This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json) Hash identifier: I9p1iVO2YvpyxKio7TYYP2Puc1tmCO+o1I8g0ba4D/8= Subject key identifier: 39:7C:32:31:9C:FF:1C:6D:96:5A:E3:D8:BD:08:0F:FD:49:6E:B9:BC Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b Certificate serial: 019AF38933610D6EF29BDF2B60F3B5C46449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft Manifest number: 0627 Signing time: Sat 06 Dec 2025 12:00:46 +0000 Manifest this update: Sat 06 Dec 2025 12:00:46 +0000 Manifest next update: Sun 07 Dec 2025 12:00:46 +0000 Files and hashes: 1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=) 2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: 1/iBJiE+0jSo2wrJlCfkMkLAge8gu4YMOfLuyPwmArw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:33:61:0d:6e:f2:9b:df:2b:60:f3:b5:c4:64:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b Validity Not Before: Dec 6 12:00:46 2025 GMT Not After : Dec 7 12:00:46 2025 GMT Subject: CN=397c32319cff1c6d965ae3d8bd080ffd496eb9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:32:ad:2a:9b:0f:39:c4:f1:7b:3a:8e:87: e8:1d:0b:27:a6:dc:5f:eb:64:e3:ec:55:4c:67:b1: 27:57:ec:d2:4d:74:24:f6:07:ab:1a:34:4e:f4:d7: 45:3e:7b:6c:bb:8a:a1:86:82:33:57:d9:28:18:a4: 83:50:3e:26:f3:7c:0d:e4:b5:bf:96:02:e9:7b:59: 88:f1:5f:20:f8:6d:11:1c:b5:0a:42:3a:ce:d7:80: 4a:d0:db:4c:a1:b2:6b:6a:00:8a:01:72:e1:10:e8: d2:f5:1d:56:86:20:7e:3b:08:5e:06:fb:6f:56:31: 10:ea:90:3b:b5:6e:37:e0:44:2e:df:fe:e8:45:2f: 42:ba:e4:9f:89:3f:96:da:b4:c6:d2:92:f9:76:3a: d6:ea:b7:6f:89:3e:66:45:b3:86:bb:97:8b:d8:b6: b6:10:ad:bc:c1:e3:c8:c7:5b:d3:3b:a9:48:45:4a: bd:f0:41:98:8c:02:16:24:b0:de:88:e8:b5:7b:0b: 95:f7:65:34:8d:81:ba:af:9a:24:c2:fa:bf:bd:73: 33:de:87:cc:0a:66:46:90:cb:ce:89:31:81:df:86: da:7b:20:f5:19:24:71:c3:9b:21:f3:32:15:5f:34: cc:00:80:04:5c:19:27:84:20:d2:5b:62:ad:08:4e: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:32:31:9C:FF:1C:6D:96:5A:E3:D8:BD:08:0F:FD:49:6E:B9:BC X509v3 Authority Key Identifier: keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9d:cc:a5:e7:47:d3:f6:60:df:ea:01:a4:4e:d2:bf:aa:83: 84:13:71:12:c1:8d:50:fe:6a:d9:60:fc:3f:5f:21:0e:cf:12: 65:73:2b:4f:43:24:09:d9:84:75:f0:7d:d3:29:a0:39:df:6f: 22:56:11:3c:0c:44:25:4d:62:84:20:4f:b3:7b:5a:63:fd:08: 01:ab:46:43:3a:f8:35:56:9f:01:1e:1c:13:89:2e:33:c4:8f: e1:ff:34:bc:7b:71:46:bf:3b:33:ca:12:bb:09:1c:12:ff:c8: 67:ef:e6:e9:6f:b8:85:18:67:cf:ba:a0:10:3c:cc:07:1b:2a: 63:47:9b:9c:e9:ba:7f:34:ff:fb:55:87:cf:8b:72:36:59:be: b6:d9:92:de:7f:25:25:6e:8b:cb:62:c4:0d:12:8c:f8:42:e2: dc:e8:d3:4b:07:e4:2d:db:be:77:84:a7:24:99:b4:cf:30:54: 96:50:57:3d:4d:e1:ec:c1:02:3a:8c:bf:a8:77:6b:6b:25:4a: bb:e2:80:03:61:27:fe:46:72:6d:4c:1d:93:5f:35:d2:03:77: 03:e0:21:e5:8a:f1:63:be:e7:6b:db:22:fa:1c:0b:ca:75:68: 74:a2:1f:a0:a7:a9:7f:ac:03:60:1e:23:92:a7:d3:e2:c9:b2: 72:80:42:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTNhDW7ym98rYPO1xGRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDM3NWFkYTljNWUwMTAwZGRiNjMzYjJhMWI3NDdlMTlj MmVjNWIwHhcNMjUxMjA2MTIwMDQ2WhcNMjUxMjA3MTIwMDQ2WjAzMTEwLwYDVQQD EygzOTdjMzIzMTljZmYxYzZkOTY1YWUzZDhiZDA4MGZmZDQ5NmViOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ0yrSqbDznE8Xs6jofoHQsnptxf 62Tj7FVMZ7EnV+zSTXQk9gerGjRO9NdFPntsu4qhhoIzV9koGKSDUD4m83wN5LW/ lgLpe1mI8V8g+G0RHLUKQjrO14BK0NtMobJragCKAXLhEOjS9R1WhiB+OwheBvtv VjEQ6pA7tW434EQu3/7oRS9CuuSfiT+W2rTG0pL5djrW6rdviT5mRbOGu5eL2La2 EK28wePIx1vTO6lIRUq98EGYjAIWJLDeiOi1ewuV92U0jYG6r5okwvq/vXMz3ofM CmZGkMvOiTGB34baeyD1GSRxw5sh8zIVXzTMAIAEXBknhCDSW2KtCE7DUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl8MjGc/xxtllrj2L0ID/1Jbrm8MB8GA1UdIwQY MBaAFJwDda2pxeAQDdtjOyobdH4ZwuxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYt MWZjODllOTlhMGExLzEvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYtMWZjODllOTlhMGEx LzEvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp3MpedH 0/Zg3+oBpE7Sv6qDhBNxEsGNUP5q2WD8P18hDs8SZXMrT0MkCdmEdfB90ymgOd9v IlYRPAxEJU1ihCBPs3taY/0IAatGQzr4NVafAR4cE4kuM8SP4f80vHtxRr87M8oS uwkcEv/IZ+/m6W+4hRhnz7qgEDzMBxsqY0ebnOm6fzT/+1WHz4tyNlm+ttmS3n8l JW6Ly2LEDRKM+ELi3OjTSwfkLdu+d4SnJJm0zzBUllBXPU3h7MECOoy/qHdrayVK u+KAA2En/kZybUwdk1810gN3A+Ah5YrxY77na9si+hwLynVodKIfoKepf6wDYB4j kqfT4smycoBCFw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:07 2025 by rpki-client