This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json) Hash identifier: mPdrgSwv4PiLyKjzccioT24zCCrHSNz0xwpsJx0pUSA= Subject key identifier: 8E:58:43:9B:3F:5A:CB:E6:C3:F7:E6:E8:FD:FD:00:D7:08:72:14:FE Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5 Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5 Certificate serial: 019AF2094705BEEBA80AF92C1756EC91375B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft Manifest number: 0DFD Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=) 2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: lu6ZQWBiJwa9tFwce2wZR3jXBSRqiyY4jMsa1MH3048=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:47:05:be:eb:a8:0a:f9:2c:17:56:ec:91:37:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=8e58439b3f5acbe6c3f7e6e8fdfd00d7087214fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:e2:d1:36:a8:53:fc:92:9d:d8:66:95:36: 71:98:66:d4:22:ee:78:ca:5e:e5:03:a3:59:49:57: 79:ef:dc:9e:66:de:42:d6:c2:b1:c5:97:ac:fc:df: 71:02:8a:f5:a3:32:59:54:b6:29:c2:7f:12:aa:00: 32:0a:17:b5:f3:59:7c:7d:09:dc:d0:9f:21:03:76: 26:18:f6:2b:bc:ca:c9:58:44:cf:13:0c:de:33:52: 8c:03:b6:ea:4e:06:31:10:a5:06:7f:bd:2b:05:72: fc:6b:fa:df:81:ef:a4:9a:ce:57:28:bf:72:c5:20: 27:38:04:3e:78:df:b1:99:f3:33:0a:a5:c4:17:27: 1c:31:9d:c0:ed:69:23:30:b4:82:12:25:f3:ff:1d: b9:48:b0:fc:fe:b3:d3:eb:90:76:5e:37:cf:16:ae: 57:07:69:60:c6:68:9d:dd:4c:85:eb:3c:86:b4:2b: 17:c7:a6:6f:23:98:14:dd:ef:db:eb:5a:86:31:56: ca:6e:13:e6:cc:50:ab:e7:db:92:3d:0e:1b:fc:bf: 81:8d:4c:d4:f3:e2:e7:f6:a0:de:3e:08:6f:22:89: 79:e1:fe:b3:9e:23:92:dc:38:3d:25:81:21:a7:eb: b7:d3:a6:65:c0:06:d1:c1:43:28:2e:b4:ab:a1:59: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:43:9B:3F:5A:CB:E6:C3:F7:E6:E8:FD:FD:00:D7:08:72:14:FE X509v3 Authority Key Identifier: keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9b:7b:a4:cc:5e:5d:fe:b6:f5:cc:04:db:5e:a6:0b:9e:d9: 42:5c:ae:46:04:86:f4:e5:c6:2e:4a:ca:37:32:ee:e4:61:73: 4d:a2:aa:ed:c5:16:96:79:1a:a5:9b:6d:a2:61:92:cc:62:fa: b5:b8:17:e5:e6:cf:1e:f0:fc:e2:fe:a1:d1:33:fb:1c:f1:38: 99:5a:3e:e8:0c:c9:d6:0f:e8:71:21:02:81:20:2e:2d:30:bb: 9d:00:6e:6a:ab:66:be:7f:50:b0:29:d3:b1:4d:bd:b6:ec:eb: ef:15:71:f5:b7:97:8f:6a:00:6e:01:10:60:6f:a0:71:23:f9: 1f:80:31:47:f2:70:fa:de:3c:34:5d:16:ab:0b:a7:35:24:22: fc:96:e2:f8:15:bc:b2:a4:49:a7:2f:db:16:8c:03:a0:14:02: 7a:52:91:50:03:16:f8:0e:a5:1c:fd:8c:94:c3:8b:eb:d7:ef: 2d:f7:81:77:4a:47:6c:59:49:b8:79:32:9c:6e:80:2e:e3:4c: f0:59:48:02:40:6c:25:25:4d:af:66:70:1b:48:5f:5b:a6:19: 70:9e:84:7c:70:4e:3f:c5:1c:4d:89:d3:21:47:a3:fe:67:59: 86:df:5d:17:8d:1d:92:6d:76:a3:0f:5d:4b:07:48:c0:bf:e5: 2a:38:90:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUcFvuuoCvksF1bskTdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjZkMTYzNTkzZGViOGFlZmYwNzJmZWNhNThlNmYzZjFj NGU3ZTUwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg4ZTU4NDM5YjNmNWFjYmU2YzNmN2U2ZThmZGZkMDBkNzA4NzIxNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hLi0TaoU/ySndhmlTZxmGbUIu54 yl7lA6NZSVd579yeZt5C1sKxxZes/N9xAor1ozJZVLYpwn8SqgAyChe181l8fQnc 0J8hA3YmGPYrvMrJWETPEwzeM1KMA7bqTgYxEKUGf70rBXL8a/rfge+kms5XKL9y xSAnOAQ+eN+xmfMzCqXEFyccMZ3A7WkjMLSCEiXz/x25SLD8/rPT65B2XjfPFq5X B2lgxmid3UyF6zyGtCsXx6ZvI5gU3e/b61qGMVbKbhPmzFCr59uSPQ4b/L+BjUzU 8+Ln9qDePghvIol54f6zniOS3Dg9JYEhp+u306ZlwAbRwUMoLrSroVm6XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5YQ5s/Wsvmw/fm6P39ANcIchT+MB8GA1UdIwQY MBaAFJ320WNZPeuK7/By/spY5vPxxOflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYt NjlkNzljOWQwNzIxLzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYtNjlkNzljOWQwNzIx LzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpt7pMxe Xf629cwE216mC57ZQlyuRgSG9OXGLkrKNzLu5GFzTaKq7cUWlnkapZttomGSzGL6 tbgX5ebPHvD84v6h0TP7HPE4mVo+6AzJ1g/ocSECgSAuLTC7nQBuaqtmvn9QsCnT sU29tuzr7xVx9beXj2oAbgEQYG+gcSP5H4AxR/Jw+t48NF0WqwunNSQi/Jbi+BW8 sqRJpy/bFowDoBQCelKRUAMW+A6lHP2MlMOL69fvLfeBd0pHbFlJuHkynG6ALuNM 8FlIAkBsJSVNr2ZwG0hfW6YZcJ6EfHBOP8UcTYnTIUej/mdZht9dF40dkm12ow9d SwdIwL/lKjiQkw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:54 2025 by rpki-client