This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json) Hash identifier: QiW9oT2npw5mastIciEtz/0ZuTxCNyk9juV9T+G3WEM= Subject key identifier: 94:5C:50:35:CC:46:6E:4D:55:20:61:40:62:06:DF:E8:C1:2F:7A:3A Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a Certificate serial: 019B58D11F410F679E1CE9D5DE03338DFCF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft Manifest number: 07C0 Signing time: Fri 26 Dec 2025 04:00:58 +0000 Manifest this update: Fri 26 Dec 2025 04:00:58 +0000 Manifest next update: Sat 27 Dec 2025 04:00:58 +0000 Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: M+9KyBeHKuYBqdN/wU8zf7xT92jyHCDWq4DxRufnX0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:1f:41:0f:67:9e:1c:e9:d5:de:03:33:8d:fc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a Validity Not Before: Dec 26 04:00:58 2025 GMT Not After : Dec 27 04:00:58 2025 GMT Subject: CN=945c5035cc466e4d552061406206dfe8c12f7a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:49:3f:ee:36:7e:6a:42:11:ab:d9:6f:b0: 58:54:c3:7a:a9:8a:42:2a:94:39:64:61:53:98:2b: 80:8d:f4:8c:58:3f:91:b3:fe:8c:41:36:0f:eb:b7: eb:68:a8:d0:c0:32:e5:a7:56:4d:86:7d:bf:47:72: 8d:77:d5:98:3a:78:a3:03:7d:ce:c0:7c:44:e6:c2: 20:0d:66:32:e1:de:fc:c7:c8:e4:76:b9:99:6a:df: f4:e3:8c:58:06:d1:55:ca:00:61:d5:d4:7f:1f:c0: 86:d8:cf:cc:55:4f:74:93:b4:d6:1b:56:51:e3:4e: 00:d4:01:d1:51:49:c5:90:06:35:54:2c:65:09:85: 0b:19:6c:3e:f3:e9:8a:4c:b8:d1:bd:e5:be:b3:3b: 86:86:8b:c7:6b:f5:a1:59:40:68:6f:d4:04:ff:be: 41:77:0b:07:8f:cd:12:02:78:d8:9c:85:af:6b:9a: 27:a8:6f:fa:35:e3:0f:44:76:a5:9d:82:93:84:dc: c5:d4:2c:a4:f4:b6:e9:76:50:d2:29:8d:e3:38:ad: 12:73:64:5e:8b:d1:48:97:57:a5:fd:22:c8:c9:1e: 05:ac:ee:80:80:97:3f:68:10:83:e7:e2:3f:70:f0: f7:e0:3e:39:98:a7:ad:51:2d:cd:c8:bb:1c:20:94: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5C:50:35:CC:46:6E:4D:55:20:61:40:62:06:DF:E8:C1:2F:7A:3A X509v3 Authority Key Identifier: keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:50:bc:6c:77:8d:da:ff:9b:2a:2d:1c:6d:ec:d7:ef:9b:15: f8:ea:83:aa:2d:5c:15:21:55:17:33:b1:78:2e:d8:eb:44:6a: 43:ac:67:a0:b7:4a:eb:86:72:24:aa:73:6b:d3:67:23:17:7e: 4d:6f:87:64:74:b8:c8:17:ed:2f:0b:76:c1:2f:2a:8a:2c:16: b3:ff:2c:8a:cd:91:09:e0:87:fc:d2:81:01:71:14:dc:84:10: 6f:48:de:02:a9:14:a2:88:87:ef:c2:4e:d5:b1:77:6b:3b:eb: 7f:ff:55:67:12:f0:52:c8:93:02:71:14:09:49:55:2d:21:1e: 80:7f:48:c5:e4:95:2f:d8:5e:49:c2:82:a1:a1:a4:46:2e:fb: 1d:5b:35:12:c4:a5:ab:dc:02:e1:36:1e:1f:8f:79:1b:1d:0e: 0b:28:6e:48:9b:72:c4:da:33:b5:2d:1d:2e:83:e5:5b:92:b5: eb:1a:35:1a:3b:8a:c2:68:72:bb:32:6e:19:18:2b:46:10:11: ce:f8:40:93:26:4c:99:3c:e2:3d:40:b8:e7:2f:21:4d:4c:ff: 60:32:c4:eb:86:86:84:1f:a7:e3:f2:c8:c6:c1:49:1e:d9:5e: da:c2:ea:e8:2f:4f:f5:1c:4c:62:11:7e:29:56:cc:64:03:cc: 81:90:af:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0R9BD2eeHOnV3gMzjfz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNlOTFkNWIwNWI0NWYwN2QzODUyNGY0ZjFlMmUzOTJi OGE4M2EwHhcNMjUxMjI2MDQwMDU4WhcNMjUxMjI3MDQwMDU4WjAzMTEwLwYDVQQD Eyg5NDVjNTAzNWNjNDY2ZTRkNTUyMDYxNDA2MjA2ZGZlOGMxMmY3YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnftJP+42fmpCEavZb7BYVMN6qYpC KpQ5ZGFTmCuAjfSMWD+Rs/6MQTYP67fraKjQwDLlp1ZNhn2/R3KNd9WYOnijA33O wHxE5sIgDWYy4d78x8jkdrmZat/044xYBtFVygBh1dR/H8CG2M/MVU90k7TWG1ZR 404A1AHRUUnFkAY1VCxlCYULGWw+8+mKTLjRveW+szuGhovHa/WhWUBob9QE/75B dwsHj80SAnjYnIWva5onqG/6NeMPRHalnYKThNzF1Cyk9LbpdlDSKY3jOK0Sc2Re i9FIl1el/SLIyR4FrO6AgJc/aBCD5+I/cPD34D45mKetUS3NyLscIJS4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRcUDXMRm5NVSBhQGIG3+jBL3o6MB8GA1UdIwQY MBaAFJ0j6R1bBbRfB9OFJPTx4uOSuKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAt MzdhOWRkMDJiMmM0LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAtMzdhOWRkMDJiMmM0 LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlC8bHeN 2v+bKi0cbezX75sV+OqDqi1cFSFVFzOxeC7Y60RqQ6xnoLdK64ZyJKpza9NnIxd+ TW+HZHS4yBftLwt2wS8qiiwWs/8sis2RCeCH/NKBAXEU3IQQb0jeAqkUooiH78JO 1bF3azvrf/9VZxLwUsiTAnEUCUlVLSEegH9IxeSVL9heScKCoaGkRi77HVs1EsSl q9wC4TYeH495Gx0OCyhuSJtyxNoztS0dLoPlW5K16xo1GjuKwmhyuzJuGRgrRhAR zvhAkyZMmTziPUC45y8hTUz/YDLE64aGhB+n4/LIxsFJHtle2sLq6C9P9RxMYhF+ KVbMZAPMgZCvhw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:06 2025 by rpki-client