This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json) Hash identifier: MCHGJZHzM8yh3nE83di5Ni14UQBNv1UQBVJ2aQwxR+s= Subject key identifier: 89:94:38:6A:62:28:26:71:AD:DB:74:5E:A0:D3:FA:86:37:93:1E:22 Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d Certificate serial: 019B34FBA58AC92A7B3FD9CC00BB78D6DF4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft Manifest number: 1053 Signing time: Fri 19 Dec 2025 05:01:05 +0000 Manifest this update: Fri 19 Dec 2025 05:01:05 +0000 Manifest next update: Sat 20 Dec 2025 05:01:05 +0000 Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=) 2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: MkJCRK77k/bEcMk5ufUG6XwQMcuDe0O72f60A/XZqjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:a5:8a:c9:2a:7b:3f:d9:cc:00:bb:78:d6:df:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d Validity Not Before: Dec 19 05:01:05 2025 GMT Not After : Dec 20 05:01:05 2025 GMT Subject: CN=8994386a62282671addb745ea0d3fa8637931e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:67:d0:f1:5e:f4:27:f2:b7:ff:74:91:14: a5:81:4f:29:3e:ea:ab:c8:87:c5:4f:e0:f3:74:dc: af:09:ce:d3:59:91:7d:4d:67:08:69:66:19:bf:0b: 6f:4f:a9:88:f6:0a:7c:f8:7a:26:43:9d:48:53:d7: 68:8a:10:2c:83:73:59:be:ee:fe:16:ce:58:27:a1: 28:01:c1:ce:ff:ae:cf:e8:61:c1:9a:9f:8c:02:87: 58:6d:47:bb:f7:32:5b:68:23:b7:c7:30:8b:8f:ae: cd:d9:fe:e6:51:f5:19:61:76:5b:87:ea:a9:65:14: 70:4b:d0:5c:03:ff:7f:91:18:53:8a:d9:27:bf:d7: 26:ef:4d:25:ef:5d:81:d3:3e:42:9c:ef:08:1b:4d: d6:c2:b0:ac:4d:15:d9:ff:3a:18:a8:84:de:63:2e: 5e:64:b2:96:28:62:c3:f0:dd:87:3e:cc:0f:c7:9c: 2d:3f:60:49:e1:f5:23:07:ea:bc:cc:b3:2b:be:dd: 50:f2:7d:b8:ed:b4:df:bb:8c:d6:13:3a:58:c3:3e: 0d:71:08:7b:9c:5b:09:43:f6:7b:21:dd:00:a3:44: 6f:5e:86:ae:04:d8:f9:fb:46:5f:72:7a:f9:af:71: 0c:1a:a0:6b:71:5e:d2:36:d0:db:36:77:b0:66:f4: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:94:38:6A:62:28:26:71:AD:DB:74:5E:A0:D3:FA:86:37:93:1E:22 X509v3 Authority Key Identifier: keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ff:38:53:60:00:b2:66:39:72:57:8a:d1:e8:94:09:33:72: 74:03:0b:b2:44:15:59:13:a6:16:64:08:ca:f1:18:d0:4c:29: a2:25:f5:c2:34:5a:b9:25:d8:1c:d1:90:61:89:e2:10:a2:a0: 76:d0:79:ad:07:ba:e7:c4:84:2f:51:0f:80:fb:b3:63:b8:da: 37:95:c7:78:ef:15:e5:68:04:e1:d0:2c:38:53:1d:25:76:df: 48:1f:94:09:fd:90:99:d6:3e:aa:d3:e4:05:53:51:e6:8f:75: 12:cd:95:0e:3b:4c:8a:24:44:24:df:8a:61:bc:35:ed:9f:68: 25:73:a9:dc:d1:5e:a7:58:a9:0b:1f:86:fe:33:2a:22:52:08: 69:75:d3:e6:14:0f:03:d7:82:b1:db:35:24:a2:b1:a8:e7:06: 98:1c:ad:19:60:1f:0e:ba:83:53:ac:8b:21:0c:03:82:69:13: 91:17:78:6e:bf:a0:94:59:cd:30:e5:50:3f:26:68:6e:c2:31: fc:b4:3b:02:8b:53:fe:f9:e8:7a:5e:1e:f5:42:c2:99:00:d9: 24:3c:bd:7b:5e:42:69:d6:e6:dd:74:93:84:26:8b:f2:ca:58: 3c:50:84:7b:ea:c0:88:c2:e1:c9:1c:64:70:51:fc:d6:91:59: e5:45:79:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+6WKySp7P9nMALt41t9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjU4OTY3MmJjMmEzNDVkYzExZTlmZjE2MjUwMGVjMTVk YWRkMWQwHhcNMjUxMjE5MDUwMTA1WhcNMjUxMjIwMDUwMTA1WjAzMTEwLwYDVQQD Eyg4OTk0Mzg2YTYyMjgyNjcxYWRkYjc0NWVhMGQzZmE4NjM3OTMxZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDpn0PFe9Cfyt/90kRSlgU8pPuqr yIfFT+DzdNyvCc7TWZF9TWcIaWYZvwtvT6mI9gp8+HomQ51IU9doihAsg3NZvu7+ Fs5YJ6EoAcHO/67P6GHBmp+MAodYbUe79zJbaCO3xzCLj67N2f7mUfUZYXZbh+qp ZRRwS9BcA/9/kRhTitknv9cm700l712B0z5CnO8IG03WwrCsTRXZ/zoYqITeYy5e ZLKWKGLD8N2HPswPx5wtP2BJ4fUjB+q8zLMrvt1Q8n247bTfu4zWEzpYwz4NcQh7 nFsJQ/Z7Id0Ao0RvXoauBNj5+0Zfcnr5r3EMGqBrcV7SNtDbNnewZvT6TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImUOGpiKCZxrdt0XqDT+oY3kx4iMB8GA1UdIwQY MBaAFJ31iWcrwqNF3BHp/xYlAOwV2t0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjct OWMzMGY2NTZmZDViLzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjctOWMzMGY2NTZmZDVi LzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAP84U2AA smY5cleK0eiUCTNydAMLskQVWROmFmQIyvEY0EwpoiX1wjRauSXYHNGQYYniEKKg dtB5rQe658SEL1EPgPuzY7jaN5XHeO8V5WgE4dAsOFMdJXbfSB+UCf2QmdY+qtPk BVNR5o91Es2VDjtMiiREJN+KYbw17Z9oJXOp3NFep1ipCx+G/jMqIlIIaXXT5hQP A9eCsds1JKKxqOcGmBytGWAfDrqDU6yLIQwDgmkTkRd4br+glFnNMOVQPyZobsIx /LQ7AotT/vnoel4e9ULCmQDZJDy9e15Cadbm3XSThCaL8spYPFCEe+rAiMLhyRxk cFH81pFZ5UV5Mw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:59:54 2025 by rpki-client