This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json) Hash identifier: +r/7mGM6qQJLXBQ9rcXRvOazu5jofuV5m6dYJCujpNs= Subject key identifier: F7:94:0D:9B:58:C3:6D:3D:50:B0:90:A0:27:AF:17:CB:5E:38:CC:AF Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019AF208B8F4879227E7B932531A51A31D47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=) 2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=) 3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=) 4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=) 5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: vy8RLhrmkgJOoQfj1zoi4oo2T8DAwIUx8BkYe14rbDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b8:f4:87:92:27:e7:b9:32:53:1a:51:a3:1d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=f7940d9b58c36d3d50b090a027af17cb5e38ccaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:b7:c0:11:2d:d6:fe:a4:2f:94:38:c4:d8: 0c:7d:8e:99:e9:ba:18:0a:ef:30:5f:25:ae:cf:dd: 90:22:fd:9b:a8:41:a2:98:2d:83:20:ef:ff:9b:26: 4c:80:b2:91:98:05:0b:83:80:9e:39:c1:b0:38:64: 93:65:5a:f8:0d:91:c1:f5:99:66:ec:90:50:e9:4b: 95:21:34:bf:95:ca:84:7a:d0:ac:9c:77:f3:56:b3: a5:f8:09:2b:a4:32:51:16:0d:b7:7e:93:3b:87:79: d9:de:e8:d0:97:5f:b9:bf:55:d5:2b:0d:a6:ba:40: 0a:23:19:ee:8f:2c:ec:c8:ec:90:ea:dc:e2:60:7f: cd:a1:b5:a8:40:c7:f5:cb:dd:9f:15:16:1c:bf:ad: 73:ab:29:8c:43:e3:0d:8e:14:78:f5:4f:95:1c:f8: b5:b4:f8:e0:bd:2b:80:bd:42:f6:a9:0b:01:3c:2e: 87:58:21:43:12:4e:bc:ba:a5:71:79:46:33:4f:7d: 7b:af:e0:dc:da:8f:a1:42:bb:19:4b:76:ef:8c:67: f1:e4:96:7a:dd:eb:c8:f7:91:fc:ca:05:a3:98:1e: 3b:b7:26:c3:3e:d1:9e:cd:78:5c:81:43:f3:13:5c: 9c:3c:d5:f4:4e:f7:21:28:94:1e:22:ec:b4:6f:6c: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:94:0D:9B:58:C3:6D:3D:50:B0:90:A0:27:AF:17:CB:5E:38:CC:AF X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c5:96:d8:5c:40:84:fb:b7:49:dd:90:4d:10:46:d1:c5:ce: f1:98:82:d7:ff:f8:f5:e3:f7:08:59:ae:32:87:d5:dc:ee:46: 64:24:22:15:eb:c6:99:f2:25:99:02:ed:55:60:fa:e2:95:13: 03:c4:ee:f1:db:50:c1:a8:a6:9a:7d:c0:3b:76:eb:c1:53:12: ec:72:47:09:6f:4d:e4:2c:be:8c:13:54:a4:48:4d:f2:57:08: 23:00:4e:a8:f2:8f:36:03:be:1f:bb:0f:65:20:68:ff:9b:82: 04:49:d8:4e:0b:19:34:d4:8c:4e:b6:1a:cd:93:04:55:11:99: 48:b8:24:e7:e2:9f:87:ac:52:cf:19:ac:51:d1:61:09:7d:52: 9e:df:72:05:44:d9:76:61:53:0e:bd:07:de:2e:9c:32:31:63: 35:48:b3:60:23:12:e5:8c:56:6e:b6:d0:f6:33:22:fc:88:7e: c2:57:cd:da:7e:48:e4:82:be:7b:9b:17:e9:7b:a6:82:20:20: 8d:a4:a0:30:ff:86:63:26:04:fd:c8:7e:b5:83:e3:2a:ba:87: 91:60:dd:d4:cc:46:7e:a5:92:de:5d:8b:56:f0:a6:7c:ea:7c: cb:f4:4f:7e:7e:f2:ab:9f:37:85:ce:94:53:75:5c:35:53:99: fc:9b:ad:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLj0h5In57kyUxpRox1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EyhmNzk0MGQ5YjU4YzM2ZDNkNTBiMDkwYTAyN2FmMTdjYjVlMzhjY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQe3wBEt1v6kL5Q4xNgMfY6Z6boY Cu8wXyWuz92QIv2bqEGimC2DIO//myZMgLKRmAULg4CeOcGwOGSTZVr4DZHB9Zlm 7JBQ6UuVITS/lcqEetCsnHfzVrOl+AkrpDJRFg23fpM7h3nZ3ujQl1+5v1XVKw2m ukAKIxnujyzsyOyQ6tziYH/NobWoQMf1y92fFRYcv61zqymMQ+MNjhR49U+VHPi1 tPjgvSuAvUL2qQsBPC6HWCFDEk68uqVxeUYzT317r+Dc2o+hQrsZS3bvjGfx5JZ6 3evI95H8ygWjmB47tybDPtGezXhcgUPzE1ycPNX0TvchKJQeIuy0b2xq6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeUDZtYw209ULCQoCevF8teOMyvMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcWW2FxA hPu3Sd2QTRBG0cXO8ZiC1//49eP3CFmuMofV3O5GZCQiFevGmfIlmQLtVWD64pUT A8Tu8dtQwaimmn3AO3brwVMS7HJHCW9N5Cy+jBNUpEhN8lcIIwBOqPKPNgO+H7sP ZSBo/5uCBEnYTgsZNNSMTrYazZMEVRGZSLgk5+Kfh6xSzxmsUdFhCX1Snt9yBUTZ dmFTDr0H3i6cMjFjNUizYCMS5YxWbrbQ9jMi/Ih+wlfN2n5I5IK+e5sX6XumgiAg jaSgMP+GYyYE/ch+tYPjKrqHkWDd1MxGfqWS3l2LVvCmfOp8y/RPfn7yq583hc6U U3VcNVOZ/Jutog== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:21 2025 by rpki-client