca:56:09:58:3c:37:8a:e8: 23:0a:ae:29:3d:2a:92:0b:db:57:60:9f:4e:58:18: 09:3f:94:a8:75:d0:a2:74:14:81:bd:4d:4c:06:4e: cb:5f:2b:0d:17:22:f2:c5:e7:d0:06:95:45:a9:62: f4:1a:05:9d:f5:06:26:70:67:1c:08:54:5e:ea:4f: cf:6a:c7:16:f1:c8:49:52:c2:b9:b3:06:86:b8:fb: b6:5c:32:15:70:8e:f7:24:0d:15:12:56:cb:18:5b: de:7e:9e:be:eb:6f:5d:5b:37:f7:4a:6b:f6:3b:cf: 14:9a:1a:82:29:6a:68:7c:0a:68:0e:e3:36:37:b5: b5:1f:77:00:39:1c:38:ff:50:f2:93:d9:91:2e:39: 98:32:dd:ae:8e:ad:4d:79:b7:94:a7:a2:24:63:f1: d7:69:77:64:81:9d:69:ef:fb:ca:fc:67:ce:c1:1d: 21:0b:6a:9b:e1:d3:0a:61:d5:0a:05:ff:1b:d2:2b: aa:91:0c:d6:01:2b:b5:d4:78:ac:3d:42:0f:88:2c: 90:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:F0:C7:2E:23:68:E9:4E:CF:51:57:86:77:B2:2B:06:FC:FF:33 X509v3 Authority Key Identifier: keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fa:c7:27:19:84:af:25:e1:fe:ad:25:a8:c2:a5:b9:78:4e: e6:ec:f4:e2:87:4b:4a:19:c0:9e:bf:8c:cc:2c:13:11:7c:a2: 6b:a5:5d:fe:59:c6:1e:a6:29:83:1d:4d:14:15:01:b7:63:2a: d6:67:03:11:d7:0b:09:3e:8c:81:e9:ae:cd:8c:78:c6:97:73: ce:d2:17:35:18:61:98:e5:08:5e:87:41:d0:3b:bd:88:86:17: fa:df:5f:42:ab:36:ff:95:5f:68:0e:e4:ce:0e:9e:be:d5:67: 12:cd:87:42:b8:c6:29:1b:17:4c:fa:07:e7:bd:3e:45:84:77: b6:02:d9:09:cc:34:02:e6:11:81:64:9b:0f:bf:61:6c:82:c5: ce:cf:e5:dc:59:99:80:71:d7:61:d7:52:ea:95:54:62:a7:a0: 4d:57:95:c3:77:49:bf:3b:56:07:d7:a8:74:4f:dc:db:08:a4: 97:40:43:11:e5:fc:2a:ce:ae:52:f6:d6:27:69:84:85:d9:aa: 9c:d9:dd:95:1a:90:8b:61:64:ff:3c:c3:07:c4:e4:a2:cd:62: 0c:cd:32:d9:7a:20:bc:12:52:37:51:12:af:f7:09:45:06:35: c5:ef:11:ac:71:b5:25:43:68:fb:59:80:1a:27:36:14:a4:21: 95:3e:38:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTc8VVk9IYw54YkkeE8vJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGZhZTZkMmMyNWRkNWYyZmIxNmI0ZmJlYTI4NGU2NjU4 YzEyYmEwHhcNMjUxMjI0MDMwMTIwWhcNMjUxMjI1MDMwMTIwWjAzMTEwLwYDVQQD EyhiMjU5ZjBjNzJlMjM2OGU5NGVjZjUxNTc4Njc3YjIyYjA2ZmNmZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R1eKng9m9Q9l48615EOTyuZjAHR RhNJsud6T+34AGiNvdaXcwU0mAU9NoBmKvQ3PYKfylYJWDw3iugjCq4pPSqSC9tX YJ9OWBgJP5SoddCidBSBvU1MBk7LXysNFyLyxefQBpVFqWL0GgWd9QYmcGccCFRe 6k/PascW8chJUsK5swaGuPu2XDIVcI73JA0VElbLGFvefp6+629dWzf3Smv2O88U mhqCKWpofApoDuM2N7W1H3cAORw4/1Dyk9mRLjmYMt2ujq1NebeUp6IkY/HXaXdk gZ1p7/vK/GfOwR0hC2qb4dMKYdUKBf8b0iuqkQzWASu11HisPUIPiCyQAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJZ8McuI2jpTs9RV4Z3sisG/P8zMB8GA1UdIwQY MBaAFJ5Prm0sJd1fL7FrT76ihOZljBK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTkt Mzk0ZmY5MjhmNTcwLzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTktMzk0ZmY5MjhmNTcw LzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPrHJxmE ryXh/q0lqMKluXhO5uz04odLShnAnr+MzCwTEXyia6Vd/lnGHqYpgx1NFBUBt2Mq 1mcDEdcLCT6MgemuzYx4xpdzztIXNRhhmOUIXodB0Du9iIYX+t9fQqs2/5VfaA7k zg6evtVnEs2HQrjGKRsXTPoH570+RYR3tgLZCcw0AuYRgWSbD79hbILFzs/l3FmZ gHHXYddS6pVUYqegTVeVw3dJvztWB9eodE/c2wikl0BDEeX8Ks6uUvbWJ2mEhdmq nNndlRqQi2Fk/zzDB8Tkos1iDM0y2XogvBJSN1ESr/cJRQY1xe8RrHG1JUNo+1mA Gic2FKQhlT44Jw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:57 2025 by rpki-client