This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json) Hash identifier: 322SyVDS50v4TgXZL23VYap2GgBsXGkvQDEXEdLUEa4= Subject key identifier: 16:01:F5:C1:F8:0C:FC:5A:AE:93:B3:73:CF:6E:9E:CE:4F:DC:24:4D Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f Certificate serial: 019B262D46D9593BB29745131FD22C86F439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft Manifest number: 058F Signing time: Tue 16 Dec 2025 08:01:00 +0000 Manifest this update: Tue 16 Dec 2025 08:01:00 +0000 Manifest next update: Wed 17 Dec 2025 08:01:00 +0000 Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=) 2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: etGCrvAyn2Nfy4mT2qCP5KX6YYHl8ftEF+5Cj1DBDp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:46:d9:59:3b:b2:97:45:13:1f:d2:2c:86:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f Validity Not Before: Dec 16 08:01:00 2025 GMT Not After : Dec 17 08:01:00 2025 GMT Subject: CN=1601f5c1f80cfc5aae93b373cf6e9ece4fdc244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:0a:cb:fd:35:fb:b3:00:af:01:6c:45:8e: 35:98:6a:6e:fa:d6:1f:b7:86:b7:be:a4:c7:fc:98: fa:11:f3:cc:15:28:06:fd:89:e5:5b:1d:28:af:79: 63:62:0f:a8:b7:b8:84:7a:a6:60:62:4f:84:af:00: 5d:e1:c2:a2:c8:a3:5c:31:ce:4e:0e:20:77:98:11: 3b:77:8f:9a:b6:90:13:e7:09:0c:29:96:c6:68:54: 9d:07:7d:56:c0:b5:f6:c6:32:89:89:05:3f:aa:a5: 73:83:29:d9:2a:23:0c:e6:37:8c:bd:03:8a:ab:c7: c1:4c:ae:ef:f7:41:e0:48:f5:cb:7e:dc:1d:c8:78: 4f:bf:78:dc:70:a2:c3:c5:9f:61:ce:38:fc:d9:5d: a8:f2:9f:cf:1b:79:34:0b:2d:f2:8e:63:3f:91:40: 48:a3:ec:6e:8c:07:b7:75:58:54:e5:3f:44:fe:f6: 0b:0d:9a:7f:f9:d5:c1:b3:6d:f0:66:d4:98:f1:b2: 69:58:d2:81:2b:0f:ef:13:0d:db:e7:37:8c:f4:3b: fa:a9:cd:b2:6f:c7:6a:09:0c:e2:67:84:e8:88:33: c2:4b:c4:a5:8f:48:60:55:d8:17:ee:0d:96:08:e8: 1e:b5:9e:c4:cc:da:af:43:60:f5:10:1e:24:79:29: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:01:F5:C1:F8:0C:FC:5A:AE:93:B3:73:CF:6E:9E:CE:4F:DC:24:4D X509v3 Authority Key Identifier: keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:dc:c9:73:00:7c:4f:6e:9b:6d:1c:22:41:71:ad:00:6c:6d: c1:83:d8:c5:3a:62:59:bc:b5:05:6a:f2:0f:c7:8a:d0:ac:d8: be:cd:ba:3f:9b:57:a4:36:33:ed:ea:ca:ee:9d:3d:f0:0f:dd: 39:f7:5d:0e:f2:31:3b:1c:51:30:a6:a7:a5:1e:e7:23:45:21: 51:95:fe:5f:e8:0a:2d:c4:27:90:c3:7b:f7:b6:29:2e:09:bf: 79:36:cc:88:cc:61:0f:09:a1:12:a9:73:b5:27:b8:5b:1f:da: 6a:92:50:82:33:da:66:d2:45:53:2f:94:b0:50:e9:83:33:f0: d2:fb:ee:36:60:b9:73:49:e2:9f:4f:ce:b3:e0:69:80:17:9c: c9:da:e8:ca:de:69:7c:a6:8e:b1:1b:0e:f9:b4:56:85:60:94: 19:f8:40:2c:0b:8f:8f:5c:24:d6:b2:ff:1e:7f:73:97:f9:2f: 3a:cd:30:8b:68:f7:8c:e0:7c:47:36:57:b8:bd:6c:58:4b:10: 58:0f:cd:65:b4:7d:04:da:08:98:ff:ac:1f:b3:84:ca:2e:e8: 66:b3:44:51:f8:c7:47:e1:cf:f6:fa:b6:60:31:4a:2b:56:af: ac:bf:f4:98:9e:7c:ee:ef:c1:47:69:53:98:7f:2e:77:ab:db: 3c:f3:7c:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLUbZWTuyl0UTH9IshvQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2 MmU4OWYwHhcNMjUxMjE2MDgwMTAwWhcNMjUxMjE3MDgwMTAwWjAzMTEwLwYDVQQD EygxNjAxZjVjMWY4MGNmYzVhYWU5M2IzNzNjZjZlOWVjZTRmZGMyNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmAKy/01+7MArwFsRY41mGpu+tYf t4a3vqTH/Jj6EfPMFSgG/YnlWx0or3ljYg+ot7iEeqZgYk+ErwBd4cKiyKNcMc5O DiB3mBE7d4+atpAT5wkMKZbGaFSdB31WwLX2xjKJiQU/qqVzgynZKiMM5jeMvQOK q8fBTK7v90HgSPXLftwdyHhPv3jccKLDxZ9hzjj82V2o8p/PG3k0Cy3yjmM/kUBI o+xujAe3dVhU5T9E/vYLDZp/+dXBs23wZtSY8bJpWNKBKw/vEw3b5zeM9Dv6qc2y b8dqCQziZ4ToiDPCS8Slj0hgVdgX7g2WCOgetZ7EzNqvQ2D1EB4keSkIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYB9cH4DPxarpOzc89uns5P3CRNMB8GA1UdIwQY MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdzJcwB8 T26bbRwiQXGtAGxtwYPYxTpiWby1BWryD8eK0KzYvs26P5tXpDYz7erK7p098A/d OfddDvIxOxxRMKanpR7nI0UhUZX+X+gKLcQnkMN797YpLgm/eTbMiMxhDwmhEqlz tSe4Wx/aapJQgjPaZtJFUy+UsFDpgzPw0vvuNmC5c0nin0/Os+BpgBecydroyt5p fKaOsRsO+bRWhWCUGfhALAuPj1wk1rL/Hn9zl/kvOs0wi2j3jOB8RzZXuL1sWEsQ WA/NZbR9BNoImP+sH7OEyi7oZrNEUfjHR+HP9vq2YDFKK1avrL/0mJ587u/BR2lT mH8ud6vbPPN8HQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:23:49 2025 by rpki-client