This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json) Hash identifier: DNl1Qjppyd07YdIwGYQARObmtHasRaaza/djBUrc9fY= Subject key identifier: 27:2B:53:64:FD:E4:FF:E4:AF:D8:83:3B:1E:B4:DC:68:0D:5C:56:30 Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba Certificate serial: 019AF3C01E0BE835A5514218AFE79CC4776D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft Manifest number: 0ABF Signing time: Sat 06 Dec 2025 13:00:45 +0000 Manifest this update: Sat 06 Dec 2025 13:00:45 +0000 Manifest next update: Sun 07 Dec 2025 13:00:45 +0000 Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=) 2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: R2YvOO3yiNu7+zI8D57nrpwI50iWKMyN2/OHOvwacuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:1e:0b:e8:35:a5:51:42:18:af:e7:9c:c4:77:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba Validity Not Before: Dec 6 13:00:45 2025 GMT Not After : Dec 7 13:00:45 2025 GMT Subject: CN=272b5364fde4ffe4afd8833b1eb4dc680d5c5630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:c5:48:1d:31:04:41:22:99:1a:a8:68:93: 1a:8e:cf:78:15:00:e3:5a:a7:d6:16:d9:97:af:c3: d3:cf:ee:d5:4c:64:9c:9a:32:c1:80:db:60:4d:6a: 74:9f:1a:b9:ee:1b:47:6f:8a:b7:03:93:34:95:32: 7d:8f:59:d0:97:03:54:6c:88:6d:be:45:9e:09:dc: 6a:a2:88:f2:93:4f:1b:2e:cd:7c:54:91:f0:d2:9b: 62:1d:23:70:9b:af:13:62:9c:e2:ea:16:40:04:08: b6:de:a4:70:6d:e8:fd:fc:43:73:10:a9:55:d2:bb: f3:66:e1:90:b2:ae:31:92:7f:c6:c4:3f:3b:9e:b7: 6f:50:e6:76:15:c5:af:89:65:ef:c3:b1:d5:8a:9f: 62:41:4b:dc:b1:aa:4d:15:ee:bc:87:ef:ab:09:3b: 47:fc:d4:27:4b:5e:6f:d7:b3:0d:51:45:13:96:88: 64:ba:61:2b:7d:e5:76:fb:de:93:87:9b:fb:50:12: ea:3f:96:8e:d7:47:9e:73:38:a4:5b:38:e9:47:d7: 54:88:f3:84:40:92:62:e8:32:93:88:1a:51:b1:f4: 23:e6:31:94:57:27:12:f0:5e:56:fe:6a:c7:f4:2c: 43:11:62:5a:09:43:04:e3:3e:de:5f:f4:32:86:e3: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:53:64:FD:E4:FF:E4:AF:D8:83:3B:1E:B4:DC:68:0D:5C:56:30 X509v3 Authority Key Identifier: keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:12:3d:9b:60:f0:64:2a:bb:9d:ef:0b:95:6a:ce:67:48:b6: 2b:7d:06:2d:5a:5c:45:c5:64:36:64:fb:d1:8c:96:fe:c0:6d: 60:8e:ba:dc:5e:08:b3:f1:51:a3:38:88:bd:e0:44:c8:41:c8: fb:22:7a:9d:77:cb:0a:18:66:28:65:df:68:cc:e3:ae:58:a2: f4:d6:84:af:56:12:0d:a9:57:00:22:f1:c8:c6:67:74:ab:c4: 49:f4:63:c7:60:c7:3b:1c:1e:64:81:d5:8f:c5:9c:bf:75:55: 56:63:c5:03:c3:cc:01:4b:6e:ee:68:9f:84:55:07:c4:5c:f9: 4c:7d:92:99:cd:2f:85:f5:12:c4:fb:55:89:bd:80:b3:3f:7b: 7a:6a:7c:96:8b:8b:de:e4:d1:a0:11:69:0f:48:51:b0:f9:69: 65:9d:e8:1b:97:55:0d:fc:73:74:00:04:8a:6a:76:d6:19:2c: f8:f2:6a:36:ad:2b:b6:29:8d:7b:57:24:5a:fa:10:76:67:4a: bb:a6:fd:b1:89:54:0e:7e:52:d2:68:24:0b:04:d5:ed:61:96: 3d:85:17:1d:b7:a5:fa:f3:79:b6:d2:f8:ae:f3:f7:4a:b9:da: ea:43:cc:3e:98:bc:2b:db:a5:8b:aa:14:99:39:8c:9f:22:ef: 45:ad:f8:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwB4L6DWlUUIYr+ecxHdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGMwOGY0YWQ4ZmVhZDM3MWRhM2U3YzAyYjZjZmQ2ODlm Y2E1YmEwHhcNMjUxMjA2MTMwMDQ1WhcNMjUxMjA3MTMwMDQ1WjAzMTEwLwYDVQQD EygyNzJiNTM2NGZkZTRmZmU0YWZkODgzM2IxZWI0ZGM2ODBkNWM1NjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oHFSB0xBEEimRqoaJMajs94FQDj WqfWFtmXr8PTz+7VTGScmjLBgNtgTWp0nxq57htHb4q3A5M0lTJ9j1nQlwNUbIht vkWeCdxqoojyk08bLs18VJHw0ptiHSNwm68TYpzi6hZABAi23qRwbej9/ENzEKlV 0rvzZuGQsq4xkn/GxD87nrdvUOZ2FcWviWXvw7HVip9iQUvcsapNFe68h++rCTtH /NQnS15v17MNUUUTlohkumErfeV2+96Th5v7UBLqP5aO10eeczikWzjpR9dUiPOE QJJi6DKTiBpRsfQj5jGUVycS8F5W/mrH9CxDEWJaCUME4z7eX/QyhuPp3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcrU2T95P/kr9iDOx603GgNXFYwMB8GA1UdIwQY MBaAFJ2MCPStj+rTcdo+fAK2z9aJ/KW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMt MTliZjc4MTA5NjFiLzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMtMTliZjc4MTA5NjFi LzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRI9m2Dw ZCq7ne8LlWrOZ0i2K30GLVpcRcVkNmT70YyW/sBtYI663F4Is/FRoziIveBEyEHI +yJ6nXfLChhmKGXfaMzjrlii9NaEr1YSDalXACLxyMZndKvESfRjx2DHOxweZIHV j8Wcv3VVVmPFA8PMAUtu7mifhFUHxFz5TH2Smc0vhfUSxPtVib2Asz97emp8louL 3uTRoBFpD0hRsPlpZZ3oG5dVDfxzdAAEimp21hks+PJqNq0rtimNe1ckWvoQdmdK u6b9sYlUDn5S0mgkCwTV7WGWPYUXHbel+vN5ttL4rvP3Srna6kPMPpi8K9uli6oU mTmMnyLvRa344A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:31 2025 by rpki-client