This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json) Hash identifier: OxELJtYmzXxTgwZmGepGuvl46cA+saUS5xDZGe06CvY= Subject key identifier: B9:9D:C9:90:BD:21:C5:75:56:33:3A:AB:67:A4:63:D9:A2:B1:E6:F2 Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f Certificate serial: 019B397D33B935DA3A70B4C85B0D97A922EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft Manifest number: 0599 Signing time: Sat 20 Dec 2025 02:01:05 +0000 Manifest this update: Sat 20 Dec 2025 02:01:05 +0000 Manifest next update: Sun 21 Dec 2025 02:01:05 +0000 Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=) 2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: oxt4OyB6jyOfc3EeyUllITiAZEdK7AbHmuKjhRe1vJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:33:b9:35:da:3a:70:b4:c8:5b:0d:97:a9:22:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f Validity Not Before: Dec 20 02:01:05 2025 GMT Not After : Dec 21 02:01:05 2025 GMT Subject: CN=b99dc990bd21c57556333aab67a463d9a2b1e6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:c8:fa:76:63:61:b3:4f:48:1f:3a:82:45: ea:0a:16:c0:2d:6a:9b:2a:82:4c:d0:95:40:cc:0f: e9:40:61:c2:a5:cd:ff:c9:39:a6:68:e2:b4:f6:be: be:b4:59:6f:de:87:63:53:9e:bb:cf:c6:95:40:a5: 31:2a:2b:17:4a:55:b3:64:9e:b7:78:79:9f:e1:49: 0f:e8:91:ce:bd:23:19:d8:05:b7:0b:d2:02:4f:44: 03:9c:3d:4a:91:65:77:ea:6f:5e:bb:60:17:e7:47: 34:77:3e:1b:cb:53:a5:19:ba:05:5f:72:7f:62:1b: a8:d2:53:50:4f:51:b1:72:d7:68:db:e4:81:92:a4: 6c:c2:fb:3b:b7:8a:e2:a1:f5:ce:2f:9f:8b:2c:70: 31:27:ec:32:81:57:39:4b:e1:74:2a:d8:fe:4a:c6: 4b:72:cd:99:30:74:b8:44:12:a2:0e:a2:a2:27:3e: 45:98:5f:f7:82:5a:a4:58:a9:c7:0e:38:af:17:18: ad:33:15:79:af:63:73:e7:3c:b6:7d:36:78:a5:03: 4a:cf:3e:44:29:46:43:5c:2a:dc:bc:d7:f2:c0:2e: a9:37:4e:66:8d:86:5d:15:d3:97:86:b5:68:d1:67: 86:f3:c0:1d:c5:47:fd:df:36:2f:8a:7b:e6:e9:d8: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:C9:90:BD:21:C5:75:56:33:3A:AB:67:A4:63:D9:A2:B1:E6:F2 X509v3 Authority Key Identifier: keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cb:f7:fd:3e:f2:1b:ae:f2:93:ad:a5:f5:1f:44:57:5f:d5: 0a:dd:61:81:d4:05:fa:10:3f:76:3e:b8:f6:7f:1f:df:10:68: 69:f1:85:57:63:a2:b6:be:c3:e8:30:72:50:37:09:77:19:c1: 58:1c:54:8f:29:87:21:12:ac:74:48:11:a2:bc:76:2b:19:5b: 57:4b:72:5c:49:34:2e:70:bc:cd:ad:1f:32:20:9d:85:71:a6: 91:3e:1a:e2:23:55:8e:dd:29:ef:77:a7:5f:be:c4:83:6e:d4: 6a:78:8b:73:f5:03:99:db:f7:5d:7d:93:18:aa:d1:c6:db:6e: 90:0f:93:02:61:2c:ac:c8:d9:c8:54:87:40:d4:d8:c4:e5:12: 74:1a:27:9c:27:d5:bf:85:91:df:b7:ba:99:2c:3c:1c:07:5c: 23:c0:93:72:fb:38:85:e3:3b:1d:07:1b:78:82:27:a6:38:3a: 73:d1:6b:d7:99:69:5c:11:8c:86:ca:af:1d:5d:cc:f9:98:2e: 0a:e8:b4:09:ad:57:f5:4f:ef:d0:a3:8e:5c:14:91:d8:20:a4: 37:60:1d:6c:da:3d:95:ee:92:b0:2f:6a:23:7b:31:21:0f:d1: 6d:a8:d1:67:bc:95:32:34:3d:d1:b3:da:ab:12:2d:15:ea:59: 64:bf:65:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fTO5Ndo6cLTIWw2XqSLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2 MmU4OWYwHhcNMjUxMjIwMDIwMTA1WhcNMjUxMjIxMDIwMTA1WjAzMTEwLwYDVQQD EyhiOTlkYzk5MGJkMjFjNTc1NTYzMzNhYWI2N2E0NjNkOWEyYjFlNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvnI+nZjYbNPSB86gkXqChbALWqb KoJM0JVAzA/pQGHCpc3/yTmmaOK09r6+tFlv3odjU567z8aVQKUxKisXSlWzZJ63 eHmf4UkP6JHOvSMZ2AW3C9ICT0QDnD1KkWV36m9eu2AX50c0dz4by1OlGboFX3J/ Yhuo0lNQT1Gxctdo2+SBkqRswvs7t4riofXOL5+LLHAxJ+wygVc5S+F0Ktj+SsZL cs2ZMHS4RBKiDqKiJz5FmF/3glqkWKnHDjivFxitMxV5r2Nz5zy2fTZ4pQNKzz5E KUZDXCrcvNfywC6pN05mjYZdFdOXhrVo0WeG88AdxUf93zYvinvm6dikUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmdyZC9IcV1VjM6q2ekY9misebyMB8GA1UdIwQY MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsv3/T7y G67yk62l9R9EV1/VCt1hgdQF+hA/dj649n8f3xBoafGFV2Oitr7D6DByUDcJdxnB WBxUjymHIRKsdEgRorx2KxlbV0tyXEk0LnC8za0fMiCdhXGmkT4a4iNVjt0p73en X77Eg27UaniLc/UDmdv3XX2TGKrRxttukA+TAmEsrMjZyFSHQNTYxOUSdBonnCfV v4WR37e6mSw8HAdcI8CTcvs4heM7HQcbeIInpjg6c9Fr15lpXBGMhsqvHV3M+Zgu Cui0Ca1X9U/v0KOOXBSR2CCkN2AdbNo9le6SsC9qI3sxIQ/RbajRZ7yVMjQ90bPa qxItFepZZL9lTg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:55 2025 by rpki-client