This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json) Hash identifier: qIEvTjRH0yFvn08+P2knr+KJbyJou9yqxR7Z5j+yuC8= Subject key identifier: 0C:13:81:58:CF:67:3E:CB:69:A8:56:35:7A:79:A7:86:0B:65:61:E8 Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a Certificate serial: 019AF49BB99A83799D90B793E4B4A5EC14A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 17:00:37 +0000 Manifest this update: Sat 06 Dec 2025 17:00:37 +0000 Manifest next update: Sun 07 Dec 2025 17:00:37 +0000 Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: Lerxy2LSPB5rn9Ba4z4Xt8H2ERTVpK8ImsNatiKtd3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b9:9a:83:79:9d:90:b7:93:e4:b4:a5:ec:14:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a Validity Not Before: Dec 6 17:00:37 2025 GMT Not After : Dec 7 17:00:37 2025 GMT Subject: CN=0c138158cf673ecb69a856357a79a7860b6561e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:0d:08:2d:85:7f:8f:69:e2:a3:c2:2a:e1: ac:dc:58:36:c7:9d:e2:2c:88:e9:e7:25:f0:64:6c: 7c:94:e9:1c:06:e2:29:07:1e:b1:68:e7:25:d8:51: f1:fa:19:d5:02:6e:4e:3f:d9:76:79:37:e1:6b:2c: 36:72:25:12:60:02:e0:be:ca:37:39:36:15:b7:c4: 7b:75:bb:7c:5f:a3:16:86:e3:c9:67:62:11:68:50: 89:c0:ff:0e:8b:9f:43:26:d8:67:85:4b:e3:12:7e: 05:35:82:dc:9d:24:38:e9:18:7d:13:ea:04:7a:11: 72:c4:82:1e:e7:ec:8a:2e:41:63:d4:5f:2c:12:2c: 60:1b:36:23:c4:6a:fc:cd:94:a6:de:68:70:b7:36: 69:c0:4e:72:0e:7b:9f:62:4b:2e:5d:be:3e:83:86: 96:c8:96:fc:df:15:e3:fc:26:5d:66:7f:25:c8:cb: 05:42:45:ea:0f:f3:92:27:eb:0f:19:62:44:69:f2: b3:c6:44:b2:67:a3:77:1c:85:a4:3f:a8:7c:d3:7c: 53:a1:18:32:ba:4d:4d:ff:10:27:c6:c3:58:73:a6: 45:65:b3:ec:64:ba:a5:2f:d0:96:23:82:f3:b1:c2: 96:aa:a5:62:d8:ac:9c:00:27:cf:0c:11:d5:6b:7e: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:13:81:58:CF:67:3E:CB:69:A8:56:35:7A:79:A7:86:0B:65:61:E8 X509v3 Authority Key Identifier: keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:aa:a0:fa:cb:6e:4d:f8:bd:bf:fd:13:ae:f8:e2:63:aa:77: f0:e0:08:c5:04:53:21:a8:a8:7c:b1:61:d7:d0:c1:b9:c4:9b: e1:e0:cc:00:e4:0b:8d:ad:f8:b5:9e:1e:7c:dc:3d:e5:08:d3: 83:bc:e6:4e:f1:2d:47:4d:a3:e9:81:5b:ef:d2:d2:46:02:23: f3:17:4f:61:d4:0b:d2:e7:4c:e5:c4:11:bb:81:c5:68:9e:4e: 65:39:58:f3:a3:fb:b1:51:1c:4c:81:64:50:39:7e:72:7b:c7: e7:b5:da:2c:77:2b:a1:b3:e9:de:be:5b:59:2c:5c:bc:0b:60: d9:6e:de:91:89:af:73:85:cd:46:4e:8c:87:f1:92:7f:84:d0: 02:cc:8d:c6:e4:ec:b7:4a:22:67:e3:9c:e8:7c:eb:c5:a2:2b: 7e:45:41:02:78:2b:bf:20:05:f0:e5:74:d9:a1:79:13:75:86: 06:90:25:fd:82:32:51:b0:18:4e:2b:be:b3:7f:43:ee:64:81: de:24:f9:c7:28:f5:bc:27:2f:6e:c9:64:e5:97:33:94:6a:22: f4:78:c5:e1:81:cb:a0:ca:7b:46:de:22:77:21:37:45:2a:ac: 3f:2e:9e:74:c7:75:86:44:7c:cd:9b:21:4a:99:69:3a:49:96: 79:fd:fb:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7mag3mdkLeT5LSl7BSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzMyNzExZWQ2OGZiYTA1ODQ5OTI5NDNmOWFkZDFiMWUw ZTg3M2EwHhcNMjUxMjA2MTcwMDM3WhcNMjUxMjA3MTcwMDM3WjAzMTEwLwYDVQQD EygwYzEzODE1OGNmNjczZWNiNjlhODU2MzU3YTc5YTc4NjBiNjU2MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KkNCC2Ff49p4qPCKuGs3Fg2x53i LIjp5yXwZGx8lOkcBuIpBx6xaOcl2FHx+hnVAm5OP9l2eTfhayw2ciUSYALgvso3 OTYVt8R7dbt8X6MWhuPJZ2IRaFCJwP8Oi59DJthnhUvjEn4FNYLcnSQ46Rh9E+oE ehFyxIIe5+yKLkFj1F8sEixgGzYjxGr8zZSm3mhwtzZpwE5yDnufYksuXb4+g4aW yJb83xXj/CZdZn8lyMsFQkXqD/OSJ+sPGWJEafKzxkSyZ6N3HIWkP6h803xToRgy uk1N/xAnxsNYc6ZFZbPsZLqlL9CWI4LzscKWqqVi2KycACfPDBHVa348KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwTgVjPZz7LaahWNXp5p4YLZWHoMB8GA1UdIwQY MBaAFJzDJxHtaPugWEmSlD+a3RseDoc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZWZhODItNmVjNC00NzBiLWI5Y2It ZGUyMjVmNGIwYTA0LzEvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9hZWZhODItNmVjNC00NzBiLWI5Y2ItZGUyMjVmNGIwYTA0 LzEvbk1NbkVlMW8tNkJZU1pLVVA1cmRHeDRPaHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqqg+stu Tfi9v/0TrvjiY6p38OAIxQRTIaiofLFh19DBucSb4eDMAOQLja34tZ4efNw95QjT g7zmTvEtR02j6YFb79LSRgIj8xdPYdQL0udM5cQRu4HFaJ5OZTlY86P7sVEcTIFk UDl+cnvH57XaLHcrobPp3r5bWSxcvAtg2W7ekYmvc4XNRk6Mh/GSf4TQAsyNxuTs t0oiZ+Oc6HzrxaIrfkVBAngrvyAF8OV02aF5E3WGBpAl/YIyUbAYTiu+s39D7mSB 3iT5xyj1vCcvbslk5ZczlGoi9HjF4YHLoMp7Rt4idyE3RSqsPy6edMd1hkR8zZsh SplpOkmWef37Vg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:36:15 2025 by rpki-client