This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft File: Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft (raw, json) Hash identifier: 3ksz1WtXWaDrioiNAm2oECdI/+PPhvb2RQMabbGUsys= Subject key identifier: 38:CE:B3:AD:AA:A2:A5:6A:5A:E7:43:44:A1:A6:62:C0:F2:80:D5:73 Authority key identifier: 36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD Certificate issuer: /CN=363e145387eda5b08aa300d63b4fc35e598364fd Certificate serial: 019AF19B99B697BD6B9A39EFADA69A6D5043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft Manifest number: 0C99 Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl (hash: 5R8JecBM7lWcaqtDCzDcf0JYZlGx4KNuSVu95Vp0Dlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:99:b6:97:bd:6b:9a:39:ef:ad:a6:9a:6d:50:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363e145387eda5b08aa300d63b4fc35e598364fd Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=38ceb3adaaa2a56a5ae74344a1a662c0f280d573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:ae:49:93:29:57:bf:f7:64:48:65:c5:db: 4d:25:08:b8:0a:34:c7:e9:6d:dd:ec:dc:43:f7:23: 9a:69:34:d5:84:cd:a6:a1:9f:f3:2e:75:62:a1:3f: f4:27:12:e2:ed:33:4d:fc:65:bd:9c:02:12:c5:03: c5:3f:c1:a9:0b:1b:b0:a0:c9:ba:06:1f:64:bf:17: 29:4b:e2:3a:5f:11:7d:4d:15:3a:61:fb:3f:bc:a3: 9d:27:40:06:a4:5b:be:dc:5f:e9:0e:c5:21:c1:47: af:0a:94:2d:c4:96:63:f9:a2:3d:5e:f0:1a:64:59: dc:97:42:10:fd:a2:be:d4:29:14:ac:ea:ff:97:07: 47:93:b4:d4:d8:f7:d7:8e:21:0d:29:3f:29:94:fe: 7f:91:4a:ab:67:89:5f:af:5f:89:52:61:f0:46:aa: 6b:92:5f:78:95:d9:7a:1f:b8:21:d3:72:42:5b:af: 34:df:be:cd:2e:c8:17:ef:2d:bc:b4:f5:f2:70:e7: b8:da:e3:94:d7:a2:3b:0e:b8:88:5a:eb:16:7e:40: 3a:dc:ff:2e:fd:42:c7:92:ac:ff:f0:81:92:35:a2: 02:d8:01:2b:f7:90:e3:24:41:30:35:38:b9:e5:4b: 5f:21:09:9b:57:9f:b3:c5:45:26:a3:c6:dd:46:6e: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CE:B3:AD:AA:A2:A5:6A:5A:E7:43:44:A1:A6:62:C0:F2:80:D5:73 X509v3 Authority Key Identifier: keyid:36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c7:50:2c:53:59:eb:af:4c:d7:b9:d4:59:fe:d4:0d:c3:78: fe:3e:24:79:18:91:be:e9:b1:7f:43:df:4a:f4:e5:ae:d2:47: 32:06:36:3a:d8:af:8e:d2:89:c9:67:cf:1d:b5:f7:dc:39:fb: 7d:0e:49:26:fa:6c:1c:4e:fc:b3:03:05:42:a7:1e:92:c3:1b: 0c:d6:14:ea:e4:dc:50:d2:44:99:88:15:60:0f:2e:6d:f2:bf: 40:2a:63:11:fc:f1:27:3a:ba:91:b7:a0:33:ad:ca:53:17:3d: 11:8e:86:5f:ff:63:e2:b6:dc:73:48:2f:55:e6:cd:fb:8f:88: d7:32:38:1d:33:c6:66:d8:9a:49:07:10:bb:b9:90:e1:31:20: 47:b5:98:1c:65:2a:48:e5:66:bf:57:6b:ad:a5:c9:14:dc:b2: b8:b2:d4:4e:38:d8:fc:f2:06:0a:e7:cc:71:38:52:d8:74:3d: 6f:38:6c:21:df:12:21:8e:12:c2:2b:42:42:92:6d:08:b7:e3: f7:12:59:ce:05:93:80:0e:15:37:0d:74:85:a0:71:e0:34:13: 77:6b:d1:15:ac:0c:ae:b1:80:b1:88:3c:36:66:2a:79:8b:20: 35:a6:be:18:f6:9f:c3:5f:d0:89:89:82:f0:a9:af:d0:2a:4f: c6:81:0d:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5m2l71rmjnvraaabVBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2UxNDUzODdlZGE1YjA4YWEzMDBkNjNiNGZjMzVlNTk4 MzY0ZmQwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD EygzOGNlYjNhZGFhYTJhNTZhNWFlNzQzNDRhMWE2NjJjMGYyODBkNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGuSZMpV7/3ZEhlxdtNJQi4CjTH 6W3d7NxD9yOaaTTVhM2moZ/zLnVioT/0JxLi7TNN/GW9nAISxQPFP8GpCxuwoMm6 Bh9kvxcpS+I6XxF9TRU6Yfs/vKOdJ0AGpFu+3F/pDsUhwUevCpQtxJZj+aI9XvAa ZFncl0IQ/aK+1CkUrOr/lwdHk7TU2PfXjiENKT8plP5/kUqrZ4lfr1+JUmHwRqpr kl94ldl6H7gh03JCW680377NLsgX7y28tPXycOe42uOU16I7DriIWusWfkA63P8u /ULHkqz/8IGSNaIC2AEr95DjJEEwNTi55UtfIQmbV5+zxUUmo8bdRm5gXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjOs62qoqVqWudDRKGmYsDygNVzMB8GA1UdIwQY MBaAFDY+FFOH7aWwiqMA1jtPw15Zg2T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgt ZWMzZDAwZTMzYmNhLzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC84M2FmYTAtNjRkMi00YzFmLWFhMTgtZWMzZDAwZTMzYmNh LzEvTmo0VVU0ZnRwYkNLb3dEV08wX0RYbG1EWlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8dQLFNZ 669M17nUWf7UDcN4/j4keRiRvumxf0PfSvTlrtJHMgY2OtivjtKJyWfPHbX33Dn7 fQ5JJvpsHE78swMFQqceksMbDNYU6uTcUNJEmYgVYA8ubfK/QCpjEfzxJzq6kbeg M63KUxc9EY6GX/9j4rbcc0gvVebN+4+I1zI4HTPGZtiaSQcQu7mQ4TEgR7WYHGUq SOVmv1drraXJFNyyuLLUTjjY/PIGCufMcThS2HQ9bzhsId8SIY4SwitCQpJtCLfj 9xJZzgWTgA4VNw10haBx4DQTd2vRFawMrrGAsYg8NmYqeYsgNaa+GPafw1/QiYmC 8Kmv0CpPxoENnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:25 2025 by rpki-client