This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json) Hash identifier: n+tp/Xc0UQWWYYfuYJw9yPys2WvD08fygqKtrdTBxyU= Subject key identifier: 1F:0E:05:D0:19:EA:1A:1A:3A:F1:5E:0C:75:FE:74:94:95:9C:10:7A Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a Certificate serial: 019B341FBD45D8817C65790C68E5A574AB3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft Manifest number: 07AD Signing time: Fri 19 Dec 2025 01:00:53 +0000 Manifest this update: Fri 19 Dec 2025 01:00:53 +0000 Manifest next update: Sat 20 Dec 2025 01:00:53 +0000 Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: 2Z0s6Oi/Cg3knk6n/E0ugDQEQJOOBUDD10k9TiEBzok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:bd:45:d8:81:7c:65:79:0c:68:e5:a5:74:ab:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a Validity Not Before: Dec 19 01:00:53 2025 GMT Not After : Dec 20 01:00:53 2025 GMT Subject: CN=1f0e05d019ea1a1a3af15e0c75fe7494959c107a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e5:ed:6e:dd:3b:45:2d:d7:f5:6c:66:e0:34: 01:14:4a:66:e8:ce:d8:58:db:fd:33:a8:55:69:32: b5:17:e6:35:c5:ca:44:8c:1d:eb:79:82:e0:2c:6e: ea:3f:c5:71:32:e2:7a:63:1e:b7:99:94:a2:3a:b5: 9e:71:c3:2b:2d:73:0a:0e:32:e1:ef:85:2a:a7:bf: a2:fa:15:4f:e8:6e:d2:92:cd:30:f8:46:a6:7c:69: 8e:d9:a0:57:20:83:9b:bf:cf:7f:d1:78:0a:1a:0e: 6c:ae:ec:7c:c9:d3:d7:6d:94:2f:64:b9:3f:f4:1e: 45:c4:43:b3:5c:70:20:d8:23:b5:4c:db:25:94:c6: 4b:23:d3:e7:53:74:d4:86:5f:72:0b:29:a3:a6:f4: 39:f3:42:c9:6e:c8:68:dd:6b:2d:ff:41:c8:92:af: 6c:3e:ff:08:7d:bb:d2:3c:3b:1e:d3:5a:a8:0e:ee: d9:78:45:88:13:ab:e4:98:8c:c9:13:b0:52:79:66: 5c:e0:83:dd:7c:02:31:43:ca:6b:96:6e:09:72:48: 55:61:da:7a:c9:d8:b8:96:dd:6f:38:db:39:58:42: c4:5f:be:cc:89:af:39:86:76:c0:85:59:d9:39:c7: f8:ae:2d:9d:8f:03:05:be:6f:8c:b0:42:38:f1:64: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:05:D0:19:EA:1A:1A:3A:F1:5E:0C:75:FE:74:94:95:9C:10:7A X509v3 Authority Key Identifier: keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c5:87:df:84:fd:90:27:9c:9b:b0:fb:ed:2a:d1:85:8a:e5: b4:f5:f4:d5:96:27:72:0f:2f:ec:c5:97:04:3e:84:89:e9:d3: 1e:dc:7f:9a:8e:dd:6a:ee:c1:d6:cc:27:df:9f:79:65:3e:1c: dc:f8:c7:df:45:78:0e:f7:02:df:60:9f:7e:62:2e:f2:83:07: 37:85:9b:cd:80:32:b1:61:ef:8c:e2:73:f5:e7:72:88:bc:90: ef:01:da:34:00:33:18:b0:ca:83:71:2d:48:be:e2:6b:e9:82: 34:1a:84:d3:fc:51:19:77:3b:9d:cf:cc:6b:66:55:2b:48:61: ac:71:ef:21:d9:cb:b0:93:42:bd:67:38:1f:40:d4:9b:5f:54: b2:ed:99:ea:c1:e7:60:35:9a:d5:31:67:c4:c9:e0:ca:a9:fa: f6:4f:38:72:f7:6e:aa:28:c9:b3:69:2b:51:a1:f4:98:53:bb: 32:d3:78:8b:16:18:cd:dc:d4:d8:15:b6:cb:7c:51:e2:73:a7: 5d:3f:ca:66:db:8f:2b:c5:7c:d2:a8:73:2b:7d:0b:be:b8:7f: 90:ce:5f:01:99:8d:5a:87:56:fe:91:11:27:c6:2c:3f:ec:6d: 2f:6d:aa:e3:38:a7:51:d1:c1:d4:c4:1c:fa:a3:3d:e4:b8:2b: d6:1b:99:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H71F2IF8ZXkMaOWldKs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNlOTFkNWIwNWI0NWYwN2QzODUyNGY0ZjFlMmUzOTJi OGE4M2EwHhcNMjUxMjE5MDEwMDUzWhcNMjUxMjIwMDEwMDUzWjAzMTEwLwYDVQQD EygxZjBlMDVkMDE5ZWExYTFhM2FmMTVlMGM3NWZlNzQ5NDk1OWMxMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eXtbt07RS3X9Wxm4DQBFEpm6M7Y WNv9M6hVaTK1F+Y1xcpEjB3reYLgLG7qP8VxMuJ6Yx63mZSiOrWeccMrLXMKDjLh 74Uqp7+i+hVP6G7Sks0w+EamfGmO2aBXIIObv89/0XgKGg5srux8ydPXbZQvZLk/ 9B5FxEOzXHAg2CO1TNsllMZLI9PnU3TUhl9yCymjpvQ580LJbsho3Wst/0HIkq9s Pv8IfbvSPDse01qoDu7ZeEWIE6vkmIzJE7BSeWZc4IPdfAIxQ8prlm4JckhVYdp6 ydi4lt1vONs5WELEX77Mia85hnbAhVnZOcf4ri2djwMFvm+MsEI48WQXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8OBdAZ6hoaOvFeDHX+dJSVnBB6MB8GA1UdIwQY MBaAFJ0j6R1bBbRfB9OFJPTx4uOSuKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAt MzdhOWRkMDJiMmM0LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAtMzdhOWRkMDJiMmM0 LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsWH34T9 kCecm7D77SrRhYrltPX01ZYncg8v7MWXBD6EienTHtx/mo7dau7B1swn3595ZT4c 3PjH30V4DvcC32CffmIu8oMHN4WbzYAysWHvjOJz9edyiLyQ7wHaNAAzGLDKg3Et SL7ia+mCNBqE0/xRGXc7nc/Ma2ZVK0hhrHHvIdnLsJNCvWc4H0DUm19Usu2Z6sHn YDWa1TFnxMngyqn69k84cvduqijJs2krUaH0mFO7MtN4ixYYzdzU2BW2y3xR4nOn XT/KZtuPK8V80qhzK30Lvrh/kM5fAZmNWodW/pERJ8YsP+xtL22q4zinUdHB1MQc +qM95Lgr1huZow== -----END CERTIFICATE-----Generated at Fri Dec 19 03:00:40 2025 by rpki-client