This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json) Hash identifier: eSLObpvlDJhZY9hbaCtRKTsT7Pj04gRcsJHsDqyIz8o= Subject key identifier: 14:A4:DC:C7:81:06:4B:3E:19:5A:52:9D:01:48:31:35:4F:ED:46:A1 Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34 Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34 Certificate serial: 019AF2401B48F11FC7FC501DF3F7B00D3558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=) 2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: V3jxpKpa51XlOBqxrgCLmuyPYjvBgwhsucUi26cW+uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1b:48:f1:1f:c7:fc:50:1d:f3:f7:b0:0d:35:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34 Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=14a4dcc781064b3e195a529d014831354fed46a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:2d:db:3e:2b:2b:91:fa:71:33:98:2e:aa: 83:d7:8e:2f:5d:3c:e7:2d:89:63:62:0a:76:71:58: ca:ed:3a:f6:a8:98:ac:1e:ca:fe:27:eb:6f:87:0f: 60:7d:54:d5:b2:8b:6a:29:74:73:fd:50:78:37:ab: 09:36:97:e7:b4:7f:7b:8b:36:c0:97:00:0f:73:f9: 23:0c:95:f2:2c:bf:50:10:26:6e:b5:3e:94:85:6f: f6:1e:84:b8:3d:d4:e1:d5:91:f8:2c:1b:43:00:67: d5:ca:70:61:7a:cb:1f:8b:a6:df:fe:12:d9:9a:6e: 1c:fd:7f:9b:4d:0e:8f:65:27:70:45:6d:da:e5:b0: dc:a4:ee:b8:f7:07:f3:a8:09:f0:a5:e3:32:15:5e: 24:27:44:ea:75:fd:8a:23:4d:49:89:35:64:fe:44: 7c:24:89:4e:7e:77:24:db:8c:bf:fe:9e:3a:66:23: 9b:e1:88:76:0e:b8:50:5e:31:3c:2f:ba:df:f3:56: 00:62:e3:ac:4b:cf:dc:be:5d:af:ce:95:22:11:d0: cf:26:dc:2f:7d:5a:9a:e4:47:cf:2c:75:62:a7:28: 8d:cb:8b:42:a2:49:07:5b:db:99:21:25:36:93:74: a3:0e:3e:f8:80:61:e9:8f:9e:51:ce:f3:15:35:76: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A4:DC:C7:81:06:4B:3E:19:5A:52:9D:01:48:31:35:4F:ED:46:A1 X509v3 Authority Key Identifier: keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2e:1c:e4:44:44:c9:57:0e:cd:5d:da:71:cc:d3:79:2b:ef: 38:89:64:ef:d8:36:bd:65:59:4d:63:cf:63:03:55:e4:8e:3d: 95:ec:c2:e4:05:3c:c0:13:60:17:04:d1:4e:cb:38:6e:46:d7: 41:a2:44:a4:72:42:91:72:12:c4:08:cd:e4:1e:39:2d:83:86: 96:2b:5c:51:76:7b:d1:72:47:c3:d3:d8:bd:a5:f6:48:de:b0: 06:c1:6c:92:77:90:1d:45:3b:ba:c9:72:9a:a2:b9:03:01:d9: f1:c3:8b:0c:dc:95:c4:41:01:c0:55:6c:48:dd:8c:7c:9d:c6: db:78:e5:3c:0c:63:13:ff:5e:ce:b7:b5:b5:9b:8c:3b:e9:e5: e7:4f:2b:c2:51:0d:f2:ee:49:b1:19:38:40:30:11:aa:7f:ca: dd:79:e6:fe:cd:9a:27:11:a9:dc:b5:c2:4b:da:5c:02:e1:a1: ed:31:33:42:8a:9e:07:c9:c9:a3:2c:a9:a4:b7:3c:1e:32:4c: 7c:69:4a:20:01:f7:c1:db:00:f7:a7:73:d6:57:8a:b8:30:16: 33:77:0f:c5:9d:c9:04:f6:12:f0:27:4e:f4:45:30:61:40:f6: e0:d7:81:b7:8c:7a:2c:bb:5d:be:d9:05:32:4f:17:da:80:15: 3a:b6:5c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBtI8R/H/FAd8/ewDTVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllN2ZhNGQ3MWZmNjFkZGQ3NTJhNTZlNWU5Y2EzMTY5N2E5 NTJiMzQwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EygxNGE0ZGNjNzgxMDY0YjNlMTk1YTUyOWQwMTQ4MzEzNTRmZWQ0NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Yt2z4rK5H6cTOYLqqD144vXTzn LYljYgp2cVjK7Tr2qJisHsr+J+tvhw9gfVTVsotqKXRz/VB4N6sJNpfntH97izbA lwAPc/kjDJXyLL9QECZutT6UhW/2HoS4PdTh1ZH4LBtDAGfVynBhessfi6bf/hLZ mm4c/X+bTQ6PZSdwRW3a5bDcpO649wfzqAnwpeMyFV4kJ0Tqdf2KI01JiTVk/kR8 JIlOfnck24y//p46ZiOb4Yh2DrhQXjE8L7rf81YAYuOsS8/cvl2vzpUiEdDPJtwv fVqa5EfPLHVipyiNy4tCokkHW9uZISU2k3SjDj74gGHpj55RzvMVNXaWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSk3MeBBks+GVpSnQFIMTVP7UahMB8GA1UdIwQY MBaAFJ5/pNcf9h3ddSpW5enKMWl6lSs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQt MThlMzZiZGRjMjFjLzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQtMThlMzZiZGRjMjFj LzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC4c5ERE yVcOzV3acczTeSvvOIlk79g2vWVZTWPPYwNV5I49lezC5AU8wBNgFwTRTss4bkbX QaJEpHJCkXISxAjN5B45LYOGlitcUXZ70XJHw9PYvaX2SN6wBsFskneQHUU7usly mqK5AwHZ8cOLDNyVxEEBwFVsSN2MfJ3G23jlPAxjE/9ezre1tZuMO+nl508rwlEN 8u5JsRk4QDARqn/K3Xnm/s2aJxGp3LXCS9pcAuGh7TEzQoqeB8nJoyyppLc8HjJM fGlKIAH3wdsA96dz1leKuDAWM3cPxZ3JBPYS8CdO9EUwYUD24NeBt4x6LLtdvtkF Mk8X2oAVOrZcWw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:51 2025 by rpki-client