This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json) Hash identifier: /8F7uJC+oPsRJIyrdeh1Mkfg67bqFCpiw8dNB2bktt0= Subject key identifier: D0:F8:CD:3E:81:7D:D8:B6:B1:41:05:C7:07:AB:EE:AA:16:98:CD:D4 Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7 Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7 Certificate serial: 019AF2AD5C0C54BE40422CC2D47483F61B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (hash: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=) 2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: pJWiO7zlD4f4rg3x/SEGYiJb8d8dZIfRe8asCZgSeyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5c:0c:54:be:40:42:2c:c2:d4:74:83:f6:1b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7 Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=d0f8cd3e817dd8b6b14105c707abeeaa1698cdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:a7:93:95:88:df:a7:d8:58:19:c9:55:f2: 47:86:5b:04:44:d2:96:b6:4c:0a:3e:77:b0:5d:23: b1:76:96:ba:cd:d6:86:0e:3f:f5:92:9b:9a:60:27: 89:66:f9:60:de:42:2f:e5:ee:32:b7:3d:a6:a9:c1: 46:81:b4:b7:2c:2b:03:1e:bd:5d:c9:95:44:b2:19: 43:99:1e:c2:81:7c:4a:12:1a:30:d5:12:0b:cb:8d: 4d:d4:c5:d8:9d:97:f0:7d:9d:51:dd:ab:a7:f0:7d: b3:16:28:26:5c:15:57:5d:5c:bc:c9:a7:a0:47:e4: 57:69:58:8f:36:ee:49:b5:22:43:07:3d:d9:ec:06: c9:3b:08:80:f2:d1:77:b1:1b:ef:b6:38:d3:0b:7b: f8:48:1e:9f:c6:ee:89:9f:fa:7c:e7:0c:20:d2:7a: ba:08:65:a2:78:01:5e:ae:93:f3:e6:5d:21:b2:13: d7:63:c3:99:c3:44:95:b1:2d:9f:5d:8c:fd:49:2f: 81:5f:7e:20:3b:54:36:f2:e3:3d:1e:79:59:19:55: f0:31:b1:d6:ed:05:d3:04:9a:65:f4:da:68:e1:2a: f7:d8:d8:4d:bb:46:1a:e2:31:7f:e6:4e:f7:ba:48: 03:fc:74:8e:0b:c5:52:a0:c6:38:93:1e:4d:25:77: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F8:CD:3E:81:7D:D8:B6:B1:41:05:C7:07:AB:EE:AA:16:98:CD:D4 X509v3 Authority Key Identifier: keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1b:8f:7f:b8:25:f5:ff:cd:54:64:d3:b9:44:a3:80:25:c1: f6:28:a8:b7:87:b2:9f:fa:5d:8c:24:62:55:95:cf:b4:92:91: 24:fc:a4:db:2d:35:37:04:fb:91:29:21:e7:b2:00:b1:6f:84: 5e:f3:41:31:a0:dd:96:52:36:86:39:29:c0:24:83:3c:62:34: f2:d2:18:cd:c6:64:ca:fb:22:15:53:f1:68:de:19:b3:57:7f: 50:26:95:8b:59:c6:04:ef:79:08:c2:35:fa:8c:f0:fc:b9:ce: f7:84:fd:ce:f1:53:25:0c:0a:22:97:b8:56:1c:23:ae:4a:71: cf:bc:dd:f1:55:49:d7:44:9b:4d:44:ea:be:f8:3a:e6:8c:d4: b8:8f:0c:f9:85:a2:6c:0e:77:74:d9:fb:30:e8:a7:ee:ec:a0: 01:43:36:07:9f:2c:ae:f6:5c:f5:47:b6:ea:d8:ae:a7:3a:15: 73:d9:6f:50:e6:dc:42:b3:ef:4f:2c:4c:8a:81:64:cc:bd:f7: 81:68:47:86:88:93:91:46:5b:d5:f9:58:80:e1:c0:6b:2b:f7: ab:ac:66:ae:d4:61:8a:5d:5f:af:b6:85:a3:75:8a:88:26:07: 43:40:c2:48:f4:e4:1b:56:1a:5d:a8:54:5c:96:ab:7f:cf:10: 3a:3d:6b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVwMVL5AQizC1HSD9hsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOWZlZTAzMjcxYjE1YzIzM2EyNDU4OWYyMzY1YTcxMGQ0 MzUyZDcwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD EyhkMGY4Y2QzZTgxN2RkOGI2YjE0MTA1YzcwN2FiZWVhYTE2OThjZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBSnk5WI36fYWBnJVfJHhlsERNKW tkwKPnewXSOxdpa6zdaGDj/1kpuaYCeJZvlg3kIv5e4ytz2mqcFGgbS3LCsDHr1d yZVEshlDmR7CgXxKEhow1RILy41N1MXYnZfwfZ1R3aun8H2zFigmXBVXXVy8yaeg R+RXaViPNu5JtSJDBz3Z7AbJOwiA8tF3sRvvtjjTC3v4SB6fxu6Jn/p85wwg0nq6 CGWieAFerpPz5l0hshPXY8OZw0SVsS2fXYz9SS+BX34gO1Q28uM9HnlZGVXwMbHW 7QXTBJpl9Npo4Sr32NhNu0Ya4jF/5k73ukgD/HSOC8VSoMY4kx5NJXePEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFND4zT6Bfdi2sUEFxwer7qoWmM3UMB8GA1UdIwQY MBaAFJyf7gMnGxXCM6JFifI2WnENQ1LXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTct OGY5OWY5YWZkN2ExLzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTctOGY5OWY5YWZkN2Ex LzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRuPf7gl 9f/NVGTTuUSjgCXB9iiot4eyn/pdjCRiVZXPtJKRJPyk2y01NwT7kSkh57IAsW+E XvNBMaDdllI2hjkpwCSDPGI08tIYzcZkyvsiFVPxaN4Zs1d/UCaVi1nGBO95CMI1 +ozw/LnO94T9zvFTJQwKIpe4Vhwjrkpxz7zd8VVJ10SbTUTqvvg65ozUuI8M+YWi bA53dNn7MOin7uygAUM2B58srvZc9Ue26tiupzoVc9lvUObcQrPvTyxMioFkzL33 gWhHhoiTkUZb1flYgOHAayv3q6xmrtRhil1fr7aFo3WKiCYHQ0DCSPTkG1YaXahU XJarf88QOj1rHA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:51 2025 by rpki-client