This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft File: nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json) Hash identifier: EZoWYkbec3j/ythfRlUpwSVt+6qGlvntjV8BoMCNIr8= Subject key identifier: D5:DA:6E:50:B3:7D:98:16:3F:58:4C:1C:B0:2C:3D:21:B8:E4:D8:23 Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Certificate serial: 019B70D91B244842312C83AE467DE4506A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft Manifest number: 1783 Signing time: Tue 30 Dec 2025 20:00:34 +0000 Manifest this update: Tue 30 Dec 2025 20:00:34 +0000 Manifest next update: Wed 31 Dec 2025 20:00:34 +0000 Files and hashes: 1: 8fw2tBPm8-dk07FF86WEj68NsSM.roa (hash: 9R57W9brfUx0SayL8ULp3+gRula33F2inaK6dFDPaew=) 2: JUWn6tZ6js3OQBG2kVmBzCYaASs.roa (hash: ZWaMncDoxletMNjHKIW8FwbEakDn9YubUJeGI0AcYdQ=) 3: miGTaFk5Cl8OYVzdHPitg-4uIW0.roa (hash: AGqT78lBpkV9yA91ZQMLyqGPYCLhxFGELYf24q65eEw=) 4: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: PyhFQeG1jtsdwzoef5UR3Oo0hLfRwXIOB2csA2YxesI=) 5: q06qTUv5-JCRpItbJ_9COQqHH6A.roa (hash: elj4UEL+GeLcIcxtH4+ahp+BuvQR4jhMQkNkTFsz2eM=) 6: ugvVJv1QPdlsdCOHyojPtazbLYI.roa (hash: pXfm5LL3VQOgBalVDK4dGytbPCPO103M4zKNQiaOMks=) 7: zn7RiYTFSuY_H6EW4hkd0ugXhg4.roa (hash: TjPxbEKTKC4G0EExaKEE++vAM3LyoGQfvbpHNfpM9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:1b:24:48:42:31:2c:83:ae:46:7d:e4:50:6a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Validity Not Before: Dec 30 20:00:34 2025 GMT Not After : Dec 31 20:00:34 2025 GMT Subject: CN=d5da6e50b37d98163f584c1cb02c3d21b8e4d823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:69:7f:1a:31:e9:4c:5d:65:42:14:44:52: 65:74:80:c6:bd:07:64:7b:2b:27:75:fc:96:8f:a7: ce:d0:23:d2:ae:eb:bc:7f:f4:5d:2c:0a:76:7b:83: ee:79:14:3f:10:a0:ac:f0:23:76:cf:72:67:63:3e: 0f:7b:85:54:8f:8e:2d:0e:b9:ae:d6:a7:ac:d6:6f: 84:c7:3b:32:c1:88:47:0c:fb:85:f9:24:f4:a5:c3: 50:79:9f:26:71:88:0a:43:0a:6e:64:80:0f:56:d1: a7:e9:7c:da:8c:29:6e:71:10:cc:11:36:0f:33:22: 79:06:8c:25:10:84:e2:32:da:13:95:86:26:45:a5: 52:eb:66:d2:d4:f4:2b:31:bd:7d:92:ae:74:8f:5b: 9d:53:03:38:d8:5e:6e:04:a1:63:01:c2:38:c4:99: 69:ce:a6:bc:27:75:b0:91:13:11:e4:8b:a7:20:24: b0:8f:42:67:af:50:65:9b:71:6d:c4:6c:25:f6:9a: 46:a2:df:6f:8f:5a:41:ff:42:ee:5f:00:67:db:07: a0:72:9c:f1:a7:61:97:c3:35:e1:4d:05:03:8d:80: cb:72:50:2d:1e:28:ea:b2:b8:d4:d8:93:cb:fd:8a: 39:d1:0d:d7:d3:ca:a1:10:5d:c8:86:b3:fb:f4:68: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DA:6E:50:B3:7D:98:16:3F:58:4C:1C:B0:2C:3D:21:B8:E4:D8:23 X509v3 Authority Key Identifier: keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a1:4f:74:0b:81:08:11:f4:90:78:97:01:19:b8:55:89:9f: 91:d7:39:a0:f5:ce:ee:7f:fc:47:5e:78:e1:08:55:4c:c7:eb: 69:e4:d0:99:88:29:1c:f5:7b:6b:4e:10:a0:38:98:bf:64:e8: 86:90:3f:db:f0:16:95:3b:74:3e:5f:b4:ce:f9:03:c7:44:b2: b8:79:eb:ca:c1:96:ba:d5:79:57:65:33:4b:65:f6:41:72:ba: 8e:23:4b:6c:3f:92:e8:a3:e5:c3:72:1a:07:dc:4b:89:70:0b: aa:c2:7c:d9:b5:79:24:2e:2d:ec:6a:76:ad:de:ac:5d:c6:89: 8d:ea:f1:70:0b:d1:a1:24:75:d8:2a:36:2d:d2:c5:d8:b2:14: 96:72:35:ae:6a:12:1c:38:cf:cf:50:e6:78:c8:25:9f:0f:44: d5:d0:ec:da:09:6d:8e:8f:00:63:a9:02:00:e8:bf:a5:dd:c3: e2:c0:cf:38:04:c0:4d:f9:37:54:6e:b2:30:90:29:1d:83:e0: 26:35:06:5e:db:cb:a3:ee:2c:ca:a8:20:b9:3a:3b:a3:f9:82: 1d:9a:73:57:cf:f7:ac:35:20:de:f3:68:3c:18:bd:8d:a7:cb: a9:b4:f3:aa:94:7a:04:5f:19:16:b0:d1:d0:12:82:a9:4e:a5: a2:fa:be:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2RskSEIxLIOuRn3kUGpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4 YzY4YzYwHhcNMjUxMjMwMjAwMDM0WhcNMjUxMjMxMjAwMDM0WjAzMTEwLwYDVQQD EyhkNWRhNmU1MGIzN2Q5ODE2M2Y1ODRjMWNiMDJjM2QyMWI4ZTRkODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dlpfxox6UxdZUIURFJldIDGvQdk eysndfyWj6fO0CPSruu8f/RdLAp2e4PueRQ/EKCs8CN2z3JnYz4Pe4VUj44tDrmu 1qes1m+ExzsywYhHDPuF+ST0pcNQeZ8mcYgKQwpuZIAPVtGn6XzajClucRDMETYP MyJ5BowlEITiMtoTlYYmRaVS62bS1PQrMb19kq50j1udUwM42F5uBKFjAcI4xJlp zqa8J3WwkRMR5IunICSwj0Jnr1Blm3FtxGwl9ppGot9vj1pB/0LuXwBn2wegcpzx p2GXwzXhTQUDjYDLclAtHijqsrjU2JPL/Yo50Q3X08qhEF3IhrP79GhxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXablCzfZgWP1hMHLAsPSG45NgjMB8GA1UdIwQY MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt MDE1NzdhOTI3ZmE5LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5 LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaFPdAuB CBH0kHiXARm4VYmfkdc5oPXO7n/8R1544QhVTMfraeTQmYgpHPV7a04QoDiYv2To hpA/2/AWlTt0Pl+0zvkDx0SyuHnrysGWutV5V2UzS2X2QXK6jiNLbD+S6KPlw3Ia B9xLiXALqsJ82bV5JC4t7Gp2rd6sXcaJjerxcAvRoSR12Co2LdLF2LIUlnI1rmoS HDjPz1DmeMglnw9E1dDs2gltjo8AY6kCAOi/pd3D4sDPOATATfk3VG6yMJApHYPg JjUGXtvLo+4syqgguTo7o/mCHZpzV8/3rDUg3vNoPBi9jafLqbTzqpR6BF8ZFrDR 0BKCqU6lovq+Rg== -----END CERTIFICATE-----Generated at Tue Dec 30 23:06:43 2025 by rpki-client