This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json) Hash identifier: yGrjPYvxaFz7mtZ8jKY2DWIG3SFyaq2N/HwibZZm25o= Subject key identifier: 59:6B:47:84:85:20:BD:48:61:D8:16:D3:D2:08:C4:32:1D:A9:91:1A Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e Certificate serial: 019B5ABFD8CCED2DC17D8097417D0DB04C69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 13:01:20 +0000 Manifest this update: Fri 26 Dec 2025 13:01:20 +0000 Manifest next update: Sat 27 Dec 2025 13:01:20 +0000 Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=) 2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: ZSK1szNVfD5fAwET/qxIpyjo8njDIT5eV/HCFdu8sL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d8:cc:ed:2d:c1:7d:80:97:41:7d:0d:b0:4c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e Validity Not Before: Dec 26 13:01:20 2025 GMT Not After : Dec 27 13:01:20 2025 GMT Subject: CN=596b47848520bd4861d816d3d208c4321da9911a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:db:fe:50:51:2b:bf:7b:ee:70:16:57:51: 7a:d0:be:87:53:89:5b:e3:f3:a2:f6:9a:b9:d7:c1: 28:82:97:76:ba:b8:93:03:01:7d:13:62:95:a5:68: 52:2b:86:13:61:cb:92:1d:53:d9:7c:bc:9b:d4:73: 2e:c1:51:22:b1:88:5f:77:3b:b4:e3:43:87:9d:03: 1b:f7:ef:fa:dd:ed:a5:12:5e:47:e3:e3:2f:90:43: 1c:a9:92:14:1e:d6:cc:f2:67:e8:9e:0b:eb:01:ac: 6a:b5:37:d8:b8:b5:43:8f:25:fe:44:6d:bf:eb:19: 17:55:11:6c:0d:c6:1c:00:7f:d6:60:cc:5f:7a:43: da:1e:1e:5e:a3:b7:a4:e7:72:ac:c1:e0:90:ba:96: 6f:f2:7f:d4:e1:5f:53:47:2a:4c:5c:b2:5d:81:af: 1a:42:43:61:e3:c6:64:e1:16:b4:7a:fa:05:ef:8b: 69:89:3b:f5:c5:c3:ca:0f:0f:ac:bf:08:66:3f:08: 06:26:c9:af:61:fa:35:70:08:e4:dd:12:99:31:03: ea:55:68:28:5e:27:b6:b7:51:ba:86:b4:d6:48:f7: c2:3b:7d:25:f3:85:c8:10:c6:79:73:02:7d:56:7c: 69:25:61:e6:75:bd:54:16:14:27:1d:b7:81:0c:a8: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6B:47:84:85:20:BD:48:61:D8:16:D3:D2:08:C4:32:1D:A9:91:1A X509v3 Authority Key Identifier: keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0e:d7:87:41:dc:55:02:8e:33:2d:6a:ec:a8:a3:ac:1e:a2: fe:cc:5d:9b:10:95:e4:1e:10:e2:8e:ee:31:2c:f3:f4:03:18: 20:19:13:05:8d:fc:8a:d3:cc:af:8f:20:6b:f4:d1:10:49:6c: cd:4e:96:05:d2:84:8c:a4:c1:42:45:87:c6:1d:91:6b:0e:bc: 0f:f4:8d:7c:bd:93:7c:f9:36:2a:ae:4e:81:28:12:99:f8:78: 57:e0:f1:4f:85:66:b8:ad:0b:7d:c6:93:e8:54:bd:80:72:cc: 53:66:58:f0:66:77:50:83:f7:03:34:37:27:69:94:b3:50:57: d7:84:1a:46:93:83:d9:ad:f6:9e:98:99:d7:45:41:4c:4b:d1: db:59:2b:dd:d8:00:d6:ae:19:89:7b:b2:7c:e1:89:e8:e4:b0: 19:d4:17:44:a0:8c:59:0b:d0:48:ee:b6:5b:af:62:94:c6:49: ed:d5:c9:ba:40:a4:85:8e:90:76:35:5b:80:2e:23:6e:b5:89: 9a:22:d2:fe:90:d2:b9:1d:4b:d3:23:30:5a:4c:97:2a:8a:be: f2:95:fb:51:c0:ce:2b:db:5e:9c:26:0c:86:b1:b9:fe:9c:2b: 22:78:7d:dc:c4:76:65:71:5a:57:c8:70:65:35:ee:02:10:d7: 4c:c7:58:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9jM7S3BfYCXQX0NsExpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNjE0MDNhYzY5ZTI4NzRmNTYyMmQ3ZWU1NjhlOGU0OWYw NjRjMmUwHhcNMjUxMjI2MTMwMTIwWhcNMjUxMjI3MTMwMTIwWjAzMTEwLwYDVQQD Eyg1OTZiNDc4NDg1MjBiZDQ4NjFkODE2ZDNkMjA4YzQzMjFkYTk5MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vDb/lBRK7977nAWV1F60L6HU4lb 4/Oi9pq518Eogpd2uriTAwF9E2KVpWhSK4YTYcuSHVPZfLyb1HMuwVEisYhfdzu0 40OHnQMb9+/63e2lEl5H4+MvkEMcqZIUHtbM8mfongvrAaxqtTfYuLVDjyX+RG2/ 6xkXVRFsDcYcAH/WYMxfekPaHh5eo7ek53KsweCQupZv8n/U4V9TRypMXLJdga8a QkNh48Zk4Ra0evoF74tpiTv1xcPKDw+svwhmPwgGJsmvYfo1cAjk3RKZMQPqVWgo Xie2t1G6hrTWSPfCO30l84XIEMZ5cwJ9VnxpJWHmdb1UFhQnHbeBDKjanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlrR4SFIL1IYdgW09IIxDIdqZEaMB8GA1UdIwQY MBaAFJ5hQDrGnih09WItfuVo6OSfBkwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0Yzgt ZTNkMDQ1NDgzNDEyLzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0YzgtZTNkMDQ1NDgzNDEy LzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWA7Xh0Hc VQKOMy1q7KijrB6i/sxdmxCV5B4Q4o7uMSzz9AMYIBkTBY38itPMr48ga/TREEls zU6WBdKEjKTBQkWHxh2Raw68D/SNfL2TfPk2Kq5OgSgSmfh4V+DxT4VmuK0LfcaT 6FS9gHLMU2ZY8GZ3UIP3AzQ3J2mUs1BX14QaRpOD2a32npiZ10VBTEvR21kr3dgA 1q4ZiXuyfOGJ6OSwGdQXRKCMWQvQSO62W69ilMZJ7dXJukCkhY6QdjVbgC4jbrWJ miLS/pDSuR1L0yMwWkyXKoq+8pX7UcDOK9tenCYMhrG5/pwrInh93MR2ZXFaV8hw ZTXuAhDXTMdYHQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:26 2025 by rpki-client