This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft File: nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json) Hash identifier: rfEvkyPaS8FexauIE7ApWUpNt0uKzbHWctyCMMsMF+A= Subject key identifier: 45:D1:B6:8A:81:BF:B9:12:CA:D6:FF:DF:F7:91:A8:BD:56:65:CD:6A Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86 Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786 Certificate serial: 019AF19B4728F992B26835B83FD6668E7388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft Manifest number: 0469 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: Jf1OKx1njasgUepF7NPQjYFePjY.roa (hash: +FbY8K3ltw3fRzjGzqv270MBVQe3sjgedLIQtn2lOs0=) 2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: BPKhqLJGsTeG5DgluOi51aX5MY0o3iTRBJCmc6n81to=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:47:28:f9:92:b2:68:35:b8:3f:d6:66:8e:73:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=45d1b68a81bfb912cad6ffdff791a8bd5665cd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:f2:ab:3c:f0:72:57:56:d0:01:3e:79:ce: c8:e8:86:2d:42:cc:39:1d:86:27:5c:bb:3e:7b:7a: 1e:cb:fb:d9:0e:20:86:80:0e:95:17:d9:4d:56:c8: 98:21:2f:d9:a9:a6:a9:31:8f:be:4f:62:c4:38:dc: cc:8b:72:d4:9f:c3:1d:b8:31:9c:e7:37:46:96:50: 3b:0a:eb:93:2a:da:77:37:5d:27:22:cb:93:53:c9: 30:e5:76:04:71:70:29:d2:0b:69:3d:f0:03:ce:20: 42:7a:cc:6b:40:70:bf:8f:f9:77:9d:7c:8c:8a:7e: e4:a5:84:85:ac:d0:76:7c:af:1e:31:1b:9d:0e:cf: 3b:3d:7d:6e:8d:e3:d0:d9:b9:6a:17:c4:b2:60:c2: 2c:fe:d1:ca:b7:ab:dd:2d:9e:eb:96:34:d0:05:f6: 1d:9e:5e:5a:7a:94:7d:a4:6b:86:24:ae:d7:4b:4d: ce:74:20:2b:cb:b6:cd:89:97:c6:6c:74:71:3c:a9: bf:c3:17:c7:a3:56:e5:e6:ca:d5:90:3b:82:ae:36: 06:f0:0c:fb:ef:60:8c:a9:48:51:b7:2b:e1:ae:e7: b8:e1:af:91:82:ff:43:08:ea:bf:0e:bd:46:fb:e1: cf:7d:0c:3a:68:40:34:7e:81:44:d1:b1:db:7d:ac: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D1:B6:8A:81:BF:B9:12:CA:D6:FF:DF:F7:91:A8:BD:56:65:CD:6A X509v3 Authority Key Identifier: keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:46:da:5b:51:c9:78:7c:b7:55:9c:1e:b2:25:88:58:e1:01: 40:9e:18:1c:8f:5f:80:e4:d7:ce:af:02:d4:eb:19:49:ed:fa: 8e:16:fd:4b:bb:f9:7e:33:43:de:fb:72:4b:62:d9:55:c3:10: 75:b8:90:97:c9:e8:ab:cc:49:0c:f0:dc:52:13:6c:46:b1:ed: ce:3f:57:2c:27:15:c8:cb:29:cc:a5:3f:be:e9:c4:89:e0:58: 07:ec:1e:71:61:f0:24:cb:9d:3a:d1:82:b1:ec:03:7c:fd:95: 87:fd:70:91:bc:76:54:67:45:42:c0:fd:ed:0e:99:db:5f:02: d6:ba:89:06:d1:11:2a:f7:45:ce:92:d7:ea:33:a0:37:16:b0: 21:f3:05:62:70:da:36:db:b6:d2:e4:4b:1c:4a:ca:fe:42:3f: c1:86:3a:1a:32:a0:29:7a:d1:d9:9e:ce:1a:cf:87:87:02:84: 5a:13:01:bc:bf:03:f9:7e:e6:1b:de:b8:45:e4:a6:8b:c7:97: 22:26:5f:73:95:ff:5d:be:65:e3:cb:d0:78:f2:5d:3d:b8:9f: 4d:ad:39:33:85:11:66:a0:85:0d:3e:21:1f:80:2b:3d:83:4a: 9a:93:ee:86:b4:7d:f5:0d:ac:74:22:a2:96:18:6b:85:ed:4d: e1:da:ab:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0co+ZKyaDW4P9ZmjnOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzEyMmYyZjdmYTUzMGJmMWE4ZmZjZjk2YTkzMGY2OWIz MGY3ODYwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD Eyg0NWQxYjY4YTgxYmZiOTEyY2FkNmZmZGZmNzkxYThiZDU2NjVjZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xPyqzzwcldW0AE+ec7I6IYtQsw5 HYYnXLs+e3oey/vZDiCGgA6VF9lNVsiYIS/ZqaapMY++T2LEONzMi3LUn8MduDGc 5zdGllA7CuuTKtp3N10nIsuTU8kw5XYEcXAp0gtpPfADziBCesxrQHC/j/l3nXyM in7kpYSFrNB2fK8eMRudDs87PX1ujePQ2blqF8SyYMIs/tHKt6vdLZ7rljTQBfYd nl5aepR9pGuGJK7XS03OdCAry7bNiZfGbHRxPKm/wxfHo1bl5srVkDuCrjYG8Az7 72CMqUhRtyvhrue44a+Rgv9DCOq/Dr1G++HPfQw6aEA0foFE0bHbfax/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXRtoqBv7kSytb/3/eRqL1WZc1qMB8GA1UdIwQY MBaAFJxxIvL3+lML8aj/z5apMPabMPeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGIt NmIyNzMzNmQyNjllLzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGItNmIyNzMzNmQyNjll LzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0baW1HJ eHy3VZwesiWIWOEBQJ4YHI9fgOTXzq8C1OsZSe36jhb9S7v5fjND3vtyS2LZVcMQ dbiQl8noq8xJDPDcUhNsRrHtzj9XLCcVyMspzKU/vunEieBYB+wecWHwJMudOtGC sewDfP2Vh/1wkbx2VGdFQsD97Q6Z218C1rqJBtERKvdFzpLX6jOgNxawIfMFYnDa Ntu20uRLHErK/kI/wYY6GjKgKXrR2Z7OGs+HhwKEWhMBvL8D+X7mG964ReSmi8eX IiZfc5X/Xb5l48vQePJdPbifTa05M4URZqCFDT4hH4ArPYNKmpPuhrR99Q2sdCKi lhhrhe1N4dqrLA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:44 2025 by rpki-client