This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json) Hash identifier: K0kG+nC3Wj02sKkaPQqQMrEDaeG2PbsqHgKQxFznOEA= Subject key identifier: 2C:34:79:67:BA:02:BB:DA:89:43:29:A2:38:8E:FC:43:B3:F3:E3:7E Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Certificate serial: 019AF208EE97F2DA3C2152A13D62AC3DD548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=) 2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: A78FN/S1zAUrnoxL9Lf8dhlngz736zBpUex3eBrAark=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ee:97:f2:da:3c:21:52:a1:3d:62:ac:3d:d5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=2c347967ba02bbda894329a2388efc43b3f3e37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:24:14:95:c0:2d:cc:2e:18:dc:12:ab:24: a6:e9:6b:81:0e:63:b3:2f:c4:c5:07:3d:49:9c:4b: 63:89:34:e1:64:db:f2:0b:c5:f4:c7:8d:19:05:8c: 7b:2e:a9:45:4a:e6:ef:94:89:1a:5d:a1:6c:a1:8e: 31:f4:53:8c:e2:39:b1:3d:6a:ca:64:4c:e6:6d:ac: 5d:1c:7c:30:1e:c4:48:e8:0a:aa:8a:9f:35:2f:93: 82:df:27:52:34:f5:20:28:7e:bc:b3:26:d2:45:3b: 72:34:a0:f1:a6:d5:b8:28:6b:3c:9c:d7:24:3f:2f: 31:af:07:cc:cd:09:8d:71:77:73:09:bc:24:40:a8: f1:bd:88:ec:03:e7:8f:d4:88:01:3a:f8:4f:f3:43: 31:15:fd:b5:58:f9:7e:23:df:50:51:49:36:0d:28: 8c:cb:6d:ee:af:08:84:8f:ca:9c:d8:1f:be:76:07: 46:d7:f2:95:0e:16:5f:cc:ef:f3:cb:54:cb:e6:b6: d8:e0:49:27:a3:9b:91:b4:72:19:f5:ed:3b:a0:86: 37:7d:bb:fe:35:ec:16:04:1d:26:6e:7e:c8:3d:69: d3:3c:1a:a0:48:f7:e8:44:30:e0:4a:34:82:70:7f: d6:e2:18:db:43:42:ed:b7:19:a3:5f:67:7c:d3:ed: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:34:79:67:BA:02:BB:DA:89:43:29:A2:38:8E:FC:43:B3:F3:E3:7E X509v3 Authority Key Identifier: keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:13:3f:1a:30:e0:a6:ba:61:9f:08:92:62:e4:88:0b:45:e7: 9c:14:3e:de:75:07:75:5e:0a:b5:e6:0e:33:f2:a6:60:b1:b2: 30:3f:9f:15:2e:07:45:de:b7:7f:6a:ce:21:26:69:54:b6:1c: e9:4e:48:b7:fb:5c:db:f2:c9:17:f3:7f:2c:c0:6f:1f:e3:f5: 69:46:85:29:43:94:c3:07:f2:98:fe:c0:c1:66:b5:d7:be:c9: 6b:2d:ea:e1:6d:59:52:2c:42:ff:f8:08:f7:2b:6e:e8:1a:04: 36:ea:73:36:2f:b6:91:0b:9c:bd:a8:bb:ce:64:11:f3:fa:ac: c3:95:20:ef:7e:45:26:a9:8a:cf:da:48:67:ab:cd:62:9d:b8: 5e:72:d1:65:85:26:24:a2:27:fe:d3:02:72:1a:ca:5f:47:3e: 60:8a:e9:ff:10:33:1f:a9:5a:7b:fc:e4:9e:0e:7d:d4:46:35: 05:e2:6e:7a:e0:b3:4a:8a:d1:14:70:7d:6d:ed:d7:c6:87:aa: cf:31:89:b3:40:83:99:55:82:3b:ba:63:0f:a6:8d:32:38:23: c1:82:ca:88:a3:19:a9:18:21:35:2b:a8:52:9e:64:cd:71:cb: d1:39:64:16:cb:01:99:00:58:6a:7a:c2:6a:36:e4:25:6e:74: e7:58:c7:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO6X8to8IVKhPWKsPdVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1 ZWNmMWEwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD EygyYzM0Nzk2N2JhMDJiYmRhODk0MzI5YTIzODhlZmM0M2IzZjNlMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4wkFJXALcwuGNwSqySm6WuBDmOz L8TFBz1JnEtjiTThZNvyC8X0x40ZBYx7LqlFSubvlIkaXaFsoY4x9FOM4jmxPWrK ZEzmbaxdHHwwHsRI6Aqqip81L5OC3ydSNPUgKH68sybSRTtyNKDxptW4KGs8nNck Py8xrwfMzQmNcXdzCbwkQKjxvYjsA+eP1IgBOvhP80MxFf21WPl+I99QUUk2DSiM y23urwiEj8qc2B++dgdG1/KVDhZfzO/zy1TL5rbY4Ekno5uRtHIZ9e07oIY3fbv+ NewWBB0mbn7IPWnTPBqgSPfoRDDgSjSCcH/W4hjbQ0LttxmjX2d80+2fEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw0eWe6ArvaiUMpojiO/EOz8+N+MB8GA1UdIwQY MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt MjgyOWFhM2RmMjU4LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4 LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhM/GjDg prphnwiSYuSIC0XnnBQ+3nUHdV4KteYOM/KmYLGyMD+fFS4HRd63f2rOISZpVLYc 6U5It/tc2/LJF/N/LMBvH+P1aUaFKUOUwwfymP7AwWa1177Jay3q4W1ZUixC//gI 9ytu6BoENupzNi+2kQucvai7zmQR8/qsw5Ug735FJqmKz9pIZ6vNYp24XnLRZYUm JKIn/tMCchrKX0c+YIrp/xAzH6lae/zkng591EY1BeJueuCzSorRFHB9be3Xxoeq zzGJs0CDmVWCO7pjD6aNMjgjwYLKiKMZqRghNSuoUp5kzXHL0TlkFssBmQBYanrC ajbkJW5051jHpg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:24 2025 by rpki-client