This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json) Hash identifier: pVzELoDNLnL/xAUpi/7pheTjvO4hI05bx1YqOwZTcO4= Subject key identifier: 07:AA:16:80:76:76:23:C6:28:31:91:46:A0:9B:D2:5C:C3:B5:58:2B Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Certificate serial: 019B4815BA4525C97E6C8F1D42AA6A57BD62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft Manifest number: 103C Signing time: Mon 22 Dec 2025 22:02:22 +0000 Manifest this update: Mon 22 Dec 2025 22:02:22 +0000 Manifest next update: Tue 23 Dec 2025 22:02:22 +0000 Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=) 2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: i+xAHodyPy3PX8CCHX7ee7FG6GTvABigNzULMY5k7l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:ba:45:25:c9:7e:6c:8f:1d:42:aa:6a:57:bd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Validity Not Before: Dec 22 22:02:22 2025 GMT Not After : Dec 23 22:02:22 2025 GMT Subject: CN=07aa1680767623c628319146a09bd25cc3b5582b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:ee:7c:93:1b:4c:bf:c1:db:03:28:df:6a: ed:58:e8:bb:c4:87:2f:68:e0:c7:0c:c1:15:ac:c8: 54:9d:e2:5f:0d:20:88:f2:45:83:34:ee:21:13:83: 9d:cf:3e:ce:9e:68:2f:be:ac:92:92:ac:a7:76:33: a2:f2:c2:2b:39:ac:61:02:1d:e5:07:74:62:c8:a2: 35:ed:7b:e3:2d:cb:48:af:11:ad:d7:a3:49:69:91: 86:dd:d4:be:d7:5d:19:cb:81:df:ea:43:7b:f9:f2: 3c:6e:15:c4:3c:ce:e9:55:ce:0b:cd:4f:8a:d2:19: f9:eb:2a:40:ec:f6:95:51:d8:ad:5e:2a:bd:c9:2c: 01:42:a2:55:83:4b:6d:3c:70:32:cb:fd:e7:df:4f: 09:e3:f0:61:8e:c0:c9:4a:25:8d:8d:5a:06:22:b6: 9a:5d:ac:4a:c8:6d:ba:89:f3:95:d6:f2:5e:2b:ee: f2:5d:98:e0:a5:56:1c:fd:7b:ff:4e:31:02:d7:98: 8d:60:df:a5:0a:dc:06:5f:7a:06:47:67:d0:a2:83: 78:ef:1b:76:1e:b2:b2:7b:e1:22:c6:5c:1a:ba:27: 4a:51:dd:46:79:7d:8c:00:a2:3e:36:01:1a:c4:24: 28:37:00:4c:af:11:20:a3:fa:4a:e8:ee:e4:51:b6: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:16:80:76:76:23:C6:28:31:91:46:A0:9B:D2:5C:C3:B5:58:2B X509v3 Authority Key Identifier: keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:65:26:b7:3a:34:b5:55:05:c4:9e:57:54:0a:8e:bb:4f:98: 48:55:c9:37:27:52:4a:f9:e0:3a:3e:3a:fc:5f:9e:9a:24:f5: 86:b6:3e:1f:54:ca:7c:ad:f2:43:83:a8:d2:85:ee:9a:8d:d7: b7:54:3c:99:70:4a:8e:3d:72:ed:ad:b8:38:c8:b6:ba:16:97: df:fb:60:f4:5e:55:4c:e1:1b:b6:77:21:61:a8:57:06:d1:61: f7:4c:90:3a:05:c6:eb:16:53:e3:3b:d4:57:b8:d1:7e:f5:d8: b7:73:3b:4c:6c:63:79:ec:40:e0:37:f7:bd:49:af:38:8a:40: e7:53:6d:f6:21:d2:3d:e2:e1:4e:f8:4b:14:06:a7:46:09:6b: ee:1f:4c:86:7b:27:a4:11:72:be:e7:05:7f:6f:bc:9d:e2:c5: 5f:4a:94:31:77:2c:d0:33:30:fe:31:ae:60:0a:89:cb:76:66: b4:05:2b:f0:65:0a:fc:46:ee:0c:eb:2e:e3:6f:3d:df:ef:02: 04:9a:0c:80:92:42:e7:37:f8:07:d2:4a:ad:2a:e7:77:d7:2c: cb:eb:49:ec:1a:20:36:3f:4b:e5:3f:e1:9c:a8:26:6b:e8:e2: 97:81:ab:ab:33:de:40:62:9f:00:7f:bb:d2:68:ef:b9:26:8e: 83:0e:6d:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFbpFJcl+bI8dQqpqV71iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3 YzMyNDgwHhcNMjUxMjIyMjIwMjIyWhcNMjUxMjIzMjIwMjIyWjAzMTEwLwYDVQQD EygwN2FhMTY4MDc2NzYyM2M2MjgzMTkxNDZhMDliZDI1Y2MzYjU1ODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoDufJMbTL/B2wMo32rtWOi7xIcv aODHDMEVrMhUneJfDSCI8kWDNO4hE4Odzz7OnmgvvqySkqyndjOi8sIrOaxhAh3l B3RiyKI17XvjLctIrxGt16NJaZGG3dS+110Zy4Hf6kN7+fI8bhXEPM7pVc4LzU+K 0hn56ypA7PaVUditXiq9ySwBQqJVg0ttPHAyy/3n308J4/BhjsDJSiWNjVoGIraa XaxKyG26ifOV1vJeK+7yXZjgpVYc/Xv/TjEC15iNYN+lCtwGX3oGR2fQooN47xt2 HrKye+EixlwauidKUd1GeX2MAKI+NgEaxCQoNwBMrxEgo/pK6O7kUbbxtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeqFoB2diPGKDGRRqCb0lzDtVgrMB8GA1UdIwQY MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt ODlhNjhlNWEyMTEwLzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmUmtzo0 tVUFxJ5XVAqOu0+YSFXJNydSSvngOj46/F+emiT1hrY+H1TKfK3yQ4Oo0oXumo3X t1Q8mXBKjj1y7a24OMi2uhaX3/tg9F5VTOEbtnchYahXBtFh90yQOgXG6xZT4zvU V7jRfvXYt3M7TGxjeexA4Df3vUmvOIpA51Nt9iHSPeLhTvhLFAanRglr7h9Mhnsn pBFyvucFf2+8neLFX0qUMXcs0DMw/jGuYAqJy3ZmtAUr8GUK/EbuDOsu42893+8C BJoMgJJC5zf4B9JKrSrnd9csy+tJ7BogNj9L5T/hnKgma+jil4GrqzPeQGKfAH+7 0mjvuSaOgw5t6g== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:11 2025 by rpki-client