This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json) Hash identifier: aRsFZze2r8bW9jZaxEaITGy+sLeGE+hol5QjhaVRoR8= Subject key identifier: CF:7A:10:ED:74:9E:50:25:36:2A:05:51:51:E9:06:4E:DA:67:51:32 Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce Certificate serial: 019AF0F5F103A8B7440303CB19D0047DFE46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft Manifest number: 0ED8 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=) 2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: tALqxzW6Oe87HBEvSv9SUspQ0nfVO449S32nBpmCV6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f1:03:a8:b7:44:03:03:cb:19:d0:04:7d:fe:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=cf7a10ed749e5025362a055151e9064eda675132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:88:70:6a:8e:72:10:9d:2d:98:08:80:70: ab:84:87:10:ed:0d:38:a1:54:1e:82:51:b6:cc:da: fd:44:b7:38:ec:43:d3:f0:09:70:f1:fc:09:d2:07: d3:33:ab:a7:64:95:93:d3:ed:a7:2e:e1:f8:8a:be: 11:a1:1e:e9:6d:55:18:8c:4f:a6:11:22:f9:03:a1: f9:f7:b9:63:49:d4:f8:81:a9:ba:d1:12:cb:1a:1b: af:cd:fe:47:99:2a:91:44:d9:01:d6:4a:f4:15:81: 4a:12:82:a3:e7:c4:00:b2:2c:ac:46:12:c7:db:aa: 11:e0:4e:0c:6b:60:7b:76:d7:b3:80:81:17:4e:95: 57:44:f3:74:f8:70:1e:d8:8d:bf:71:2c:fb:df:7f: 15:34:7f:b6:2f:ea:2e:57:a9:17:a7:8d:c8:a9:52: 8a:6f:a5:91:44:aa:7f:63:a5:ec:dc:2f:3e:0f:15: 3c:5a:de:d0:1d:41:fe:19:99:e6:fc:98:f9:e5:ac: ea:cd:80:e5:49:8f:23:a4:05:c4:de:17:76:f2:86: b7:6e:25:6c:7e:cc:02:4a:d1:79:a5:e4:97:73:72: 93:07:14:f5:da:0b:cd:59:01:18:99:da:14:a9:a5: d8:59:be:e8:d4:34:34:d3:9a:c8:8a:2b:e3:a2:a5: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7A:10:ED:74:9E:50:25:36:2A:05:51:51:E9:06:4E:DA:67:51:32 X509v3 Authority Key Identifier: keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3e:31:3c:cd:02:fb:e5:c8:d7:16:e1:91:56:a0:27:08:21: be:06:be:8d:b5:b8:54:ff:7f:a0:40:b4:38:e9:00:29:c4:cd: 7b:36:62:9b:45:81:0a:f4:3b:c6:f6:c1:20:af:1c:ad:42:ff: 19:61:be:18:bf:ad:ec:cf:64:02:25:3b:51:3b:4d:52:bf:9b: e9:4d:b6:d6:5e:d3:a0:75:e0:59:9c:19:5a:a6:32:b4:40:72: 7a:e1:62:60:6f:05:20:50:e1:35:54:f6:0b:e7:03:b9:4e:bb: c6:4a:1c:9c:dd:fb:8f:5d:d6:7b:9d:5f:90:f2:a6:96:23:f9: d2:97:d7:a6:4c:30:4e:dd:63:b2:0c:56:3b:2b:3c:c7:4e:7b: 12:22:81:b7:b2:f5:3a:67:25:a4:57:8a:a3:f2:db:08:79:8a: 9c:98:ad:f0:2e:c4:3a:2c:00:76:e3:9f:d1:08:06:c3:1e:b7: 0d:15:ad:d5:ac:8d:66:3a:b7:e2:16:18:cb:ad:05:0a:de:6e: a0:ff:a4:2c:d4:73:a4:73:22:33:4a:84:21:af:95:19:1c:f3: 93:69:60:80:cf:7e:93:b6:5c:fd:d0:d6:2e:3f:69:16:70:4d: 13:9a:7e:da:6c:93:ce:5e:16:ad:8f:f4:e3:0e:11:fe:6b:fd: c1:6b:6a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fEDqLdEAwPLGdAEff5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYWM0ZjYxZjQ2OGI3MjAwMmFiMjVmMTEyZTUyMDExZWQ3 ODJjY2UwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EyhjZjdhMTBlZDc0OWU1MDI1MzYyYTA1NTE1MWU5MDY0ZWRhNjc1MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/6IcGqOchCdLZgIgHCrhIcQ7Q04 oVQeglG2zNr9RLc47EPT8Alw8fwJ0gfTM6unZJWT0+2nLuH4ir4RoR7pbVUYjE+m ESL5A6H597ljSdT4gam60RLLGhuvzf5HmSqRRNkB1kr0FYFKEoKj58QAsiysRhLH 26oR4E4Ma2B7dtezgIEXTpVXRPN0+HAe2I2/cSz7338VNH+2L+ouV6kXp43IqVKK b6WRRKp/Y6Xs3C8+DxU8Wt7QHUH+GZnm/Jj55azqzYDlSY8jpAXE3hd28oa3biVs fswCStF5peSXc3KTBxT12gvNWQEYmdoUqaXYWb7o1DQ005rIiivjoqXFCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM96EO10nlAlNioFUVHpBk7aZ1EyMB8GA1UdIwQY MBaAFJysT2H0aLcgAqsl8RLlIBHteCzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQt MzcxZmM1YzgwOTUwLzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQtMzcxZmM1YzgwOTUw LzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT4xPM0C ++XI1xbhkVagJwghvga+jbW4VP9/oEC0OOkAKcTNezZim0WBCvQ7xvbBIK8crUL/ GWG+GL+t7M9kAiU7UTtNUr+b6U221l7ToHXgWZwZWqYytEByeuFiYG8FIFDhNVT2 C+cDuU67xkocnN37j13We51fkPKmliP50pfXpkwwTt1jsgxWOys8x057EiKBt7L1 OmclpFeKo/LbCHmKnJit8C7EOiwAduOf0QgGwx63DRWt1ayNZjq34hYYy60FCt5u oP+kLNRzpHMiM0qEIa+VGRzzk2lggM9+k7Zc/dDWLj9pFnBNE5p+2myTzl4WrY/0 4w4R/mv9wWtqOw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:18 2025 by rpki-client