This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json) Hash identifier: 89tpJtrXMdFoTqM17eh0gP58F4p5tZpaidYIBKW5CIc= Subject key identifier: 4F:7B:57:81:C4:C2:74:4E:2A:DE:7D:7E:32:EC:EE:3C:BA:06:E8:8C Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Certificate serial: 019B59E4196BCF270E9DBA5B9AD1A9340838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft Manifest number: 1192 Signing time: Fri 26 Dec 2025 09:01:19 +0000 Manifest this update: Fri 26 Dec 2025 09:01:19 +0000 Manifest next update: Sat 27 Dec 2025 09:01:19 +0000 Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=) 2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: XdZYUPMWBY886tHKhQ7WYqg7rvLv8M5b+WSGOhAz8tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:19:6b:cf:27:0e:9d:ba:5b:9a:d1:a9:34:08:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Validity Not Before: Dec 26 09:01:19 2025 GMT Not After : Dec 27 09:01:19 2025 GMT Subject: CN=4f7b5781c4c2744e2ade7d7e32ecee3cba06e88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:ff:27:bc:8a:f8:49:b9:0d:2e:9d:0e:2c: b9:d0:a7:05:05:6a:44:db:6c:47:90:f4:44:fe:ae: 17:35:1f:c8:15:db:aa:8f:88:1a:12:a8:ea:c5:7e: 08:5b:ac:b9:f4:fc:fb:a8:98:16:85:8d:3c:e5:7b: e8:dc:40:70:cf:4c:ec:12:45:64:92:b1:f7:9f:98: b7:c6:57:97:8c:eb:d3:96:e8:fd:32:93:c8:37:15: 29:08:bc:e2:64:f4:cc:74:14:08:b7:dd:c4:3f:70: 3e:66:54:49:30:86:88:cc:83:cc:d8:5e:9f:e4:e5: 1f:af:4e:00:61:b4:bf:bc:4e:33:d0:3f:09:13:1e: 72:a6:a2:72:01:ab:82:3e:91:44:fa:85:de:cb:c9: 1d:3d:62:4c:c4:6d:67:1e:1a:93:f1:41:05:09:85: ad:c5:57:9e:5b:60:a8:1a:28:4f:d3:cd:d8:56:8c: 5e:6c:c7:92:01:33:05:f4:2a:f3:66:53:f6:06:32: e9:58:68:5a:9e:97:5b:c1:28:3a:f3:f5:77:a9:1b: c6:f2:f9:5d:98:b6:39:e9:31:86:ac:a9:98:6f:50: ad:f8:c2:1f:cb:cc:00:bb:e2:bc:72:b2:e9:3f:af: 8d:68:b2:35:56:9b:cd:2f:78:bf:88:24:28:f5:51: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7B:57:81:C4:C2:74:4E:2A:DE:7D:7E:32:EC:EE:3C:BA:06:E8:8C X509v3 Authority Key Identifier: keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ba:57:18:fc:42:e6:c4:81:3d:0b:1a:48:0f:b1:4c:fa:5c: 64:2c:b2:c1:b3:3d:c7:1b:e6:e4:47:ac:33:70:65:1c:87:38: fe:ca:36:44:67:b1:8b:bc:65:53:8f:3d:42:4a:c8:a3:da:57: e6:c0:7e:89:98:7f:78:79:95:af:fc:50:0a:a9:ba:5e:75:e1: b1:cd:1b:2e:55:5a:f2:01:6a:52:ee:ce:95:e1:c2:10:14:5e: 90:62:a9:e1:81:c9:b4:6f:40:3e:18:17:c7:6c:05:67:b4:e8: ce:ff:09:52:f8:81:1b:75:3d:e3:f7:86:77:43:9a:53:75:bf: c7:b9:ae:a3:fd:9c:df:5d:ef:fa:99:31:68:84:ee:74:12:c0: 21:de:e9:fd:fe:d0:c1:e1:f7:4c:b2:16:53:a8:d3:ee:1d:6e: 44:2e:60:02:a2:89:05:07:63:0b:f6:a2:53:0f:83:1a:9a:09: 8f:d8:ed:55:1b:32:c3:3a:4f:2a:7f:4d:ce:ad:c0:7b:24:7b: b9:d7:db:05:00:d9:33:5f:3d:c6:fa:5a:5d:57:a2:5e:a5:75: 5a:f1:35:64:4d:06:3b:da:09:cf:55:f3:f0:b7:0f:67:19:92: 6e:eb:80:ed:54:d4:fb:a9:d9:61:e3:4b:f0:d7:2b:42:4e:8f: 85:e3:0a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5BlrzycOnbpbmtGpNAg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGZhZTZkMmMyNWRkNWYyZmIxNmI0ZmJlYTI4NGU2NjU4 YzEyYmEwHhcNMjUxMjI2MDkwMTE5WhcNMjUxMjI3MDkwMTE5WjAzMTEwLwYDVQQD Eyg0ZjdiNTc4MWM0YzI3NDRlMmFkZTdkN2UzMmVjZWUzY2JhMDZlODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgX/J7yK+Em5DS6dDiy50KcFBWpE 22xHkPRE/q4XNR/IFduqj4gaEqjqxX4IW6y59Pz7qJgWhY085Xvo3EBwz0zsEkVk krH3n5i3xleXjOvTluj9MpPINxUpCLziZPTMdBQIt93EP3A+ZlRJMIaIzIPM2F6f 5OUfr04AYbS/vE4z0D8JEx5ypqJyAauCPpFE+oXey8kdPWJMxG1nHhqT8UEFCYWt xVeeW2CoGihP083YVoxebMeSATMF9CrzZlP2BjLpWGhanpdbwSg68/V3qRvG8vld mLY56TGGrKmYb1Ct+MIfy8wAu+K8crLpP6+NaLI1VpvNL3i/iCQo9VG7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE97V4HEwnROKt59fjLs7jy6BuiMMB8GA1UdIwQY MBaAFJ5Prm0sJd1fL7FrT76ihOZljBK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTkt Mzk0ZmY5MjhmNTcwLzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTktMzk0ZmY5MjhmNTcw LzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLpXGPxC 5sSBPQsaSA+xTPpcZCyywbM9xxvm5EesM3BlHIc4/so2RGexi7xlU489QkrIo9pX 5sB+iZh/eHmVr/xQCqm6XnXhsc0bLlVa8gFqUu7OleHCEBRekGKp4YHJtG9APhgX x2wFZ7Tozv8JUviBG3U94/eGd0OaU3W/x7muo/2c313v+pkxaITudBLAId7p/f7Q weH3TLIWU6jT7h1uRC5gAqKJBQdjC/aiUw+DGpoJj9jtVRsywzpPKn9Nzq3AeyR7 udfbBQDZM189xvpaXVeiXqV1WvE1ZE0GO9oJz1Xz8LcPZxmSbuuA7VTU+6nZYeNL 8NcrQk6PheMKUw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:17 2025 by rpki-client