This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json) Hash identifier: scDS2m/129Q2puwRwrz5T83szXBxb5BBwFdUR1j60Tg= Subject key identifier: 17:90:80:84:1D:60:EA:B6:39:67:C1:83:5F:5E:A0:0F:21:D4:21:27 Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0 Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0 Certificate serial: 019AF38A1F49D0B4F456B9C114F7B075B44D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft Manifest number: 0442 Signing time: Sat 06 Dec 2025 12:01:46 +0000 Manifest this update: Sat 06 Dec 2025 12:01:46 +0000 Manifest next update: Sun 07 Dec 2025 12:01:46 +0000 Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=) 2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: qHg7Uc559FN9mQjdoPDvHn5rlkZIxqDQxIGbrHMLw5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:1f:49:d0:b4:f4:56:b9:c1:14:f7:b0:75:b4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0 Validity Not Before: Dec 6 12:01:46 2025 GMT Not After : Dec 7 12:01:46 2025 GMT Subject: CN=179080841d60eab63967c1835f5ea00f21d42127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:2e:a1:8f:ad:83:6d:b9:b4:f8:30:a7:da: 57:70:c1:4e:3c:b6:6d:b0:2f:84:0b:3b:ac:94:51: 73:89:25:78:24:3e:52:8e:60:0b:10:43:3e:e1:e0: e1:70:42:74:6c:d1:b8:38:83:3a:85:b3:77:cb:c6: c2:99:32:df:93:b9:7c:ae:a0:4e:f4:1c:36:92:05: d7:2d:21:75:eb:e3:cb:44:de:df:5c:87:38:24:a2: 4a:d6:b1:f5:03:26:83:97:a4:ad:2a:28:57:74:92: e7:ad:40:80:bc:6c:11:05:13:c9:e4:41:2e:89:c9: 3d:31:df:f2:24:37:07:4b:c8:d7:cd:13:76:7d:b2: ed:a7:1e:c6:b7:d9:e0:82:28:5d:e2:dc:3e:7e:97: f1:2e:65:d4:ec:45:67:39:01:e0:55:d6:0c:b5:4a: 4c:35:93:0c:c1:de:1f:ae:44:cd:73:a5:25:9a:10: a0:70:af:f9:d6:b0:45:c5:1b:7f:ee:86:b4:ef:bc: fc:38:e9:2c:70:d2:23:03:76:ac:64:76:35:76:3b: ad:f0:37:21:aa:04:0e:ee:fe:52:d2:52:73:86:f6: a7:70:53:23:b2:71:f1:ba:04:10:cb:18:6f:f9:d4: ae:c9:d3:17:5a:b5:51:0c:dd:ff:2b:7f:ac:3b:46: e7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:90:80:84:1D:60:EA:B6:39:67:C1:83:5F:5E:A0:0F:21:D4:21:27 X509v3 Authority Key Identifier: keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:48:2c:0e:92:30:c7:8f:5e:8b:eb:4e:cb:9f:f6:25:bb:ea: 04:52:28:da:29:16:36:36:ca:06:86:da:b4:b5:93:ea:5d:57: eb:fd:7e:03:03:0e:d9:17:3d:19:ae:79:49:48:01:75:e3:6a: 1f:76:3c:30:3f:e4:f0:71:70:da:1f:26:2f:a7:10:02:a4:a9: aa:85:d8:71:b7:c8:30:91:40:b4:9c:ea:f0:1b:ef:00:69:1d: c5:45:1b:cc:75:10:7e:7c:7e:c3:5e:bf:9f:0c:8a:8a:12:bd: a8:03:33:b5:c9:6d:01:20:2c:01:b8:ba:c1:c9:c0:31:80:36: d6:dc:e9:a8:3f:10:e0:34:31:27:f7:c2:75:ef:01:03:4f:5e: 09:0d:c1:73:27:d5:8c:43:4d:33:c1:64:85:28:32:50:77:4c: f0:dd:a3:1f:75:78:74:a1:10:0f:cc:09:76:12:18:9b:8e:36: be:be:cc:56:32:8a:ab:e8:4f:29:aa:2b:04:c7:44:eb:21:2c: fb:d0:d3:ca:2d:89:e5:ba:fa:e6:0e:7b:34:b3:a1:77:be:e1: 5b:20:76:76:56:9f:9c:85:07:55:ed:9e:ce:16:ba:df:4b:8d: 72:2f:df:f4:07:5e:6b:19:04:fc:76:f8:d0:40:49:bf:0c:4f: 6d:e4:40:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzih9J0LT0VrnBFPewdbRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZGIxYmIyOWE0YWVhODVlMTljMjg5MmQwYzgzOWUyZmI5 NDVlZDAwHhcNMjUxMjA2MTIwMTQ2WhcNMjUxMjA3MTIwMTQ2WjAzMTEwLwYDVQQD EygxNzkwODA4NDFkNjBlYWI2Mzk2N2MxODM1ZjVlYTAwZjIxZDQyMTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fguoY+tg225tPgwp9pXcMFOPLZt sC+ECzuslFFziSV4JD5SjmALEEM+4eDhcEJ0bNG4OIM6hbN3y8bCmTLfk7l8rqBO 9Bw2kgXXLSF16+PLRN7fXIc4JKJK1rH1AyaDl6StKihXdJLnrUCAvGwRBRPJ5EEu ick9Md/yJDcHS8jXzRN2fbLtpx7Gt9nggihd4tw+fpfxLmXU7EVnOQHgVdYMtUpM NZMMwd4frkTNc6UlmhCgcK/51rBFxRt/7oa077z8OOkscNIjA3asZHY1djut8Dch qgQO7v5S0lJzhvancFMjsnHxugQQyxhv+dSuydMXWrVRDN3/K3+sO0bncwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeQgIQdYOq2OWfBg19eoA8h1CEnMB8GA1UdIwQY MBaAFDTbG7KaSuqF4ZwoktDIOeL7lF7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQt NTJhMTA0MjViMTM2LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84ZGI4ZDItNmIxMS00ZDE5LThlOGQtNTJhMTA0MjViMTM2 LzEvTk5zYnNwcEs2b1hobkNpUzBNZzU0dnVVWHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkgsDpIw x49ei+tOy5/2JbvqBFIo2ikWNjbKBobatLWT6l1X6/1+AwMO2Rc9Ga55SUgBdeNq H3Y8MD/k8HFw2h8mL6cQAqSpqoXYcbfIMJFAtJzq8BvvAGkdxUUbzHUQfnx+w16/ nwyKihK9qAMztcltASAsAbi6wcnAMYA21tzpqD8Q4DQxJ/fCde8BA09eCQ3BcyfV jENNM8FkhSgyUHdM8N2jH3V4dKEQD8wJdhIYm442vr7MVjKKq+hPKaorBMdE6yEs +9DTyi2J5br65g57NLOhd77hWyB2dlafnIUHVe2ezha630uNci/f9AdeaxkE/Hb4 0EBJvwxPbeRA+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:21 2025 by rpki-client