This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json) Hash identifier: cDThek29JjKq2YZjlerRd2CYjoi7xPrmQO2AYejpX1g= Subject key identifier: A9:B9:62:73:07:7A:9E:A0:92:D0:9D:58:A4:3A:54:07:23:58:C7:74 Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Certificate serial: 019AF12EA5F6BAE90E6B5369F59ACA793B44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft Manifest number: 09E1 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=) 2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: 98bIncg/MHTViJ1228RzfPRm4/0l5WLdSjQaKhKa9sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a5:f6:ba:e9:0e:6b:53:69:f5:9a:ca:79:3b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=a9b96273077a9ea092d09d58a43a54072358c774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:53:78:a8:c4:2a:8a:4b:09:cd:ac:bf:9f: 4e:95:1b:6f:03:7b:70:bf:ad:04:1c:f4:33:cf:7e: 0e:a5:37:98:0c:0d:d2:99:70:13:89:5c:57:dc:ff: 2d:ec:09:da:79:51:cf:4c:16:52:9e:87:4e:78:df: 4c:4f:7d:0e:25:b3:f4:52:61:32:71:ce:be:1d:3e: 57:d3:77:44:a3:3b:b4:56:de:2a:12:c2:ea:97:8f: fe:bb:de:c4:cb:2c:35:1d:74:c0:92:b8:60:7d:42: 22:b2:e5:97:1b:c5:dd:6e:05:dc:c4:1d:65:21:a6: 32:55:36:09:46:4a:e6:b4:11:37:73:2c:ad:72:10: c2:3c:8d:c6:80:27:ef:fb:4c:0e:63:ec:d0:8f:90: d8:97:bb:14:80:6b:c1:ba:b5:37:e1:d9:73:39:88: 25:75:10:3a:5e:86:22:f4:c8:79:d2:2e:79:3b:10: 74:b9:00:db:2b:fa:26:73:4f:fa:64:04:d8:56:b4: 8c:b8:46:00:ec:41:b6:0a:41:2c:e2:22:f2:30:f8: 31:1e:c8:cc:41:f2:82:57:98:84:2d:d8:f1:b4:d5: df:78:85:b2:05:76:64:1c:33:9f:ca:a7:eb:51:ab: 67:ff:38:f9:13:59:17:a1:6a:2a:39:2e:73:11:46: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B9:62:73:07:7A:9E:A0:92:D0:9D:58:A4:3A:54:07:23:58:C7:74 X509v3 Authority Key Identifier: keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:69:be:f2:57:16:f4:96:99:a7:d8:78:28:7d:a6:da:f5:2a: 47:b6:2b:69:7b:06:39:47:ac:fd:75:c1:ff:ec:41:cb:fe:6e: 3f:3d:e6:c1:7c:0b:80:be:c2:5d:0b:3b:9a:9d:0f:0c:f5:f0: 41:bc:07:53:28:f0:3c:93:0e:ef:75:78:60:20:c7:00:f4:8a: 03:4d:e6:c7:9c:4f:f9:13:05:4c:43:4f:e8:9c:70:f8:15:10: b9:65:67:7b:40:8f:86:2e:8d:88:f3:d8:b3:6f:be:14:dc:1c: ff:11:b2:c2:56:ba:ff:f2:a7:00:bc:79:47:91:88:8a:93:73: 7d:c7:18:19:6a:a7:73:08:a2:da:b3:af:11:21:04:c8:77:57: 12:24:1e:6d:e4:02:74:83:7c:ce:cb:0d:c3:fd:d0:8f:df:11: f1:38:7e:df:a2:3c:7e:15:af:29:68:ef:f9:b7:cf:de:11:d2: 50:13:51:2a:7a:41:a1:6d:15:97:52:70:54:09:d4:3e:59:4c: e4:5e:a5:4b:b9:34:d6:91:b4:16:70:6a:76:db:a6:20:d3:64: 70:43:79:12:45:e1:4a:cc:80:83:3c:55:70:58:e0:5b:24:b3: 00:3a:f4:5d:43:ff:1f:9d:e0:51:b2:c8:2a:02:a8:49:e1:ca: 5d:88:4c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqX2uukOa1Np9ZrKeTtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl NzJhZTkwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD EyhhOWI5NjI3MzA3N2E5ZWEwOTJkMDlkNThhNDNhNTQwNzIzNThjNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7NTeKjEKopLCc2sv59OlRtvA3tw v60EHPQzz34OpTeYDA3SmXATiVxX3P8t7AnaeVHPTBZSnodOeN9MT30OJbP0UmEy cc6+HT5X03dEozu0Vt4qEsLql4/+u97Eyyw1HXTAkrhgfUIisuWXG8XdbgXcxB1l IaYyVTYJRkrmtBE3cyytchDCPI3GgCfv+0wOY+zQj5DYl7sUgGvBurU34dlzOYgl dRA6XoYi9Mh50i55OxB0uQDbK/omc0/6ZATYVrSMuEYA7EG2CkEs4iLyMPgxHsjM QfKCV5iELdjxtNXfeIWyBXZkHDOfyqfrUatn/zj5E1kXoWoqOS5zEUbpMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm5YnMHep6gktCdWKQ6VAcjWMd0MB8GA1UdIwQY MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et ZjI5OTBjZWI5NGVjLzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2m+8lcW 9JaZp9h4KH2m2vUqR7YraXsGOUes/XXB/+xBy/5uPz3mwXwLgL7CXQs7mp0PDPXw QbwHUyjwPJMO73V4YCDHAPSKA03mx5xP+RMFTENP6Jxw+BUQuWVne0CPhi6NiPPY s2++FNwc/xGywla6//KnALx5R5GIipNzfccYGWqncwii2rOvESEEyHdXEiQebeQC dIN8zssNw/3Qj98R8Th+36I8fhWvKWjv+bfP3hHSUBNRKnpBoW0Vl1JwVAnUPllM 5F6lS7k01pG0FnBqdtumINNkcEN5EkXhSsyAgzxVcFjgWySzADr0XUP/H53gUbLI KgKoSeHKXYhMog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:49 2025 by rpki-client