This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json) Hash identifier: piKoaZG9KDGARpV/HjQ1uWafTot9FOpAOVCjFxw/Xnk= Subject key identifier: FB:30:18:FC:D0:90:D6:3A:52:B1:15:2F:72:27:5F:CD:41:83:C9:06 Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b Certificate serial: 019B59E3DC68B48011B5D2D4A53CCC403E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft Manifest number: 065C Signing time: Fri 26 Dec 2025 09:01:03 +0000 Manifest this update: Fri 26 Dec 2025 09:01:03 +0000 Manifest next update: Sat 27 Dec 2025 09:01:03 +0000 Files and hashes: 1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=) 2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: mysEfv9/o6gFpMFefTRVaro3YgsFR6AsSucN1NtaUwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:dc:68:b4:80:11:b5:d2:d4:a5:3c:cc:40:3e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b Validity Not Before: Dec 26 09:01:03 2025 GMT Not After : Dec 27 09:01:03 2025 GMT Subject: CN=fb3018fcd090d63a52b1152f72275fcd4183c906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:a2:27:bf:0e:54:9c:a6:c1:7e:7c:c1:48: de:a8:08:6f:c2:7a:71:0a:c6:80:d0:fb:76:8c:75: 74:e4:6a:60:95:52:33:f3:a6:ba:87:3a:89:74:b5: e0:4e:71:e2:5a:0f:1b:be:b0:5d:d0:e9:77:a0:bd: 95:bb:df:8d:fa:70:f0:f0:e5:d5:20:13:52:a6:0f: 90:13:a8:73:e2:68:63:fc:ec:96:1b:ed:2f:d5:e6: df:e3:4e:9d:a0:f4:c7:47:00:2e:91:5b:f5:9a:c7: f0:92:b0:52:70:27:c4:39:db:c4:5e:86:6d:6a:4b: fc:66:27:a8:28:59:f1:35:78:43:15:25:da:30:35: 91:42:46:a5:e0:15:1f:27:03:af:fe:5f:a4:53:d7: 98:39:f1:b6:3b:7e:26:f4:6c:97:7b:d9:cf:5b:dc: 32:ab:d6:f7:c5:56:4b:e2:25:5b:44:44:ba:fb:bd: 6f:94:20:e8:b3:e9:ed:b7:1f:37:2f:63:1d:ae:56: 8d:37:7b:d8:0f:fb:7f:bf:1b:87:71:43:c7:a6:28: 34:c1:aa:bc:4e:da:d9:5f:49:b2:b3:6a:fd:c6:d6: 71:18:f9:91:b9:9e:a8:3a:4f:f9:29:18:67:8b:74: a2:70:76:a5:c6:98:c5:90:ef:ca:16:7e:d0:56:fb: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:18:FC:D0:90:D6:3A:52:B1:15:2F:72:27:5F:CD:41:83:C9:06 X509v3 Authority Key Identifier: keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b4:11:c6:e7:b4:65:52:ca:a2:16:46:21:d1:cf:e5:47:59: 93:dd:d8:7e:ea:6c:4b:bf:1c:71:e1:c0:be:77:f1:03:7a:2f: 65:60:87:d9:0d:e1:7a:8f:9c:63:8a:a5:a1:65:3a:7b:ce:1a: 71:23:b3:e6:31:7a:1f:2f:2c:f1:81:fc:f3:93:bf:46:cf:fe: c6:b5:82:d2:c6:61:aa:71:c3:d2:93:a9:2d:c1:cb:01:f8:95: 28:13:f4:28:4a:be:6f:10:1c:66:0b:9a:f4:76:42:c4:bc:49: 5e:ec:78:5b:8a:cd:80:c5:9e:41:a4:2d:8c:c5:b0:89:db:1e: 8d:03:be:4f:0d:ea:ef:09:70:00:4f:7b:e3:08:51:76:b4:ad: b2:10:23:53:4d:bb:14:1f:db:e0:40:c1:03:1c:db:9b:70:ce: d8:8e:fa:72:bb:69:68:33:3f:fa:b7:d1:8c:31:ad:44:54:e4: ce:eb:31:fe:2e:8b:23:47:36:b0:d7:b5:7d:4a:60:f8:47:09: ad:7f:ae:e6:26:5d:e6:41:1f:09:bc:cf:00:de:c6:2b:e7:37: b1:a6:a6:96:b1:34:b2:8b:c4:78:b4:61:08:ce:cd:de:82:00: 76:c1:25:1f:55:a0:94:e0:0b:5f:27:ca:3c:fd:b3:fd:8a:ea: c1:5b:28:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49xotIARtdLUpTzMQD4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDM3NWFkYTljNWUwMTAwZGRiNjMzYjJhMWI3NDdlMTlj MmVjNWIwHhcNMjUxMjI2MDkwMTAzWhcNMjUxMjI3MDkwMTAzWjAzMTEwLwYDVQQD EyhmYjMwMThmY2QwOTBkNjNhNTJiMTE1MmY3MjI3NWZjZDQxODNjOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2eiJ78OVJymwX58wUjeqAhvwnpx CsaA0Pt2jHV05GpglVIz86a6hzqJdLXgTnHiWg8bvrBd0Ol3oL2Vu9+N+nDw8OXV IBNSpg+QE6hz4mhj/OyWG+0v1ebf406doPTHRwAukVv1msfwkrBScCfEOdvEXoZt akv8ZieoKFnxNXhDFSXaMDWRQkal4BUfJwOv/l+kU9eYOfG2O34m9GyXe9nPW9wy q9b3xVZL4iVbRES6+71vlCDos+nttx83L2MdrlaNN3vYD/t/vxuHcUPHpig0waq8 TtrZX0mys2r9xtZxGPmRuZ6oOk/5KRhni3SicHalxpjFkO/KFn7QVvtGnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPswGPzQkNY6UrEVL3InX81Bg8kGMB8GA1UdIwQY MBaAFJwDda2pxeAQDdtjOyobdH4ZwuxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYt MWZjODllOTlhMGExLzEvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYtMWZjODllOTlhMGEx LzEvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbQRxue0 ZVLKohZGIdHP5UdZk93YfupsS78cceHAvnfxA3ovZWCH2Q3heo+cY4qloWU6e84a cSOz5jF6Hy8s8YH885O/Rs/+xrWC0sZhqnHD0pOpLcHLAfiVKBP0KEq+bxAcZgua 9HZCxLxJXux4W4rNgMWeQaQtjMWwidsejQO+Tw3q7wlwAE974whRdrStshAjU027 FB/b4EDBAxzbm3DO2I76crtpaDM/+rfRjDGtRFTkzusx/i6LI0c2sNe1fUpg+EcJ rX+u5iZd5kEfCbzPAN7GK+c3saamlrE0sovEeLRhCM7N3oIAdsElH1WglOALXyfK PP2z/YrqwVso0w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:01 2025 by rpki-client