This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json) Hash identifier: aXHpB4OMFW4XtxNHtDv6SUtikWibooY5IXbXE/TIXM4= Subject key identifier: 14:1B:34:FA:BC:24:98:47:93:60:A4:55:02:BA:39:A9:11:07:AE:1D Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16 Certificate serial: 019B3A8FFD8DC4B937911A9A0FE7FDAFB4E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft Manifest number: 0B9C Signing time: Sat 20 Dec 2025 07:01:13 +0000 Manifest this update: Sat 20 Dec 2025 07:01:13 +0000 Manifest next update: Sun 21 Dec 2025 07:01:13 +0000 Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=) 2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: GgEK8xupGWu+8TQ3WlytR/3Fe2jkCuJCQ0hERIdMik8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:fd:8d:c4:b9:37:91:1a:9a:0f:e7:fd:af:b4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16 Validity Not Before: Dec 20 07:01:13 2025 GMT Not After : Dec 21 07:01:13 2025 GMT Subject: CN=141b34fabc2498479360a45502ba39a91107ae1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:99:90:7e:3d:18:67:ff:12:56:e3:79:28: 95:13:f7:d6:df:19:10:58:6e:d7:13:75:87:11:d6: 95:7d:e2:75:32:30:40:67:06:76:71:f5:b3:c4:11: 7e:d5:11:e6:66:f0:16:ac:82:9a:00:69:f3:d5:7d: 02:ad:dd:e6:73:fd:61:3a:ef:88:7d:2b:ba:49:8b: 2a:ca:4e:cf:d1:c2:3c:41:43:58:ba:cc:8f:6d:2f: f1:83:23:b6:ad:54:e8:4f:29:6a:37:0f:0f:d7:93: 04:44:31:ee:31:b6:47:56:16:c9:b4:68:75:fa:66: 63:d9:bc:3f:4f:01:59:31:5b:1d:e7:14:78:1b:67: 31:a9:fa:37:06:ff:ee:4d:14:53:d2:da:f4:f4:91: eb:f6:7c:e4:b1:3d:92:f5:f7:6b:4e:74:87:0f:45: bf:97:61:93:f2:25:61:e6:11:b0:20:ad:29:24:d4: 2e:77:1a:9d:b9:c1:30:1b:44:96:64:80:6f:1b:58: 60:e2:ee:6f:46:b2:0c:63:1a:4f:f4:7e:90:ae:ba: 68:60:d9:8f:2b:ff:e2:0c:19:15:47:c3:b1:65:7a: 9a:dd:ee:ad:08:8b:f6:59:1f:33:1b:7d:50:f9:03: cd:b9:17:73:d6:2f:f9:c4:8b:f3:26:bc:b3:ac:af: 4a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1B:34:FA:BC:24:98:47:93:60:A4:55:02:BA:39:A9:11:07:AE:1D X509v3 Authority Key Identifier: keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1c:4a:dd:3e:7c:55:ae:f3:21:fe:fe:ed:98:27:5b:ed:ce: 02:80:8a:2b:a7:0d:f3:c8:b0:cc:bf:75:d1:c3:5f:97:1b:ca: 07:f5:90:af:a5:be:31:09:81:f3:bb:9c:9f:ab:e6:cf:93:88: 67:d1:41:16:70:c6:1c:01:cf:59:2d:11:36:de:85:db:53:76: a1:2f:c3:50:dd:29:90:e2:b3:ef:19:5a:6b:ef:3a:63:dd:e5: a8:1d:bd:08:8d:27:ae:8e:f9:51:2c:71:5b:38:aa:51:8d:18: 3e:74:ef:6d:6a:ef:68:10:0c:b4:17:82:b6:63:c6:82:f0:2a: 21:ac:c1:49:95:40:85:ef:c0:e3:bd:4b:ea:bb:22:5e:a1:00: b3:9e:8c:50:78:64:46:7b:5d:39:c1:f3:b7:b8:c3:8b:f7:b2: 67:fd:5d:5a:bf:5c:41:09:c6:c3:03:eb:30:32:9c:cc:76:8b: aa:c3:5c:9b:75:98:87:3c:13:8e:a4:ac:b5:3a:0d:18:3b:6e: 1e:b2:9b:76:8b:60:28:be:40:39:0b:8b:5a:91:42:a7:f4:78: b2:5d:f3:ce:58:c5:27:55:3e:ec:a9:8d:db:e4:71:f6:5c:ee: 73:44:a5:36:e2:f1:19:94:0c:09:d4:8b:37:67:b9:81:f7:f7: 7c:c6:2c:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/2NxLk3kRqaD+f9r7TpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMTE1ZmU5YzllOWNmZGVmMTdlOTI0MTY1NTkyYzAyM2Vm YjJiMTYwHhcNMjUxMjIwMDcwMTEzWhcNMjUxMjIxMDcwMTEzWjAzMTEwLwYDVQQD EygxNDFiMzRmYWJjMjQ5ODQ3OTM2MGE0NTUwMmJhMzlhOTExMDdhZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgSZkH49GGf/ElbjeSiVE/fW3xkQ WG7XE3WHEdaVfeJ1MjBAZwZ2cfWzxBF+1RHmZvAWrIKaAGnz1X0Crd3mc/1hOu+I fSu6SYsqyk7P0cI8QUNYusyPbS/xgyO2rVToTylqNw8P15MERDHuMbZHVhbJtGh1 +mZj2bw/TwFZMVsd5xR4G2cxqfo3Bv/uTRRT0tr09JHr9nzksT2S9fdrTnSHD0W/ l2GT8iVh5hGwIK0pJNQudxqducEwG0SWZIBvG1hg4u5vRrIMYxpP9H6QrrpoYNmP K//iDBkVR8OxZXqa3e6tCIv2WR8zG31Q+QPNuRdz1i/5xIvzJryzrK9KMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQbNPq8JJhHk2CkVQK6OakRB64dMB8GA1UdIwQY MBaAFJ0RX+nJ6c/e8X6SQWVZLAI++ysWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMt YmI3OTdjZTdlMTA4LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMtYmI3OTdjZTdlMTA4 LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRxK3T58 Va7zIf7+7ZgnW+3OAoCKK6cN88iwzL910cNflxvKB/WQr6W+MQmB87ucn6vmz5OI Z9FBFnDGHAHPWS0RNt6F21N2oS/DUN0pkOKz7xlaa+86Y93lqB29CI0nro75USxx WziqUY0YPnTvbWrvaBAMtBeCtmPGgvAqIazBSZVAhe/A471L6rsiXqEAs56MUHhk RntdOcHzt7jDi/eyZ/1dWr9cQQnGwwPrMDKczHaLqsNcm3WYhzwTjqSstToNGDtu HrKbdotgKL5AOQuLWpFCp/R4sl3zzljFJ1U+7KmN2+Rx9lzuc0SlNuLxGZQMCdSL N2e5gff3fMYs6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 09:10:23 2025 by rpki-client