This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft File: nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json) Hash identifier: 3tN1TDBP61IuCQXGUMZenuAg0kFl3H+pr9+EwMUVS+o= Subject key identifier: F0:F9:70:99:B3:B7:07:B8:3F:79:41:D2:33:AD:37:7C:19:CF:E3:BC Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019AF389279DB12A81B72D63A17085BF7AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft Manifest number: 125D Signing time: Sat 06 Dec 2025 12:00:43 +0000 Manifest this update: Sat 06 Dec 2025 12:00:43 +0000 Manifest next update: Sun 07 Dec 2025 12:00:43 +0000 Files and hashes: 1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=) 2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=) 3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=) 4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=) 5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=) 6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: +7wTVA9QFAa9JsbhPYOrntmGS7tFw/qXVj799Dd05Tw=) 7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:27:9d:b1:2a:81:b7:2d:63:a1:70:85:bf:7a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Dec 6 12:00:43 2025 GMT Not After : Dec 7 12:00:43 2025 GMT Subject: CN=f0f97099b3b707b83f7941d233ad377c19cfe3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:2b:10:1f:e8:4a:7f:1c:fe:d6:a6:d1:7c: ad:15:1f:7b:63:7b:c9:d9:3c:9c:2c:28:51:0a:f6: fc:e9:6e:e7:f0:d2:8a:a8:1c:7b:dc:48:94:1e:d7: 92:8b:b4:15:ab:68:9c:52:07:3b:3c:ab:91:2e:a6: 77:14:ed:7c:35:62:8d:d2:22:7b:77:a1:63:ac:52: 95:b1:f6:dc:ea:7b:09:05:0f:5d:b6:d5:7a:82:b9: 98:64:fb:34:3d:5f:27:e2:89:65:4f:3d:f4:70:c7: b2:d6:27:cf:d9:cc:d6:d6:e7:63:18:92:71:e2:3b: 80:d7:ce:3f:32:8a:01:f0:bc:98:fa:04:dd:65:6f: b9:7e:6f:b3:75:d1:88:3b:f1:3d:ac:1d:5d:d6:77: 55:67:be:8e:7b:19:b7:5b:10:a6:7e:57:a5:43:41: 0a:3a:20:fc:80:2c:ed:4c:f3:ff:80:86:8d:34:bd: f5:e2:48:b1:2f:6c:e4:b9:4a:96:8c:b3:22:bb:00: 7d:d7:c3:1d:a9:4f:9e:39:81:a7:d4:67:f0:aa:9f: 19:58:86:d5:8d:ea:75:78:cc:9f:1d:e5:ad:54:9c: 0e:d1:0b:6b:fa:68:1a:0d:32:8e:11:24:d3:ac:f3: 4d:f0:b3:df:2e:47:30:51:f6:09:c7:f2:78:46:b5: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F9:70:99:B3:B7:07:B8:3F:79:41:D2:33:AD:37:7C:19:CF:E3:BC X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a9:d6:e5:fd:ca:a4:dc:31:52:be:6a:1b:b8:51:6f:00:ae: b3:a7:69:87:0b:13:21:0d:dd:95:43:88:c1:f4:22:e3:cf:5d: ea:7c:10:f9:d5:f5:ea:34:38:65:fb:ca:e2:5e:0b:72:45:63: b1:f9:9a:94:6f:e7:56:0f:db:b6:25:d1:07:3f:ec:7f:42:61: 85:19:b6:31:a8:67:75:e5:47:50:b5:3b:bb:50:95:d0:1d:54: bf:8e:77:1a:91:f2:d6:0a:23:e5:ca:5f:b9:67:f9:0d:05:38: 1a:ec:5d:5f:ae:12:34:cc:aa:dc:2a:09:ed:62:c7:97:2a:52: fc:14:6c:bb:88:83:7f:b1:a9:bf:61:e9:3c:72:98:ed:3b:55: 94:29:c7:db:01:f1:fa:62:35:9f:3d:58:29:db:a9:51:9f:d9: d3:13:a9:c4:ae:20:0f:89:20:c9:76:45:7f:7f:62:6d:a4:b4: 1e:6d:4a:40:20:1d:8e:a1:4a:dc:56:60:8d:bd:1a:19:47:05: bf:36:fc:72:c2:05:95:df:9d:90:f8:64:2b:cf:df:e9:7d:88: 65:5f:58:4d:21:b6:cb:ea:44:39:43:e1:a5:39:39:8b:50:d9: 96:8c:ce:3f:bb:2e:de:17:2f:71:a8:d8:3d:09:0c:5d:05:20: 26:fe:e2:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSedsSqBty1joXCFv3qhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjUxMjA2MTIwMDQzWhcNMjUxMjA3MTIwMDQzWjAzMTEwLwYDVQQD EyhmMGY5NzA5OWIzYjcwN2I4M2Y3OTQxZDIzM2FkMzc3YzE5Y2ZlM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP0rEB/oSn8c/tam0XytFR97Y3vJ 2TycLChRCvb86W7n8NKKqBx73EiUHteSi7QVq2icUgc7PKuRLqZ3FO18NWKN0iJ7 d6FjrFKVsfbc6nsJBQ9dttV6grmYZPs0PV8n4ollTz30cMey1ifP2czW1udjGJJx 4juA184/MooB8LyY+gTdZW+5fm+zddGIO/E9rB1d1ndVZ76Oexm3WxCmflelQ0EK OiD8gCztTPP/gIaNNL314kixL2zkuUqWjLMiuwB918MdqU+eOYGn1Gfwqp8ZWIbV jep1eMyfHeWtVJwO0Qtr+mgaDTKOESTTrPNN8LPfLkcwUfYJx/J4RrXyYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD5cJmztwe4P3lB0jOtN3wZz+O8MB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqnW5f3K pNwxUr5qG7hRbwCus6dphwsTIQ3dlUOIwfQi489d6nwQ+dX16jQ4ZfvK4l4LckVj sfmalG/nVg/btiXRBz/sf0JhhRm2MahndeVHULU7u1CV0B1Uv453GpHy1goj5cpf uWf5DQU4GuxdX64SNMyq3CoJ7WLHlypS/BRsu4iDf7Gpv2HpPHKY7TtVlCnH2wHx +mI1nz1YKdupUZ/Z0xOpxK4gD4kgyXZFf39ibaS0Hm1KQCAdjqFK3FZgjb0aGUcF vzb8csIFld+dkPhkK8/f6X2IZV9YTSG2y+pEOUPhpTk5i1DZlozOP7su3hcvcajY PQkMXQUgJv7i7A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:31 2025 by rpki-client