This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json) Hash identifier: Fy6Dh63lVmysZVRWZqwoDtUUEsDxe+SuLHy+Wpr/3gg= Subject key identifier: 3F:6D:7C:19:53:DB:B8:97:02:B0:02:2E:DC:F7:D1:E7:B5:53:E5:6B Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a Certificate serial: 019AF19A95BF6BE62C8C4E503E9FD77FCE80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft Manifest number: 0CA6 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: 3Jhus2/s6QeJQzTLRc000hzordNYQzpro6fIXwm5PrA=) 2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:95:bf:6b:e6:2c:8c:4e:50:3e:9f:d7:7f:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=3f6d7c1953dbb89702b0022edcf7d1e7b553e56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:a0:1a:e2:d3:39:94:db:87:bf:72:58:77: 75:de:4d:35:69:cd:be:9a:a2:eb:5e:ea:e7:bc:ef: 24:9a:c5:0f:fa:01:0b:3c:f7:a2:d9:b0:65:60:fa: d2:ce:c9:df:1f:68:02:3a:74:ac:e0:fd:52:06:dc: b8:34:13:a3:eb:82:02:a8:e9:ce:08:f4:7f:a3:32: b6:47:1b:0e:b8:af:f0:f7:8c:9a:86:4f:85:e0:3c: 84:9d:1e:71:cf:ce:65:0e:3f:0a:26:e4:c9:96:54: ac:1c:2e:97:56:10:9e:8c:ae:41:fe:98:f2:38:63: 68:95:8b:ce:b2:4d:b4:e0:46:06:0e:e3:b5:e0:83: 4f:e9:31:c3:ee:d4:9a:53:c3:4c:3d:c3:f4:43:27: 15:0c:9c:8a:8e:95:a4:1a:90:22:b1:2b:12:9d:08: 3c:04:6f:1f:0b:66:db:a0:48:56:3c:a3:39:46:07: 0d:ef:71:4a:b2:de:d6:31:d3:f2:01:9a:b5:75:9b: 0c:c2:38:53:df:90:ef:0f:ff:84:3b:36:2d:c5:e8: 29:54:30:dc:3d:92:49:62:c4:83:1a:14:40:b2:df: 3b:39:8e:e6:78:20:fc:dc:1d:b6:9f:d3:57:a5:ab: c7:39:13:cf:52:4d:a2:62:74:2f:80:7f:5a:ec:6c: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6D:7C:19:53:DB:B8:97:02:B0:02:2E:DC:F7:D1:E7:B5:53:E5:6B X509v3 Authority Key Identifier: keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:23:0f:73:4f:cf:1b:3d:2d:f2:e9:66:3e:40:1d:f1:c3:2a: e7:91:1c:69:9c:df:45:b9:d5:cf:66:9c:4f:46:31:95:97:a7: ab:9f:a6:eb:1e:5c:9a:ef:84:4e:11:b9:97:88:6f:bf:13:c7: 32:8a:85:7c:30:a1:08:c7:98:e7:11:fe:0e:ec:f4:0b:f2:1d: 7c:9a:98:98:4a:1a:3a:c4:3f:33:0c:1a:2b:a7:b8:6f:4c:80: ca:db:79:55:22:6b:0a:61:3f:c4:02:96:d3:48:f7:8a:42:d6: a2:a0:79:45:3d:a0:4c:b0:2a:ad:ca:52:9d:19:6c:74:a7:d2: 58:7d:47:97:58:51:a6:a2:bb:e0:35:a5:ec:af:f8:bb:ae:44: 5d:bf:f5:5b:8b:5d:09:8f:95:3a:c4:42:f4:8c:de:3c:a3:8b: 76:45:7c:95:a2:c9:ae:85:19:7f:5d:ee:c9:24:33:13:58:09: a9:71:5d:f5:11:2c:11:3d:ce:ca:bb:3c:0a:aa:eb:4f:0c:f8: d6:39:26:d8:54:60:19:54:ff:3e:dd:7a:6f:da:82:3b:fe:b5: b0:ff:1b:d1:68:c3:4c:cf:9f:1d:d2:3e:1a:03:e5:95:64:26: 46:cf:1a:b4:4e:89:10:49:c8:76:43:6f:8e:04:6d:a7:39:03: af:64:39:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpW/a+YsjE5QPp/Xf86AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDUxYTJlYTQwYWYxNzE1ZTYzMTMxNjk0Njg5OTZhY2E3 MWJiOGEwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EygzZjZkN2MxOTUzZGJiODk3MDJiMDAyMmVkY2Y3ZDFlN2I1NTNlNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0CgGuLTOZTbh79yWHd13k01ac2+ mqLrXurnvO8kmsUP+gELPPei2bBlYPrSzsnfH2gCOnSs4P1SBty4NBOj64ICqOnO CPR/ozK2RxsOuK/w94yahk+F4DyEnR5xz85lDj8KJuTJllSsHC6XVhCejK5B/pjy OGNolYvOsk204EYGDuO14INP6THD7tSaU8NMPcP0QycVDJyKjpWkGpAisSsSnQg8 BG8fC2bboEhWPKM5RgcN73FKst7WMdPyAZq1dZsMwjhT35DvD/+EOzYtxegpVDDc PZJJYsSDGhRAst87OY7meCD83B22n9NXpavHORPPUk2iYnQvgH9a7GxMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9tfBlT27iXArACLtz30ee1U+VrMB8GA1UdIwQY MBaAFDZFGi6kCvFxXmMTFpRomWrKcbuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtVYUxxUUs4WEZlWXhNV2xHaVphc3B4dTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84YjM4MjItNmVhYS00M2EyLTlhMzIt YmUzMDhjMTJmN2JjLzEvTmtVYUxxUUs4WEZlWXhNV2xHaVphc3B4dTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84YjM4MjItNmVhYS00M2EyLTlhMzItYmUzMDhjMTJmN2Jj LzEvTmtVYUxxUUs4WEZlWXhNV2xHaVphc3B4dTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCMPc0/P Gz0t8ulmPkAd8cMq55EcaZzfRbnVz2acT0YxlZenq5+m6x5cmu+EThG5l4hvvxPH MoqFfDChCMeY5xH+Duz0C/IdfJqYmEoaOsQ/MwwaK6e4b0yAytt5VSJrCmE/xAKW 00j3ikLWoqB5RT2gTLAqrcpSnRlsdKfSWH1Hl1hRpqK74DWl7K/4u65EXb/1W4td CY+VOsRC9IzePKOLdkV8laLJroUZf13uySQzE1gJqXFd9REsET3Oyrs8CqrrTwz4 1jkm2FRgGVT/Pt16b9qCO/61sP8b0WjDTM+fHdI+GgPllWQmRs8atE6JEEnIdkNv jgRtpzkDr2Q5ow== -----END CERTIFICATE-----Generated at Sat Dec 6 14:10:06 2025 by rpki-client