This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json) Hash identifier: SKohOjkrTBGqOacTgY6AXm6vhbMTxqSYlpc6ZkqcEoQ= Subject key identifier: 02:30:6F:CC:BF:D8:B7:96:72:3C:FD:45:3C:7E:65:F8:5B:E4:66:C4 Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63 Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63 Certificate serial: 019AF49C53CACABEDA583430C36A052D8E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft Manifest number: 113F Signing time: Sat 06 Dec 2025 17:01:16 +0000 Manifest this update: Sat 06 Dec 2025 17:01:16 +0000 Manifest next update: Sun 07 Dec 2025 17:01:16 +0000 Files and hashes: 1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=) 2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: l5oRSl+EtLIsyy/5Firk+wSQ6o8xcMv7ktx796qf1B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:53:ca:ca:be:da:58:34:30:c3:6a:05:2d:8e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63 Validity Not Before: Dec 6 17:01:16 2025 GMT Not After : Dec 7 17:01:16 2025 GMT Subject: CN=02306fccbfd8b796723cfd453c7e65f85be466c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:1c:4e:ee:fa:8c:25:ee:94:22:39:02:ed: 76:82:4b:15:2f:8a:6f:0f:c2:9c:bd:8c:0d:2f:93: ac:ef:90:77:52:36:4a:26:37:5b:60:fd:bb:d7:65: 05:e9:b1:97:26:94:67:d7:96:5b:d8:80:73:fd:9a: af:dc:81:bb:c9:93:20:6c:f5:77:80:88:3c:b2:ed: f8:c4:26:df:4b:75:57:5d:b3:21:83:b9:36:c3:bf: f8:1c:be:f3:1f:af:ad:ec:ed:02:c5:0f:54:a1:d6: a1:db:ae:7e:ac:c4:09:1a:58:35:5b:a6:a7:a9:a7: fe:1e:f8:0c:7d:2f:fb:17:6b:28:a6:cd:9d:fe:a4: 98:39:8e:ae:bc:9d:d6:95:9e:11:9a:43:fb:14:f2: fe:eb:56:11:dd:dd:d4:f1:4e:58:d1:0b:9b:5c:32: c4:6e:e2:45:67:40:45:5e:85:e5:43:a6:80:f5:0d: f2:90:d2:44:f1:ad:36:e9:6d:b0:49:34:74:7a:73: a2:74:95:98:49:09:be:6a:b8:df:18:d4:1f:54:d1: 81:98:7e:e3:74:34:a2:58:40:77:42:92:fd:7a:f5: 4b:7e:37:ce:05:a9:3a:66:4c:13:dd:ac:35:5d:1a: cc:4f:1b:6d:1e:63:b5:57:44:37:55:53:bb:81:ba: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:30:6F:CC:BF:D8:B7:96:72:3C:FD:45:3C:7E:65:F8:5B:E4:66:C4 X509v3 Authority Key Identifier: keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b4:61:f7:96:4f:99:99:0f:77:bf:da:fd:fb:38:2a:88:67: a5:55:df:97:0e:a7:62:9f:1a:77:68:f6:0a:e5:d2:05:77:30: 77:a3:d8:bd:bf:9b:8a:1b:ff:97:c3:ad:1a:10:47:37:b0:90: 83:a4:49:18:61:1d:05:94:79:d8:04:6a:ec:18:a3:c2:76:76: 40:fa:d2:dd:ca:f9:56:2b:3c:01:d3:f6:db:6f:41:69:fd:7d: 78:22:57:a9:c2:95:2f:a4:ed:38:93:20:3d:c0:16:ab:82:6f: 11:a2:a7:83:f5:e1:82:1d:25:41:12:b3:cb:da:d0:27:92:d5: 5f:04:f5:ef:b0:a0:e3:a9:73:49:00:e0:c9:c7:b8:f9:35:5a: cf:dc:f4:ba:94:91:8b:33:e8:0f:85:eb:42:89:45:ce:b1:3a: 7c:9b:33:a8:d7:4d:e8:22:cc:9e:62:b4:f0:a9:1f:0f:f5:e1: 7e:bc:58:be:14:5c:20:d6:b9:a1:ec:a1:57:d2:73:04:16:95: 27:cc:1a:61:7d:63:ac:c2:7f:43:25:3d:3e:12:00:4b:ca:38: a8:01:df:f5:b3:b0:82:aa:e6:f6:8b:00:64:7e:37:e5:d0:58: ae:68:6f:e4:8b:2d:8b:63:53:36:f0:b2:9d:23:2d:4c:e5:40: b0:1e:c3:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFPKyr7aWDQww2oFLY4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjI4OWYzZDllMTNiZTY3YTI0NGI3MmJkMjQ5NDViMmMz MjBhNjMwHhcNMjUxMjA2MTcwMTE2WhcNMjUxMjA3MTcwMTE2WjAzMTEwLwYDVQQD EygwMjMwNmZjY2JmZDhiNzk2NzIzY2ZkNDUzYzdlNjVmODViZTQ2NmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojscTu76jCXulCI5Au12gksVL4pv D8KcvYwNL5Os75B3UjZKJjdbYP2712UF6bGXJpRn15Zb2IBz/Zqv3IG7yZMgbPV3 gIg8su34xCbfS3VXXbMhg7k2w7/4HL7zH6+t7O0CxQ9Uodah265+rMQJGlg1W6an qaf+HvgMfS/7F2sops2d/qSYOY6uvJ3WlZ4RmkP7FPL+61YR3d3U8U5Y0QubXDLE buJFZ0BFXoXlQ6aA9Q3ykNJE8a026W2wSTR0enOidJWYSQm+arjfGNQfVNGBmH7j dDSiWEB3QpL9evVLfjfOBak6ZkwT3aw1XRrMTxttHmO1V0Q3VVO7gboa6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIwb8y/2LeWcjz9RTx+Zfhb5GbEMB8GA1UdIwQY MBaAFJ6yifPZ4TvmeiRLcr0klFssMgpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUt ZDhlMTgzNTY5M2NkLzEvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUtZDhlMTgzNTY5M2Nk LzEvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrRh95ZP mZkPd7/a/fs4KohnpVXflw6nYp8ad2j2CuXSBXcwd6PYvb+bihv/l8OtGhBHN7CQ g6RJGGEdBZR52ARq7BijwnZ2QPrS3cr5Vis8AdP2229Baf19eCJXqcKVL6TtOJMg PcAWq4JvEaKng/Xhgh0lQRKzy9rQJ5LVXwT177Cg46lzSQDgyce4+TVaz9z0upSR izPoD4XrQolFzrE6fJszqNdN6CLMnmK08KkfD/XhfrxYvhRcINa5oeyhV9JzBBaV J8waYX1jrMJ/QyU9PhIAS8o4qAHf9bOwgqrm9osAZH435dBYrmhv5Isti2NTNvCy nSMtTOVAsB7DGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:52 2025 by rpki-client