This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json) Hash identifier: X22H4poe1Qg4G4+lovUk/scP1MckyAul/K/eZd8sLEg= Subject key identifier: 40:9E:27:96:49:0D:EA:B4:AE:C2:13:B9:01:A6:F2:3F:09:C6:10:91 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B243E8265AF408D1B8650E0BF957140D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft Manifest number: 1787 Signing time: Mon 15 Dec 2025 23:00:34 +0000 Manifest this update: Mon 15 Dec 2025 23:00:34 +0000 Manifest next update: Tue 16 Dec 2025 23:00:34 +0000 Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=) 2: h2ciFwHBRByajg4A3C5BQnvL2O0.roa (hash: ejWacPS5kszb6sTjATtpdEzyGWF31SZfA+pzMv0Tr6g=) 3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=) 4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=) 5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: M8TP5q7+DlfYZJSsPO63ojtHtY6ldrPx3kJ2XAayWAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:82:65:af:40:8d:1b:86:50:e0:bf:95:71:40:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Dec 15 23:00:34 2025 GMT Not After : Dec 16 23:00:34 2025 GMT Subject: CN=409e2796490deab4aec213b901a6f23f09c61091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:99:85:de:6c:4c:5c:77:2e:69:4c:a0:e7: 98:35:4d:c0:46:1b:ab:84:3a:eb:2c:e6:7e:50:6f: ff:d4:fb:2d:1d:23:36:29:fc:4d:45:d9:30:00:32: 08:db:52:99:95:ee:43:1a:db:4b:e0:bf:33:79:8b: b3:6d:65:f0:5a:a5:08:b9:cc:7e:b8:7f:8b:6f:90: 51:cb:d7:20:63:fb:5f:c6:ed:a9:7e:3e:30:8e:24: 1e:0b:9b:06:aa:52:27:a0:23:67:99:8a:6e:91:b7: 0a:73:7b:4d:e0:1b:21:0c:25:20:04:bd:55:10:3d: eb:dd:d2:b3:02:a1:5d:18:69:32:95:ec:db:59:fe: 6f:d4:9b:bb:ed:fd:63:be:97:0b:32:c0:9b:5f:51: 0a:b8:08:09:a1:ec:42:f9:c1:a1:e3:03:6a:8c:1c: ca:89:10:a9:38:d2:d1:d0:d0:45:5f:f2:a1:fe:bd: 8d:ce:fa:70:d6:c0:82:01:e3:c6:57:8a:7c:13:25: 00:96:e6:92:75:ba:ab:21:7a:e1:31:43:1b:08:65: 0c:e1:5e:65:af:1f:3e:10:36:ee:45:06:89:d1:91: 71:62:be:62:4a:f4:39:e6:bf:f8:b0:19:35:aa:4e: bf:24:5b:c2:9b:71:82:1e:27:6b:2f:c6:97:47:d6: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9E:27:96:49:0D:EA:B4:AE:C2:13:B9:01:A6:F2:3F:09:C6:10:91 X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:be:2f:ca:54:86:50:fd:75:fb:10:55:af:9b:69:cb:9b:43: 1b:d4:ca:f1:c0:a8:5c:8b:0a:be:cc:9c:36:3f:c4:58:92:9c: 0b:5b:4f:8d:33:63:78:24:2f:6a:3d:02:d8:00:d6:97:50:76: d4:b5:87:97:22:55:b5:41:e6:0a:d6:ce:88:0a:33:ca:2a:31: e6:0e:f7:32:b6:a5:ee:bc:a4:7a:ec:d3:8a:7e:ce:cb:41:1e: c5:ce:fb:77:9e:2e:43:5c:2c:90:fa:a6:4d:7a:81:22:33:42: 19:83:2f:5b:40:87:c5:09:d1:24:c8:74:03:a2:4b:28:56:15: 7f:60:e1:2e:77:0c:9d:18:cc:c0:76:14:5f:c7:94:ff:7b:06: dd:f7:d4:f2:a1:d5:3d:3a:0b:cb:79:91:3e:df:ad:e4:cd:b8: 20:2f:26:e1:bb:ef:71:30:b3:9f:bc:c7:4c:b9:67:6f:34:03: 4c:e4:31:36:05:82:9d:38:49:08:b9:2a:32:bd:1e:68:99:e9: 92:93:46:36:0f:2f:ba:e5:db:2c:a7:5b:73:62:e1:9c:00:12: 61:e3:fc:83:6e:be:a9:71:a4:1f:7b:b4:68:dc:6d:9c:2e:26: f0:0f:48:d8:d4:6e:4e:a0:b6:91:b5:e6:b6:de:4e:66:55:08: 18:72:80:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPoJlr0CNG4ZQ4L+VcUDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjUxMjE1MjMwMDM0WhcNMjUxMjE2MjMwMDM0WjAzMTEwLwYDVQQD Eyg0MDllMjc5NjQ5MGRlYWI0YWVjMjEzYjkwMWE2ZjIzZjA5YzYxMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr82Zhd5sTFx3LmlMoOeYNU3ARhur hDrrLOZ+UG//1PstHSM2KfxNRdkwADII21KZle5DGttL4L8zeYuzbWXwWqUIucx+ uH+Lb5BRy9cgY/tfxu2pfj4wjiQeC5sGqlInoCNnmYpukbcKc3tN4BshDCUgBL1V ED3r3dKzAqFdGGkylezbWf5v1Ju77f1jvpcLMsCbX1EKuAgJoexC+cGh4wNqjBzK iRCpONLR0NBFX/Kh/r2Nzvpw1sCCAePGV4p8EyUAluaSdbqrIXrhMUMbCGUM4V5l rx8+EDbuRQaJ0ZFxYr5iSvQ55r/4sBk1qk6/JFvCm3GCHidrL8aXR9bVfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECeJ5ZJDeq0rsITuQGm8j8JxhCRMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe74vylSG UP11+xBVr5tpy5tDG9TK8cCoXIsKvsycNj/EWJKcC1tPjTNjeCQvaj0C2ADWl1B2 1LWHlyJVtUHmCtbOiAozyiox5g73Mral7rykeuzTin7Oy0Eexc77d54uQ1wskPqm TXqBIjNCGYMvW0CHxQnRJMh0A6JLKFYVf2DhLncMnRjMwHYUX8eU/3sG3ffU8qHV PToLy3mRPt+t5M24IC8m4bvvcTCzn7zHTLlnbzQDTOQxNgWCnThJCLkqMr0eaJnp kpNGNg8vuuXbLKdbc2LhnAASYeP8g26+qXGkH3u0aNxtnC4m8A9I2NRuTqC2kbXm tt5OZlUIGHKAyQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:41:00 2025 by rpki-client