This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json) Hash identifier: v5T4pU9tD7Nppo+wvtk1evGjKH2U8fZ6XzaZ4Eyxdss= Subject key identifier: 1F:6F:5A:0C:9B:58:5F:7B:E7:19:9B:86:0B:FE:0C:A1:DF:3B:CF:E0 Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c Certificate serial: 019AF19A99B7E257327E0FEB1BEA1E28CEB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft Manifest number: 0A5A Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=) 2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: K7N668V4UONB28vcYV6hgHVeTJkPfrGqG8E++tL4mqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:99:b7:e2:57:32:7e:0f:eb:1b:ea:1e:28:ce:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=1f6f5a0c9b585f7be7199b860bfe0ca1df3bcfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:42:bb:0b:bb:75:60:1c:a0:67:66:4b:15: 0b:4f:74:af:2f:4e:bc:25:60:2f:0f:25:a3:0f:df: 2b:41:c5:09:b4:af:26:1d:2b:97:d8:5a:31:fb:76: 88:55:32:fa:6f:73:73:16:22:be:8b:c5:7a:9e:12: 37:e4:e0:df:1b:65:eb:00:50:b6:b0:af:5d:4f:e4: 61:cf:c4:eb:34:0c:49:9f:45:5d:47:23:9d:f3:84: 6a:49:f0:f0:bf:24:11:b8:0c:1d:1a:5c:5b:68:f9: 6c:87:27:1b:b2:e4:d7:b2:4f:bd:15:81:f8:38:cd: 3b:9b:15:6f:0e:96:66:dc:6d:52:c6:1c:1a:36:4c: 70:e3:1a:4c:22:8c:35:e2:3b:d6:77:92:9a:dc:4c: c9:d5:cc:8a:99:b8:fb:45:47:1a:91:63:73:0c:3a: f0:4e:a7:2b:b1:97:ef:80:35:2a:dd:b3:7c:5f:2f: 9f:58:a5:1c:c6:69:52:34:4d:e6:63:aa:da:5e:88: d4:2c:50:a0:17:de:64:29:d8:33:fb:4e:f6:16:53: bc:46:02:fa:07:fc:c0:a8:2b:02:05:8b:32:42:5e: 46:fc:d3:2d:1f:91:7b:2b:6f:2b:df:7f:f9:1f:22: fe:9e:f1:dd:1c:c0:65:14:eb:54:f2:44:61:34:ed: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6F:5A:0C:9B:58:5F:7B:E7:19:9B:86:0B:FE:0C:A1:DF:3B:CF:E0 X509v3 Authority Key Identifier: keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a3:52:cf:4d:e8:ee:a3:4a:42:39:fc:6b:d2:25:23:8d:ee: 93:05:60:16:55:9b:68:9b:30:9d:57:d1:4d:44:88:a0:6e:34: 40:ed:41:60:8a:a0:1c:2b:f8:e5:89:41:bb:7f:55:da:1a:f3: f3:3c:0a:84:ff:d6:5f:4e:1a:a1:c8:4f:22:67:17:1b:ef:da: 17:3f:72:a3:2a:03:07:8b:59:06:ab:31:11:42:90:ea:32:e9: 26:7d:d3:fe:6c:c1:aa:33:d7:97:42:92:4f:7b:dc:69:8a:cf: 33:b0:73:d3:43:40:99:b9:ff:74:0e:e3:e7:55:e8:5d:b8:13: a2:3c:ed:be:c6:0d:41:26:3e:0e:c9:f9:a6:e1:59:e1:34:0b: 76:c3:57:8f:44:98:75:72:60:2d:14:2a:fe:17:c8:c9:25:03: c0:2e:55:ce:76:62:b1:1d:b6:f9:8c:ef:6f:d0:8c:61:48:be: ac:e5:52:15:9c:96:23:50:c0:14:43:da:c1:f6:58:d0:e7:10: 99:12:fc:a0:53:05:8f:a1:4a:9b:67:46:a2:1c:87:f4:10:8c: 8f:f9:3d:a7:19:f2:d2:ba:c6:96:a9:7a:d4:c3:13:2e:08:1a: 70:72:1e:95:4f:77:bf:af:87:0f:18:0b:d7:31:7f:27:3f:e5: 26:43:14:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpm34lcyfg/rG+oeKM62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh MGZjOGMwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD EygxZjZmNWEwYzliNTg1ZjdiZTcxOTliODYwYmZlMGNhMWRmM2JjZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1Cuwu7dWAcoGdmSxULT3SvL068 JWAvDyWjD98rQcUJtK8mHSuX2Fox+3aIVTL6b3NzFiK+i8V6nhI35ODfG2XrAFC2 sK9dT+Rhz8TrNAxJn0VdRyOd84RqSfDwvyQRuAwdGlxbaPlshycbsuTXsk+9FYH4 OM07mxVvDpZm3G1SxhwaNkxw4xpMIow14jvWd5Ka3EzJ1cyKmbj7RUcakWNzDDrw TqcrsZfvgDUq3bN8Xy+fWKUcxmlSNE3mY6raXojULFCgF95kKdgz+072FlO8RgL6 B/zAqCsCBYsyQl5G/NMtH5F7K28r33/5HyL+nvHdHMBlFOtU8kRhNO2s7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9vWgybWF975xmbhgv+DKHfO8/gMB8GA1UdIwQY MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqNSz03o 7qNKQjn8a9IlI43ukwVgFlWbaJswnVfRTUSIoG40QO1BYIqgHCv45YlBu39V2hrz 8zwKhP/WX04aochPImcXG+/aFz9yoyoDB4tZBqsxEUKQ6jLpJn3T/mzBqjPXl0KS T3vcaYrPM7Bz00NAmbn/dA7j51XoXbgTojztvsYNQSY+Dsn5puFZ4TQLdsNXj0SY dXJgLRQq/hfIySUDwC5VznZisR22+Yzvb9CMYUi+rOVSFZyWI1DAFEPawfZY0OcQ mRL8oFMFj6FKm2dGohyH9BCMj/k9pxny0rrGlql61MMTLggacHIelU93v6+HDxgL 1zF/Jz/lJkMU8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:35 2025 by rpki-client