This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json) Hash identifier: inbtOJHN9iOPujBHwYIgDUwBcZ/WgeLoWcQWDvxomis= Subject key identifier: D7:B4:80:67:23:29:AE:1D:06:19:48:5B:67:54:17:DF:71:A3:01:18 Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff Certificate serial: 019B405BF9CEE0D9B3925211A531AA6BFD9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 10:02:08 +0000 Manifest this update: Sun 21 Dec 2025 10:02:08 +0000 Manifest next update: Mon 22 Dec 2025 10:02:08 +0000 Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=) 2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=) 3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=) 4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: TPsTaBiyuZhglA9maIVJ7/PmmFnKjqxCoJTWkIgGb9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:f9:ce:e0:d9:b3:92:52:11:a5:31:aa:6b:fd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff Validity Not Before: Dec 21 10:02:08 2025 GMT Not After : Dec 22 10:02:08 2025 GMT Subject: CN=d7b480672329ae1d0619485b675417df71a30118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:98:63:2f:82:9a:b4:0a:0d:c1:b2:fe:d3: 37:71:e1:5b:71:38:c8:31:eb:44:b4:d5:e7:3d:d9: 4e:82:b2:a9:ba:91:14:0d:90:69:ba:33:44:68:65: e2:4c:ca:8e:2f:21:b6:72:d7:23:45:bf:ea:99:29: bb:bc:41:a0:7b:a2:b6:7c:01:92:35:2f:12:0e:b9: 68:52:a6:2d:87:f7:10:d2:75:cf:ed:0c:e8:62:d8: 04:43:9e:47:b3:f1:db:dd:51:52:4c:33:6c:ca:a0: 91:63:c9:e7:df:f2:c1:e0:e0:c3:46:27:ee:63:c2: 20:03:81:1d:c9:4a:53:15:28:e0:ae:e4:35:46:e8: 19:d1:07:95:55:c5:40:77:a0:3f:5a:8e:61:85:83: 7c:3a:57:4b:a4:99:b2:9c:77:9e:07:52:73:61:1b: 0d:bf:77:f8:e5:79:e5:d8:47:77:7c:2c:cd:99:89: e0:00:a2:97:8e:56:fc:68:bf:34:d7:23:90:60:2d: 99:b2:af:c0:dd:ca:20:3e:d5:ac:10:9b:25:b1:d7: 1c:92:2a:bf:69:e4:41:24:5f:69:f2:73:ad:37:48: df:fd:47:81:64:13:50:e5:8a:89:70:88:35:ce:0f: 0d:1e:ea:e7:b9:a1:be:09:01:ca:8c:22:89:0a:07: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B4:80:67:23:29:AE:1D:06:19:48:5B:67:54:17:DF:71:A3:01:18 X509v3 Authority Key Identifier: keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:96:47:f0:5a:f3:a0:78:6a:17:51:9c:28:2b:0b:3e:d0:53: 29:39:9a:c1:06:b8:fb:dd:15:ce:b7:d8:34:e8:67:06:bc:a9: 69:09:95:a2:a6:f9:9e:21:b1:71:e8:e1:43:da:4f:4d:83:6c: 71:d5:c2:7e:bb:b9:2e:b2:3d:d6:a9:11:75:aa:70:02:a0:fb: 45:01:6e:8a:ec:5c:27:6a:e2:89:4a:8f:74:4e:ae:ae:52:fa: 16:c6:0c:e8:63:ad:99:2b:8f:c8:ac:e4:e2:7b:83:42:74:34: e5:b0:98:7b:49:19:7a:42:c3:90:47:3c:3b:d3:b5:2c:6f:7d: e2:b1:e7:16:ce:af:86:df:1b:47:09:9a:b7:ea:80:7e:ba:61: 30:34:ea:c0:b4:f0:d4:fa:10:22:e6:83:92:fb:32:c8:e7:fd: a4:bc:d1:e7:ed:f8:02:6e:7b:3d:12:71:b7:18:17:06:a9:76: d7:96:cc:8d:33:f7:21:b2:a5:ff:60:a6:73:19:a0:b3:ac:24: fd:61:09:60:dc:8a:14:fc:e5:9c:a3:b3:0c:91:07:bc:ee:95: c6:8f:95:a4:48:d6:ea:4d:a3:e8:b4:9e:6d:72:96:fd:f0:d2: db:a9:ab:d8:29:c2:42:d7:93:78:1d:1e:3f:b1:c4:d6:c2:9d: e4:4a:9e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW/nO4NmzklIRpTGqa/2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjY2NDllNGYyYzc5NWZmZTU0MGY5ZDk3ZjI2ZTk5YzVj NWUzZmYwHhcNMjUxMjIxMTAwMjA4WhcNMjUxMjIyMTAwMjA4WjAzMTEwLwYDVQQD EyhkN2I0ODA2NzIzMjlhZTFkMDYxOTQ4NWI2NzU0MTdkZjcxYTMwMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LeYYy+CmrQKDcGy/tM3ceFbcTjI MetEtNXnPdlOgrKpupEUDZBpujNEaGXiTMqOLyG2ctcjRb/qmSm7vEGge6K2fAGS NS8SDrloUqYth/cQ0nXP7QzoYtgEQ55Hs/Hb3VFSTDNsyqCRY8nn3/LB4ODDRifu Y8IgA4EdyUpTFSjgruQ1RugZ0QeVVcVAd6A/Wo5hhYN8OldLpJmynHeeB1JzYRsN v3f45Xnl2Ed3fCzNmYngAKKXjlb8aL801yOQYC2Zsq/A3cogPtWsEJslsdcckiq/ aeRBJF9p8nOtN0jf/UeBZBNQ5YqJcIg1zg8NHurnuaG+CQHKjCKJCgfY7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe0gGcjKa4dBhlIW2dUF99xowEYMB8GA1UdIwQY MBaAFJ0mZJ5PLHlf/lQPnZfybpnFxeP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEt ZWE0NjljODYwZGM2LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzVjMDctZWIzMC00MDhmLTg1OGEtZWE0NjljODYwZGM2 LzEvblNaa25rOHNlVl8tVkEtZGxfSnVtY1hGNF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJZH8Frz oHhqF1GcKCsLPtBTKTmawQa4+90VzrfYNOhnBrypaQmVoqb5niGxcejhQ9pPTYNs cdXCfru5LrI91qkRdapwAqD7RQFuiuxcJ2riiUqPdE6urlL6FsYM6GOtmSuPyKzk 4nuDQnQ05bCYe0kZekLDkEc8O9O1LG994rHnFs6vht8bRwmat+qAfrphMDTqwLTw 1PoQIuaDkvsyyOf9pLzR5+34Am57PRJxtxgXBql215bMjTP3IbKl/2Cmcxmgs6wk /WEJYNyKFPzlnKOzDJEHvO6Vxo+VpEjW6k2j6LSebXKW/fDS26mr2CnCQteTeB0e P7HE1sKd5Eqekg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:07:27 2025 by rpki-client