This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json) Hash identifier: U4uhuJNw23Xn3de40ZVHSiaISVK/ESG9oXD06Qgy/s4= Subject key identifier: 36:1E:37:5B:9F:9A:79:BD:66:83:FF:F0:4E:13:D0:1E:11:B7:02:A8 Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744 Certificate serial: 019B077E0A84C2E890796422F9A9FB70F854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft Manifest number: 0A98 Signing time: Wed 10 Dec 2025 09:00:59 +0000 Manifest this update: Wed 10 Dec 2025 09:00:59 +0000 Manifest next update: Thu 11 Dec 2025 09:00:59 +0000 Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: F97dacsBP1EvDk6ogbL8mO8t3TfSNermDpzzftIeDxM=) 2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:0a:84:c2:e8:90:79:64:22:f9:a9:fb:70:f8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744 Validity Not Before: Dec 10 09:00:59 2025 GMT Not After : Dec 11 09:00:59 2025 GMT Subject: CN=361e375b9f9a79bd6683fff04e13d01e11b702a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:9d:e5:23:45:e6:a9:81:5a:c4:14:3f:0a: f9:ea:6a:41:6d:11:b7:1d:98:1f:7b:cc:b4:c5:cf: 0a:71:ef:ed:63:fa:f8:1b:80:61:5e:ce:43:2b:3c: 0f:bb:25:7a:79:be:40:37:2d:cd:91:cf:e4:ff:f0: 2c:19:ef:8b:bd:44:b7:a6:5e:88:f7:a0:93:1f:20: 25:92:ec:28:02:e9:e9:4c:5f:ea:f8:97:ba:e4:aa: 89:71:77:b6:70:32:b0:72:e4:93:f9:49:d2:70:36: 95:1f:1d:e3:24:47:53:40:9b:e9:a9:00:26:33:ea: 23:a0:36:3e:da:9d:13:fc:5e:bb:13:2b:95:36:12: 21:99:1f:03:7f:69:f2:e5:52:b8:a3:03:ac:7d:48: e4:d0:78:73:cc:d5:fa:2d:ad:1a:d4:04:d9:3f:eb: 9b:4d:a5:a1:b2:e5:fe:e9:3a:39:b4:65:3f:5b:42: d8:2a:dc:60:70:9f:39:5c:ec:17:b7:e9:65:fa:1a: a4:01:22:a0:e0:60:15:63:eb:b2:07:57:50:09:1f: 5d:98:aa:b3:72:68:a1:a2:c9:a1:03:34:a4:13:1a: 5a:cb:35:9d:bf:be:dd:45:7c:0f:d2:ac:c9:ba:89: 1a:28:25:a8:d7:10:e2:78:a6:cc:68:bd:17:7e:45: d5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:37:5B:9F:9A:79:BD:66:83:FF:F0:4E:13:D0:1E:11:B7:02:A8 X509v3 Authority Key Identifier: keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:3c:f7:f1:3d:05:ab:1a:04:b1:c5:ab:47:f6:80:15:eb:47: af:27:10:cf:1a:14:6d:bc:4c:6e:b8:23:a3:cf:db:05:a6:d1: 03:ac:5e:c9:13:82:9c:29:3b:ee:50:43:9d:4d:1e:fb:39:e1: 19:68:97:01:34:4b:bd:46:f6:ac:a4:8d:78:e3:8e:cc:e9:9d: ea:17:ba:99:bd:48:73:94:2c:31:11:b5:54:a3:eb:ca:cf:3a: f5:40:e9:80:ee:6c:b8:4a:9a:08:b3:5e:29:11:57:70:78:bb: e8:2b:d4:24:fa:36:89:11:c8:1e:5f:c9:64:56:47:10:b7:fe: e1:3d:cb:26:87:06:d6:42:4f:11:97:5b:a8:85:4f:bf:ea:0c: cd:db:e3:57:44:db:eb:77:1b:6a:59:f0:a3:e2:2d:dd:e9:56: 93:39:4d:4b:b3:f1:80:5b:ae:c4:22:8e:ff:22:04:42:7f:7f: a2:bb:be:b5:da:2e:6b:37:ef:42:57:9f:58:57:51:df:99:9d: 9b:ed:f9:5f:95:fc:3b:7d:68:14:a1:3f:5a:4a:89:57:71:c2: 23:e7:3a:03:e9:74:39:96:3e:58:cf:05:3f:e8:0b:6e:f8:8e: 7a:3a:a6:1f:5f:fa:1e:32:28:23:02:7e:94:7e:5f:bf:39:8f: 12:a0:58:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfgqEwuiQeWQi+an7cPhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllY2IyMjJiODEyNmEyMWRmMzJkMDE1ZTRjNDg1Mzk1N2Qx ZDk3NDQwHhcNMjUxMjEwMDkwMDU5WhcNMjUxMjExMDkwMDU5WjAzMTEwLwYDVQQD EygzNjFlMzc1YjlmOWE3OWJkNjY4M2ZmZjA0ZTEzZDAxZTExYjcwMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzed5SNF5qmBWsQUPwr56mpBbRG3 HZgfe8y0xc8Kce/tY/r4G4BhXs5DKzwPuyV6eb5ANy3Nkc/k//AsGe+LvUS3pl6I 96CTHyAlkuwoAunpTF/q+Je65KqJcXe2cDKwcuST+UnScDaVHx3jJEdTQJvpqQAm M+ojoDY+2p0T/F67EyuVNhIhmR8Df2ny5VK4owOsfUjk0HhzzNX6La0a1ATZP+ub TaWhsuX+6To5tGU/W0LYKtxgcJ85XOwXt+ll+hqkASKg4GAVY+uyB1dQCR9dmKqz cmihosmhAzSkExpayzWdv77dRXwP0qzJuokaKCWo1xDieKbMaL0XfkXVnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYeN1ufmnm9ZoP/8E4T0B4RtwKoMB8GA1UdIwQY MBaAFJ7LIiuBJqId8y0BXkxIU5V9HZdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzIt NThlNGYyNGZhYmVhLzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzItNThlNGYyNGZhYmVh LzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzz38T0F qxoEscWrR/aAFetHrycQzxoUbbxMbrgjo8/bBabRA6xeyROCnCk77lBDnU0e+znh GWiXATRLvUb2rKSNeOOOzOmd6he6mb1Ic5QsMRG1VKPrys869UDpgO5suEqaCLNe KRFXcHi76CvUJPo2iRHIHl/JZFZHELf+4T3LJocG1kJPEZdbqIVPv+oMzdvjV0Tb 63cbalnwo+It3elWkzlNS7PxgFuuxCKO/yIEQn9/oru+tdouazfvQlefWFdR35md m+35X5X8O31oFKE/WkqJV3HCI+c6A+l0OZY+WM8FP+gLbviOejqmH1/6HjIoIwJ+ lH5fvzmPEqBYXQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:07:40 2025 by rpki-client