This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json) Hash identifier: u1mbRCf5EOP/8Wyz5qQL8OE8wtq8PZp35o+HONzET/M= Subject key identifier: 7D:1F:BD:5A:6F:7C:B4:70:36:03:45:E2:0A:08:B7:C7:21:C3:BD:8C Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f Certificate serial: 019B35A06EA5FE76E7925652814331158807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft Manifest number: 0597 Signing time: Fri 19 Dec 2025 08:01:04 +0000 Manifest this update: Fri 19 Dec 2025 08:01:04 +0000 Manifest next update: Sat 20 Dec 2025 08:01:04 +0000 Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=) 2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: ETOdioG/XtDhA7/EKoP1bj460bbqOZdJGywbYEYTHHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:6e:a5:fe:76:e7:92:56:52:81:43:31:15:88:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f Validity Not Before: Dec 19 08:01:04 2025 GMT Not After : Dec 20 08:01:04 2025 GMT Subject: CN=7d1fbd5a6f7cb470360345e20a08b7c721c3bd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:d9:c7:7d:f5:bf:e8:db:ee:26:8d:3b:67: 23:de:a2:d6:7e:0c:d8:4e:74:d2:04:99:6b:32:6a: 3b:e1:40:df:72:1d:f9:6f:cf:e6:0b:ec:65:4d:0e: fb:c0:b2:c3:42:a8:31:2b:29:da:78:3b:64:73:ff: 0e:56:86:64:18:9a:fe:c1:c1:c0:c3:b9:e9:80:61: c7:81:95:40:14:d9:51:77:18:a7:19:da:1b:47:24: d4:f4:cc:71:fb:71:05:8a:ef:13:c3:ff:49:b9:62: 93:f4:b1:ed:6c:2d:c4:a5:fe:4a:39:7b:1d:fc:e0: 73:28:8e:65:5b:ed:d3:6c:bb:57:06:25:cc:1e:02: 5c:c9:c3:82:c3:64:ff:28:37:78:f1:ec:43:ec:05: 68:00:78:7f:1b:e4:f0:eb:42:c2:9c:8b:17:94:a9: f2:91:6b:66:84:c8:b1:ac:8f:09:a5:e6:d8:3b:aa: f1:58:38:d3:90:8a:ec:fd:af:38:79:9c:47:6c:12: be:08:14:1a:df:a4:34:c4:bc:fe:3b:8f:c3:95:99: d7:07:df:69:49:f6:82:3c:db:71:3a:a5:d1:9b:24: 52:3d:c9:b0:46:45:cb:04:ee:86:66:f4:55:34:dc: 45:b6:07:28:10:90:4f:67:4b:6d:44:b6:e2:31:0e: 5b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1F:BD:5A:6F:7C:B4:70:36:03:45:E2:0A:08:B7:C7:21:C3:BD:8C X509v3 Authority Key Identifier: keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:20:c9:d3:69:2d:35:05:61:ed:85:57:60:f6:d9:25:2e:1b: 2b:e6:10:ea:8c:50:dc:90:43:2e:55:af:83:42:f5:a2:b1:fb: ea:cf:9f:af:e2:a7:9d:1d:2e:5f:5c:e0:ab:d5:89:87:7e:b3: c9:e1:2e:99:e4:d0:37:3b:8d:2c:46:e4:7a:b2:3d:59:24:b7: d6:0f:65:c0:a6:a6:99:f6:c8:a5:19:a0:88:62:f4:03:3f:46: 1f:9d:0a:4f:b9:eb:5f:ca:63:ec:b0:82:f7:14:9f:b3:b2:bb: 2b:52:e9:a3:20:5a:8c:87:2d:42:bb:10:ac:c7:52:bb:90:ae: 4f:0f:e8:70:7e:5c:df:cf:32:35:00:d2:7a:a5:38:16:aa:b8: 4e:6a:29:cc:cc:0a:3b:3e:00:46:9c:d2:25:e7:2c:be:a6:6f: 9d:41:9f:a0:64:24:37:25:cb:f5:2f:c5:7f:3c:55:de:90:54: 5c:f5:4c:2d:a5:f8:2a:0e:f0:10:5a:53:76:26:55:ee:ba:d1: f4:b1:47:4d:45:04:1a:fb:28:a9:06:76:17:47:d2:a9:29:72: 12:fc:18:27:06:2e:7a:98:ff:84:f9:83:26:8a:87:4f:f7:18: 11:66:ca:6c:57:18:1e:53:4f:bd:45:56:34:a2:ba:23:3e:78: fb:d4:58:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oG6l/nbnklZSgUMxFYgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2 MmU4OWYwHhcNMjUxMjE5MDgwMTA0WhcNMjUxMjIwMDgwMTA0WjAzMTEwLwYDVQQD Eyg3ZDFmYmQ1YTZmN2NiNDcwMzYwMzQ1ZTIwYTA4YjdjNzIxYzNiZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1XZx331v+jb7iaNO2cj3qLWfgzY TnTSBJlrMmo74UDfch35b8/mC+xlTQ77wLLDQqgxKynaeDtkc/8OVoZkGJr+wcHA w7npgGHHgZVAFNlRdxinGdobRyTU9Mxx+3EFiu8Tw/9JuWKT9LHtbC3Epf5KOXsd /OBzKI5lW+3TbLtXBiXMHgJcycOCw2T/KDd48exD7AVoAHh/G+Tw60LCnIsXlKny kWtmhMixrI8JpebYO6rxWDjTkIrs/a84eZxHbBK+CBQa36Q0xLz+O4/DlZnXB99p SfaCPNtxOqXRmyRSPcmwRkXLBO6GZvRVNNxFtgcoEJBPZ0ttRLbiMQ5brQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0fvVpvfLRwNgNF4goIt8chw72MMB8GA1UdIwQY MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByDJ02kt NQVh7YVXYPbZJS4bK+YQ6oxQ3JBDLlWvg0L1orH76s+fr+KnnR0uX1zgq9WJh36z yeEumeTQNzuNLEbkerI9WSS31g9lwKammfbIpRmgiGL0Az9GH50KT7nrX8pj7LCC 9xSfs7K7K1LpoyBajIctQrsQrMdSu5CuTw/ocH5c388yNQDSeqU4Fqq4TmopzMwK Oz4ARpzSJecsvqZvnUGfoGQkNyXL9S/FfzxV3pBUXPVMLaX4Kg7wEFpTdiZV7rrR 9LFHTUUEGvsoqQZ2F0fSqSlyEvwYJwYuepj/hPmDJoqHT/cYEWbKbFcYHlNPvUVW NKK6Iz54+9RYLw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:38:51 2025 by rpki-client