This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json) Hash identifier: m/u8dTZZsyfLSyIHSHvcrK6gcx0K6w9dc9vECQ6KSD0= Subject key identifier: 02:49:68:2F:CF:47:98:59:80:6C:4B:39:04:C9:F6:2C:14:40:D6:CF Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16 Certificate serial: 019AF50A8B922FF95F1BD69A0A4CE3DE7CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft Manifest number: 0B78 Signing time: Sat 06 Dec 2025 19:01:40 +0000 Manifest this update: Sat 06 Dec 2025 19:01:40 +0000 Manifest next update: Sun 07 Dec 2025 19:01:40 +0000 Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=) 2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: nT2jvf0P2R6TQcOS/JDx7rt8CU2LRSDconSE6VRsuEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:8b:92:2f:f9:5f:1b:d6:9a:0a:4c:e3:de:7c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16 Validity Not Before: Dec 6 19:01:40 2025 GMT Not After : Dec 7 19:01:40 2025 GMT Subject: CN=0249682fcf479859806c4b3904c9f62c1440d6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:a6:f0:f7:17:c8:a0:82:33:82:41:f3:02: c5:7e:ee:3c:c0:61:64:9b:c2:22:8c:f9:ff:d7:d7: 79:8b:fc:4b:9a:05:8a:f1:57:36:ab:2d:77:56:6a: 23:1a:30:1e:10:89:40:b4:3e:74:a4:82:10:c7:26: e8:c8:8e:9e:81:33:e5:d9:1f:2a:36:5c:fd:41:d4: 32:21:24:c3:66:1f:1d:6b:9d:09:41:42:2b:33:03: 04:92:e6:3a:58:ae:39:22:6b:f2:d5:76:af:0f:5c: 72:c2:8c:31:7e:80:55:32:99:da:ab:2f:4f:79:b0: a0:81:10:1a:38:c3:50:cb:96:ed:62:f1:48:cf:0d: a8:06:69:8f:ac:2a:80:58:2d:dc:c5:4d:52:e6:d1: b1:00:98:9b:ea:e3:85:5c:fd:d1:24:ff:f7:23:3d: b2:ef:36:d6:66:8c:22:49:fb:71:fa:7d:19:0d:d9: b9:a1:06:af:29:5e:a8:f1:f6:62:5e:20:c4:59:6b: 4e:92:ff:72:49:cd:67:b2:de:9e:ad:df:e9:ef:7a: ff:10:ce:4f:cf:f3:65:e0:bd:cf:73:23:89:cb:da: 31:7e:38:c7:5e:5f:cc:85:21:60:fa:87:7e:dd:48: e1:a2:92:d6:c1:d5:40:98:b3:78:c0:6f:1c:a7:66: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:49:68:2F:CF:47:98:59:80:6C:4B:39:04:C9:F6:2C:14:40:D6:CF X509v3 Authority Key Identifier: keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:11:2c:47:25:c2:ac:b8:ed:30:b4:e5:2a:2e:d5:0b:b5:66: e0:98:9f:95:a3:fc:c4:fc:33:ca:65:5f:33:05:77:3b:dc:ec: b1:c4:f8:b7:bc:b8:93:cd:30:02:0c:2b:d8:9d:e1:f2:bd:d9: f6:f6:fd:c9:97:85:2f:f4:73:75:5f:8a:51:ab:b6:9c:8b:94: 9f:70:9a:78:0f:75:6b:8e:6d:5e:f7:47:1f:fa:ff:9a:6a:15: 46:f4:c1:89:7b:de:16:fa:56:1b:0a:68:c1:21:65:8b:c8:d2: 14:d4:f1:7e:62:da:94:a1:f7:4f:7c:c1:db:90:fe:85:e2:18: 53:be:d4:35:66:de:e5:09:65:45:b0:c2:37:31:e9:a5:37:25: 7e:87:a6:0d:17:99:57:a2:77:78:33:fb:b1:06:19:75:2a:fc: 81:0a:5a:19:5a:4f:45:1e:ca:67:4a:85:f8:3e:bf:27:95:78: 60:23:6a:67:e6:34:fd:5f:51:1b:a1:2f:da:0a:8f:ac:e6:3b: d3:d1:23:a3:f7:e2:b7:2a:a9:be:f4:98:8d:e0:40:70:91:c9: fa:d4:89:8a:73:95:78:e2:5c:5a:1c:64:af:f2:3d:d0:ba:f0: 14:28:7c:1e:e8:8e:4b:cd:18:d2:b5:d3:3f:ce:e2:d2:09:27: 9b:eb:a2:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CouSL/lfG9aaCkzj3nzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMTE1ZmU5YzllOWNmZGVmMTdlOTI0MTY1NTkyYzAyM2Vm YjJiMTYwHhcNMjUxMjA2MTkwMTQwWhcNMjUxMjA3MTkwMTQwWjAzMTEwLwYDVQQD EygwMjQ5NjgyZmNmNDc5ODU5ODA2YzRiMzkwNGM5ZjYyYzE0NDBkNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qWm8PcXyKCCM4JB8wLFfu48wGFk m8IijPn/19d5i/xLmgWK8Vc2qy13VmojGjAeEIlAtD50pIIQxyboyI6egTPl2R8q Nlz9QdQyISTDZh8da50JQUIrMwMEkuY6WK45Imvy1XavD1xywowxfoBVMpnaqy9P ebCggRAaOMNQy5btYvFIzw2oBmmPrCqAWC3cxU1S5tGxAJib6uOFXP3RJP/3Iz2y 7zbWZowiSftx+n0ZDdm5oQavKV6o8fZiXiDEWWtOkv9ySc1nst6erd/p73r/EM5P z/Nl4L3PcyOJy9oxfjjHXl/MhSFg+od+3UjhopLWwdVAmLN4wG8cp2Yk0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJJaC/PR5hZgGxLOQTJ9iwUQNbPMB8GA1UdIwQY MBaAFJ0RX+nJ6c/e8X6SQWVZLAI++ysWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMt YmI3OTdjZTdlMTA4LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMtYmI3OTdjZTdlMTA4 LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBEsRyXC rLjtMLTlKi7VC7Vm4JiflaP8xPwzymVfMwV3O9zsscT4t7y4k80wAgwr2J3h8r3Z 9vb9yZeFL/RzdV+KUau2nIuUn3CaeA91a45tXvdHH/r/mmoVRvTBiXveFvpWGwpo wSFli8jSFNTxfmLalKH3T3zB25D+heIYU77UNWbe5QllRbDCNzHppTclfoemDReZ V6J3eDP7sQYZdSr8gQpaGVpPRR7KZ0qF+D6/J5V4YCNqZ+Y0/V9RG6Ev2gqPrOY7 09Ejo/fityqpvvSYjeBAcJHJ+tSJinOVeOJcWhxkr/I90LrwFCh8HuiOS80Y0rXT P87i0gknm+uiOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:22 2025 by rpki-client