This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft File: nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json) Hash identifier: 015cq4pn5bRhIHB8K31OPj6oodBBFDZoMKIbhq1iSCw= Subject key identifier: 1E:3A:40:9D:7D:3A:A8:77:A2:38:B0:8E:D9:BD:88:DE:D0:F6:D4:FE Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b Certificate serial: 019B2D0C3DF02A003597AF2805E7B8C80AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 16:02:15 +0000 Manifest this update: Wed 17 Dec 2025 16:02:15 +0000 Manifest next update: Thu 18 Dec 2025 16:02:15 +0000 Files and hashes: 1: EP3bkF_F-0JN_ikpcovpxVorS-8.roa (hash: hqxhbHTgDziJ5finpaZT0guvZfxkt53C1CG9ZliF94Y=) 2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: r4mQZmLZhkYE3k8zk+oYkRnezSE9Y9xM1ot4HkxaiHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:3d:f0:2a:00:35:97:af:28:05:e7:b8:c8:0a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b Validity Not Before: Dec 17 16:02:15 2025 GMT Not After : Dec 18 16:02:15 2025 GMT Subject: CN=1e3a409d7d3aa877a238b08ed9bd88ded0f6d4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:4d:45:96:5b:15:b0:ad:ea:d2:50:3b:d0: 32:e1:79:82:86:53:6f:4c:09:62:8e:8d:f4:4f:38: b3:b2:7c:a1:70:ff:dc:1f:b4:df:00:83:bc:a4:84: 8c:4e:c0:ee:9b:44:18:33:55:15:c7:e2:2d:38:ac: 65:fc:15:13:93:63:63:d0:df:f3:68:bd:be:c8:ce: cd:48:96:aa:74:5a:99:f6:6c:eb:99:3e:0f:d3:5c: 90:e0:f4:50:ad:4c:e0:e9:17:8b:3e:67:66:9d:4d: 03:3c:9a:b1:d0:3b:0c:53:c0:82:19:53:7e:a0:62: ed:75:5d:28:f2:87:5f:3a:7f:24:f5:f5:3f:81:2d: 22:7a:af:6f:d6:0d:a1:af:04:3b:76:8b:f2:19:e7: 2f:53:58:9a:ce:32:91:1b:04:50:7e:2e:c1:8f:4b: 4c:c8:16:92:5f:c8:15:cb:e7:49:fb:e0:e0:b5:ae: 72:98:56:8e:ef:5e:a0:56:42:dc:3d:15:51:72:e0: ee:b1:11:fe:dc:50:3d:8a:8c:be:0a:2e:1d:7d:57: d9:66:8f:93:9e:df:37:5a:04:26:6e:86:de:c7:f4: f1:44:c7:df:4f:f3:b9:88:d7:86:14:f3:38:da:41: c0:21:c3:67:2b:01:8d:1e:37:48:32:ad:7c:80:3d: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3A:40:9D:7D:3A:A8:77:A2:38:B0:8E:D9:BD:88:DE:D0:F6:D4:FE X509v3 Authority Key Identifier: keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:69:06:ae:41:ed:0a:f8:96:3b:04:28:92:e7:b1:be:ea:e4: 07:fc:2a:b6:7d:30:6a:8c:68:69:02:5e:ba:51:1b:83:de:1f: d6:67:01:91:fa:21:3f:2c:25:a5:97:f4:33:92:09:b3:8a:94: 7f:aa:e0:51:75:66:f8:c2:c2:92:db:a1:fc:44:2e:98:66:cb: c0:84:d5:00:7a:1c:45:50:80:98:62:8a:90:05:75:22:35:0e: fb:7f:0c:ab:84:20:cb:30:27:d5:0a:0f:35:5e:2b:91:af:2b: c2:33:2c:c3:7f:9d:04:03:52:00:f5:9a:bb:e0:f2:50:82:4c: c4:73:7d:47:22:89:15:50:23:83:aa:e4:60:e5:10:c0:a0:4d: 6b:d8:df:b0:08:8a:a8:de:40:3a:f2:46:d8:66:5c:bd:c6:95: a6:7c:f5:07:d8:d9:5c:cb:ed:ab:dc:06:47:eb:fd:27:ff:a9: 20:c7:19:c5:39:fe:a6:29:32:b9:b1:83:65:a5:26:40:44:f6: cc:db:6f:0c:cd:f4:ce:f2:8e:8f:ce:53:48:e5:3a:a9:ce:49: 00:ac:b2:ae:3f:90:fa:7b:dc:1f:c0:09:0d:d8:3f:cc:20:03: 89:12:f3:82:e9:11:25:53:db:13:c2:de:ab:d4:b8:93:7d:70: d1:30:4e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDD3wKgA1l68oBee4yAr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzYwZWQ4ODE0MThhMjE3ZThkZDNjMWZhNTIzZTI1NjVj YWViOWIwHhcNMjUxMjE3MTYwMjE1WhcNMjUxMjE4MTYwMjE1WjAzMTEwLwYDVQQD EygxZTNhNDA5ZDdkM2FhODc3YTIzOGIwOGVkOWJkODhkZWQwZjZkNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS9NRZZbFbCt6tJQO9Ay4XmChlNv TAlijo30TzizsnyhcP/cH7TfAIO8pISMTsDum0QYM1UVx+ItOKxl/BUTk2Nj0N/z aL2+yM7NSJaqdFqZ9mzrmT4P01yQ4PRQrUzg6ReLPmdmnU0DPJqx0DsMU8CCGVN+ oGLtdV0o8odfOn8k9fU/gS0ieq9v1g2hrwQ7dovyGecvU1iazjKRGwRQfi7Bj0tM yBaSX8gVy+dJ++Dgta5ymFaO716gVkLcPRVRcuDusRH+3FA9ioy+Ci4dfVfZZo+T nt83WgQmbobex/TxRMffT/O5iNeGFPM42kHAIcNnKwGNHjdIMq18gD3FbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB46QJ19Oqh3ojiwjtm9iN7Q9tT+MB8GA1UdIwQY MBaAFJzGDtiBQYohfo3TwfpSPiVlyuubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2Ut NGNhODQyYmFjZGE1LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2UtNGNhODQyYmFjZGE1 LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWkGrkHt CviWOwQokuexvurkB/wqtn0waoxoaQJeulEbg94f1mcBkfohPywlpZf0M5IJs4qU f6rgUXVm+MLCktuh/EQumGbLwITVAHocRVCAmGKKkAV1IjUO+38Mq4QgyzAn1QoP NV4rka8rwjMsw3+dBANSAPWau+DyUIJMxHN9RyKJFVAjg6rkYOUQwKBNa9jfsAiK qN5AOvJG2GZcvcaVpnz1B9jZXMvtq9wGR+v9J/+pIMcZxTn+pikyubGDZaUmQET2 zNtvDM30zvKOj85TSOU6qc5JAKyyrj+Q+nvcH8AJDdg/zCADiRLzgukRJVPbE8Le q9S4k31w0TBO3w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:04 2025 by rpki-client