This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft File: ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json) Hash identifier: ji2FFhQmDj8Yz1KcrFWxUTm9mvdAh/gVDETbBn816CM= Subject key identifier: EF:52:AB:19:4C:12:92:B4:9F:AD:EC:0F:2B:8A:6A:1A:89:27:7D:F5 Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b Certificate serial: 019AF2095C0C4AD33DFCAAB4A9269FA5824F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft Manifest number: 1404 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=) 2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: 5tmlqmpOJZbfoVGy+FZAnmoUr5+OwQ0MEAC+BKOOSKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5c:0c:4a:d3:3d:fc:aa:b4:a9:26:9f:a5:82:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=ef52ab194c1292b49fadec0f2b8a6a1a89277df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:e5:97:8e:95:ca:80:72:fc:d7:f9:d3:51: bf:bb:5d:08:e0:e6:1f:21:c9:af:73:cc:6a:1e:36: 97:30:4f:4f:ef:ea:a4:03:2e:7b:32:9f:08:35:64: 64:01:86:00:9a:12:89:0b:6e:1c:e7:6a:d3:ed:17: 69:01:29:a8:82:c5:b7:fc:05:a7:0e:38:3e:7e:7d: de:d6:92:6f:b5:a8:db:c6:f4:54:28:17:12:a2:21: bc:13:ff:97:ff:cf:51:e3:27:5e:06:90:1d:84:bc: 49:ef:85:0e:f8:a0:a7:73:d2:e0:4c:f4:33:e7:6b: 53:5b:ec:62:ef:e9:85:b1:3d:d5:94:b0:fe:a2:dd: 1c:5e:75:b6:35:7b:86:bb:60:73:27:67:13:42:cd: 9c:79:07:17:bd:84:00:55:83:41:26:8a:76:f0:c7: 3d:13:15:cd:22:92:7f:99:6d:86:f5:11:57:1a:d1: a4:c2:16:91:a9:e6:6d:39:19:48:6a:d7:89:20:c7: 2c:d5:fc:4e:6d:a2:f1:f0:6b:f6:47:fa:9e:f9:84: ff:e9:35:43:4c:45:c2:10:ba:a1:d5:79:c5:db:53: 74:2a:d5:b3:ba:4d:4a:c0:c3:99:32:30:8e:a5:dc: 18:08:02:b7:5c:c6:9a:41:87:74:2d:0c:44:90:cf: 53:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:52:AB:19:4C:12:92:B4:9F:AD:EC:0F:2B:8A:6A:1A:89:27:7D:F5 X509v3 Authority Key Identifier: keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:85:04:8d:4d:0f:6d:36:91:11:89:eb:69:ab:7d:8c:4a:79: f9:96:8b:47:ad:ce:cf:3a:ed:d3:e4:9d:55:18:a2:54:08:b1: 7b:2c:26:b1:bf:eb:76:26:09:36:88:4f:23:ec:c0:c5:9b:86: db:b5:de:fa:67:ea:95:ac:0f:8a:0d:a3:73:06:a0:09:32:97: 7d:0e:f1:97:6e:51:d1:a0:26:e6:42:3f:e0:77:21:7e:73:83: 92:8a:e7:3a:b4:41:53:c1:9b:fd:a9:57:ee:7b:13:34:be:e3: da:a7:02:74:02:cb:7c:a2:02:1e:b4:b9:9c:02:d5:f4:21:23: b9:0a:23:68:ef:f1:d2:48:1c:35:0d:9a:03:77:03:4e:72:47: 20:33:23:6b:da:b7:69:c8:e8:92:a4:b3:e1:1c:31:c5:30:9f: 58:c3:81:05:1c:12:eb:80:e5:d6:23:3f:61:9e:46:63:85:dc: da:e3:3c:e4:b6:eb:40:8a:5f:54:11:b4:fd:5b:0a:79:fe:41: ec:3c:14:4a:17:19:31:34:42:fa:52:ac:c6:a5:9f:32:bf:e5: 13:a3:ff:97:66:c7:e4:8a:b3:66:90:cc:8f:1a:7e:72:41:7e: c5:5b:c2:b8:d6:27:72:c0:f7:52:6c:e7:d7:c6:39:4e:ad:c2: 9e:6c:52:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVwMStM9/Kq0qSafpYJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMmQ3ZDViODJjODM3OGJhMjE1Mzk0M2NlOTQ4MmNlNGNk NDk1MWIwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EyhlZjUyYWIxOTRjMTI5MmI0OWZhZGVjMGYyYjhhNmExYTg5Mjc3ZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr77ll46VyoBy/Nf501G/u10I4OYf Icmvc8xqHjaXME9P7+qkAy57Mp8INWRkAYYAmhKJC24c52rT7RdpASmogsW3/AWn Djg+fn3e1pJvtajbxvRUKBcSoiG8E/+X/89R4ydeBpAdhLxJ74UO+KCnc9LgTPQz 52tTW+xi7+mFsT3VlLD+ot0cXnW2NXuGu2BzJ2cTQs2ceQcXvYQAVYNBJop28Mc9 ExXNIpJ/mW2G9RFXGtGkwhaRqeZtORlIateJIMcs1fxObaLx8Gv2R/qe+YT/6TVD TEXCELqh1XnF21N0KtWzuk1KwMOZMjCOpdwYCAK3XMaaQYd0LQxEkM9TkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9SqxlMEpK0n63sDyuKahqJJ331MB8GA1UdIwQY MBaAFJ4tfVuCyDeLohU5Q86Ugs5M1JUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAt YjI5NjA2ZDUxZjlkLzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAtYjI5NjA2ZDUxZjlk LzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloUEjU0P bTaREYnraat9jEp5+ZaLR63Ozzrt0+SdVRiiVAixeywmsb/rdiYJNohPI+zAxZuG 27Xe+mfqlawPig2jcwagCTKXfQ7xl25R0aAm5kI/4HchfnODkornOrRBU8Gb/alX 7nsTNL7j2qcCdALLfKICHrS5nALV9CEjuQojaO/x0kgcNQ2aA3cDTnJHIDMja9q3 acjokqSz4RwxxTCfWMOBBRwS64Dl1iM/YZ5GY4Xc2uM85LbrQIpfVBG0/VsKef5B 7DwUShcZMTRC+lKsxqWfMr/lE6P/l2bH5IqzZpDMjxp+ckF+xVvCuNYncsD3Umzn 18Y5Tq3CnmxSbg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:27 2025 by rpki-client