This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json) Hash identifier: UD6OY8W7e8vmFaoQ2qHxOJtWSw39pdyGZFDsi/gum6M= Subject key identifier: D0:0B:A6:91:78:8C:76:81:4D:24:24:1F:40:66:A0:12:57:F4:E9:A5 Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603 Certificate serial: 019AF23FACF033CFA9AAED85A154BF20D278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=) 2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: yKnPrqFUStRcfQZJYc12OiRHOmYPYgrz1NQHKVCAZbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ac:f0:33:cf:a9:aa:ed:85:a1:54:bf:20:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603 Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=d00ba691788c76814d24241f4066a01257f4e9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:46:70:44:67:cd:2b:99:9e:e3:6e:cd:46: 96:0d:5a:78:ae:fb:1e:94:e5:1d:d1:ab:64:0a:18: 14:48:76:65:7d:5f:b9:0b:38:41:31:e4:a3:a0:76: e2:e0:4c:1e:2f:3a:1c:fa:c7:8b:6d:ee:de:24:95: c7:b8:7d:b0:31:46:2c:ee:2f:8b:3e:82:1b:31:35: a8:75:67:9c:6e:44:18:ba:5d:29:ff:78:5a:d6:4d: a7:01:3b:34:f1:40:71:40:4e:48:8d:08:59:c0:75: 74:1b:f6:a5:c5:b5:85:f3:4c:36:52:a9:c4:17:de: 72:95:08:21:28:81:86:56:2f:06:67:ab:16:05:e2: 93:56:fc:b7:92:37:3a:1b:22:ae:87:32:62:ef:9a: 48:c9:f2:46:0e:13:86:b6:72:6c:c4:eb:db:12:70: ad:9c:d9:82:32:5e:e8:5b:d4:14:5e:69:d4:9a:32: ad:b6:0e:26:68:67:ab:b2:26:45:ea:10:fc:3d:b5: 86:45:cd:04:e7:bf:e9:f1:a0:29:0a:9f:24:8d:f9: 6d:d9:38:96:45:9e:43:d8:32:82:e6:4d:48:e5:e4: 54:89:52:6e:e3:25:12:3b:9a:c6:8f:75:e0:a2:71: e7:b3:00:48:cc:d4:73:97:1c:ae:8a:ff:2a:a8:81: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:A6:91:78:8C:76:81:4D:24:24:1F:40:66:A0:12:57:F4:E9:A5 X509v3 Authority Key Identifier: keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:2b:f5:9b:73:5e:0b:ed:50:21:7c:c8:d7:71:c8:46:9d:ec: 42:d5:b1:d5:aa:d2:09:09:ca:97:36:62:9a:57:61:ce:0c:23: ae:3c:ba:f0:ea:a9:8a:5f:66:78:5f:26:32:70:51:6f:80:ff: ec:b3:1d:74:d9:f4:2c:46:0a:b4:3f:59:17:15:f5:0d:ff:1b: 63:26:9b:8d:a9:b3:e8:a3:bc:68:7f:a2:5e:5b:7c:49:e4:26: 93:61:40:ff:05:0b:c3:78:66:85:cc:91:a3:d6:57:0e:61:a1: 3b:cd:59:a2:5e:0a:61:09:e7:7c:11:ea:69:63:7e:a3:f8:7d: dd:a7:8e:e1:90:18:78:ff:a4:40:14:83:09:96:db:2e:5d:0c: 88:55:ce:f7:de:c2:39:83:a7:27:cc:74:cc:f8:da:38:9e:f2: 0f:b6:33:9f:54:72:81:e3:35:bb:37:de:16:cc:de:55:8b:7b: 51:d5:bf:fe:e7:82:95:d2:f5:6c:d7:94:76:14:02:63:0b:ee: 76:da:bf:73:6e:63:87:d8:c1:9a:ce:16:18:a8:3e:91:81:72: d4:f7:b0:a7:7b:bd:6d:52:45:04:85:30:10:a2:bc:c6:8c:2f: 8a:92:f8:66:e5:46:50:ba:83:d0:e9:a9:f6:eb:b9:ec:4c:13: be:0d:d6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6zwM8+pqu2FoVS/INJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1 OTA2MDMwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EyhkMDBiYTY5MTc4OGM3NjgxNGQyNDI0MWY0MDY2YTAxMjU3ZjRlOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSBGcERnzSuZnuNuzUaWDVp4rvse lOUd0atkChgUSHZlfV+5CzhBMeSjoHbi4EweLzoc+seLbe7eJJXHuH2wMUYs7i+L PoIbMTWodWecbkQYul0p/3ha1k2nATs08UBxQE5IjQhZwHV0G/alxbWF80w2UqnE F95ylQghKIGGVi8GZ6sWBeKTVvy3kjc6GyKuhzJi75pIyfJGDhOGtnJsxOvbEnCt nNmCMl7oW9QUXmnUmjKttg4maGersiZF6hD8PbWGRc0E57/p8aApCp8kjflt2TiW RZ5D2DKC5k1I5eRUiVJu4yUSO5rGj3XgonHnswBIzNRzlxyuiv8qqIEB5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNALppF4jHaBTSQkH0BmoBJX9OmlMB8GA1UdIwQY MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiv1m3Ne C+1QIXzI13HIRp3sQtWx1arSCQnKlzZimldhzgwjrjy68Oqpil9meF8mMnBRb4D/ 7LMddNn0LEYKtD9ZFxX1Df8bYyabjamz6KO8aH+iXlt8SeQmk2FA/wULw3hmhcyR o9ZXDmGhO81Zol4KYQnnfBHqaWN+o/h93aeO4ZAYeP+kQBSDCZbbLl0MiFXO997C OYOnJ8x0zPjaOJ7yD7Yzn1RygeM1uzfeFszeVYt7UdW//ueCldL1bNeUdhQCYwvu dtq/c25jh9jBms4WGKg+kYFy1Pewp3u9bVJFBIUwEKK8xowvipL4ZuVGULqD0Omp 9uu57EwTvg3W3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:56 2025 by rpki-client