This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json) Hash identifier: 31stBltz+SbC4nkcnmzuhUcQj/hOs/rTnXnlewVFLG0= Subject key identifier: 82:C1:B4:5D:5E:F5:A2:A2:F1:9B:E8:AA:31:12:55:F5:7B:7B:D7:46 Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04 Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104 Certificate serial: 019AF23F74D43BD6E77751C4A66D68B7DF93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft Manifest number: 0CD6 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=) 2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: sha6ULjIqLRYp+29uHI00/302VV5VvYkDHtvV6a+y9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:74:d4:3b:d6:e7:77:51:c4:a6:6d:68:b7:df:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3646213198899edfa8b42add473ada218748e104 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=82c1b45d5ef5a2a2f19be8aa311255f57b7bd746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:84:73:0d:75:5d:82:0b:67:2d:77:b7:54: 54:b8:a3:32:d2:26:c6:17:19:11:5e:38:02:9d:72: 1b:b2:bd:84:4c:35:57:af:eb:ed:d7:cb:3f:1d:3c: d1:a0:4e:45:29:c3:c7:9c:74:b6:65:d3:6c:65:ca: 5c:cd:86:7f:26:05:52:22:85:cd:60:dd:31:c9:9b: 34:b2:91:6c:44:3f:03:85:60:83:80:fe:ee:8a:2e: 36:49:3c:b8:9d:ee:93:27:60:a9:4e:b0:6d:41:52: 6f:f7:f1:32:ab:dc:97:b9:04:32:b7:5f:e8:ad:13: b1:77:3b:74:3a:e0:51:2c:2d:f4:f9:5a:ff:d1:b5: bb:4d:fd:1a:75:c3:45:d3:07:6b:39:fd:54:d2:4e: fb:c3:12:4a:1f:52:ec:98:71:ef:0f:67:26:ba:ef: c5:8d:47:2f:ee:76:a9:11:d7:61:5d:19:67:0b:0a: 78:0a:db:f5:2c:37:44:2f:4d:c1:b6:58:e1:91:e2: 36:6d:a7:7a:2a:1e:78:1e:e2:a6:3f:06:4c:a5:82: ef:24:19:f8:b3:ba:a7:da:b8:43:38:d1:79:53:85: 16:c4:c0:6b:5f:69:eb:7c:fa:76:8b:e1:2a:66:16: 07:b5:79:be:59:7b:b5:54:09:3d:61:d3:f9:62:19: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C1:B4:5D:5E:F5:A2:A2:F1:9B:E8:AA:31:12:55:F5:7B:7B:D7:46 X509v3 Authority Key Identifier: keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b1:ca:4a:be:cd:be:7e:0d:11:3d:3b:63:1a:e9:f4:45:a5: 1e:93:88:45:a4:4a:d8:f4:af:5b:5b:12:27:dc:a0:aa:2e:05: cd:85:da:41:d9:d3:f1:37:ae:c9:7a:79:8e:8d:b4:71:1b:f4: c4:37:70:bd:2e:72:ee:c9:9d:ba:bc:e9:28:cb:a0:ed:ec:d6: 2a:6e:bd:ff:08:dd:70:07:1a:8d:3a:2a:0d:75:92:6d:9c:23: a1:fa:e0:a3:1c:7f:a3:87:02:29:c5:8e:59:99:b6:3b:52:12: 46:74:2d:34:57:9a:1e:09:03:95:06:cb:bc:b0:14:8a:1c:30: c7:45:fd:8f:93:fb:57:30:d7:94:24:f6:24:f6:97:d2:fe:3a: f2:4d:6c:10:62:d9:3a:7d:fa:a8:f4:41:20:5c:ff:78:8e:44: 9f:4f:f3:4e:41:ea:bc:56:18:40:d3:c3:53:08:42:e9:2b:ed: c2:57:00:8d:34:b4:88:d0:5c:0a:65:fd:37:2c:c9:94:ce:9d: 57:72:ec:ed:8e:da:73:10:3f:4e:3d:7d:ed:c4:35:98:3b:db: 95:cd:49:81:9f:4d:72:8b:63:fc:c6:01:d9:df:bd:76:89:52: 03:c7:3c:8f:37:41:e1:fb:d9:81:5d:6e:dc:ea:12:82:45:cb: 58:a4:83:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3TUO9bnd1HEpm1ot9+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDYyMTMxOTg4OTllZGZhOGI0MmFkZDQ3M2FkYTIxODc0 OGUxMDQwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD Eyg4MmMxYjQ1ZDVlZjVhMmEyZjE5YmU4YWEzMTEyNTVmNTdiN2JkNzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLSEcw11XYILZy13t1RUuKMy0ibG FxkRXjgCnXIbsr2ETDVXr+vt18s/HTzRoE5FKcPHnHS2ZdNsZcpczYZ/JgVSIoXN YN0xyZs0spFsRD8DhWCDgP7uii42STy4ne6TJ2CpTrBtQVJv9/Eyq9yXuQQyt1/o rROxdzt0OuBRLC30+Vr/0bW7Tf0adcNF0wdrOf1U0k77wxJKH1LsmHHvD2cmuu/F jUcv7napEddhXRlnCwp4Ctv1LDdEL03BtljhkeI2bad6Kh54HuKmPwZMpYLvJBn4 s7qn2rhDONF5U4UWxMBrX2nrfPp2i+EqZhYHtXm+WXu1VAk9YdP5YhkjNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILBtF1e9aKi8ZvoqjESVfV7e9dGMB8GA1UdIwQY MBaAFDZGITGYiZ7fqLQq3Uc62iGHSOEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmIt MDZkYzM4YjU3NTM1LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmItMDZkYzM4YjU3NTM1 LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrHKSr7N vn4NET07Yxrp9EWlHpOIRaRK2PSvW1sSJ9ygqi4FzYXaQdnT8TeuyXp5jo20cRv0 xDdwvS5y7smdurzpKMug7ezWKm69/wjdcAcajToqDXWSbZwjofrgoxx/o4cCKcWO WZm2O1ISRnQtNFeaHgkDlQbLvLAUihwwx0X9j5P7VzDXlCT2JPaX0v468k1sEGLZ On36qPRBIFz/eI5En0/zTkHqvFYYQNPDUwhC6SvtwlcAjTS0iNBcCmX9NyzJlM6d V3Ls7Y7acxA/Tj197cQ1mDvblc1JgZ9Ncotj/MYB2d+9dolSA8c8jzdB4fvZgV1u 3OoSgkXLWKSD5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:18 2025 by rpki-client