This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json) Hash identifier: 52KDiSOWV6f6a53ASriQkF8UJvRb5vPiSUgXk8qIwww= Subject key identifier: F9:63:B1:BE:9F:C0:56:29:C7:CF:99:82:36:F3:0A:E9:D3:8B:2E:23 Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47 Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147 Certificate serial: 019AF2ADB3CCC64ADC9B428584917D9419A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft Manifest number: 0354 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=) 2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: jt4NIqJvAEdpW/1DlkwA5O2NKrgIoRAH9jd8SCczR8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b3:cc:c6:4a:dc:9b:42:85:84:91:7d:94:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=f963b1be9fc05629c7cf998236f30ae9d38b2e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:5d:88:82:6a:31:b4:2b:7e:b7:85:8c:e3: d9:7d:1a:4f:db:ca:b4:06:81:b0:e6:00:20:c7:00: 00:19:33:98:e4:06:df:92:61:af:b8:09:19:91:2f: 3e:88:53:58:2f:e8:59:6f:d2:01:60:96:e0:ca:40: b8:e0:1c:ad:18:72:41:72:11:0e:c4:4e:36:e2:5f: ee:58:b3:3c:fa:bf:38:a7:2e:23:4f:3d:20:0b:75: b4:9a:62:68:ab:48:93:31:12:34:fd:a0:69:94:76: 76:88:3d:a5:cd:dc:24:fd:36:40:e2:2e:46:3c:9e: 66:16:37:0b:d9:06:03:75:a5:aa:ec:38:9d:1d:ca: 5f:aa:f2:6c:fe:5c:b0:18:75:da:a5:0a:d5:54:78: 8e:da:ce:71:03:40:38:34:04:7f:d7:66:48:87:8c: 8a:8b:9c:ba:aa:d7:7f:ab:ce:74:20:98:68:c9:40: 33:aa:8c:d2:58:8e:6f:14:90:8b:4d:5c:89:64:1f: f2:1b:83:05:f8:3b:0f:05:8c:42:ac:b8:bb:4a:6c: b8:2e:9f:01:4d:72:9b:29:a3:69:47:3c:2e:8d:19: e6:de:93:f8:c0:e6:5d:63:8b:35:c1:23:6b:28:48: 76:55:bb:02:ce:1f:e0:98:93:e2:21:0f:48:34:b9: 8d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:63:B1:BE:9F:C0:56:29:C7:CF:99:82:36:F3:0A:E9:D3:8B:2E:23 X509v3 Authority Key Identifier: keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e8:24:f1:56:23:5b:d0:8f:9c:6b:43:4a:76:76:8b:3b:c0: 90:e7:18:75:c0:7f:64:6d:ef:d4:4d:c0:c2:05:77:d8:1f:79: 72:5a:00:71:24:8c:d0:46:02:67:f6:58:dd:4d:92:73:e9:19: a2:b3:64:1c:c2:d1:87:fa:97:2e:fb:ff:07:9d:c1:12:e6:a2: 9d:03:aa:68:03:3c:f0:04:18:14:b2:c5:89:96:0a:cd:e3:02: 71:31:8f:2e:48:43:38:72:c4:25:5e:5a:28:f2:d0:9a:84:79: f8:59:4e:5e:a8:93:15:b8:08:89:b5:c6:f9:c2:83:ed:76:e6: a3:2c:1f:89:e1:6c:1e:32:e1:43:4e:5c:a2:cc:a2:79:d8:2f: d2:32:60:cb:ad:cd:b5:76:1b:03:77:14:18:d8:0c:e4:40:b9: 4f:68:6f:b7:3a:77:f3:85:e3:d2:e7:90:da:ff:da:78:12:1f: 4c:71:fa:d0:86:65:c4:10:bf:66:41:f2:4c:1a:46:a2:a7:98: d8:4a:31:26:f5:45:3b:48:79:18:5a:b8:2b:b9:dc:26:4c:25: 20:a6:ed:f5:f4:4f:43:b8:98:54:84:cb:22:41:7d:81:84:48: d0:25:8b:2f:5d:8c:f6:b4:74:2a:f8:68:64:fa:1f:74:c0:86: 67:c1:36:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbPMxkrcm0KFhJF9lBmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTYxZmIwOTI2YmNlMGNhZmFkZDBmMmIxOTM0ODg5NWE0 NDgxNDcwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD EyhmOTYzYjFiZTlmYzA1NjI5YzdjZjk5ODIzNmYzMGFlOWQzOGIyZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjVdiIJqMbQrfreFjOPZfRpP28q0 BoGw5gAgxwAAGTOY5AbfkmGvuAkZkS8+iFNYL+hZb9IBYJbgykC44BytGHJBchEO xE424l/uWLM8+r84py4jTz0gC3W0mmJoq0iTMRI0/aBplHZ2iD2lzdwk/TZA4i5G PJ5mFjcL2QYDdaWq7DidHcpfqvJs/lywGHXapQrVVHiO2s5xA0A4NAR/12ZIh4yK i5y6qtd/q850IJhoyUAzqozSWI5vFJCLTVyJZB/yG4MF+DsPBYxCrLi7Smy4Lp8B TXKbKaNpRzwujRnm3pP4wOZdY4s1wSNrKEh2VbsCzh/gmJPiIQ9INLmNJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPljsb6fwFYpx8+ZgjbzCunTiy4jMB8GA1UdIwQY MBaAFJzmH7CSa84Mr63Q8rGTSIlaRIFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEt OTZiN2UwYThlZTA5LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEtOTZiN2UwYThlZTA5 LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADugk8VYj W9CPnGtDSnZ2izvAkOcYdcB/ZG3v1E3AwgV32B95cloAcSSM0EYCZ/ZY3U2Sc+kZ orNkHMLRh/qXLvv/B53BEuainQOqaAM88AQYFLLFiZYKzeMCcTGPLkhDOHLEJV5a KPLQmoR5+FlOXqiTFbgIibXG+cKD7XbmoywfieFsHjLhQ05cosyiedgv0jJgy63N tXYbA3cUGNgM5EC5T2hvtzp384Xj0ueQ2v/aeBIfTHH60IZlxBC/ZkHyTBpGoqeY 2EoxJvVFO0h5GFq4K7ncJkwlIKbt9fRPQ7iYVITLIkF9gYRI0CWLL12M9rR0Kvho ZPofdMCGZ8E2gw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:14 2025 by rpki-client