This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json) Hash identifier: eLkWexn9ibrV/iGR1XR4HlAVtCjjQIcCUZwkBN9bx0E= Subject key identifier: 0B:1C:1B:41:38:97:D6:E2:69:10:0F:5D:38:39:0D:46:81:98:5E:5F Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d Certificate serial: 019AF163EB5E21329D6DD0B0914FEA5244C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft Manifest number: 1030 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=) 2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: 9/nsVfGxT7OeHQGNh5d9xlz5CxssOSPXThN2cjyWVbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:eb:5e:21:32:9d:6d:d0:b0:91:4f:ea:52:44:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=0b1c1b413897d6e269100f5d38390d4681985e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:65:ed:31:b8:52:fa:1c:7c:a3:f8:26:cb: db:3e:88:bd:98:03:e3:af:7f:21:86:99:69:30:b5: f2:44:ec:fe:0c:70:c0:69:df:30:b6:42:a3:ec:ff: 23:c5:92:51:1f:6c:11:c8:91:00:30:49:f5:6f:84: 00:f8:06:39:58:eb:76:f9:ac:3f:2e:fa:e1:2e:66: 5c:71:ea:59:e0:7f:3a:00:d1:ef:44:b5:9c:cf:12: 86:dc:27:1d:3f:8a:dd:be:83:67:10:5b:59:eb:63: ce:4a:a7:f1:9b:ea:e3:0f:52:8c:0a:0d:85:36:38: eb:c9:23:b3:5c:94:7a:84:f5:a9:98:8c:19:69:dd: 6f:6a:72:b6:4d:25:ac:43:e4:bb:e2:c9:ff:fb:99: 11:a7:7d:6b:7c:9c:e8:18:04:20:ec:a6:37:7f:50: c8:42:d8:a0:2b:1b:69:60:cb:bc:e9:f6:43:f6:01: ea:35:cf:08:45:a6:4c:3a:29:dd:55:e8:45:b6:73: 64:6e:40:3e:4e:61:1f:15:3b:8f:f2:c3:ed:74:a4: 22:2e:f0:ed:71:15:46:06:99:5b:84:da:83:9e:cd: 42:2f:01:e8:76:75:ee:8d:ad:e3:23:49:4c:8a:1b: e7:15:db:20:ce:ff:7e:31:35:27:f2:99:90:4e:57: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1C:1B:41:38:97:D6:E2:69:10:0F:5D:38:39:0D:46:81:98:5E:5F X509v3 Authority Key Identifier: keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:8c:cf:7d:ce:78:0a:24:72:7e:1b:d8:6b:ac:09:c4:c5: 83:2b:a8:68:54:cd:bc:b2:93:52:e9:cb:7d:93:6b:a0:2d:c5: 4a:9f:30:68:c0:0e:94:78:f8:cf:68:12:8c:05:93:3f:a2:c9: 91:81:06:51:e4:3b:f1:11:1a:e2:63:e5:93:3e:a1:76:e8:fe: 12:5c:a5:69:37:c4:21:22:b5:eb:be:fb:e9:53:d4:68:9e:7c: eb:1b:a1:2d:e9:83:b0:7d:05:cb:68:36:77:1f:37:3a:72:56: ee:f1:e4:51:03:1e:26:f2:ee:8a:fd:47:1d:30:49:85:fc:00: e0:03:e4:f1:b7:a8:a4:c6:ff:e7:4b:da:9c:02:08:d8:d3:6d: 2f:b0:88:d6:f0:99:1f:bd:5d:67:00:fb:a8:d7:d6:f9:79:98: 91:6c:54:af:bd:c7:9b:d6:40:a4:f3:c6:53:fe:41:78:d8:41: ee:cf:2c:58:ff:df:ac:c1:98:d5:dd:81:b2:21:0a:b9:e7:f0: aa:a6:d5:dc:b1:82:31:a2:44:ab:9c:b5:0e:bc:35:c3:d4:29: 1b:9b:7b:25:7c:cd:00:d8:b5:c9:ab:2b:d0:18:c4:47:1d:d1: ca:bc:bf:a9:08:d9:97:b3:c0:a8:53:2e:34:b0:09:73:d1:14: 1d:b9:31:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+teITKdbdCwkU/qUkTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjU4OTY3MmJjMmEzNDVkYzExZTlmZjE2MjUwMGVjMTVk YWRkMWQwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EygwYjFjMWI0MTM4OTdkNmUyNjkxMDBmNWQzODM5MGQ0NjgxOTg1ZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Rl7TG4UvocfKP4JsvbPoi9mAPj r38hhplpMLXyROz+DHDAad8wtkKj7P8jxZJRH2wRyJEAMEn1b4QA+AY5WOt2+aw/ LvrhLmZccepZ4H86ANHvRLWczxKG3CcdP4rdvoNnEFtZ62POSqfxm+rjD1KMCg2F NjjrySOzXJR6hPWpmIwZad1vanK2TSWsQ+S74sn/+5kRp31rfJzoGAQg7KY3f1DI QtigKxtpYMu86fZD9gHqNc8IRaZMOindVehFtnNkbkA+TmEfFTuP8sPtdKQiLvDt cRVGBplbhNqDns1CLwHodnXuja3jI0lMihvnFdsgzv9+MTUn8pmQTleI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAscG0E4l9biaRAPXTg5DUaBmF5fMB8GA1UdIwQY MBaAFJ31iWcrwqNF3BHp/xYlAOwV2t0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjct OWMzMGY2NTZmZDViLzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yNjlmNjYtMGZjMS00NjU4LWIzNjctOWMzMGY2NTZmZDVi LzEvbmZXSlp5dkNvMFhjRWVuX0ZpVUE3QlhhM1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMneMz33O eAokcn4b2GusCcTFgyuoaFTNvLKTUunLfZNroC3FSp8waMAOlHj4z2gSjAWTP6LJ kYEGUeQ78REa4mPlkz6hduj+ElylaTfEISK167776VPUaJ586xuhLemDsH0Fy2g2 dx83OnJW7vHkUQMeJvLuiv1HHTBJhfwA4APk8beopMb/50vanAII2NNtL7CI1vCZ H71dZwD7qNfW+XmYkWxUr73Hm9ZApPPGU/5BeNhB7s8sWP/frMGY1d2BsiEKuefw qqbV3LGCMaJEq5y1Drw1w9QpG5t7JXzNANi1yasr0BjERx3Ryry/qQjZl7PAqFMu NLAJc9EUHbkxbA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:40 2025 by rpki-client