This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft File: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json) Hash identifier: TeiJamdvUFfO8rd2S+vzRhSIZxHYTmDeFKJcqwZLO7A= Subject key identifier: A1:07:98:93:DE:BE:47:27:03:14:EC:EC:86:DE:10:96:F2:F4:E8:C4 Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61 Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961 Certificate serial: 019AF276EC76EFD0D86BC36553C8A4F17833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft Manifest number: 0E34 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: aRmXLbWgvqCrB_ieixDwg5bWHH4.roa (hash: NkuU0nUuwUULqqtGwJsRiK14f6VjdQm0HvAAtBo3GJQ=) 2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: imU7drMvX7hmPzjMvEfIQ0Q0u27lG8z4uyqDt8T4pOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ec:76:ef:d0:d8:6b:c3:65:53:c8:a4:f1:78:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=a1079893debe47270314ecec86de1096f2f4e8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:33:96:82:4a:2f:a9:99:57:69:54:27:88: 73:95:47:37:45:c1:a0:95:bc:5e:7e:ae:e0:39:4d: 23:10:4a:a2:a1:65:40:fd:b7:23:55:3c:1a:42:07: 1f:05:4f:d6:00:79:c5:54:24:b3:33:43:dc:9c:8b: 4d:19:b9:6a:65:7b:03:3b:66:13:94:95:82:be:36: bb:3f:f5:d4:51:a4:4d:93:da:77:4e:38:ff:4f:d3: 76:fc:d3:6e:00:37:ac:73:a6:18:b9:ed:f3:ae:ed: 88:d2:fc:a4:56:57:78:d4:e8:04:c7:97:52:a1:98: 05:80:b8:b7:6b:c5:e8:8a:f1:47:84:fc:e1:18:51: 05:29:58:7a:ba:7f:35:b8:e5:15:9a:68:40:38:0b: 75:bd:87:ce:19:1b:83:aa:42:c1:82:ca:e5:93:1a: 29:0c:df:e0:0e:02:62:41:d2:03:d6:89:d0:1d:66: c6:17:5e:24:99:d0:a7:1f:c8:94:23:f4:4a:34:bf: c0:15:b4:1a:a7:a7:df:dd:61:63:37:6a:4c:76:6e: 87:52:88:b1:32:19:78:d5:ed:01:02:26:b0:a0:04: ea:9e:cd:86:f1:9c:69:ad:45:89:5b:de:33:8b:0b: 48:62:8c:40:ad:0c:4e:ef:6b:f7:3d:b3:76:15:3a: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:07:98:93:DE:BE:47:27:03:14:EC:EC:86:DE:10:96:F2:F4:E8:C4 X509v3 Authority Key Identifier: keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d8:19:4d:04:db:c7:94:ba:6c:d4:53:9c:d9:4d:6c:59:8c: 21:cf:66:98:93:a1:3a:18:f1:a4:aa:ff:bb:67:84:b3:49:67: d5:91:49:e7:c8:f8:18:72:73:c4:76:03:2e:6a:5a:4c:b8:12: 93:f4:d6:ad:b7:49:aa:a2:b5:06:cd:0d:dd:c8:5c:06:c4:37: 16:4f:c8:28:cf:7c:0e:f5:b0:dc:2d:d6:c8:c5:22:6a:cb:f5: 20:2a:a1:88:86:4f:3d:09:f7:7d:d1:6a:67:43:e1:d6:fd:c2: c7:a3:fd:3c:0f:f5:0d:4f:69:3f:dc:40:3a:6e:44:bc:01:26: 2b:97:20:ab:7e:72:f2:c2:62:cc:30:68:d6:1e:31:6f:85:de: af:ff:19:dd:c9:ab:85:9d:56:ba:83:22:76:94:2d:33:54:22: 95:88:af:06:80:cf:ff:b1:89:6a:28:b1:20:c6:1a:f9:bd:69: c4:9b:03:07:36:e2:00:0c:40:f2:72:d0:23:89:2d:ba:f6:1c: c6:a4:50:b9:00:a8:07:c4:2b:70:1e:b0:23:aa:ab:d2:7b:c9: 22:5d:4a:f2:5e:76:ac:51:49:05:28:0e:50:6a:45:fe:f5:cc: f4:36:8f:69:5c:33:a5:72:a8:9f:28:b7:81:c7:78:04:b6:ad: 32:0b:e9:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydux279DYa8NlU8ik8XgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMGUyYjllNjlmNTYyZGYxNGNmNzcyYmRlMDVmN2RhY2Rl MjU5NjEwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EyhhMTA3OTg5M2RlYmU0NzI3MDMxNGVjZWM4NmRlMTA5NmYyZjRlOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu4zloJKL6mZV2lUJ4hzlUc3RcGg lbxefq7gOU0jEEqioWVA/bcjVTwaQgcfBU/WAHnFVCSzM0PcnItNGblqZXsDO2YT lJWCvja7P/XUUaRNk9p3Tjj/T9N2/NNuADesc6YYue3zru2I0vykVld41OgEx5dS oZgFgLi3a8XoivFHhPzhGFEFKVh6un81uOUVmmhAOAt1vYfOGRuDqkLBgsrlkxop DN/gDgJiQdID1onQHWbGF14kmdCnH8iUI/RKNL/AFbQap6ff3WFjN2pMdm6HUoix Mhl41e0BAiawoATqns2G8ZxprUWJW94ziwtIYoxArQxO72v3PbN2FTolGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEHmJPevkcnAxTs7IbeEJby9OjEMB8GA1UdIwQY MBaAFJ0OK55p9WLfFM93K94F99rN4llhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDct ZDhkYzM0MDM2Y2U3LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDctZDhkYzM0MDM2Y2U3 LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItgZTQTb x5S6bNRTnNlNbFmMIc9mmJOhOhjxpKr/u2eEs0ln1ZFJ58j4GHJzxHYDLmpaTLgS k/TWrbdJqqK1Bs0N3chcBsQ3Fk/IKM98DvWw3C3WyMUiasv1ICqhiIZPPQn3fdFq Z0Ph1v3Cx6P9PA/1DU9pP9xAOm5EvAEmK5cgq35y8sJizDBo1h4xb4Xer/8Z3cmr hZ1WuoMidpQtM1QilYivBoDP/7GJaiixIMYa+b1pxJsDBzbiAAxA8nLQI4ktuvYc xqRQuQCoB8QrcB6wI6qr0nvJIl1K8l52rFFJBSgOUGpF/vXM9DaPaVwzpXKonyi3 gcd4BLatMgvp+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:00 2025 by rpki-client