This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json) Hash identifier: A9wEQ5dQ/SnZiSQ7qzm0m3bfyTK9WFvG7nbyQB2mH1U= Subject key identifier: 7F:80:0B:9F:8D:74:31:A4:5C:2A:B8:8D:BA:8E:1C:36:98:B6:14:FE Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0 Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0 Certificate serial: 019B353304B5DE917A9427DFA775EE527E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft Manifest number: 0464 Signing time: Fri 19 Dec 2025 06:01:34 +0000 Manifest this update: Fri 19 Dec 2025 06:01:34 +0000 Manifest next update: Sat 20 Dec 2025 06:01:34 +0000 Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=) 2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: Hi8BzEBhb5D9UJnfFQGSrs/CGZ86MRdTHqRfefXmQZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:04:b5:de:91:7a:94:27:df:a7:75:ee:52:7e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0 Validity Not Before: Dec 19 06:01:34 2025 GMT Not After : Dec 20 06:01:34 2025 GMT Subject: CN=7f800b9f8d7431a45c2ab88dba8e1c3698b614fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:c8:46:9b:52:7a:be:1c:35:d1:06:f4:1b: d7:93:b6:00:72:75:9f:e3:5f:04:8a:14:66:f7:a7: f6:f8:85:88:a4:63:ba:87:f4:98:dd:7d:ca:ed:cb: 17:33:27:0b:db:fc:e0:42:eb:55:7a:ec:32:c9:2a: 28:18:ec:c9:dc:2b:21:96:6e:b8:26:ac:43:69:3b: ce:84:22:f9:d9:38:35:ec:cf:64:db:a5:7d:10:c7: ca:d8:83:b8:a7:f4:ba:55:c8:88:3a:5c:98:e4:92: 35:68:ed:06:e9:f4:78:62:d2:fe:db:fe:49:3d:08: 3b:76:d8:f9:15:dd:be:db:fa:48:71:73:3a:6f:48: 08:62:77:79:6d:cf:43:85:ff:8b:46:bf:ad:e9:b8: b8:06:11:e7:da:a2:c2:ad:36:1b:bc:38:6f:70:8f: 74:5a:a7:3f:35:a3:74:ea:3e:b9:23:4e:ab:dc:e2: ee:c6:cc:d9:e9:14:54:d6:4a:68:32:84:75:f3:2e: 2d:1f:23:33:10:f0:5e:3d:98:1f:f5:a3:00:d3:16: 26:e0:b8:b1:4f:3b:72:b8:7b:3d:f5:ba:d4:29:9a: c1:32:a0:69:60:47:7a:d6:82:3f:e5:35:d1:73:7c: bd:88:5f:dd:b2:47:0a:62:42:00:d2:08:43:39:88: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:0B:9F:8D:74:31:A4:5C:2A:B8:8D:BA:8E:1C:36:98:B6:14:FE X509v3 Authority Key Identifier: keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:35:1c:d1:bf:c2:d8:6e:22:3f:17:98:c4:28:dc:53:6a: 65:d2:df:9b:b2:23:95:16:ce:51:51:7b:61:bc:89:a6:17:52: 70:2d:78:cf:c5:7e:03:f3:a4:00:62:a7:6e:9a:15:7b:55:a6: 35:dc:66:38:aa:62:73:5c:52:fb:d5:b0:8e:51:84:9b:ba:3f: 43:3f:f7:c6:5e:ce:21:81:fe:ab:9e:37:05:97:be:b6:f0:da: 4c:b6:0a:8e:49:33:a1:e8:15:ef:19:8f:5f:74:38:bc:3d:7f: 81:11:d6:ab:ca:2f:a9:a4:ea:8c:9c:b5:62:b5:26:28:ab:cc: e2:ee:7b:4a:de:3a:5f:5a:40:20:cc:ab:7c:1e:9c:d7:71:48: e4:ac:eb:66:58:89:c1:bb:be:55:d5:dd:5a:49:e4:14:e2:ad: a7:51:92:52:e6:60:2a:3f:9e:a8:65:fe:aa:ef:df:99:a1:bc: 2c:20:75:06:7e:9f:11:bb:a2:c5:f1:99:f3:5e:79:e2:fc:e3: 0a:c5:48:53:4c:b6:ad:d0:e3:6c:c2:98:e4:ab:57:c6:68:c3: ef:a2:08:bd:4a:39:7d:54:f3:4f:56:b0:8c:e7:b4:2b:a8:4f: bd:9d:2b:6d:c0:86:db:bb:b6:4a:ec:87:5c:56:18:a2:b3:d9: 6c:37:ef:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MwS13pF6lCffp3XuUn45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGIxYmIyOWE0YWVhODVlMTljMjg5MmQwYzgzOWUyZmI5 NDVlZDAwHhcNMjUxMjE5MDYwMTM0WhcNMjUxMjIwMDYwMTM0WjAzMTEwLwYDVQQD Eyg3ZjgwMGI5ZjhkNzQzMWE0NWMyYWI4OGRiYThlMWMzNjk4YjYxNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUTIRptSer4cNdEG9BvXk7YAcnWf 418EihRm96f2+IWIpGO6h/SY3X3K7csXMycL2/zgQutVeuwyySooGOzJ3Cshlm64 JqxDaTvOhCL52Tg17M9k26V9EMfK2IO4p/S6VciIOlyY5JI1aO0G6fR4YtL+2/5J PQg7dtj5Fd2+2/pIcXM6b0gIYnd5bc9Dhf+LRr+t6bi4BhHn2qLCrTYbvDhvcI90 Wqc/NaN06j65I06r3OLuxszZ6RRU1kpoMoR18y4tHyMzEPBePZgf9aMA0xYm4Lix TztyuHs99brUKZrBMqBpYEd61oI/5TXRc3y9iF/dskcKYkIA0ghDOYgjKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+AC5+NdDGkXCq4jbqOHDaYthT+MB8GA1UdIwQY MBaAFDTbG7KaSuqF4ZwoktDIOeL7lF7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQt NTJhMTA0MjViMTM2LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQtNTJhMTA0MjViMTM2 LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI41HNG/ wthuIj8XmMQo3FNqZdLfm7IjlRbOUVF7YbyJphdScC14z8V+A/OkAGKnbpoVe1Wm NdxmOKpic1xS+9WwjlGEm7o/Qz/3xl7OIYH+q543BZe+tvDaTLYKjkkzoegV7xmP X3Q4vD1/gRHWq8ovqaTqjJy1YrUmKKvM4u57St46X1pAIMyrfB6c13FI5KzrZliJ wbu+VdXdWknkFOKtp1GSUuZgKj+eqGX+qu/fmaG8LCB1Bn6fEbuixfGZ81554vzj CsVIU0y2rdDjbMKY5KtXxmjD76IIvUo5fVTzT1awjOe0K6hPvZ0rbcCG27u2SuyH XFYYorPZbDfvgg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:58:31 2025 by rpki-client