This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json) Hash identifier: bvle8qRFkRpX8JY8u/pnEUplNyXNY5x2j+vNb1flcro= Subject key identifier: 0E:8E:B2:1A:E0:0E:14:06:CA:8D:CE:FC:FC:4C:13:1D:29:BD:DC:49 Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90 Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590 Certificate serial: 019AF1643776AE204C5EF4F1064A434FA6EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft Manifest number: 116B Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: 6zlBBNelM9ZMd3dz80JewRnsRkERgtXAs5AMh/3DfKA=) 2: qztp8oOkrsOnZQZ-AVesJkd8gBA.roa (hash: w8j5kLnBBDJA6YAxwk7yr2iHlxdseJ2t5FGwhKWuj0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:37:76:ae:20:4c:5e:f4:f1:06:4a:43:4f:a6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=0e8eb21ae00e1406ca8dcefcfc4c131d29bddc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3c:73:ef:5e:5c:44:ee:e6:df:b3:ab:46:2b: f6:50:57:0f:1e:ff:8f:ea:a1:30:36:96:8e:80:19: ab:56:df:40:5e:cd:e1:5a:7c:58:04:36:d3:4d:40: 16:ef:39:4f:ea:e0:a2:df:bf:59:85:02:2c:df:3c: 5d:50:09:54:ad:0b:50:13:54:65:24:31:7b:e5:4c: 40:92:47:7e:a7:a9:c9:f1:66:62:59:ff:d8:27:7f: 8f:08:cb:f6:8c:c2:c7:c7:db:76:06:5f:37:97:be: 5e:01:f7:60:8b:b3:ac:02:bc:73:35:8e:fc:a9:86: a4:1b:1f:48:a6:d4:29:dd:8f:a9:a3:20:d1:d1:8e: 14:c9:15:a6:ba:12:3b:a3:d6:cb:23:6a:da:c1:4a: 5f:b3:0f:a5:8f:df:5f:16:2d:81:b0:fd:d7:4c:6e: fb:62:b2:1c:98:67:94:a0:9a:d6:df:f0:91:51:b1: c2:47:64:a4:ba:82:5e:16:fc:54:bb:48:7b:7e:e8: 8b:f9:30:57:c3:dc:0e:5d:fa:48:be:6a:1d:7b:08: a7:c2:12:27:4b:ee:46:68:4b:e2:31:e8:b2:2e:2f: 3c:92:a4:1a:f7:76:41:ff:ef:1d:a4:e5:97:fd:ea: ba:e6:92:4a:21:0c:86:96:17:30:55:00:57:e9:b2: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:B2:1A:E0:0E:14:06:CA:8D:CE:FC:FC:4C:13:1D:29:BD:DC:49 X509v3 Authority Key Identifier: keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e3:aa:aa:7f:97:70:7e:e9:13:9a:bd:e8:4c:97:cb:12:76: 14:d9:ff:f7:5d:4e:c8:34:ed:ca:d9:23:bd:6e:dd:46:ce:f0: 9a:37:0a:79:23:e5:8c:8e:d4:e5:ee:56:e0:eb:f6:63:3c:2b: 94:c9:43:e7:08:f1:60:9b:d1:bd:d8:f9:41:99:66:c0:33:51: 16:57:27:db:5e:17:a9:80:3b:92:e1:31:6d:f1:2c:c5:94:06: d1:c0:b9:a3:67:8b:13:45:9e:3f:3f:75:09:ed:8e:5b:2c:71: 0c:05:89:d8:7a:ee:14:64:c3:23:53:53:c2:de:6d:c4:08:df: 47:e9:d6:4c:45:00:8e:cb:20:ce:78:e5:88:2e:e7:b1:73:49: e7:88:d3:2b:22:6a:3c:c2:5b:81:b4:52:4b:3c:ac:53:cf:de: b5:bd:a1:c8:f8:cc:0b:45:6a:a2:d8:59:c7:3f:5b:bf:e9:c2: d5:41:4c:67:39:c6:bb:79:44:2e:e6:a7:c4:eb:d4:61:95:41: c1:7c:8c:58:44:74:e4:fa:7f:21:b6:b7:93:ba:9f:f8:0f:a1: fb:8a:17:aa:b9:6b:de:dc:17:04:46:ef:37:41:5f:ae:77:48: 4c:99:0e:b7:07:bc:a9:d1:34:d8:33:0d:5e:f3:f7:4e:95:2c: 06:58:08:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDd2riBMXvTxBkpDT6brMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjAyODA4ZDFmOTE0NTU1ZTFiZDU5YzE2NzcyODdmZjli M2I1OTAwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD EygwZThlYjIxYWUwMGUxNDA2Y2E4ZGNlZmNmYzRjMTMxZDI5YmRkYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zxz715cRO7m37OrRiv2UFcPHv+P 6qEwNpaOgBmrVt9AXs3hWnxYBDbTTUAW7zlP6uCi379ZhQIs3zxdUAlUrQtQE1Rl JDF75UxAkkd+p6nJ8WZiWf/YJ3+PCMv2jMLHx9t2Bl83l75eAfdgi7OsArxzNY78 qYakGx9IptQp3Y+poyDR0Y4UyRWmuhI7o9bLI2rawUpfsw+lj99fFi2BsP3XTG77 YrIcmGeUoJrW3/CRUbHCR2SkuoJeFvxUu0h7fuiL+TBXw9wOXfpIvmodewinwhIn S+5GaEviMeiyLi88kqQa93ZB/+8dpOWX/eq65pJKIQyGlhcwVQBX6bINnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6OshrgDhQGyo3O/PxMEx0pvdxJMB8GA1UdIwQY MBaAFJ0gKAjR+RRVXhvVnBZ3KH/5s7WQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1Njgt ODgwYjJkZjU3ZjI1LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1NjgtODgwYjJkZjU3ZjI1 LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeOqqn+X cH7pE5q96EyXyxJ2FNn/911OyDTtytkjvW7dRs7wmjcKeSPljI7U5e5W4Ov2Yzwr lMlD5wjxYJvRvdj5QZlmwDNRFlcn214XqYA7kuExbfEsxZQG0cC5o2eLE0WePz91 Ce2OWyxxDAWJ2HruFGTDI1NTwt5txAjfR+nWTEUAjssgznjliC7nsXNJ54jTKyJq PMJbgbRSSzysU8/etb2hyPjMC0VqothZxz9bv+nC1UFMZznGu3lELuanxOvUYZVB wXyMWER05Pp/Iba3k7qf+A+h+4oXqrlr3twXBEbvN0FfrndITJkOtwe8qdE02DMN XvP3TpUsBlgIzA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:03 2025 by rpki-client