This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json) Hash identifier: QpFQ8rV0607P78iA4fuzVsmLL6Af0unxbCLKBYUwfSA= Subject key identifier: EB:6F:A0:04:C3:62:A2:73:92:B5:E3:FC:AE:B5:E3:B1:AE:9B:0E:D7 Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Certificate serial: 019AF54096BD3F4A86CC255F4A6345703F9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft Manifest number: 0C55 Signing time: Sat 06 Dec 2025 20:00:42 +0000 Manifest this update: Sat 06 Dec 2025 20:00:42 +0000 Manifest next update: Sun 07 Dec 2025 20:00:42 +0000 Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=) 2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: oH5jDsLUVIiNlkr1/5y8LRgJ0XMJ2dgW8p+fC0wTH1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:96:bd:3f:4a:86:cc:25:5f:4a:63:45:70:3f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Validity Not Before: Dec 6 20:00:42 2025 GMT Not After : Dec 7 20:00:42 2025 GMT Subject: CN=eb6fa004c362a27392b5e3fcaeb5e3b1ae9b0ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:8b:2b:61:6f:85:fc:1e:fd:ac:ac:81:4c: 44:a1:d3:56:e1:3a:10:45:7b:cd:5f:18:8c:32:12: 75:f2:ef:b4:76:a7:55:fb:48:da:55:8b:7b:29:61: c5:9f:61:ff:da:04:14:91:2e:8a:8d:75:f7:c3:39: fd:ef:d8:2c:96:90:0f:43:d9:7a:c3:3d:ac:07:11: 8d:cb:ec:58:d0:c3:8e:20:7a:bf:f1:9e:03:bc:3a: d2:7b:80:c6:91:f6:9c:93:3e:32:a1:fb:30:29:8e: 54:2c:d8:9f:70:7b:ce:ff:26:0d:2e:61:46:db:e7: 78:5a:96:eb:5b:e0:2a:b3:49:36:38:83:4c:df:a6: 12:dd:1a:ab:27:ba:86:a6:86:58:9c:13:a6:c8:82: 5f:ea:11:72:99:08:85:a0:65:70:6c:cf:67:9d:f9: ca:17:97:26:e9:ac:99:7c:e1:60:c2:70:18:95:59: 98:34:2c:e4:0f:56:c4:ed:e5:63:78:26:bf:b1:77: c9:bc:6a:79:b9:ab:19:4c:55:3c:1d:74:1c:5d:ad: 87:98:fe:55:f2:45:77:68:77:b3:93:cf:f3:2e:66: d5:94:a0:1e:14:71:36:04:99:2d:2b:38:06:fa:24: 40:f9:2b:3e:cc:92:8e:84:7d:34:22:01:92:d1:db: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6F:A0:04:C3:62:A2:73:92:B5:E3:FC:AE:B5:E3:B1:AE:9B:0E:D7 X509v3 Authority Key Identifier: keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d0:9c:51:b1:c2:9f:20:01:8b:1d:0c:ea:47:2e:e9:78:61: 39:94:43:5d:88:dd:ed:91:6b:90:ff:b3:73:40:39:73:c0:1e: 95:71:58:38:dc:a8:11:5f:97:c3:94:85:df:3f:5d:2e:81:0e: 63:24:38:ae:26:55:cf:0b:ae:8c:77:f0:fa:13:40:cb:c9:64: 09:bb:16:28:6e:c5:c5:1a:bc:34:c8:7c:33:40:58:5c:fb:67: 70:8d:15:4e:cf:b3:1c:f5:8f:4f:e5:2d:ed:50:9d:05:d9:60: ab:a5:bb:44:c0:81:44:e9:76:cb:d7:ee:9c:58:88:91:b2:50: 7f:7f:d8:b8:8b:2e:e4:c7:e7:22:fb:39:26:34:dd:20:99:6e: 3b:7e:00:a3:8d:d6:72:90:85:49:22:67:d9:07:3e:36:5e:ed: d5:3f:5d:ef:99:b7:54:36:a6:ca:39:e2:bc:57:1a:24:30:bd: f0:0d:46:df:3b:0e:65:9a:d7:51:f8:0d:a5:7f:b0:6c:60:e0: 1f:15:06:3f:2d:3a:86:aa:35:38:e0:c5:72:c5:92:98:b4:08: 7b:b1:18:37:c2:42:04:cd:3e:5e:08:90:be:16:56:52:8c:00: b8:45:5a:d4:ff:b9:91:49:ec:76:c2:ae:45:89:41:9c:dd:43: 75:96:fd:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJa9P0qGzCVfSmNFcD+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGQ1NTQwYmRjZDMzMDUyYmMwMGZmZjI2NjMzOGJmM2Nj ODJhODAwHhcNMjUxMjA2MjAwMDQyWhcNMjUxMjA3MjAwMDQyWjAzMTEwLwYDVQQD EyhlYjZmYTAwNGMzNjJhMjczOTJiNWUzZmNhZWI1ZTNiMWFlOWIwZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9SLK2Fvhfwe/aysgUxEodNW4ToQ RXvNXxiMMhJ18u+0dqdV+0jaVYt7KWHFn2H/2gQUkS6KjXX3wzn979gslpAPQ9l6 wz2sBxGNy+xY0MOOIHq/8Z4DvDrSe4DGkfackz4yofswKY5ULNifcHvO/yYNLmFG 2+d4WpbrW+Aqs0k2OINM36YS3RqrJ7qGpoZYnBOmyIJf6hFymQiFoGVwbM9nnfnK F5cm6ayZfOFgwnAYlVmYNCzkD1bE7eVjeCa/sXfJvGp5uasZTFU8HXQcXa2HmP5V 8kV3aHezk8/zLmbVlKAeFHE2BJktKzgG+iRA+Ss+zJKOhH00IgGS0dvnYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtvoATDYqJzkrXj/K6147Gumw7XMB8GA1UdIwQY MBaAFJwNVUC9zTMFK8AP/yZjOL88yCqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUt MTZmYzlkNDRlYzdkLzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUtMTZmYzlkNDRlYzdk LzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9CcUbHC nyABix0M6kcu6XhhOZRDXYjd7ZFrkP+zc0A5c8AelXFYONyoEV+Xw5SF3z9dLoEO YyQ4riZVzwuujHfw+hNAy8lkCbsWKG7FxRq8NMh8M0BYXPtncI0VTs+zHPWPT+Ut 7VCdBdlgq6W7RMCBROl2y9funFiIkbJQf3/YuIsu5MfnIvs5JjTdIJluO34Ao43W cpCFSSJn2Qc+Nl7t1T9d75m3VDamyjnivFcaJDC98A1G3zsOZZrXUfgNpX+wbGDg HxUGPy06hqo1OODFcsWSmLQIe7EYN8JCBM0+XgiQvhZWUowAuEVa1P+5kUnsdsKu RYlBnN1DdZb9NA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:26 2025 by rpki-client