This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json) Hash identifier: 8NQ2oCyCcTkE37L2j+kbUyCFZfbtOcxaGdA4wWLEI4E= Subject key identifier: 36:9C:80:0D:48:0A:19:B4:26:CF:AD:DD:9F:EA:BD:90:41:42:89:50 Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3 Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3 Certificate serial: 019AF19B886672EB4FEA85F2EE13FE941001 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=) 2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: rrxdHRZlxcVzo2T1pRDdA4WkXGzRunybBVNK057UjgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:88:66:72:eb:4f:ea:85:f2:ee:13:fe:94:10:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3 Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=369c800d480a19b426cfaddd9feabd9041428950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:a3:6c:46:b0:75:cb:32:e1:12:0e:59:1e: 9b:5b:5c:6e:f8:3c:9c:e3:cb:a9:6b:e5:b4:d3:39: 6e:48:c7:26:ff:a2:d3:41:7b:e3:df:4f:70:4d:83: dc:6f:00:84:77:a0:e1:d6:2f:b1:ab:0d:e9:cb:bf: f6:43:e3:ac:74:1a:6a:5f:78:69:ed:3d:b8:b7:3a: 53:9f:e8:f8:7b:2b:28:3e:4f:10:13:32:9b:84:68: 93:de:78:bf:e8:0f:4b:0b:da:b5:a9:04:3e:6a:a5: 62:f5:af:dd:c0:cc:c9:dc:0e:93:24:60:da:76:63: 1d:94:0a:39:d4:53:ff:92:df:18:3a:24:7d:90:25: 76:e8:72:61:58:3b:45:7a:92:41:55:60:3a:fd:77: 3b:13:76:cd:bd:27:f7:37:b8:3c:d6:2c:0f:c1:ac: 4c:79:a9:ff:de:08:d8:5f:db:c1:b4:4f:f5:16:54: 5a:89:f4:22:37:36:dc:d3:5f:1f:c1:77:72:2b:89: 8a:be:58:63:cb:d3:3f:55:e1:b0:ca:15:f0:da:fa: da:28:27:1f:99:f8:24:40:39:fb:81:7a:f7:6f:30: f7:b6:d2:0a:4c:7d:be:7b:e7:cb:10:14:c6:17:34: 85:2e:f9:9b:eb:c1:38:89:e3:5a:bb:7d:b8:20:47: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9C:80:0D:48:0A:19:B4:26:CF:AD:DD:9F:EA:BD:90:41:42:89:50 X509v3 Authority Key Identifier: keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4d:d4:33:6e:9f:ab:30:03:bc:83:8c:79:31:09:c4:b5:4e: d3:91:fb:c1:9f:7a:3f:6b:a5:6d:da:b9:6a:80:a9:0c:22:3f: f6:37:15:97:90:d4:e1:28:cd:c8:10:26:9f:d6:b4:61:50:54: e3:bf:6f:2b:bb:82:22:9e:97:50:d9:e2:da:c5:36:6c:0a:6f: 9c:46:a7:42:64:1b:2b:0f:6c:5f:29:8a:d5:48:96:05:63:22: 5b:cc:7a:36:76:50:0a:be:0f:34:d9:57:37:0c:18:c2:fa:91: f5:69:93:e3:4d:08:b1:c3:bd:70:05:78:f6:b4:68:92:cf:66: ba:de:58:01:bf:8c:51:bd:7d:fd:1f:f9:e6:5c:9e:27:b2:b6: 81:45:c6:87:d6:93:63:41:24:6b:c0:68:8a:e8:81:54:f6:91: 86:a3:d9:14:14:aa:65:2d:7a:33:b7:42:a5:8d:87:8b:45:b2: dc:b4:22:ac:7a:97:3d:28:22:c9:62:38:ee:4f:f2:26:ce:21: c0:30:c3:80:ca:df:57:b5:ea:53:6c:29:c5:94:ab:39:96:06: 9f:e3:20:11:e3:bf:54:19:73:a4:23:cb:1d:f9:f0:bd:f3:55: c2:98:ee:a6:c3:2e:c1:7f:c6:d3:6d:88:13:47:9b:2b:92:a3: d0:de:5d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4hmcutP6oXy7hP+lBABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGYxMTI3NTZmMTQ1OGRjZjNlMzg3YTRiZTg5MGYzMGVh OTQ5YjMwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD EygzNjljODAwZDQ4MGExOWI0MjZjZmFkZGQ5ZmVhYmQ5MDQxNDI4OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MqjbEawdcsy4RIOWR6bW1xu+Dyc 48upa+W00zluSMcm/6LTQXvj309wTYPcbwCEd6Dh1i+xqw3py7/2Q+OsdBpqX3hp 7T24tzpTn+j4eysoPk8QEzKbhGiT3ni/6A9LC9q1qQQ+aqVi9a/dwMzJ3A6TJGDa dmMdlAo51FP/kt8YOiR9kCV26HJhWDtFepJBVWA6/Xc7E3bNvSf3N7g81iwPwaxM ean/3gjYX9vBtE/1FlRaifQiNzbc018fwXdyK4mKvlhjy9M/VeGwyhXw2vraKCcf mfgkQDn7gXr3bzD3ttIKTH2+e+fLEBTGFzSFLvmb68E4ieNau324IEeeLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDacgA1IChm0Js+t3Z/qvZBBQolQMB8GA1UdIwQY MBaAFJ2PESdW8UWNzz44ekvokPMOqUmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2It MDBlZDkwMjY5YmI0LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2ItMDBlZDkwMjY5YmI0 LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY03UM26f qzADvIOMeTEJxLVO05H7wZ96P2ulbdq5aoCpDCI/9jcVl5DU4SjNyBAmn9a0YVBU 479vK7uCIp6XUNni2sU2bApvnEanQmQbKw9sXymK1UiWBWMiW8x6NnZQCr4PNNlX NwwYwvqR9WmT400IscO9cAV49rRoks9mut5YAb+MUb19/R/55lyeJ7K2gUXGh9aT Y0Eka8BoiuiBVPaRhqPZFBSqZS16M7dCpY2Hi0Wy3LQirHqXPSgiyWI47k/yJs4h wDDDgMrfV7XqU2wpxZSrOZYGn+MgEeO/VBlzpCPLHfnwvfNVwpjupsMuwX/G022I E0ebK5Kj0N5dEA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:18 2025 by rpki-client