This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft File: nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json) Hash identifier: BO0UvSoPYcKp+KgKuJMn/ApzXtd+ei3jX8ldfQ6asSc= Subject key identifier: EB:57:2D:6A:D4:D4:07:D3:CE:1B:1C:25:2D:CA:1D:EB:68:5A:9C:DD Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019B2F674EB3BF4F9290AD389479E8679566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft Manifest number: 127C Signing time: Thu 18 Dec 2025 03:00:58 +0000 Manifest this update: Thu 18 Dec 2025 03:00:58 +0000 Manifest next update: Fri 19 Dec 2025 03:00:58 +0000 Files and hashes: 1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=) 2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=) 3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=) 4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=) 5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=) 6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: 2C/Hu0yZBeFAJflq7XSK9mk1YJW2LcmQc47ZM+RPlis=) 7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:4e:b3:bf:4f:92:90:ad:38:94:79:e8:67:95:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Dec 18 03:00:58 2025 GMT Not After : Dec 19 03:00:58 2025 GMT Subject: CN=eb572d6ad4d407d3ce1b1c252dca1deb685a9cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:d7:a4:33:22:e4:25:77:f3:0f:99:cb:e1: 8e:40:62:6c:4a:0a:a7:84:e5:63:9f:4d:cb:ce:df: 92:32:00:03:8c:3b:18:12:36:42:dd:f3:5d:c3:0e: 26:88:fa:73:39:8e:99:bc:b0:76:d2:c3:26:6e:41: cd:7c:52:9d:aa:32:35:3a:5b:f5:28:99:42:ea:c3: 54:e8:39:72:f9:18:f2:ab:1e:cc:6a:ce:87:ac:a8: ed:78:cc:d9:15:c3:a0:f7:47:8e:bb:0b:37:9e:08: cd:76:66:16:9e:82:32:65:ca:f8:3c:c0:70:6a:b0: c1:08:5d:50:88:59:2d:03:33:cd:83:24:d4:e7:dd: c1:98:5e:b4:b6:49:6a:60:df:06:77:dd:4d:ce:3b: 39:3e:9b:60:b5:d9:84:19:92:74:03:92:7a:33:61: 73:48:0f:79:d1:f4:42:2f:de:de:d7:a0:67:1d:80: d0:28:c4:37:92:8f:a1:cf:52:72:b7:ff:dc:75:9e: ee:f6:bc:d0:0e:85:2d:bc:b3:eb:73:57:40:3a:13: 55:41:4b:d8:b5:8f:09:b1:fa:4e:07:dd:fe:fc:8f: 80:9e:f0:16:3b:94:3f:a5:d6:73:50:59:9c:8e:93: ad:b6:02:36:8f:be:e5:c8:b0:66:66:69:4c:91:8c: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:57:2D:6A:D4:D4:07:D3:CE:1B:1C:25:2D:CA:1D:EB:68:5A:9C:DD X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f6:02:28:9e:9d:f8:c9:15:ac:c0:32:04:c9:84:a0:9b:cb: c0:d7:77:56:f8:9c:d9:3f:7f:14:03:3f:77:10:83:f2:f4:b1: b3:82:7d:10:45:1e:ce:20:75:0c:93:81:f0:8f:e0:ca:c3:5f: e2:ba:2d:6a:75:ad:f5:3c:f4:57:07:22:c6:52:2f:59:fe:84: 12:ee:f6:6e:d5:a5:f7:dd:16:9b:9e:73:1b:e4:c8:8e:e3:24: e1:8f:5d:95:4b:91:91:34:de:ec:85:bd:5b:30:db:1e:d2:7d: eb:b4:b8:fc:17:c1:38:75:b5:62:eb:74:59:07:ed:4c:ea:72: d9:1f:90:fa:4f:20:68:e3:fe:97:a4:2b:76:57:c7:4a:33:86: 95:c4:d2:1d:c4:1a:36:39:43:a3:32:85:95:33:68:12:89:2d: 43:b0:30:0c:94:d9:f9:b5:5b:ed:c0:6c:d2:6d:25:b1:08:2a: 74:65:5a:15:5e:bb:5d:bb:40:9e:dd:ae:35:fc:ab:0f:9f:97: e0:80:15:86:34:12:dd:09:b6:d8:c5:00:36:13:02:c9:e9:7a: 7f:36:8f:cb:85:80:84:a7:28:cb:ba:8b:6a:8d:dd:b1:ea:60: 78:03:22:ca:5e:b6:a6:48:6f:9a:74:21:83:6d:a4:05:7f:d4: 93:8b:ed:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ06zv0+SkK04lHnoZ5VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjUxMjE4MDMwMDU4WhcNMjUxMjE5MDMwMDU4WjAzMTEwLwYDVQQD EyhlYjU3MmQ2YWQ0ZDQwN2QzY2UxYjFjMjUyZGNhMWRlYjY4NWE5Y2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLjXpDMi5CV38w+Zy+GOQGJsSgqn hOVjn03Lzt+SMgADjDsYEjZC3fNdww4miPpzOY6ZvLB20sMmbkHNfFKdqjI1Olv1 KJlC6sNU6Dly+Rjyqx7Mas6HrKjteMzZFcOg90eOuws3ngjNdmYWnoIyZcr4PMBw arDBCF1QiFktAzPNgyTU593BmF60tklqYN8Gd91Nzjs5PptgtdmEGZJ0A5J6M2Fz SA950fRCL97e16BnHYDQKMQ3ko+hz1Jyt//cdZ7u9rzQDoUtvLPrc1dAOhNVQUvY tY8JsfpOB93+/I+AnvAWO5Q/pdZzUFmcjpOttgI2j77lyLBmZmlMkYxDjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtXLWrU1AfTzhscJS3KHetoWpzdMB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/YCKJ6d +MkVrMAyBMmEoJvLwNd3Vvic2T9/FAM/dxCD8vSxs4J9EEUeziB1DJOB8I/gysNf 4rotanWt9Tz0VwcixlIvWf6EEu72btWl990Wm55zG+TIjuMk4Y9dlUuRkTTe7IW9 WzDbHtJ967S4/BfBOHW1Yut0WQftTOpy2R+Q+k8gaOP+l6QrdlfHSjOGlcTSHcQa NjlDozKFlTNoEoktQ7AwDJTZ+bVb7cBs0m0lsQgqdGVaFV67XbtAnt2uNfyrD5+X 4IAVhjQS3Qm22MUANhMCyel6fzaPy4WAhKcoy7qLao3dsepgeAMiyl62pkhvmnQh g22kBX/Uk4vtPQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:56:58 2025 by rpki-client