This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json) Hash identifier: FTV0+S45rZHbOlLxlX7PmKHC9Zd9MtMC8hegI76Sgrc= Subject key identifier: DC:65:02:09:CA:92:90:24:0F:5C:C9:E8:CB:BD:CB:5A:AC:AC:5A:CA Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76 Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76 Certificate serial: 019AF49BFC7EED9660A88B95D02B67EB474E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft Manifest number: 11F8 Signing time: Sat 06 Dec 2025 17:00:54 +0000 Manifest this update: Sat 06 Dec 2025 17:00:54 +0000 Manifest next update: Sun 07 Dec 2025 17:00:54 +0000 Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=) 2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: M8bkIPygZgn7LUOngOxnDjJVO0FhPNF180YxPoakQoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:fc:7e:ed:96:60:a8:8b:95:d0:2b:67:eb:47:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76 Validity Not Before: Dec 6 17:00:54 2025 GMT Not After : Dec 7 17:00:54 2025 GMT Subject: CN=dc650209ca9290240f5cc9e8cbbdcb5aacac5aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:b6:45:19:4e:e3:05:a2:45:04:bf:6d:df: 80:10:90:9b:f4:c3:cd:81:3e:64:fb:64:c4:f5:b0: 40:93:b3:38:5c:97:be:cb:b5:9c:ce:95:17:21:c1: d4:21:65:bd:0a:88:38:c6:17:18:93:d8:d6:9f:49: a7:1f:58:8c:25:f1:a5:87:8d:29:34:b0:b1:4f:af: af:05:bf:e5:63:8d:e9:06:78:0f:73:93:09:7d:62: 92:4f:b5:51:eb:8e:0e:1c:3b:62:7d:ae:53:ad:3e: 1e:3b:80:0f:e7:f7:00:95:fc:93:13:b0:94:dd:48: d4:fc:9d:4b:5c:66:5e:1f:09:ef:ca:20:5e:e1:86: 03:1b:4f:ad:32:ed:dd:dc:53:7e:a8:02:ca:94:6b: 61:e3:19:fc:17:b9:13:7b:a8:3c:50:16:a5:f4:eb: 98:de:e6:e5:7a:9e:e6:a4:15:37:24:d7:5c:e0:01: 27:4e:15:c6:95:01:83:0f:af:b8:fb:e1:04:32:7e: 47:ce:08:b1:7d:99:3d:90:bc:5f:9a:50:9a:43:8f: 00:43:6b:96:91:69:33:d2:ee:22:24:db:4f:3c:5c: 80:7e:f1:e3:b8:ce:57:b0:dd:35:3b:c2:25:80:d4: cb:92:57:0b:2b:e7:05:2f:b9:86:3c:14:57:9a:6f: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:65:02:09:CA:92:90:24:0F:5C:C9:E8:CB:BD:CB:5A:AC:AC:5A:CA X509v3 Authority Key Identifier: keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b0:2f:80:c2:33:27:e0:51:ff:71:b5:c8:a5:17:53:9a:7d: b0:a7:71:f4:eb:b5:7a:c1:27:0d:85:8c:77:67:57:3e:91:7c: de:a0:3f:8e:5e:df:20:9d:85:ec:61:2d:e2:c5:35:aa:83:50: 44:69:d2:7f:44:75:6b:d6:31:ca:1e:14:ee:a5:93:2a:18:bb: b8:dd:a9:0f:fc:bb:e9:7a:bf:51:1c:d8:75:b6:30:24:1b:9d: 28:81:25:7b:3a:5e:43:9b:c6:da:cb:76:74:86:44:f1:cb:3b: 00:b2:da:be:84:34:3d:8c:5c:12:d1:68:31:96:de:05:69:d1: 56:71:e9:a0:6c:9f:06:58:aa:ef:2a:58:89:08:c4:82:cb:0c: 64:ef:67:a4:ed:d4:84:f4:07:fd:6b:c8:00:87:0d:aa:06:90: e1:bf:2f:ef:79:61:94:67:f4:9a:1d:b4:28:af:83:19:01:06: 5d:d2:67:ee:1f:da:f0:8d:39:52:12:50:d7:23:6a:d0:19:4d: de:7d:08:86:fd:13:d0:92:c9:53:2a:b6:9d:ab:1a:af:eb:65: c2:1f:b8:20:60:f7:00:04:0a:a6:34:c0:4e:e0:99:41:13:0a: 2a:1a:40:57:de:d7:23:cb:58:46:77:e4:56:eb:68:2a:3d:4d: f4:d3:bd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/x+7ZZgqIuV0Ctn60dOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODAzYTJjZjI5MGIwYmRjNjlhZGRjMDAzZDU2NGEyMzRh YTRmNzYwHhcNMjUxMjA2MTcwMDU0WhcNMjUxMjA3MTcwMDU0WjAzMTEwLwYDVQQD EyhkYzY1MDIwOWNhOTI5MDI0MGY1Y2M5ZThjYmJkY2I1YWFjYWM1YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWi2RRlO4wWiRQS/bd+AEJCb9MPN gT5k+2TE9bBAk7M4XJe+y7WczpUXIcHUIWW9Cog4xhcYk9jWn0mnH1iMJfGlh40p NLCxT6+vBb/lY43pBngPc5MJfWKST7VR644OHDtifa5TrT4eO4AP5/cAlfyTE7CU 3UjU/J1LXGZeHwnvyiBe4YYDG0+tMu3d3FN+qALKlGth4xn8F7kTe6g8UBal9OuY 3ublep7mpBU3JNdc4AEnThXGlQGDD6+4++EEMn5HzgixfZk9kLxfmlCaQ48AQ2uW kWkz0u4iJNtPPFyAfvHjuM5XsN01O8IlgNTLklcLK+cFL7mGPBRXmm/HhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxlAgnKkpAkD1zJ6Mu9y1qsrFrKMB8GA1UdIwQY MBaAFDSAOizykLC9xprdwAPVZKI0qk92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mZTYyMzQtNjQzNy00OTY3LWJhNjMt ODVjM2ZhNzllYmMxLzEvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mZTYyMzQtNjQzNy00OTY3LWJhNjMtODVjM2ZhNzllYmMx LzEvTklBNkxQS1FzTDNHbXQzQUE5VmtvalNxVDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbAvgMIz J+BR/3G1yKUXU5p9sKdx9Ou1esEnDYWMd2dXPpF83qA/jl7fIJ2F7GEt4sU1qoNQ RGnSf0R1a9Yxyh4U7qWTKhi7uN2pD/y76Xq/URzYdbYwJBudKIElezpeQ5vG2st2 dIZE8cs7ALLavoQ0PYxcEtFoMZbeBWnRVnHpoGyfBliq7ypYiQjEgssMZO9npO3U hPQH/WvIAIcNqgaQ4b8v73lhlGf0mh20KK+DGQEGXdJn7h/a8I05UhJQ1yNq0BlN 3n0Ihv0T0JLJUyq2nasar+tlwh+4IGD3AAQKpjTATuCZQRMKKhpAV97XI8tYRnfk VutoKj1N9NO9Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:38 2025 by rpki-client