This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json) Hash identifier: +NQZJDJ+Q2cWBbq9kIhoH1+6bMVvvZ3VjO+KXC323SY= Subject key identifier: 18:31:14:5C:E6:CC:CD:8B:00:6C:CB:B4:A1:1F:D2:F3:01:23:83:19 Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f Certificate serial: 019AF5E5BFE0B1D93E09412108D5D3A6333C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft Manifest number: 0576 Signing time: Sat 06 Dec 2025 23:01:05 +0000 Manifest this update: Sat 06 Dec 2025 23:01:05 +0000 Manifest next update: Sun 07 Dec 2025 23:01:05 +0000 Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=) 2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: S/HV+a/jxxvPtAQ3s3Mfgpg9UuiLAibz27+cLiQc9LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:bf:e0:b1:d9:3e:09:41:21:08:d5:d3:a6:33:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f Validity Not Before: Dec 6 23:01:05 2025 GMT Not After : Dec 7 23:01:05 2025 GMT Subject: CN=1831145ce6cccd8b006ccbb4a11fd2f301238319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:83:a6:d4:61:03:85:46:b3:40:ef:6f:e0: 91:d7:52:46:21:66:4b:c2:80:ff:ec:58:8d:9f:da: e1:ac:a8:f9:ee:43:eb:da:99:c7:99:79:94:b0:b9: 09:85:55:e7:64:0b:07:8d:6a:9f:ff:be:6a:4d:12: ba:46:5b:da:c3:a6:9b:de:aa:10:14:38:39:64:56: d6:b8:76:23:7e:44:3f:bd:ae:58:65:cc:bb:57:8f: c0:bb:a2:03:1a:a8:ec:bf:73:cf:78:f8:cf:ae:ea: 94:e7:9e:03:6e:5e:49:66:46:a6:5d:73:29:0e:ec: 85:b4:ab:a8:ed:6c:2f:24:65:0b:c0:cf:09:45:57: 35:9f:72:67:9c:93:f5:be:4e:2b:d8:66:97:c0:34: 38:10:62:b1:2b:60:ff:75:89:e8:92:1a:09:46:6b: 6f:ed:2c:d8:9b:a8:f8:e3:df:49:b0:b3:86:7c:21: 29:7e:7d:cb:c0:b0:59:de:c8:b1:e0:c1:69:10:6c: 49:b7:ce:7a:fe:97:71:29:be:d2:56:31:e7:16:b9: c4:c5:a9:c5:6d:33:8a:02:21:1b:40:5a:1e:90:cf: 60:ae:54:17:e9:19:78:9e:a9:80:c5:ec:29:13:44: ef:5c:8d:19:61:61:ad:23:11:5f:8f:83:ad:4c:44: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:31:14:5C:E6:CC:CD:8B:00:6C:CB:B4:A1:1F:D2:F3:01:23:83:19 X509v3 Authority Key Identifier: keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:95:8d:85:01:d5:c6:ad:3f:5a:f3:42:f7:85:1f:97:15:97: 14:33:67:ac:26:54:3c:7b:4e:7a:cf:b8:2c:5f:8a:e2:d7:59: 6d:19:d2:4a:72:1e:32:b5:3f:73:1d:77:1c:a6:11:a3:b9:0f: e0:79:59:cf:a6:04:81:94:5e:37:de:c0:b1:3e:b2:1f:24:52: 9e:fd:16:07:81:92:f5:3c:52:f0:22:81:24:d3:1b:79:f6:77: 76:e2:b1:c1:2b:da:35:4b:a4:e6:7c:c5:63:84:34:4f:07:c3: a8:ca:db:23:02:37:08:5d:fa:bd:2b:b4:10:dc:f9:10:a6:0f: f3:68:39:5e:e0:a6:34:f6:1f:d1:1b:6f:f0:35:e2:df:49:f3: 84:65:6c:31:80:d9:9c:6f:08:1b:4e:dc:43:0e:1a:b0:41:97: 98:ab:b5:ad:ae:a5:e8:e9:b0:da:03:0f:ee:46:c3:1c:46:18: 9b:20:35:62:3d:a6:a8:12:96:22:1f:0e:99:9c:27:a4:91:17: 58:5c:b0:c7:b1:91:d8:ad:06:69:15:dc:02:e7:22:32:5e:64: d5:c4:d3:0c:c1:1b:8f:aa:4f:7e:43:49:6f:33:29:d5:ea:e8: 7a:29:cb:c3:00:0d:7d:9e:07:96:0d:d4:95:35:48:4b:03:6b: ad:fb:89:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15b/gsdk+CUEhCNXTpjM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2 MmU4OWYwHhcNMjUxMjA2MjMwMTA1WhcNMjUxMjA3MjMwMTA1WjAzMTEwLwYDVQQD EygxODMxMTQ1Y2U2Y2NjZDhiMDA2Y2NiYjRhMTFmZDJmMzAxMjM4MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cKDptRhA4VGs0Dvb+CR11JGIWZL woD/7FiNn9rhrKj57kPr2pnHmXmUsLkJhVXnZAsHjWqf/75qTRK6Rlvaw6ab3qoQ FDg5ZFbWuHYjfkQ/va5YZcy7V4/Au6IDGqjsv3PPePjPruqU554Dbl5JZkamXXMp DuyFtKuo7WwvJGULwM8JRVc1n3JnnJP1vk4r2GaXwDQ4EGKxK2D/dYnokhoJRmtv 7SzYm6j4499JsLOGfCEpfn3LwLBZ3six4MFpEGxJt856/pdxKb7SVjHnFrnExanF bTOKAiEbQFoekM9grlQX6Rl4nqmAxewpE0TvXI0ZYWGtIxFfj4OtTERr2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgxFFzmzM2LAGzLtKEf0vMBI4MZMB8GA1UdIwQY MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5WNhQHV xq0/WvNC94UflxWXFDNnrCZUPHtOes+4LF+K4tdZbRnSSnIeMrU/cx13HKYRo7kP 4HlZz6YEgZReN97AsT6yHyRSnv0WB4GS9TxS8CKBJNMbefZ3duKxwSvaNUuk5nzF Y4Q0TwfDqMrbIwI3CF36vSu0ENz5EKYP82g5XuCmNPYf0Rtv8DXi30nzhGVsMYDZ nG8IG07cQw4asEGXmKu1ra6l6Omw2gMP7kbDHEYYmyA1Yj2mqBKWIh8OmZwnpJEX WFywx7GR2K0GaRXcAuciMl5k1cTTDMEbj6pPfkNJbzMp1eroeinLwwANfZ4Hlg3U lTVISwNrrfuJyw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:42 2025 by rpki-client