This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft File: nRNTyAuINe6erTfvfp9kIQp3O_s.mft (raw, json) Hash identifier: sdDszULfUNcjKEUDrQOPMmNZEi05yxrTkuSXRBLZanE= Subject key identifier: 6F:32:38:7F:85:D1:4D:96:A1:55:0A:7F:E7:61:77:D2:88:BC:07:F9 Authority key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB Certificate issuer: /CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb Certificate serial: 019AF1D1FCEE92A8BF023A7C8CF742CF2197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft Manifest number: 6A Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: h7RdhDIV1C5WSc7VJc13A40szec.roa (hash: MPtbFLiB5MPxer0WAd9DiLzHkCH52FgnwU1ImY4G22Y=) 2: nRNTyAuINe6erTfvfp9kIQp3O_s.crl (hash: fn2iRPwnQA56NkG5P9RJvMkBsqONhF37jei4RV+yPsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fc:ee:92:a8:bf:02:3a:7c:8c:f7:42:cf:21:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=6f32387f85d14d96a1550a7fe76177d288bc07f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:ca:cd:0d:de:cd:40:c4:8d:21:c3:45:e4: df:9e:60:f7:f5:75:7b:f3:15:23:a7:f0:92:24:1d: b7:5c:78:6d:05:d1:2f:4a:d6:0c:32:59:03:fb:8c: 69:63:12:e5:46:b1:8e:a7:50:6d:d2:2f:70:8e:1f: 7c:c6:3e:15:ee:14:50:97:ea:0a:2a:d6:52:00:97: 07:21:47:7f:a6:be:1c:50:87:49:56:8e:dc:5f:50: 54:9b:e1:24:f2:96:53:37:a2:31:98:fb:4d:78:6f: b0:df:3a:9f:8f:49:d6:f0:77:2f:b3:7d:65:54:90: 57:07:5e:8a:84:ea:eb:00:b3:a3:a3:21:dc:6b:e8: 36:31:4e:00:94:9d:f8:eb:b5:35:75:01:97:c5:3a: e5:4b:5a:17:c4:d3:5b:f0:94:50:db:41:f0:0b:d4: 57:4e:c3:a9:ba:1d:2b:b1:d9:84:26:94:bd:b0:34: 6c:e2:08:2f:37:e7:57:b5:d9:5d:1e:39:1a:da:f1: 30:39:1d:8a:de:4b:07:1d:61:93:5c:18:20:f3:e8: 62:b7:a9:c3:74:8f:47:d2:c6:60:de:64:a3:93:f9: f9:f9:4e:f2:29:d2:ad:e4:96:84:75:3f:6e:0d:92: d6:61:0a:32:27:8f:ac:7f:97:da:5b:32:3a:c0:db: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:32:38:7F:85:D1:4D:96:A1:55:0A:7F:E7:61:77:D2:88:BC:07:F9 X509v3 Authority Key Identifier: keyid:9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f5:1e:89:11:7e:6d:53:3a:ed:50:27:12:06:8c:9b:a6:a1: 40:0c:45:6e:b5:58:ee:0d:da:d9:40:fd:cd:b1:d5:5b:8a:cb: 5b:98:ab:21:61:eb:ca:4e:b1:90:00:65:94:23:33:91:bb:00: b0:a2:ff:39:aa:eb:f4:27:4d:25:89:3b:dd:c8:44:14:2e:2a: d8:68:30:aa:ce:e9:ad:4e:73:73:f5:4f:ed:e3:20:3b:29:df: 3f:da:e6:96:01:5f:d7:ba:a1:3f:85:00:2e:9c:17:58:0b:66: 1f:d6:e3:71:ce:f7:38:dd:33:73:93:ca:9a:67:20:05:c8:44: f8:ef:fd:c9:0d:4c:18:3f:fe:0f:b6:51:6f:a1:f5:6c:3d:ed: 68:ff:04:79:32:4e:0d:8d:56:08:aa:f0:5b:ec:21:bd:1e:70: 26:6d:8c:0e:91:f8:44:a5:23:ff:85:80:4d:22:62:ea:58:29: 0d:51:09:ac:cd:8f:b9:a3:15:f3:da:1d:d0:87:d8:90:eb:51: 28:f5:ae:69:36:78:2a:d0:82:fa:80:f2:d7:60:d0:d6:32:ea: ce:6f:de:b7:48:1c:fb:08:7c:1f:db:61:41:27:d8:dc:c6:a1: 2a:77:90:8b:57:b8:b2:c3:ad:3a:5b:9b:03:39:c5:cc:ba:24: 84:c2:ce:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fzukqi/Ajp8jPdCzyGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMTM1M2M4MGI4ODM1ZWU5ZWFkMzdlZjdlOWY2NDIxMGE3 NzNiZmIwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD Eyg2ZjMyMzg3Zjg1ZDE0ZDk2YTE1NTBhN2ZlNzYxNzdkMjg4YmMwN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAbKzQ3ezUDEjSHDReTfnmD39XV7 8xUjp/CSJB23XHhtBdEvStYMMlkD+4xpYxLlRrGOp1Bt0i9wjh98xj4V7hRQl+oK KtZSAJcHIUd/pr4cUIdJVo7cX1BUm+Ek8pZTN6IxmPtNeG+w3zqfj0nW8Hcvs31l VJBXB16KhOrrALOjoyHca+g2MU4AlJ3467U1dQGXxTrlS1oXxNNb8JRQ20HwC9RX TsOpuh0rsdmEJpS9sDRs4ggvN+dXtdldHjka2vEwOR2K3ksHHWGTXBgg8+hit6nD dI9H0sZg3mSjk/n5+U7yKdKt5JaEdT9uDZLWYQoyJ4+sf5faWzI6wNuqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8yOH+F0U2WoVUKf+dhd9KIvAf5MB8GA1UdIwQY MBaAFJ0TU8gLiDXunq03736fZCEKdzv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJOVHlBdUlOZTZlclRmdmZwOWtJUXAzT19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yNWE2MjUtNjQ5Yy00YTExLWI3ZWIt YTQzZDk5ZmUxMWUxLzEvblJOVHlBdUlOZTZlclRmdmZwOWtJUXAzT19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8yNWE2MjUtNjQ5Yy00YTExLWI3ZWItYTQzZDk5ZmUxMWUx LzEvblJOVHlBdUlOZTZlclRmdmZwOWtJUXAzT19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/UeiRF+ bVM67VAnEgaMm6ahQAxFbrVY7g3a2UD9zbHVW4rLW5irIWHryk6xkABllCMzkbsA sKL/Oarr9CdNJYk73chEFC4q2Ggwqs7prU5zc/VP7eMgOynfP9rmlgFf17qhP4UA LpwXWAtmH9bjcc73ON0zc5PKmmcgBchE+O/9yQ1MGD/+D7ZRb6H1bD3taP8EeTJO DY1WCKrwW+whvR5wJm2MDpH4RKUj/4WATSJi6lgpDVEJrM2PuaMV89od0IfYkOtR KPWuaTZ4KtCC+oDy12DQ1jLqzm/et0gc+wh8H9thQSfY3MahKneQi1e4ssOtOlub AznFzLokhMLO9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:38 2025 by rpki-client