This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json) Hash identifier: 5H6Ye3Jsw6lKT75dMQa+NvrWtwL9ZWhV5tsWoFWzoMk= Subject key identifier: 9D:05:A1:3B:E9:B9:31:5E:CB:0B:60:D1:F1:FA:FB:BB:F1:99:E3:D0 Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe Certificate serial: 019AF27653DE54D8ED164842950938C3A7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft Manifest number: 071D Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: xC2xvMTWlQedBv7A7hAHvGbYwh2eT4FBYHUdbt/XwCA=) 2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:53:de:54:d8:ed:16:48:42:95:09:38:c3:a7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=9d05a13be9b9315ecb0b60d1f1fafbbbf199e3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:60:bc:ed:7a:f7:78:e5:53:41:c3:8d:fe: 54:01:3c:3a:fa:7c:9d:93:9a:f5:2d:08:8a:7a:97: da:6d:9d:ed:e2:f0:19:23:b0:eb:59:83:eb:19:65: 70:bb:eb:9c:be:fd:b4:51:a5:e9:5a:28:90:ff:74: d5:c2:7b:d7:c3:cf:99:51:34:ba:bf:f9:25:d1:cf: 41:b5:bb:13:4d:0e:bb:9a:ab:85:68:45:0f:f4:68: a8:8f:92:e2:2d:5a:d9:98:0a:82:b4:07:27:14:7f: 5d:e5:90:e2:0e:ef:af:51:06:9d:10:6c:d3:d3:f1: 2c:c8:1e:2d:fc:6a:07:60:27:80:52:2c:55:1c:f7: 50:44:d5:0c:10:d2:10:5d:89:75:bb:32:ed:78:13: b6:81:b8:f4:ea:59:96:61:8f:3e:7b:8f:ed:f3:1e: 64:dc:ad:41:aa:3b:17:37:2b:b1:38:c9:73:e0:39: cc:06:74:3b:b0:ae:88:c3:d7:04:1c:e0:c9:d2:7d: 72:b4:82:30:ad:8c:36:70:68:63:2d:e8:f5:0f:a0: 10:82:0e:b1:4d:99:f1:ec:1f:de:2f:00:70:0f:7e: 1b:3d:7b:a6:76:50:53:78:97:b4:6d:70:d4:8a:3a: 04:bc:cf:04:10:15:34:8c:86:5c:31:a4:bb:5a:e0: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:05:A1:3B:E9:B9:31:5E:CB:0B:60:D1:F1:FA:FB:BB:F1:99:E3:D0 X509v3 Authority Key Identifier: keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f4:8d:41:26:ce:d1:19:49:85:30:92:3e:a8:c4:1e:8f:7a: 6b:15:b8:31:f9:02:49:68:8d:26:6a:09:15:3e:01:de:47:5b: 38:8d:5d:e4:4c:25:9a:df:0a:8f:eb:2d:86:a7:da:fa:0c:1f: b8:b9:42:7b:cf:12:a6:34:0b:66:92:e5:5f:e9:70:46:10:82: 1d:5b:9a:bf:5f:b1:de:4f:84:91:b1:b6:21:33:7c:fb:73:f1: 4c:19:18:27:77:5d:9a:e0:21:4d:dd:18:60:06:f4:2f:0b:b9: dd:ed:45:d2:6e:58:26:32:a4:82:5f:82:68:2f:d1:d2:e8:db: 2d:89:13:34:64:11:7f:62:4b:9d:4c:9d:4a:24:38:ba:7d:98: 81:c9:46:ee:6f:b2:00:fe:25:37:8a:4f:ee:2b:f1:9c:90:41: 73:d3:99:cd:42:09:9a:eb:0b:8e:00:dc:aa:b7:32:90:d6:94: 09:a8:ce:d4:92:56:1b:60:ce:29:a4:f6:2b:6b:0f:5d:28:bd: c3:15:2a:45:ec:38:b4:2b:d0:1d:82:71:fc:dc:ee:84:e3:04: 24:8c:2b:7d:65:4d:fc:df:26:d0:f0:c2:a9:48:f9:85:14:d2: 6d:8e:27:04:fa:d1:30:33:64:69:e3:a0:e4:c6:6b:cb:f6:fa: d0:60:e4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlPeVNjtFkhClQk4w6fmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2Y1M2YxZTBhZTZmNWYzM2RiY2Y4MGVhOGM3NDFmNjgy NDg1ZmUwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD Eyg5ZDA1YTEzYmU5YjkzMTVlY2IwYjYwZDFmMWZhZmJiYmYxOTllM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FlgvO1693jlU0HDjf5UATw6+nyd k5r1LQiKepfabZ3t4vAZI7DrWYPrGWVwu+ucvv20UaXpWiiQ/3TVwnvXw8+ZUTS6 v/kl0c9BtbsTTQ67mquFaEUP9Gioj5LiLVrZmAqCtAcnFH9d5ZDiDu+vUQadEGzT 0/EsyB4t/GoHYCeAUixVHPdQRNUMENIQXYl1uzLteBO2gbj06lmWYY8+e4/t8x5k 3K1BqjsXNyuxOMlz4DnMBnQ7sK6Iw9cEHODJ0n1ytIIwrYw2cGhjLej1D6AQgg6x TZnx7B/eLwBwD34bPXumdlBTeJe0bXDUijoEvM8EEBU0jIZcMaS7WuCZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0FoTvpuTFeywtg0fH6+7vxmePQMB8GA1UdIwQY MBaAFJzPU/Hgrm9fM9vPgOqMdB9oJIX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUt YWY2MzVkODc1NTc1LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUtYWY2MzVkODc1NTc1 LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvSNQSbO 0RlJhTCSPqjEHo96axW4MfkCSWiNJmoJFT4B3kdbOI1d5Ewlmt8Kj+sthqfa+gwf uLlCe88SpjQLZpLlX+lwRhCCHVuav1+x3k+EkbG2ITN8+3PxTBkYJ3ddmuAhTd0Y YAb0Lwu53e1F0m5YJjKkgl+CaC/R0ujbLYkTNGQRf2JLnUydSiQ4un2YgclG7m+y AP4lN4pP7ivxnJBBc9OZzUIJmusLjgDcqrcykNaUCajO1JJWG2DOKaT2K2sPXSi9 wxUqRew4tCvQHYJx/NzuhOMEJIwrfWVN/N8m0PDCqUj5hRTSbY4nBPrRMDNkaeOg 5MZry/b60GDkkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:41 2025 by rpki-client