This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json) Hash identifier: FMJnZonpy9vWqEtat6j7SpnJF/BaJTtkseG+H1WBphc= Subject key identifier: D6:15:45:B6:3C:75:4E:86:89:FB:E0:69:38:32:A6:10:09:5F:75:B6 Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261 Certificate serial: 019B35696039320DFA8375004C9640F96DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft Manifest number: 0D75 Signing time: Fri 19 Dec 2025 07:00:56 +0000 Manifest this update: Fri 19 Dec 2025 07:00:56 +0000 Manifest next update: Sat 20 Dec 2025 07:00:56 +0000 Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: OvIVSrOmVxENA+KOW6OaG3tuzPn3LXzAz0xDsBe9ZyY=) 2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:60:39:32:0d:fa:83:75:00:4c:96:40:f9:6d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261 Validity Not Before: Dec 19 07:00:56 2025 GMT Not After : Dec 20 07:00:56 2025 GMT Subject: CN=d61545b63c754e8689fbe0693832a610095f75b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:c2:6e:af:13:a9:83:43:59:a0:1e:e4:57: d6:0d:5f:46:14:9f:4a:90:b7:9a:5d:80:5a:5f:86: e6:01:f9:cc:dd:27:a7:d1:66:cd:2d:da:af:1c:5d: 54:b3:49:f5:ad:33:db:58:8e:c9:87:0f:dc:95:12: 3e:a2:14:18:82:a1:78:70:4f:a1:b7:0e:b5:4c:15: 37:3f:7f:79:cc:78:94:1d:76:31:c2:b3:de:5a:35: 31:ee:c7:ea:89:1d:5f:00:5d:29:d0:e6:6c:9d:75: 8d:68:86:ea:9b:9f:43:21:46:32:d3:d7:c7:ff:bc: 9e:33:80:9f:92:9c:46:7a:80:dd:02:42:70:b9:6a: 6b:27:13:bd:92:87:3e:3d:3c:42:fe:8e:e8:99:38: 62:9f:76:5f:aa:5d:8e:d5:dc:73:b0:c7:10:5a:10: aa:d5:b5:a4:60:b0:1f:36:4a:ec:ea:b0:b4:86:80: d4:a2:d3:9f:59:02:2d:52:df:86:16:2e:6d:a3:5e: bb:0b:08:63:f6:2e:c3:76:ac:60:05:f8:22:60:16: ae:c2:ef:28:0f:f4:e9:60:74:53:e4:88:36:b2:39: 5f:f2:dd:63:4e:78:81:f0:e3:d9:fd:ad:39:4b:86: b3:c9:76:b8:f8:c7:90:1e:66:6b:85:18:8a:a7:44: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:15:45:B6:3C:75:4E:86:89:FB:E0:69:38:32:A6:10:09:5F:75:B6 X509v3 Authority Key Identifier: keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d3:15:27:ca:b3:32:e3:99:5c:63:a4:9b:66:ec:a0:a1:1c: d9:01:d5:ce:0c:0d:0f:fa:59:6b:f6:d0:cf:2c:2b:c1:38:9d: 68:a2:c4:e0:53:4e:30:68:0d:16:13:b3:95:93:fa:b6:fc:fa: d1:f8:27:b2:95:b5:b2:6a:d1:f8:fe:ac:8c:65:3c:5b:3c:43: 5e:14:e5:13:af:c9:b9:25:e0:92:4a:3b:6a:5f:3d:90:39:3c: bc:99:3f:43:b8:70:73:6e:39:46:76:18:07:80:18:3b:36:c0: a4:c2:4e:76:ea:d9:fb:a3:88:a4:68:39:c5:a2:dc:da:6c:87: 29:bb:30:c2:82:1c:23:f6:60:2a:7f:fb:26:01:50:cf:9d:b8: 06:41:a0:36:c8:2b:7d:68:c7:30:b2:5a:1b:1f:1b:16:55:0c: 0e:39:d7:46:2c:ce:b0:01:4d:3a:6b:78:c5:ea:f6:80:ba:b1: 68:42:45:84:88:ae:c9:79:03:2e:8b:e1:66:30:bc:d9:29:ea: 8d:33:dc:fd:57:e4:00:2b:7d:50:a1:1a:60:e3:be:9b:c9:10: 1e:46:6d:ec:fe:89:22:82:87:0a:49:0a:c5:42:a4:ce:e8:df: 72:d6:b2:b3:4d:97:95:86:0c:80:14:bf:7e:ed:fd:ba:0b:25: c3:f9:07:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aWA5Mg36g3UATJZA+W3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZDY3ZDEwMzNjYTQ3MmI1YmI4MGZkNTk2YmI4MzZkMTJl MjIyNjEwHhcNMjUxMjE5MDcwMDU2WhcNMjUxMjIwMDcwMDU2WjAzMTEwLwYDVQQD EyhkNjE1NDViNjNjNzU0ZTg2ODlmYmUwNjkzODMyYTYxMDA5NWY3NWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQLCbq8TqYNDWaAe5FfWDV9GFJ9K kLeaXYBaX4bmAfnM3Sen0WbNLdqvHF1Us0n1rTPbWI7Jhw/clRI+ohQYgqF4cE+h tw61TBU3P395zHiUHXYxwrPeWjUx7sfqiR1fAF0p0OZsnXWNaIbqm59DIUYy09fH /7yeM4CfkpxGeoDdAkJwuWprJxO9koc+PTxC/o7omThin3Zfql2O1dxzsMcQWhCq 1bWkYLAfNkrs6rC0hoDUotOfWQItUt+GFi5to167Cwhj9i7DdqxgBfgiYBauwu8o D/TpYHRT5Ig2sjlf8t1jTniB8OPZ/a05S4azyXa4+MeQHmZrhRiKp0TzuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYVRbY8dU6GifvgaTgyphAJX3W2MB8GA1UdIwQY MBaAFJzWfRAzykcrW7gP1Za7g20S4iJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUt ZWFhNWFjZjM1ZmQxLzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUtZWFhNWFjZjM1ZmQx LzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdMVJ8qz MuOZXGOkm2bsoKEc2QHVzgwND/pZa/bQzywrwTidaKLE4FNOMGgNFhOzlZP6tvz6 0fgnspW1smrR+P6sjGU8WzxDXhTlE6/JuSXgkko7al89kDk8vJk/Q7hwc245RnYY B4AYOzbApMJOdurZ+6OIpGg5xaLc2myHKbswwoIcI/ZgKn/7JgFQz524BkGgNsgr fWjHMLJaGx8bFlUMDjnXRizOsAFNOmt4xer2gLqxaEJFhIiuyXkDLovhZjC82Snq jTPc/VfkACt9UKEaYOO+m8kQHkZt7P6JIoKHCkkKxUKkzujfctays02XlYYMgBS/ fu39ugslw/kH1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 13:39:12 2025 by rpki-client