This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json) Hash identifier: Im1h8jsBGDB1fb2uoKrP/Th44pVGMbtTkYZp6X/K93w= Subject key identifier: 88:1D:29:45:0C:BD:88:E9:68:34:A1:A7:5A:12:53:F8:41:31:0F:DA Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52 Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952 Certificate serial: 019AF50A43DEBD9467A733D51819BAD3314D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft Manifest number: 123B Signing time: Sat 06 Dec 2025 19:01:21 +0000 Manifest this update: Sat 06 Dec 2025 19:01:21 +0000 Manifest next update: Sun 07 Dec 2025 19:01:21 +0000 Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: RvVeHBBtqSFC7eawzaTP0FGUetjSpPMj/fEwe6N6juU=) 2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:43:de:bd:94:67:a7:33:d5:18:19:ba:d3:31:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952 Validity Not Before: Dec 6 19:01:21 2025 GMT Not After : Dec 7 19:01:21 2025 GMT Subject: CN=881d29450cbd88e96834a1a75a1253f841310fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d8:60:98:eb:01:68:82:50:01:c9:22:cd:16: 3d:e0:25:23:16:bc:4e:ee:c0:d6:10:d1:95:a0:f3: c5:13:95:cc:f6:30:00:de:ea:67:7c:cb:ab:66:cb: 35:b4:22:e8:71:6e:91:25:eb:df:f0:df:c6:76:ec: d0:fc:a9:b3:84:52:07:b3:2b:fa:52:3f:7d:f0:38: 0f:9e:d1:23:6a:96:c0:41:40:ee:e0:75:62:55:78: 3a:4a:74:06:5b:64:aa:ef:89:39:6e:8a:f8:38:c0: 97:da:4a:65:78:9a:ee:60:d7:cc:43:6b:89:99:38: e5:13:7e:79:40:19:48:9d:4c:7d:7f:50:57:20:fa: e6:62:0c:0e:6e:5c:2d:82:b3:45:8e:cf:a0:82:9f: 61:c5:cf:1e:6d:0d:a4:1a:43:b7:72:e8:c1:ee:1f: 4f:14:26:9b:e4:f6:a9:e5:74:cd:55:af:cb:b1:1a: 48:99:84:16:bc:32:d2:78:43:d4:c4:7e:f3:25:dc: 52:c5:72:d3:78:b2:64:b7:8d:b1:f4:ec:dd:8a:c4: 0a:b6:96:14:af:80:a1:85:fa:51:36:f8:cf:ef:36: 40:f5:88:c1:eb:ca:70:3f:b1:9d:d7:91:91:24:23: 08:16:24:57:ba:cd:86:ec:de:53:00:5d:2a:cb:b9: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1D:29:45:0C:BD:88:E9:68:34:A1:A7:5A:12:53:F8:41:31:0F:DA X509v3 Authority Key Identifier: keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4a:15:6c:4a:fa:be:a5:c3:2a:cb:e9:8f:17:df:ad:6a:d1: ab:51:de:e2:ec:dd:1a:d9:a1:62:c6:2f:af:e3:b6:ea:f7:da: 2d:83:bb:20:90:e3:a0:75:36:6a:0d:02:6a:23:90:6c:ad:8a: 52:65:5a:53:7f:bb:7c:eb:99:a1:62:47:35:da:88:ee:a3:53: bd:0c:dd:6b:c4:2b:8d:94:05:d0:f6:54:bf:3f:6d:ef:de:fb: aa:be:be:eb:f7:78:c6:6d:60:a9:4b:2d:85:74:9c:b8:36:09: fd:db:d9:e0:42:c6:20:a8:b3:2d:ab:3b:df:dd:30:91:77:99: 2a:d6:cd:18:d0:66:ac:72:ed:40:1b:a1:ef:f1:b6:29:ae:f9: f2:08:55:32:22:28:b1:d9:c3:cd:ad:0a:1d:42:1a:d5:26:64: e9:18:ba:62:65:91:50:6c:27:67:33:81:e5:14:22:9a:c0:bb: 96:a1:c9:45:06:04:69:0a:15:fc:38:2d:99:25:d4:a7:f1:09: da:20:cd:cb:8c:c8:4d:2c:ca:12:e2:aa:ad:d0:18:06:da:ff: 3f:6d:18:44:8d:b1:10:a9:05:d2:91:1b:ae:28:6c:21:ab:23: ff:e9:f5:d8:88:5e:97:b9:40:26:2e:15:cf:85:8b:09:a2:85: c5:29:56:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CkPevZRnpzPVGBm60zFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjQ1ZTAwYWUxNjRlNjdhYTEzNTQ4NTcyMzdkMDlhZGYy N2M5NTIwHhcNMjUxMjA2MTkwMTIxWhcNMjUxMjA3MTkwMTIxWjAzMTEwLwYDVQQD Eyg4ODFkMjk0NTBjYmQ4OGU5NjgzNGExYTc1YTEyNTNmODQxMzEwZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dhgmOsBaIJQAckizRY94CUjFrxO 7sDWENGVoPPFE5XM9jAA3upnfMurZss1tCLocW6RJevf8N/GduzQ/KmzhFIHsyv6 Uj998DgPntEjapbAQUDu4HViVXg6SnQGW2Sq74k5bor4OMCX2kpleJruYNfMQ2uJ mTjlE355QBlInUx9f1BXIPrmYgwOblwtgrNFjs+ggp9hxc8ebQ2kGkO3cujB7h9P FCab5Pap5XTNVa/LsRpImYQWvDLSeEPUxH7zJdxSxXLTeLJkt42x9OzdisQKtpYU r4ChhfpRNvjP7zZA9YjB68pwP7Gd15GRJCMIFiRXus2G7N5TAF0qy7kGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgdKUUMvYjpaDShp1oSU/hBMQ/aMB8GA1UdIwQY MBaAFJz0XgCuFk5nqhNUhXI30JrfJ8lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmIt NWFkNWQyOWQ3MmRkLzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmItNWFkNWQyOWQ3MmRk LzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkoVbEr6 vqXDKsvpjxffrWrRq1He4uzdGtmhYsYvr+O26vfaLYO7IJDjoHU2ag0CaiOQbK2K UmVaU3+7fOuZoWJHNdqI7qNTvQzda8QrjZQF0PZUvz9t7977qr6+6/d4xm1gqUst hXScuDYJ/dvZ4ELGIKizLas7390wkXeZKtbNGNBmrHLtQBuh7/G2Ka758ghVMiIo sdnDza0KHUIa1SZk6Ri6YmWRUGwnZzOB5RQimsC7lqHJRQYEaQoV/DgtmSXUp/EJ 2iDNy4zITSzKEuKqrdAYBtr/P20YRI2xEKkF0pEbrihsIasj/+n12Ihel7lAJi4V z4WLCaKFxSlWIw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:57 2025 by rpki-client