This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json) Hash identifier: /Al9pP++c2XSHDT5+QnffDkJGb3UWdspsnlgEMJ+o0Y= Subject key identifier: 72:EB:EE:44:54:24:6E:15:8D:07:2A:26:7A:E6:C3:02:2C:62:70:A9 Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025 Certificate serial: 019AF23FA8B5A5BA1646457B0049B977E750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft Manifest number: 0645 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: mR809BzawsocXcAGIqvH25pMqQs.roa (hash: YeYkP56hsu5/L5Jhs1MWZsAFAw78/bEVuYQMAvS7nO4=) 2: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: xjPPAyfb3NzTqGshcBftB7UDb/1b6C2yH+AzFLuHVv8=) 3: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=) 4: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a8:b5:a5:ba:16:46:45:7b:00:49:b9:77:e7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e475c9202606e6667e94a779e903db697a59025 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=72ebee4454246e158d072a267ae6c3022c6270a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b4:20:f7:f4:ec:93:79:31:fe:0c:1e:ac:3d: 1e:90:85:7f:4c:bf:61:b5:8a:49:7d:4f:83:fd:de: 4f:68:57:00:40:e5:7e:91:90:05:c1:7d:e4:88:cc: 66:31:62:27:53:69:04:35:ee:29:37:b6:53:17:ae: f7:f6:28:b4:db:42:25:11:b1:7c:ad:6c:d4:ee:64: 98:9c:5f:99:42:ca:79:8e:27:a4:72:5d:2e:4d:54: da:cc:2c:16:18:5d:6d:f5:d0:fc:d4:25:7e:79:34: de:51:5f:8b:40:ab:bb:7b:a7:fc:65:c8:04:4c:25: 9e:8e:50:c4:98:f0:08:12:59:11:94:0a:2b:ff:03: 35:9e:f0:d9:a2:81:bb:b8:10:6d:6b:ae:80:1e:fa: f9:0f:74:f4:23:ba:c1:27:5f:c1:16:96:9e:ae:50: e6:9b:32:45:d7:0b:c9:81:6d:e1:c5:da:f8:73:40: e5:94:b3:5a:ee:3c:5b:6c:f2:ac:38:69:27:6a:0c: 23:9a:a3:9c:5d:3b:d2:f1:cd:54:1c:ff:19:af:6e: d7:df:21:66:65:c6:9d:4e:00:88:8c:a5:cb:20:a4: 3e:89:23:14:9b:4e:4b:ed:c4:12:6d:cf:da:ee:45: 02:3a:20:d8:56:32:2c:2b:87:86:6f:92:5d:6c:4b: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EB:EE:44:54:24:6E:15:8D:07:2A:26:7A:E6:C3:02:2C:62:70:A9 X509v3 Authority Key Identifier: keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:64:9f:c0:ca:62:ce:a3:64:af:47:30:7a:0b:60:f5:24:67: fb:6c:14:af:a6:0a:11:8e:0b:74:9d:81:0b:7c:00:f9:a0:20: 4b:d4:e2:1c:07:98:e5:00:a9:a9:71:75:7a:f8:83:e5:8e:89: 9d:3b:f6:27:1e:20:a1:c6:ba:92:1b:2a:df:e5:70:37:d6:db: b5:96:0b:0b:90:f4:82:a3:18:c6:b0:f0:9f:a6:7f:b4:ff:67: 39:68:99:b7:b7:c2:06:df:d8:6e:5f:0a:28:c0:b1:6f:12:da: b4:40:19:fb:f9:21:e9:8c:c2:a4:77:63:1e:c5:dd:33:04:df: 05:5d:65:09:39:e3:c0:52:66:e8:54:4d:40:7c:e6:f5:5d:62: 62:00:02:16:30:ad:32:c1:df:c8:5f:12:d4:52:b5:6a:e2:6a: 0e:8f:9b:bc:a2:29:44:4f:ed:3b:f2:b5:e7:70:5e:84:58:63: 9b:5b:6d:a9:59:13:b6:3f:f8:6f:80:88:5a:b1:9b:f2:5e:f7: 8a:e6:d1:2c:8e:8d:2e:38:ef:4e:db:33:29:d7:df:f7:ce:75: a1:d7:0f:18:f2:9f:e7:eb:9c:39:15:92:6c:f0:ee:60:e0:16: 7b:82:e6:e8:ca:3c:df:11:00:05:36:a9:04:a7:46:b0:ce:72: 05:b5:17:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6i1pboWRkV7AEm5d+dQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh NTkwMjUwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD Eyg3MmViZWU0NDU0MjQ2ZTE1OGQwNzJhMjY3YWU2YzMwMjJjNjI3MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rQg9/Tsk3kx/gwerD0ekIV/TL9h tYpJfU+D/d5PaFcAQOV+kZAFwX3kiMxmMWInU2kENe4pN7ZTF6739ii020IlEbF8 rWzU7mSYnF+ZQsp5jiekcl0uTVTazCwWGF1t9dD81CV+eTTeUV+LQKu7e6f8ZcgE TCWejlDEmPAIElkRlAor/wM1nvDZooG7uBBta66AHvr5D3T0I7rBJ1/BFpaerlDm mzJF1wvJgW3hxdr4c0DllLNa7jxbbPKsOGknagwjmqOcXTvS8c1UHP8Zr27X3yFm ZcadTgCIjKXLIKQ+iSMUm05L7cQSbc/a7kUCOiDYVjIsK4eGb5JdbEv49QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLr7kRUJG4VjQcqJnrmwwIsYnCpMB8GA1UdIwQY MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmSfwMpi zqNkr0cwegtg9SRn+2wUr6YKEY4LdJ2BC3wA+aAgS9TiHAeY5QCpqXF1eviD5Y6J nTv2Jx4goca6khsq3+VwN9bbtZYLC5D0gqMYxrDwn6Z/tP9nOWiZt7fCBt/Ybl8K KMCxbxLatEAZ+/kh6YzCpHdjHsXdMwTfBV1lCTnjwFJm6FRNQHzm9V1iYgACFjCt MsHfyF8S1FK1auJqDo+bvKIpRE/tO/K153BehFhjm1ttqVkTtj/4b4CIWrGb8l73 iubRLI6NLjjvTtszKdff9851odcPGPKf5+ucORWSbPDuYOAWe4Lm6Mo83xEABTap BKdGsM5yBbUXoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:54 2025 by rpki-client