This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json) Hash identifier: likImK/R1aUzoV24EF7ESac+d2cITlR3UbkIA8y23JA= Subject key identifier: DB:58:DA:1E:BD:69:64:92:C6:AE:4E:80:8C:D3:1C:D6:12:34:86:BD Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Certificate serial: 019AF50BC6593421277FC6272B5309C65098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft Manifest number: 1011 Signing time: Sat 06 Dec 2025 19:03:00 +0000 Manifest this update: Sat 06 Dec 2025 19:03:00 +0000 Manifest next update: Sun 07 Dec 2025 19:03:00 +0000 Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=) 2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: lS9cp45I9U6u1qLEVZpVVi4sXBCCUz9HgGzJUc/aIj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c6:59:34:21:27:7f:c6:27:2b:53:09:c6:50:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248 Validity Not Before: Dec 6 19:03:00 2025 GMT Not After : Dec 7 19:03:00 2025 GMT Subject: CN=db58da1ebd696492c6ae4e808cd31cd6123486bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:6a:d7:22:24:aa:47:cb:c5:57:aa:b3:cc: 58:dd:41:00:32:2b:93:20:22:fd:22:1d:a5:16:cc: d5:be:20:06:2d:e2:8d:0f:7c:90:42:99:46:ba:9e: 5c:f5:dc:0f:4a:9f:bb:be:d2:c8:12:39:33:c2:d9: 88:a5:70:bd:51:5a:90:7b:2b:ca:68:84:fe:05:27: ea:26:3d:9a:b7:db:a2:60:db:e1:77:33:2f:cd:8b: a9:97:e5:2b:d8:5a:f8:6c:5b:dc:71:73:d1:bb:3d: 9c:4e:15:08:58:77:91:a7:38:e6:8a:93:31:65:eb: 2d:db:00:dc:4d:99:3e:53:55:54:57:7d:3f:86:72: 31:2a:13:64:4d:2d:20:00:cc:91:a7:5d:ff:2c:f1: 0b:ee:f5:c1:cc:66:e0:2a:64:e8:fb:97:b8:c8:84: 8e:1a:c0:7d:e2:2a:58:e7:20:16:e6:81:f0:d6:1f: 8e:80:27:d3:05:f3:61:2f:bf:f7:9b:1e:5b:22:55: 31:94:15:13:cd:bd:b5:3a:05:aa:c2:53:f8:c7:6c: 3e:2a:39:69:32:2e:65:80:ab:13:70:79:80:c7:60: d5:5f:dc:e7:9f:a3:29:bb:87:4f:28:80:1d:a3:40: 9a:d2:22:1c:fa:19:e1:1b:2b:93:a7:d2:da:ea:2e: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:58:DA:1E:BD:69:64:92:C6:AE:4E:80:8C:D3:1C:D6:12:34:86:BD X509v3 Authority Key Identifier: keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bc:60:a1:8a:13:2c:63:98:39:2e:cc:ce:8e:df:98:a6:55: e8:9a:c8:e9:d3:5a:28:02:a0:70:e1:b3:26:8c:b9:e5:2a:0f: 1d:e9:16:c1:63:cb:25:14:3f:a1:77:76:6d:58:ea:5f:9e:73: 4c:38:2d:73:49:72:cf:16:32:c9:b5:dd:85:a9:e3:57:bc:64: d2:82:c5:95:77:15:e2:85:22:20:c1:5a:b4:bc:6e:1d:2a:e1: bc:42:55:e9:05:1f:e2:76:49:de:32:a0:b5:43:b7:ee:30:d1: 43:cd:34:33:4d:f9:16:fc:b1:2c:2e:41:16:1a:28:f0:df:55: 9c:76:15:d3:55:af:09:cb:03:9f:d3:31:e3:fd:6f:49:66:04: f7:8b:4d:88:dc:be:b8:62:5e:89:73:34:2b:ba:62:f7:d2:07: a9:87:e8:2c:64:35:06:ab:eb:05:10:93:8a:da:90:5f:a8:a5: 9a:c7:4b:95:92:b6:26:1e:4f:da:1a:bf:2b:5a:23:f3:6d:9b: b4:a2:b0:f2:9f:26:bb:36:96:e1:3c:e7:df:31:ca:3c:2d:af: ba:dc:bf:b2:59:d8:b1:71:42:7c:d2:62:05:94:0e:ae:18:08: 85:33:16:8f:3d:c0:24:ba:95:59:87:1f:5f:30:ec:0e:cd:f0: 38:1b:e4:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8ZZNCEnf8YnK1MJxlCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3 YzMyNDgwHhcNMjUxMjA2MTkwMzAwWhcNMjUxMjA3MTkwMzAwWjAzMTEwLwYDVQQD EyhkYjU4ZGExZWJkNjk2NDkyYzZhZTRlODA4Y2QzMWNkNjEyMzQ4NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD9q1yIkqkfLxVeqs8xY3UEAMiuT ICL9Ih2lFszVviAGLeKND3yQQplGup5c9dwPSp+7vtLIEjkzwtmIpXC9UVqQeyvK aIT+BSfqJj2at9uiYNvhdzMvzYupl+Ur2Fr4bFvccXPRuz2cThUIWHeRpzjmipMx Zest2wDcTZk+U1VUV30/hnIxKhNkTS0gAMyRp13/LPEL7vXBzGbgKmTo+5e4yISO GsB94ipY5yAW5oHw1h+OgCfTBfNhL7/3mx5bIlUxlBUTzb21OgWqwlP4x2w+Kjlp Mi5lgKsTcHmAx2DVX9znn6Mpu4dPKIAdo0Ca0iIc+hnhGyuTp9La6i77KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtY2h69aWSSxq5OgIzTHNYSNIa9MB8GA1UdIwQY MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt ODlhNjhlNWEyMTEwLzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLxgoYoT LGOYOS7Mzo7fmKZV6JrI6dNaKAKgcOGzJoy55SoPHekWwWPLJRQ/oXd2bVjqX55z TDgtc0lyzxYyybXdhanjV7xk0oLFlXcV4oUiIMFatLxuHSrhvEJV6QUf4nZJ3jKg tUO37jDRQ800M035FvyxLC5BFhoo8N9VnHYV01WvCcsDn9Mx4/1vSWYE94tNiNy+ uGJeiXM0K7pi99IHqYfoLGQ1BqvrBRCTitqQX6ilmsdLlZK2Jh5P2hq/K1oj822b tKKw8p8muzaW4Tzn3zHKPC2vuty/slnYsXFCfNJiBZQOrhgIhTMWjz3AJLqVWYcf XzDsDs3wOBvkYg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:31 2025 by rpki-client