This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json) Hash identifier: goPQrQGBSz2+FfCD8wbwGgzkH7lRUBHfTyNDbfJ/wVo= Subject key identifier: F2:E9:50:96:4B:5F:44:FC:68:8C:5A:47:CA:91:C7:F0:BC:BC:1C:51 Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59 Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659 Certificate serial: 019B34C4B0B428712AF021FD12FB145EC37F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft Manifest number: 0F17 Signing time: Fri 19 Dec 2025 04:01:04 +0000 Manifest this update: Fri 19 Dec 2025 04:01:04 +0000 Manifest next update: Sat 20 Dec 2025 04:01:04 +0000 Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=) 2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: 3zrFyCZ/8hxT4ya+BLsxtbTDPrBidX6Z+S70BLjnMaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:b0:b4:28:71:2a:f0:21:fd:12:fb:14:5e:c3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659 Validity Not Before: Dec 19 04:01:04 2025 GMT Not After : Dec 20 04:01:04 2025 GMT Subject: CN=f2e950964b5f44fc688c5a47ca91c7f0bcbc1c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:50:c1:99:13:f0:6d:4c:78:03:4b:35:41: b9:61:cb:12:9d:9c:73:a7:73:ba:ed:c8:d3:5a:7b: a2:fc:a1:41:c5:31:5b:1f:0c:60:26:f0:d2:4a:8d: 8b:89:56:40:19:ff:35:ed:f8:ba:18:cc:2b:58:3e: d2:3b:56:60:63:e0:d6:c6:9d:15:d6:33:c7:f4:97: 99:34:aa:6d:b6:5f:f6:95:07:4c:6c:d4:66:fd:e3: 62:2b:3d:cb:c2:6b:db:8f:fc:18:51:23:20:d5:90: c1:53:b5:a2:9a:7a:26:9c:92:7a:f0:6a:72:13:c8: 04:63:07:cd:23:95:7d:13:9b:63:34:33:72:60:4a: 86:41:24:1d:e7:43:75:99:9a:d0:0c:ad:49:88:d6: 58:9b:04:30:94:3c:e2:0b:84:a1:51:ae:ab:ce:0d: 5c:d9:a9:e7:3a:04:53:bd:af:42:75:f9:ad:97:be: 0a:2c:95:01:0d:9e:58:08:85:d7:a4:ee:21:ba:18: c2:4a:23:69:69:d8:5c:7b:fa:0b:2a:5c:a7:b6:09: 18:b2:55:82:c7:44:ec:36:1f:2a:fe:c2:a3:30:a4: 4f:96:33:96:45:49:d6:1a:91:36:55:fd:20:6b:da: 57:f7:67:48:6a:23:d0:17:92:fa:97:2c:47:63:77: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E9:50:96:4B:5F:44:FC:68:8C:5A:47:CA:91:C7:F0:BC:BC:1C:51 X509v3 Authority Key Identifier: keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:16:95:c7:39:ae:95:26:8b:d6:d4:3b:e7:ba:4f:e3:53:a5: 6b:4c:ea:a0:69:c3:83:48:20:35:18:cc:c9:08:ef:a4:9f:a5: fa:c9:13:04:08:8f:2d:9b:34:b7:99:f1:2c:86:62:b6:73:1e: bc:bc:70:07:56:61:1b:f0:66:49:56:05:cf:ba:24:f7:a3:ac: f7:83:99:1d:6b:34:b4:04:5c:ab:55:e9:4c:11:ae:80:49:ab: 16:33:bb:21:b4:a9:2e:1c:83:c9:b5:c0:c6:dc:1b:59:64:e9: 2f:8e:e7:92:55:76:cd:4b:6c:07:4f:82:eb:7f:8e:91:e5:fb: b2:f0:d4:ff:3f:09:e4:66:d7:02:25:fa:e7:de:6e:af:e2:77: 00:db:69:ca:1a:2e:cd:11:d4:12:34:fe:79:28:8d:b5:98:9a: 65:fa:e3:bc:56:12:13:52:89:55:ee:e7:04:36:96:af:63:8b: 24:78:e7:60:e8:62:c8:04:b6:8d:64:7a:8a:fb:09:fb:cf:af: 54:88:19:3b:01:df:9a:e4:61:6c:59:8b:a0:2a:37:74:d1:e3: 05:31:ce:06:d1:11:9e:bd:06:8e:1b:46:a6:57:fa:4d:23:a5: 54:f8:42:31:e4:79:f6:25:01:4f:3c:a6:19:90:bb:de:91:fe: 43:b2:ae:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xLC0KHEq8CH9EvsUXsN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTNlYjhhN2QxOWZmZDc4MDQ3NjVhY2ZkY2YyMjYwYzZj MGQ2NTkwHhcNMjUxMjE5MDQwMTA0WhcNMjUxMjIwMDQwMTA0WjAzMTEwLwYDVQQD EyhmMmU5NTA5NjRiNWY0NGZjNjg4YzVhNDdjYTkxYzdmMGJjYmMxYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApARQwZkT8G1MeANLNUG5YcsSnZxz p3O67cjTWnui/KFBxTFbHwxgJvDSSo2LiVZAGf817fi6GMwrWD7SO1ZgY+DWxp0V 1jPH9JeZNKpttl/2lQdMbNRm/eNiKz3Lwmvbj/wYUSMg1ZDBU7WimnomnJJ68Gpy E8gEYwfNI5V9E5tjNDNyYEqGQSQd50N1mZrQDK1JiNZYmwQwlDziC4ShUa6rzg1c 2annOgRTva9Cdfmtl74KLJUBDZ5YCIXXpO4huhjCSiNpadhce/oLKlyntgkYslWC x0TsNh8q/sKjMKRPljOWRUnWGpE2Vf0ga9pX92dIaiPQF5L6lyxHY3cLCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLpUJZLX0T8aIxaR8qRx/C8vBxRMB8GA1UdIwQY MBaAFJyT64p9Gf/XgEdlrP3PImDGwNZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQt Mzk2YWQ3MDEyMzBlLzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBl LzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxaVxzmu lSaL1tQ757pP41Ola0zqoGnDg0ggNRjMyQjvpJ+l+skTBAiPLZs0t5nxLIZitnMe vLxwB1ZhG/BmSVYFz7ok96Os94OZHWs0tARcq1XpTBGugEmrFjO7IbSpLhyDybXA xtwbWWTpL47nklV2zUtsB0+C63+OkeX7svDU/z8J5GbXAiX6595ur+J3ANtpyhou zRHUEjT+eSiNtZiaZfrjvFYSE1KJVe7nBDaWr2OLJHjnYOhiyAS2jWR6ivsJ+8+v VIgZOwHfmuRhbFmLoCo3dNHjBTHOBtERnr0GjhtGplf6TSOlVPhCMeR59iUBTzym GZC73pH+Q7Ku0A== -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:40 2025 by rpki-client