This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json) Hash identifier: V+NSvP1rSC69Okxhh21dijHI6W7lTJKNQujW2SB0/Rk= Subject key identifier: 52:C9:93:5B:C6:A0:DB:2F:FD:51:6E:2B:7D:5E:78:F5:9E:78:60:B1 Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e Certificate serial: 019AF12DC65C1D277679072AD7D9F4A8B47A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: /4wH4WioGmysx8Q06hwzcpbn8SRHwHPrKI7IckIcxqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c6:5c:1d:27:76:79:07:2a:d7:d9:f4:a8:b4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=52c9935bc6a0db2ffd516e2b7d5e78f59e7860b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:c8:bd:bd:12:f5:bc:6b:59:7c:b6:b4:65: 1b:66:7e:a1:a5:52:87:ab:78:e4:3d:ea:f8:14:1a: 23:95:7c:da:37:42:81:fe:d3:d5:98:0c:c6:60:fb: 1e:3c:62:33:44:38:0b:6c:cf:e0:40:65:88:cf:8e: 4c:48:3b:7a:a2:d0:d0:1c:e2:5d:72:19:42:95:f3: 0c:b5:ee:81:4f:f2:65:d2:3e:08:ca:e0:8f:12:48: f0:b4:26:ff:42:a6:02:07:4f:1f:bd:fe:36:33:70: fd:5b:1e:4a:8f:00:1f:97:68:96:7e:e2:b6:8a:95: b5:0d:60:0d:28:9f:50:5a:55:13:4a:29:c2:5c:02: 81:49:be:76:aa:8b:8c:e0:e8:d5:05:5a:dd:96:3a: c7:59:5e:a6:b1:1a:a6:6a:a6:d6:ae:0a:8b:71:a7: 9b:c1:64:04:e6:06:4b:d2:a9:c5:b4:31:92:ea:96: 33:55:57:f6:1a:be:ad:65:f1:34:0e:27:09:11:23: 07:e5:dc:5c:a2:ee:db:bb:a8:6e:3d:e4:93:a1:4a: cc:f8:75:3b:1f:18:4c:79:5a:3d:75:70:64:57:7b: d1:06:bf:12:c3:ac:33:74:e9:79:38:16:fa:74:2f: bb:cb:dc:55:5a:ae:70:53:fb:55:1c:c3:f8:5b:3b: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:93:5B:C6:A0:DB:2F:FD:51:6E:2B:7D:5E:78:F5:9E:78:60:B1 X509v3 Authority Key Identifier: keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:d7:d1:9d:bd:9c:d7:65:a7:89:30:64:5f:54:16:c7:eb: e1:2f:7a:3f:3d:c8:e5:ab:f0:8b:c0:9d:05:3d:a6:39:42:40: d7:0f:98:08:92:17:9d:cf:2b:f8:54:d9:26:71:55:a0:fc:3b: e3:80:5e:cc:f8:a0:de:6f:ea:ae:26:a9:49:48:f7:bf:7d:e2: 81:e8:10:d2:86:62:e9:60:3a:18:02:52:3c:a0:90:13:95:41: b0:aa:75:c2:72:f3:54:09:6a:3b:5d:50:c6:af:c3:30:b6:c7: 70:b8:99:63:8d:8d:7c:a7:3a:c6:f3:db:47:81:38:64:6b:d6: 00:f3:7d:d2:ce:8d:fb:d8:f6:5f:ae:a6:d0:8f:76:18:ac:bc: 33:f6:8a:7a:5f:8f:14:fd:8c:f3:55:3c:a5:54:54:8c:40:72: cd:8e:01:80:8d:24:95:b5:0a:74:e1:35:9b:53:ab:92:6b:a3: 06:e6:0b:67:b8:44:db:84:20:00:62:88:ed:61:e1:3a:4d:f6: 34:75:03:19:1f:23:d0:f7:50:8d:26:79:2f:7e:bd:96:bf:e0: 67:23:d2:fb:f3:54:7a:2b:2d:1a:5f:13:fb:e3:ef:7f:24:46: 8d:dd:42:b1:5e:92:91:16:9b:c7:d4:aa:9b:1e:43:0d:23:47: 5e:db:7c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcZcHSd2eQcq19n0qLR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjlkM2I0ZDlkZmUxNjVmNDkwYWVhMDcyNzBiNzBmYThl M2ViMGUwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD Eyg1MmM5OTM1YmM2YTBkYjJmZmQ1MTZlMmI3ZDVlNzhmNTllNzg2MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+zIvb0S9bxrWXy2tGUbZn6hpVKH q3jkPer4FBojlXzaN0KB/tPVmAzGYPsePGIzRDgLbM/gQGWIz45MSDt6otDQHOJd chlClfMMte6BT/Jl0j4IyuCPEkjwtCb/QqYCB08fvf42M3D9Wx5KjwAfl2iWfuK2 ipW1DWANKJ9QWlUTSinCXAKBSb52qouM4OjVBVrdljrHWV6msRqmaqbWrgqLcaeb wWQE5gZL0qnFtDGS6pYzVVf2Gr6tZfE0DicJESMH5dxcou7bu6huPeSToUrM+HU7 HxhMeVo9dXBkV3vRBr8Sw6wzdOl5OBb6dC+7y9xVWq5wU/tVHMP4Wzsd5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLJk1vGoNsv/VFuK31eePWeeGCxMB8GA1UdIwQY MBaAFJ0p07TZ3+Fl9JCuoHJwtw+o4+sOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNuVHRObmY0V1gwa0s2Z2NuQzNENmpqNnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NWFkNmEtMjIzNy00MzFkLWI3ZmYt ZGU3ZDc0MjZjNGM1LzEvblNuVHRObmY0V1gwa0s2Z2NuQzNENmpqNnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NWFkNmEtMjIzNy00MzFkLWI3ZmYtZGU3ZDc0MjZjNGM1 LzEvblNuVHRObmY0V1gwa0s2Z2NuQzNENmpqNnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxbX0Z29 nNdlp4kwZF9UFsfr4S96Pz3I5avwi8CdBT2mOUJA1w+YCJIXnc8r+FTZJnFVoPw7 44BezPig3m/qriapSUj3v33igegQ0oZi6WA6GAJSPKCQE5VBsKp1wnLzVAlqO11Q xq/DMLbHcLiZY42NfKc6xvPbR4E4ZGvWAPN90s6N+9j2X66m0I92GKy8M/aKel+P FP2M81U8pVRUjEByzY4BgI0klbUKdOE1m1OrkmujBuYLZ7hE24QgAGKI7WHhOk32 NHUDGR8j0PdQjSZ5L369lr/gZyPS+/NUeistGl8T++PvfyRGjd1CsV6SkRabx9Sq mx5DDSNHXtt8xA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:56 2025 by rpki-client