This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json) Hash identifier: BWla9Z6ywHbVS5cf7dKOKP3vVxEVWfdmlxOHmf/WZCI= Subject key identifier: 52:C7:51:56:A0:A1:49:0B:F3:84:A9:ED:86:82:DC:D1:7E:6C:E2:BF Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Certificate serial: 019AF3C072B890BB6730924258FDABCB3A52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft Manifest number: 10E1 Signing time: Sat 06 Dec 2025 13:01:07 +0000 Manifest this update: Sat 06 Dec 2025 13:01:07 +0000 Manifest next update: Sun 07 Dec 2025 13:01:07 +0000 Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=) 2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=) 3: DfN89u0ZvthZxMTnUcXpfMOlKTs.roa (hash: msvl5pQNrCHYRzIqm+ZhzceMHlWNrK7pVc4fvVU8Aig=) 4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: 9d5K+p4XPYOKKP7QXrpdwaqjEN1v494Lxa9eI8x0RZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:72:b8:90:bb:67:30:92:42:58:fd:ab:cb:3a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Validity Not Before: Dec 6 13:01:07 2025 GMT Not After : Dec 7 13:01:07 2025 GMT Subject: CN=52c75156a0a1490bf384a9ed8682dcd17e6ce2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:ab:dd:d5:df:9c:5f:01:4c:51:ac:7e:92: ac:14:45:a1:57:56:f8:c7:33:52:b7:50:75:ed:37: af:f9:cb:ba:1c:13:0c:de:73:e4:d9:2a:d8:87:de: e8:43:1d:9d:9e:86:1d:b6:9b:0e:3a:6b:6b:44:5a: 9a:1d:56:30:db:94:9f:8e:8a:4a:70:68:c5:a9:12: b6:e1:8a:7e:fc:01:b9:ef:15:ad:a1:dd:08:09:e7: 07:49:63:a0:a2:ec:9e:71:ad:97:c3:07:21:73:27: c1:67:02:94:6a:76:6b:49:16:60:e4:55:b0:86:b5: d3:10:8c:84:44:0e:03:a4:ca:cf:60:43:97:d6:f2: 77:27:2b:07:58:ad:02:44:a7:21:a9:55:5c:65:66: 4c:02:ab:fd:bd:88:11:92:13:a5:bf:6b:a5:b7:7d: 2e:72:0d:e3:cf:94:02:42:ad:94:de:4c:11:1b:c2: 91:12:75:ec:c6:b4:35:86:8d:7f:77:99:37:75:36: 7b:6c:34:4f:10:89:6a:93:dd:36:ed:a2:a4:01:ab: 6f:cf:ed:1f:a8:9d:04:5a:0e:07:28:79:24:48:45: 5f:5f:bb:bb:ba:f9:8d:c3:e4:31:ab:33:54:2d:e0: b2:16:c1:bd:0f:18:ea:3e:d8:34:84:24:ee:93:d2: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C7:51:56:A0:A1:49:0B:F3:84:A9:ED:86:82:DC:D1:7E:6C:E2:BF X509v3 Authority Key Identifier: keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a6:24:d6:9f:40:94:12:d7:64:53:c4:6c:ca:59:71:d6:0b: 31:a7:16:30:95:85:80:bd:b7:3f:91:08:5b:de:17:53:3b:9a: e4:bb:2a:e5:f8:c1:bd:81:01:a4:6e:19:df:96:53:1b:e9:bc: e2:7b:02:6a:dc:71:0f:a8:d2:8a:bf:c1:48:10:7c:31:4f:c5: 16:5f:f4:66:f0:69:21:5e:00:ac:10:46:41:60:59:35:0e:3c: 53:82:d3:b6:8b:cb:37:d6:e4:2b:0f:88:b5:64:e4:2b:0a:92: 5f:4e:82:92:be:f2:1f:04:6f:d2:a9:17:d5:0e:b4:34:8d:f2: 95:9a:ef:fc:07:b9:69:60:e3:f0:b5:3f:f0:61:19:90:2b:46: 75:5e:5b:06:4e:de:2f:08:92:3b:6f:52:6b:45:1a:1f:53:5e: c7:c7:cf:67:1b:af:36:90:78:ce:43:99:9b:05:ad:b0:e2:54: 4b:55:c0:43:b3:4c:ef:14:ed:8c:b5:24:81:e0:c0:d7:69:8f: 48:cd:82:83:e6:d7:f5:ee:9a:ee:9f:0c:cb:c0:60:de:47:a4: a6:c9:48:70:ec:f6:25:85:37:f9:a8:67:28:2b:e5:b7:a7:4d: 41:f3:e8:6c:ec:6f:f2:a2:21:55:6d:dd:26:a8:30:83:c4:20: 89:d8:a1:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHK4kLtnMJJCWP2ryzpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDQxZTllNzA1YWRhM2Y5YzFlODI3Y2QyNzZkYmQwOTc0 ODc2MDgwHhcNMjUxMjA2MTMwMTA3WhcNMjUxMjA3MTMwMTA3WjAzMTEwLwYDVQQD Eyg1MmM3NTE1NmEwYTE0OTBiZjM4NGE5ZWQ4NjgyZGNkMTdlNmNlMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphur3dXfnF8BTFGsfpKsFEWhV1b4 xzNSt1B17Tev+cu6HBMM3nPk2SrYh97oQx2dnoYdtpsOOmtrRFqaHVYw25SfjopK cGjFqRK24Yp+/AG57xWtod0ICecHSWOgouyeca2XwwchcyfBZwKUanZrSRZg5FWw hrXTEIyERA4DpMrPYEOX1vJ3JysHWK0CRKchqVVcZWZMAqv9vYgRkhOlv2ult30u cg3jz5QCQq2U3kwRG8KREnXsxrQ1ho1/d5k3dTZ7bDRPEIlqk9027aKkAatvz+0f qJ0EWg4HKHkkSEVfX7u7uvmNw+QxqzNULeCyFsG9DxjqPtg0hCTuk9J/iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLHUVagoUkL84Sp7YaC3NF+bOK/MB8GA1UdIwQY MBaAFJ5EHp5wWto/nB6CfNJ229CXSHYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWIt OTMyZDE2YjA4ZGYwLzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWItOTMyZDE2YjA4ZGYw LzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKYk1p9A lBLXZFPEbMpZcdYLMacWMJWFgL23P5EIW94XUzua5Lsq5fjBvYEBpG4Z35ZTG+m8 4nsCatxxD6jSir/BSBB8MU/FFl/0ZvBpIV4ArBBGQWBZNQ48U4LTtovLN9bkKw+I tWTkKwqSX06Ckr7yHwRv0qkX1Q60NI3ylZrv/Ae5aWDj8LU/8GEZkCtGdV5bBk7e LwiSO29Sa0UaH1Nex8fPZxuvNpB4zkOZmwWtsOJUS1XAQ7NM7xTtjLUkgeDA12mP SM2Cg+bX9e6a7p8My8Bg3kekpslIcOz2JYU3+ahnKCvlt6dNQfPobOxv8qIhVW3d Jqgwg8QgidihiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:59 2025 by rpki-client