This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json) Hash identifier: eEwof+AV7pswqJoBdgeVo3ycFWuaLgevgu5gS7C1y7w= Subject key identifier: 3A:D3:FF:58:9F:0C:02:6A:0C:42:CD:60:B5:D5:13:73:13:7F:01:E7 Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Certificate serial: 019AF389BC8472E4A454870829F032603615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 12:01:21 +0000 Manifest this update: Sat 06 Dec 2025 12:01:21 +0000 Manifest next update: Sun 07 Dec 2025 12:01:21 +0000 Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=) 2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: PfmIPj30Zxu7HEyZH8MNhFdsf0cnI+YpuBy7jziT/tQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:bc:84:72:e4:a4:54:87:08:29:f0:32:60:36:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba Validity Not Before: Dec 6 12:01:21 2025 GMT Not After : Dec 7 12:01:21 2025 GMT Subject: CN=3ad3ff589f0c026a0c42cd60b5d51373137f01e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:4e:c7:68:ed:b3:d4:8b:f0:10:35:38:1d: 4e:19:0c:00:2d:ff:12:9d:2a:ca:bc:31:a3:72:3d: 7e:5d:95:18:48:e4:27:46:20:98:fe:20:93:db:94: 98:e1:36:9c:3d:c1:c7:c9:1d:65:f9:43:71:f9:2b: b3:81:a9:7e:0b:db:4c:a4:6b:6b:d1:66:70:32:58: 31:52:64:4a:05:fe:9b:e2:a6:4d:bc:cf:4b:ec:b7: 99:da:be:b8:f6:59:b5:ba:58:25:b1:ba:2f:82:4d: 37:c1:d0:9d:d6:9a:d3:0f:7e:81:a4:13:68:6b:b9: da:68:90:bf:9c:26:a7:48:1a:d7:6b:4f:0f:68:56: d3:8d:a5:ac:52:a9:88:24:e0:60:f3:7b:2b:09:6a: 46:91:f4:c8:de:5f:37:bb:cf:b4:6f:2d:80:c3:3d: da:3f:2e:46:ac:06:68:74:1b:9c:98:2d:fa:54:6e: 2c:20:ea:93:f0:50:5d:55:c5:94:b8:ef:4b:54:8a: d3:90:a7:f3:5f:f1:d0:da:54:81:59:68:a8:a0:bf: 63:12:ce:7a:71:eb:97:f9:6e:2d:14:b6:f0:6d:ef: a5:be:29:1a:59:8e:3f:54:ef:f0:70:f0:bc:8e:72: c3:5c:38:58:d4:e2:9f:87:9b:07:57:07:d2:3f:f0: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:FF:58:9F:0C:02:6A:0C:42:CD:60:B5:D5:13:73:13:7F:01:E7 X509v3 Authority Key Identifier: keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:76:31:61:f3:01:58:31:80:5c:d1:72:34:55:e3:bc:ba:93: 9a:74:27:d7:39:22:e4:99:77:cb:66:de:fd:26:2d:b5:7b:6e: 7a:1f:67:f6:54:b8:96:0d:ae:4a:80:fd:26:3b:0b:ce:ea:4c: 57:8b:ac:10:9a:7e:05:41:3a:7f:f1:94:49:e8:9a:9b:cd:95: 09:84:ab:8e:3f:ab:39:7e:3a:5b:58:77:4e:9f:07:7e:0e:1c: 7f:20:b7:f2:43:bf:9c:19:0c:e9:78:6c:7e:c5:b2:b4:26:ed: 12:33:10:4f:bf:84:2b:71:41:69:09:7d:b3:2c:ba:72:ec:fe: 6d:06:35:29:83:16:f2:65:68:c4:2f:7d:4b:4a:4d:03:5f:e2: da:06:8c:db:57:de:fe:10:eb:cc:b7:96:fa:1d:71:f9:41:ee: 3b:7c:c9:3c:e0:e8:c6:d0:66:35:bd:44:01:59:3e:0c:91:0a: 0e:64:39:c4:d1:76:3a:dd:bc:b7:ad:dc:d3:7c:8d:2f:61:5c: 73:cd:be:7b:0c:68:c1:ac:e4:64:c6:05:85:58:92:34:6a:94: 95:bb:7c:9d:f4:8b:b8:ea:e1:d2:41:c3:99:9f:9f:95:8c:8f: 0e:44:bf:73:9d:20:32:02:55:5f:b6:92:1f:83:64:27:60:d4: 35:4b:78:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibyEcuSkVIcIKfAyYDYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGZhZTZkMmMyNWRkNWYyZmIxNmI0ZmJlYTI4NGU2NjU4 YzEyYmEwHhcNMjUxMjA2MTIwMTIxWhcNMjUxMjA3MTIwMTIxWjAzMTEwLwYDVQQD EygzYWQzZmY1ODlmMGMwMjZhMGM0MmNkNjBiNWQ1MTM3MzEzN2YwMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu5Ox2jts9SL8BA1OB1OGQwALf8S nSrKvDGjcj1+XZUYSOQnRiCY/iCT25SY4TacPcHHyR1l+UNx+Suzgal+C9tMpGtr 0WZwMlgxUmRKBf6b4qZNvM9L7LeZ2r649lm1ulglsbovgk03wdCd1prTD36BpBNo a7naaJC/nCanSBrXa08PaFbTjaWsUqmIJOBg83srCWpGkfTI3l83u8+0by2Awz3a Py5GrAZodBucmC36VG4sIOqT8FBdVcWUuO9LVIrTkKfzX/HQ2lSBWWiooL9jEs56 ceuX+W4tFLbwbe+lvikaWY4/VO/wcPC8jnLDXDhY1OKfh5sHVwfSP/CKQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrT/1ifDAJqDELNYLXVE3MTfwHnMB8GA1UdIwQY MBaAFJ5Prm0sJd1fL7FrT76ihOZljBK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTkt Mzk0ZmY5MjhmNTcwLzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTktMzk0ZmY5MjhmNTcw LzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3YxYfMB WDGAXNFyNFXjvLqTmnQn1zki5Jl3y2be/SYttXtueh9n9lS4lg2uSoD9JjsLzupM V4usEJp+BUE6f/GUSeiam82VCYSrjj+rOX46W1h3Tp8Hfg4cfyC38kO/nBkM6Xhs fsWytCbtEjMQT7+EK3FBaQl9syy6cuz+bQY1KYMW8mVoxC99S0pNA1/i2gaM21fe /hDrzLeW+h1x+UHuO3zJPODoxtBmNb1EAVk+DJEKDmQ5xNF2Ot28t63c03yNL2Fc c82+ewxowazkZMYFhViSNGqUlbt8nfSLuOrh0kHDmZ+flYyPDkS/c50gMgJVX7aS H4NkJ2DUNUt44A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:46 2025 by rpki-client