This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json) Hash identifier: i2L7HsMz/GKazeNUYsH1pxFL6tLf5MCpU05jCHRar8s= Subject key identifier: EC:2E:4F:F1:22:30:63:DE:F5:1D:9C:F6:D8:5C:32:85:D4:29:AD:02 Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04 Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204 Certificate serial: 019AF27684F430137E060E719B14BC184829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft Manifest number: 1205 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=) 2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=) 3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=) 4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: NxHBYGWrWr9nq7uRyrV18dHBVzvkXjePxdhsND84cfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:84:f4:30:13:7e:06:0e:71:9b:14:bc:18:48:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=ec2e4ff1223063def51d9cf6d85c3285d429ad02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:0b:de:75:03:62:bb:30:c3:bd:cf:18:4e: 32:97:c4:ec:6a:1d:2f:fd:13:77:62:98:f3:8c:37: b4:f2:6f:8a:c6:d2:6f:30:5d:8c:14:13:be:69:a7: cd:11:1e:ec:50:b8:b4:84:0c:51:34:16:b4:19:c7: ea:64:c9:7b:f0:53:26:d0:4e:2a:d8:a8:a6:2b:19: 7f:03:d7:3f:24:09:08:a5:f4:28:bd:f0:07:e8:03: f1:a5:56:13:19:1a:2a:f8:1c:86:72:b3:52:d4:70: 7c:d1:e8:db:70:58:35:98:d1:f8:5f:6a:a9:ee:94: 41:f6:f2:ec:d5:f8:94:41:a1:a2:1f:82:10:d0:cb: a5:b4:3e:c8:8a:58:6f:5a:de:7b:9b:c5:0f:18:03: 2d:30:a9:1a:43:6e:cc:24:3e:4f:03:34:c1:1f:4f: 79:00:e8:ac:80:30:6f:da:d7:14:c9:c6:6d:00:12: f6:12:13:56:8a:21:9e:60:d8:92:4b:fd:5a:56:d9: 17:be:7b:d5:90:73:9d:94:51:1c:13:d9:3f:6e:79: a5:12:af:df:31:4d:c8:43:0d:ee:04:fa:44:d3:5c: 16:9a:91:b3:12:16:92:18:24:95:d4:48:ef:c6:95: 0a:3c:4f:41:12:34:3d:54:8c:28:c1:76:88:1e:89: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2E:4F:F1:22:30:63:DE:F5:1D:9C:F6:D8:5C:32:85:D4:29:AD:02 X509v3 Authority Key Identifier: keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:41:bd:24:00:52:27:4c:92:ea:53:f6:23:93:16:fe:b5:6b: c4:48:08:20:d9:73:da:46:cb:4c:ad:1b:85:2f:eb:f0:ed:58: 17:72:9e:78:ad:cc:3f:34:75:b5:76:73:15:c6:61:38:c4:b0: 8d:67:24:2c:5c:16:d8:fe:62:c7:53:70:78:bc:d5:41:0d:48: b6:41:ff:2c:79:16:73:61:ee:22:09:ed:50:53:54:b5:57:78: 84:1b:ad:2a:f5:94:fd:fc:ba:1b:34:63:90:8d:d1:3d:88:ee: 50:4b:6b:bb:9f:b9:2e:2d:24:86:81:fb:4c:24:10:82:44:78: fc:10:0f:ee:0e:0f:5e:4e:93:56:fe:f6:6b:b1:bb:76:1c:3a: d3:76:32:d8:4f:3b:83:db:b8:02:36:0b:08:30:2e:43:03:e9: 2e:c1:f4:f7:16:82:3c:c7:88:97:6c:72:37:b2:bf:f2:fa:45: 7d:35:ed:12:54:6a:2e:9d:08:43:b8:73:65:a8:da:c5:62:38: be:f6:94:43:44:b3:25:a6:97:13:bc:f4:7e:c2:53:94:4a:65: d1:c5:92:29:0c:dc:c6:a4:0e:d2:1a:3f:4c:00:65:3d:e0:02: 2c:bb:dc:2f:4b:ee:61:d4:47:02:18:e3:d6:b5:b3:54:5e:f6: 4f:65:6e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoT0MBN+Bg5xmxS8GEgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDJjYTQ2Njg4YTgzN2I1NzUyMzRjZTZhMWEzMjY1ODdk NmMyMDQwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhlYzJlNGZmMTIyMzA2M2RlZjUxZDljZjZkODVjMzI4NWQ0MjlhZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ygL3nUDYrsww73PGE4yl8Tsah0v /RN3YpjzjDe08m+KxtJvMF2MFBO+aafNER7sULi0hAxRNBa0GcfqZMl78FMm0E4q 2KimKxl/A9c/JAkIpfQovfAH6APxpVYTGRoq+ByGcrNS1HB80ejbcFg1mNH4X2qp 7pRB9vLs1fiUQaGiH4IQ0MultD7IilhvWt57m8UPGAMtMKkaQ27MJD5PAzTBH095 AOisgDBv2tcUycZtABL2EhNWiiGeYNiSS/1aVtkXvnvVkHOdlFEcE9k/bnmlEq/f MU3IQw3uBPpE01wWmpGzEhaSGCSV1EjvxpUKPE9BEjQ9VIwowXaIHonpPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwuT/EiMGPe9R2c9thcMoXUKa0CMB8GA1UdIwQY MBaAFJ5CykZoioN7V1I0zmoaMmWH1sIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTIt MzI5YmEzODhiN2NmLzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTItMzI5YmEzODhiN2Nm LzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUG9JABS J0yS6lP2I5MW/rVrxEgIINlz2kbLTK0bhS/r8O1YF3KeeK3MPzR1tXZzFcZhOMSw jWckLFwW2P5ix1NweLzVQQ1ItkH/LHkWc2HuIgntUFNUtVd4hButKvWU/fy6GzRj kI3RPYjuUEtru5+5Li0khoH7TCQQgkR4/BAP7g4PXk6TVv72a7G7dhw603Yy2E87 g9u4AjYLCDAuQwPpLsH09xaCPMeIl2xyN7K/8vpFfTXtElRqLp0IQ7hzZajaxWI4 vvaUQ0SzJaaXE7z0fsJTlEpl0cWSKQzcxqQO0ho/TABlPeACLLvcL0vuYdRHAhjj 1rWzVF72T2VuxA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:16 2025 by rpki-client