This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json) Hash identifier: K6MI72nROf4ArzFc57JGzi9KBS2FHkrJAO4tuoAnnCU= Subject key identifier: 1D:84:E1:CF:CB:EE:1F:D1:44:8F:2A:AC:05:CF:35:72:89:E4:2E:60 Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Certificate serial: 019B4249C9AB2C09593041E00F45F38F294B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft Manifest number: 1039 Signing time: Sun 21 Dec 2025 19:01:30 +0000 Manifest this update: Sun 21 Dec 2025 19:01:30 +0000 Manifest next update: Mon 22 Dec 2025 19:01:30 +0000 Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=) 2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: ITReBRDmYtuPiiaG+mCJzzTUsYbobV2cSa7M+GMMGC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:c9:ab:2c:09:59:30:41:e0:0f:45:f3:8f:29:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Validity Not Before: Dec 21 19:01:30 2025 GMT Not After : Dec 22 19:01:30 2025 GMT Subject: CN=1d84e1cfcbee1fd1448f2aac05cf357289e42e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1d:77:26:af:bb:79:f3:2b:47:42:bd:26:d3: 61:7c:e1:07:12:f5:97:18:06:52:88:e8:25:56:10: a0:fa:0c:64:07:93:a3:52:71:d3:ee:36:12:04:bc: 08:32:3d:10:ce:60:b7:c0:27:6d:fc:ff:69:7c:52: 17:47:b6:b1:cc:4c:ae:1d:91:31:ab:ae:fe:17:da: 0a:91:b3:9b:d3:b8:67:1e:6f:60:a2:a3:23:e6:4c: 07:c6:41:82:6a:91:e9:e3:39:97:da:e1:72:0f:96: c4:e4:d0:c1:06:06:0d:38:6b:02:e7:ce:fd:6f:fd: 88:ea:27:f8:9a:b5:70:33:7e:73:5d:b4:a4:19:00: d0:60:1b:86:3c:a1:ac:ee:8d:c0:e0:96:3f:97:95: 25:b4:20:b6:f3:97:0a:f4:08:56:d5:23:0c:2c:59: b2:fc:6e:a6:98:d7:3e:ac:60:d9:87:a8:24:08:67: f8:2b:fb:0f:0d:b0:c0:47:fa:92:b3:d0:ef:6f:9a: 91:5e:f8:14:b9:f2:80:19:44:c1:a9:f6:56:96:2b: ff:67:a6:b6:45:fb:50:fc:6d:ac:09:db:d7:81:2f: 39:e1:fa:b6:f9:b6:c3:12:26:de:54:46:4b:99:6f: 46:90:8a:bd:bd:11:be:30:dc:6e:69:fd:68:0c:14: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:E1:CF:CB:EE:1F:D1:44:8F:2A:AC:05:CF:35:72:89:E4:2E:60 X509v3 Authority Key Identifier: keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e3:76:be:9a:16:0e:cf:76:0c:b3:a3:91:2c:3d:48:73:56: a9:d0:7e:f0:6f:52:2a:95:3f:52:cb:ac:62:cc:04:ac:57:4a: f3:49:f6:2e:d9:12:25:12:6d:52:62:94:f1:a2:a6:54:0a:ba: 81:b5:ff:56:08:1b:bb:db:cc:3b:74:37:36:a9:24:75:ca:a9: 80:6e:55:6e:ac:a4:f7:7e:8d:f5:e3:c6:23:36:64:b7:ec:dd: 45:1f:93:cd:eb:5e:88:b5:07:52:5b:95:ed:eb:16:6b:39:59: 8e:92:74:a6:c5:54:71:6d:5f:d3:a2:08:01:68:d4:03:58:a2: fb:91:e8:cc:5c:2e:20:4a:57:88:8a:63:ea:63:3d:22:d6:75: b4:98:14:c5:2c:2e:d3:f2:24:ad:fe:b1:af:84:ca:eb:b6:bc: a2:56:d6:64:84:97:8e:c6:a5:42:3a:f7:aa:fe:d5:3f:fd:10: 56:6a:ad:63:1e:0c:f8:24:e1:93:d2:65:e4:86:dc:f3:20:98: a3:e5:77:fb:0f:ce:7b:8c:f6:b1:59:4a:5c:0e:c1:01:43:67: 9f:6e:cd:f3:3a:eb:65:6d:67:52:cc:b1:30:dc:d7:f3:73:c0: fc:21:6d:ae:62:c8:94:34:0b:ee:70:ae:df:07:bf:0d:78:92: 77:c5:1e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCScmrLAlZMEHgD0XzjylLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3 YzMyNDgwHhcNMjUxMjIxMTkwMTMwWhcNMjUxMjIyMTkwMTMwWjAzMTEwLwYDVQQD EygxZDg0ZTFjZmNiZWUxZmQxNDQ4ZjJhYWMwNWNmMzU3Mjg5ZTQyZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh13Jq+7efMrR0K9JtNhfOEHEvWX GAZSiOglVhCg+gxkB5OjUnHT7jYSBLwIMj0QzmC3wCdt/P9pfFIXR7axzEyuHZEx q67+F9oKkbOb07hnHm9goqMj5kwHxkGCapHp4zmX2uFyD5bE5NDBBgYNOGsC5879 b/2I6if4mrVwM35zXbSkGQDQYBuGPKGs7o3A4JY/l5UltCC285cK9AhW1SMMLFmy /G6mmNc+rGDZh6gkCGf4K/sPDbDAR/qSs9Dvb5qRXvgUufKAGUTBqfZWliv/Z6a2 RftQ/G2sCdvXgS854fq2+bbDEibeVEZLmW9GkIq9vRG+MNxuaf1oDBRBvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2E4c/L7h/RRI8qrAXPNXKJ5C5gMB8GA1UdIwQY MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt ODlhNjhlNWEyMTEwLzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEON2vpoW Ds92DLOjkSw9SHNWqdB+8G9SKpU/UsusYswErFdK80n2LtkSJRJtUmKU8aKmVAq6 gbX/Vggbu9vMO3Q3NqkkdcqpgG5Vbqyk936N9ePGIzZkt+zdRR+TzeteiLUHUluV 7esWazlZjpJ0psVUcW1f06IIAWjUA1ii+5HozFwuIEpXiIpj6mM9ItZ1tJgUxSwu 0/Ikrf6xr4TK67a8olbWZISXjsalQjr3qv7VP/0QVmqtYx4M+CThk9Jl5Ibc8yCY o+V3+w/Oe4z2sVlKXA7BAUNnn27N8zrrZW1nUsyxMNzX83PA/CFtrmLIlDQL7nCu 3we/DXiSd8UeiA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:02:32 2025 by rpki-client