This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json) Hash identifier: DL7QyumjJfOZIUmrgCOw+SyoQjRlIYCqGwFDL36C0FY= Subject key identifier: 8A:02:49:4B:B8:85:89:1D:75:39:FE:11:F8:48:6E:D3:D8:33:51:7E Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Certificate serial: 019AF50A8EC6321BBFB7CBC9CBBC866B0B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft Manifest number: 044B Signing time: Sat 06 Dec 2025 19:01:40 +0000 Manifest this update: Sat 06 Dec 2025 19:01:40 +0000 Manifest next update: Sun 07 Dec 2025 19:01:40 +0000 Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=) 2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: JrvbFwO6XuUvbn+3ykO9pjG6pDVl15GBgrvqNqaZ49E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:8e:c6:32:1b:bf:b7:cb:c9:cb:bc:86:6b:0b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Validity Not Before: Dec 6 19:01:40 2025 GMT Not After : Dec 7 19:01:40 2025 GMT Subject: CN=8a02494bb885891d7539fe11f8486ed3d833517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:13:55:72:55:79:f1:99:1b:01:93:cb:56: 8d:23:77:64:b8:11:60:67:e3:68:b5:e1:6f:2d:74: 50:45:12:4c:89:c5:e9:bd:2c:54:73:e4:c7:d2:12: 74:86:46:91:1d:64:fa:81:13:ba:77:5b:48:7c:45: c0:3b:9f:a8:2e:53:37:c3:c1:df:0e:5c:26:5f:12: 9b:e7:96:01:8e:f0:c3:59:33:eb:30:58:ca:ff:af: 07:bb:a4:b8:1f:25:a6:5b:35:52:11:24:e9:44:cd: 71:14:af:c8:f9:32:7e:d2:70:bf:fa:2c:d5:c3:7f: 38:b3:50:78:de:12:89:a7:d4:16:f5:fd:e6:fe:25: fb:2f:a2:3a:25:50:5f:cc:9f:36:58:62:30:e3:c1: 1c:07:5a:b0:69:8b:85:9c:a7:b1:b8:8d:c6:43:34: 62:52:14:21:96:56:fa:fa:72:52:a2:4c:2d:45:9c: 1c:24:d9:03:19:92:40:6d:bd:36:f6:e9:06:53:af: cb:89:03:ad:74:a7:9c:6c:e7:78:3b:ea:85:9b:d1: 94:20:86:4a:b5:40:27:b3:ae:46:3c:1e:6a:2e:dc: d2:97:04:37:0b:ce:6f:be:aa:d7:9b:86:58:0c:1e: 13:40:60:46:be:83:94:61:fd:4b:60:e8:00:24:3b: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:02:49:4B:B8:85:89:1D:75:39:FE:11:F8:48:6E:D3:D8:33:51:7E X509v3 Authority Key Identifier: keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e3:a0:5e:51:26:47:4c:e7:ff:c3:95:48:71:a4:67:ac:4e: 5d:8d:67:f5:49:98:9e:65:3a:20:47:67:f7:8e:8e:39:b3:0e: 25:51:04:ac:db:40:8d:dc:97:0a:ce:86:b5:b2:a7:88:d1:57: 81:ca:7c:96:85:eb:8d:39:b0:51:5c:09:a1:bf:bd:af:d9:65: 31:80:2a:10:7b:d6:89:2d:c3:6b:fd:15:5d:4c:a3:3a:76:35: 57:0c:a4:42:6a:70:72:5c:3c:3d:f2:6f:3a:6d:65:c7:e8:1e: 61:21:24:0b:42:57:3c:e1:f0:d1:7f:6f:84:9c:e3:dd:96:e7: b6:91:1b:cd:4a:1a:dd:d6:ae:b9:26:c4:e5:c5:59:41:8b:d8: cb:56:e3:41:70:3c:4f:4f:13:fe:c9:07:3c:c0:f4:6c:fd:3f: 29:29:49:52:dc:40:a7:af:47:94:2a:3a:e5:68:2c:ad:77:10: 4c:14:4f:51:7b:1f:f5:49:c1:21:5e:b0:bf:02:6c:e3:31:f5: 6b:47:da:fb:24:3d:37:cf:be:4b:6d:33:52:dd:ac:a0:76:11: 1f:8e:70:67:45:7c:d3:dc:f2:0a:42:d4:07:67:d7:8d:27:3b: 76:00:f1:bc:47:15:58:1d:cb:27:c5:99:20:98:78:50:43:db: 9e:bb:9c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Co7GMhu/t8vJy7yGawsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTJhYTUzZDMyOTBhYTgwMzc5OTM1MzM1ZGI5ZmNjM2Zm ZDI5YWEwHhcNMjUxMjA2MTkwMTQwWhcNMjUxMjA3MTkwMTQwWjAzMTEwLwYDVQQD Eyg4YTAyNDk0YmI4ODU4OTFkNzUzOWZlMTFmODQ4NmVkM2Q4MzM1MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6gTVXJVefGZGwGTy1aNI3dkuBFg Z+NoteFvLXRQRRJMicXpvSxUc+TH0hJ0hkaRHWT6gRO6d1tIfEXAO5+oLlM3w8Hf DlwmXxKb55YBjvDDWTPrMFjK/68Hu6S4HyWmWzVSESTpRM1xFK/I+TJ+0nC/+izV w384s1B43hKJp9QW9f3m/iX7L6I6JVBfzJ82WGIw48EcB1qwaYuFnKexuI3GQzRi UhQhllb6+nJSokwtRZwcJNkDGZJAbb029ukGU6/LiQOtdKecbOd4O+qFm9GUIIZK tUAns65GPB5qLtzSlwQ3C85vvqrXm4ZYDB4TQGBGvoOUYf1LYOgAJDsgXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoCSUu4hYkddTn+EfhIbtPYM1F+MB8GA1UdIwQY MBaAFJySqlPTKQqoA3mTUzXbn8w//SmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt NDUwMzk1ZmI4OGZhLzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjItNDUwMzk1ZmI4OGZh LzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+OgXlEm R0zn/8OVSHGkZ6xOXY1n9UmYnmU6IEdn946OObMOJVEErNtAjdyXCs6GtbKniNFX gcp8loXrjTmwUVwJob+9r9llMYAqEHvWiS3Da/0VXUyjOnY1VwykQmpwclw8PfJv Om1lx+geYSEkC0JXPOHw0X9vhJzj3ZbntpEbzUoa3dauuSbE5cVZQYvYy1bjQXA8 T08T/skHPMD0bP0/KSlJUtxAp69HlCo65WgsrXcQTBRPUXsf9UnBIV6wvwJs4zH1 a0fa+yQ9N8++S20zUt2soHYRH45wZ0V809zyCkLUB2fXjSc7dgDxvEcVWB3LJ8WZ IJh4UEPbnrucRA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:42:35 2025 by rpki-client