This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json) Hash identifier: 5ZMvfqp1W0kAkZuN/f/wKfNdt7btdX2DwaYvTe0DdKg= Subject key identifier: EC:A8:5A:8F:B8:A9:A3:52:B6:93:46:1D:0B:B5:8E:1E:6B:58:7C:E3 Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78 Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978 Certificate serial: 019AF12D2924F5F2BBF72B9A4AC58641D50F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft Manifest number: 08F7 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: O0eoSaTDr1n+ZyYs4tWii9hBy1+LNGBUZH5EhkmEakw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:29:24:f5:f2:bb:f7:2b:9a:4a:c5:86:41:d5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=eca85a8fb8a9a352b693461d0bb58e1e6b587ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:6b:3a:0a:78:f3:36:c6:33:2e:26:7f:08: 8b:86:c9:f1:c9:4c:51:fb:1e:78:f4:e7:c8:4f:9d: 4c:fe:5d:15:b3:6a:4f:cf:fc:cc:53:2d:b4:9b:44: 30:58:4b:2b:3c:31:db:e2:ae:be:e4:7d:83:c7:5a: 1e:51:43:23:60:e1:ed:99:29:b5:84:b9:65:28:2b: 85:f1:9c:50:e1:f5:4f:8d:4b:db:3d:a6:f7:2e:e1: 6d:39:dd:b3:c3:b9:57:c1:cd:8e:90:03:60:93:df: da:b9:e1:6c:ce:7f:2a:91:de:1d:36:65:c6:f5:1b: 04:ae:82:84:7a:ae:ba:d2:73:7b:11:ec:5a:76:e2: da:5f:64:1b:32:bc:45:0a:25:67:42:81:d3:c7:f8: 9f:b5:03:ca:20:19:c3:dd:e1:67:91:49:54:e5:98: 7b:94:76:c7:82:12:24:50:b2:ff:fa:63:e0:37:f6: 78:f8:f5:8e:2b:43:f5:28:7e:af:fa:8b:f1:0c:94: e0:e8:76:8c:b4:2a:0a:49:7c:99:0c:55:00:75:d4: e6:a1:0a:65:f8:04:60:02:a7:ca:f6:47:fb:66:5a: 00:f0:b6:42:e7:11:4a:68:d0:99:f7:61:8c:a7:ec: 09:93:64:ad:79:d7:7d:da:7e:97:fd:13:f0:df:e1: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A8:5A:8F:B8:A9:A3:52:B6:93:46:1D:0B:B5:8E:1E:6B:58:7C:E3 X509v3 Authority Key Identifier: keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:15:3b:f6:ac:41:65:ed:c7:33:1f:38:f9:bd:a0:22:64:2d: 80:41:15:28:6b:c6:a8:cb:19:cd:b1:05:77:d8:80:57:14:e4: 47:10:59:2d:54:8d:48:07:30:0c:31:d0:49:12:71:8d:b8:51: 3c:7e:39:78:95:72:93:af:36:9b:8c:33:32:65:cc:ae:27:5d: 82:15:d0:f7:46:8c:41:4b:27:81:34:ac:5b:64:ef:27:8b:ba: f6:9d:b9:97:94:bb:d5:f6:82:7c:6f:ff:53:4e:52:a2:b2:2d: 5d:e1:15:ca:5e:bc:62:ba:f7:4a:a9:c0:46:f4:6f:35:35:42: 8e:f6:21:be:f2:f4:4c:5c:18:65:b3:cc:69:c7:55:1e:b0:17: 8e:e8:f4:8d:d8:e6:41:91:3e:d7:e2:3e:09:54:fc:7c:29:c7: f6:d2:39:8d:be:41:cd:00:c4:ef:19:a4:ea:01:31:38:38:86: d9:eb:41:c9:01:e9:04:08:87:f9:90:49:1f:10:7e:91:3a:53: 3a:ca:37:e9:5a:f9:41:74:46:d0:14:08:f2:c5:a5:67:75:06: fe:80:f4:aa:b3:b3:0e:63:c7:0b:80:8c:ba:c8:45:80:c4:15: 95:ef:d8:b7:d6:2c:fa:e9:28:5b:ac:57:47:52:33:3c:73:41: 57:1d:a1:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSkk9fK79yuaSsWGQdUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjk4ODk2YTg4YWU4ZjM1NDBhZWI3N2VjYTFmMWE5NGJi ZDY5NzgwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD EyhlY2E4NWE4ZmI4YTlhMzUyYjY5MzQ2MWQwYmI1OGUxZTZiNTg3Y2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL5rOgp48zbGMy4mfwiLhsnxyUxR +x549OfIT51M/l0Vs2pPz/zMUy20m0QwWEsrPDHb4q6+5H2Dx1oeUUMjYOHtmSm1 hLllKCuF8ZxQ4fVPjUvbPab3LuFtOd2zw7lXwc2OkANgk9/aueFszn8qkd4dNmXG 9RsEroKEeq660nN7EexaduLaX2QbMrxFCiVnQoHTx/iftQPKIBnD3eFnkUlU5Zh7 lHbHghIkULL/+mPgN/Z4+PWOK0P1KH6v+ovxDJTg6HaMtCoKSXyZDFUAddTmoQpl +ARgAqfK9kf7ZloA8LZC5xFKaNCZ92GMp+wJk2Stedd92n6X/RPw3+HmTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyoWo+4qaNStpNGHQu1jh5rWHzjMB8GA1UdIwQY MBaAFJz5iJaoiujzVArrd+yh8alLvWl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUt NzNkMDE0ZTgzNDliLzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUtNzNkMDE0ZTgzNDli LzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxU79qxB Ze3HMx84+b2gImQtgEEVKGvGqMsZzbEFd9iAVxTkRxBZLVSNSAcwDDHQSRJxjbhR PH45eJVyk682m4wzMmXMriddghXQ90aMQUsngTSsW2TvJ4u69p25l5S71faCfG// U05SorItXeEVyl68Yrr3SqnARvRvNTVCjvYhvvL0TFwYZbPMacdVHrAXjuj0jdjm QZE+1+I+CVT8fCnH9tI5jb5BzQDE7xmk6gExODiG2etByQHpBAiH+ZBJHxB+kTpT Oso36Vr5QXRG0BQI8sWlZ3UG/oD0qrOzDmPHC4CMushFgMQVle/Yt9Ys+ukoW6xX R1IzPHNBVx2hHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:16 2025 by rpki-client