This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json) Hash identifier: SVLqL/jR8Nco5MwIpNSLAM/1nMy/WIXI7knuzHG1QeQ= Subject key identifier: DD:DB:E9:67:B8:5E:BA:36:6E:BA:30:79:47:CD:8B:FE:D2:12:1C:E3 Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Certificate serial: 019AF31CE93591789A9358266F72DE642806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=) 2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: 2xJYFChlV5XCZ3BrmqgDemh7pYnnjvIrIYpc461C/gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e9:35:91:78:9a:93:58:26:6f:72:de:64:28:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=dddbe967b85eba366eba307947cd8bfed2121ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:19:4c:80:7e:4b:5b:c8:d8:6f:e1:3c:e6: d0:4f:f4:79:70:45:4a:e3:40:20:6b:1d:49:0e:f6: 81:39:eb:58:e4:83:80:11:29:a7:88:6b:4f:a3:c5: 6a:6b:50:26:fe:d3:02:eb:e3:f0:6c:2c:b4:f4:bc: 17:8c:c0:29:5b:b3:13:e1:b6:16:80:61:c7:83:e5: 65:98:bc:54:a5:90:3c:6a:32:02:5a:a8:14:29:06: 5d:28:63:91:f8:e2:98:d6:4b:14:d3:ca:72:34:36: 05:a2:7e:c5:d3:93:e1:57:4e:0f:3f:bf:ca:72:79: 9c:06:80:9c:f2:11:99:68:e8:be:d1:d0:b9:9a:87: df:98:3c:15:8d:32:7b:9f:fc:8e:0c:05:10:1e:71: b0:fd:ea:8a:0a:5b:f1:d0:2d:3a:73:99:d7:9b:f0: 6b:f3:f7:e5:e3:5f:ac:a0:78:d6:be:cd:01:aa:46: 59:01:47:c5:a2:79:5a:16:08:81:16:86:7f:94:e2: a4:ff:80:af:65:3b:61:a4:7b:a2:7d:9d:48:c5:ee: b1:7f:b1:9b:f5:88:d6:2d:71:86:69:c4:23:1e:04: dc:ef:81:bd:91:7a:39:db:0b:92:47:52:22:6e:a0: fb:d8:ec:75:e0:8d:07:9c:8b:5e:db:2f:96:9e:dd: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:E9:67:B8:5E:BA:36:6E:BA:30:79:47:CD:8B:FE:D2:12:1C:E3 X509v3 Authority Key Identifier: keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9a:55:29:1a:8d:e2:20:42:81:f3:e5:00:67:a3:24:c5:34: 48:44:6e:4c:0e:47:fb:2b:bf:fb:ef:61:fe:8f:05:cf:7b:74: c0:9a:bd:83:4c:a2:a3:b5:7d:47:b4:a8:5d:23:a6:58:ef:31: f6:ac:f8:41:9b:5b:52:a7:af:ca:b2:5f:29:e6:2c:85:cb:d1: 2f:df:d0:46:76:c1:7d:6b:b7:5d:df:e7:30:f0:19:a8:b9:1f: e2:f2:74:9b:2c:95:50:b5:ea:f0:f1:c8:d1:9d:13:1f:fa:71: 0c:41:f6:1d:6b:d4:a7:72:26:91:65:9d:66:10:4b:5a:c5:00: 10:37:8e:8e:6a:b2:7c:10:ef:8c:92:f6:83:54:ca:60:c3:79: 3b:7c:b6:d7:0d:5b:41:7b:38:a2:65:a5:7a:e4:ca:01:0d:84: 72:bc:6e:73:c8:27:e3:03:d0:98:79:4b:a7:8d:33:8b:78:c4: de:02:47:6d:21:4c:96:8b:91:de:e1:d8:98:66:a5:24:c9:c4: 80:cf:f6:8c:31:90:9c:f6:a6:6c:53:72:c3:98:38:8c:1b:fb: af:b6:06:4a:a2:28:5d:75:d4:07:96:0d:e2:f4:53:d2:07:f7: bd:15:fd:40:e6:ff:64:e1:b9:bf:64:21:18:83:2c:f4:a9:9f: f7:b2:e1:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOk1kXiak1gmb3LeZCgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZmM2MmVjZGM5MWQxMTk3OWNjMWQyMWE0N2M2ZWMzNzhk ZmE0MzYwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD EyhkZGRiZTk2N2I4NWViYTM2NmViYTMwNzk0N2NkOGJmZWQyMTIxY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu58ZTIB+S1vI2G/hPObQT/R5cEVK 40Agax1JDvaBOetY5IOAESmniGtPo8Vqa1Am/tMC6+PwbCy09LwXjMApW7MT4bYW gGHHg+VlmLxUpZA8ajICWqgUKQZdKGOR+OKY1ksU08pyNDYFon7F05PhV04PP7/K cnmcBoCc8hGZaOi+0dC5moffmDwVjTJ7n/yODAUQHnGw/eqKClvx0C06c5nXm/Br 8/fl41+soHjWvs0BqkZZAUfFonlaFgiBFoZ/lOKk/4CvZTthpHuifZ1Ixe6xf7Gb 9YjWLXGGacQjHgTc74G9kXo52wuSR1IibqD72Ox14I0HnIte2y+Wnt1INQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3b6We4Xro2broweUfNi/7SEhzjMB8GA1UdIwQY MBaAFJz8YuzckdEZecwdIaR8bsN436Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4Nzgt MjE1NTEyNmIxNjQzLzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4NzgtMjE1NTEyNmIxNjQz LzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5pVKRqN 4iBCgfPlAGejJMU0SERuTA5H+yu/++9h/o8Fz3t0wJq9g0yio7V9R7SoXSOmWO8x 9qz4QZtbUqevyrJfKeYshcvRL9/QRnbBfWu3Xd/nMPAZqLkf4vJ0myyVULXq8PHI 0Z0TH/pxDEH2HWvUp3ImkWWdZhBLWsUAEDeOjmqyfBDvjJL2g1TKYMN5O3y21w1b QXs4omWleuTKAQ2Ecrxuc8gn4wPQmHlLp40zi3jE3gJHbSFMlouR3uHYmGalJMnE gM/2jDGQnPambFNyw5g4jBv7r7YGSqIoXXXUB5YN4vRT0gf3vRX9QOb/ZOG5v2Qh GIMs9Kmf97Lh6g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:56 2025 by rpki-client