This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json) Hash identifier: rzckV1NIvtnsz0uKE134h0S37h/JHV/vHTKsc8kTtRI= Subject key identifier: E3:0C:11:70:A3:CE:41:99:A6:94:1B:95:F1:86:E3:51:BE:9F:FF:CA Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9 Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9 Certificate serial: 019AF2766BAB4B2DFCEE528FDFB979F83B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft Manifest number: 1748 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: ePfWKLr1f8ODKy7AstDFO6h+2rV6k/wYexgMnNwlrLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6b:ab:4b:2d:fc:ee:52:8f:df:b9:79:f8:3b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=e30c1170a3ce4199a6941b95f186e351be9fffca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:a2:b5:73:90:0b:fb:b9:4e:af:cf:87:91: b2:6d:07:54:8a:aa:f1:b0:17:a7:39:b5:22:f8:24: 59:a6:9d:f0:8b:c6:9a:90:10:e8:d1:d2:dc:2f:77: 99:aa:d9:8b:8c:89:20:f0:0a:58:fc:e8:79:05:68: f5:34:50:57:9d:51:3e:9f:e2:f6:93:56:ea:ea:7c: 66:22:9d:fe:24:67:14:de:78:6c:bd:07:1b:5e:23: 20:78:7e:9e:8b:15:57:76:5a:49:bf:5a:12:44:2a: ed:e9:3f:d9:e2:03:b7:c5:f1:dc:31:87:32:90:50: d0:4d:39:f3:3e:42:76:ba:fe:2c:db:e5:a2:f7:88: ae:4c:87:fa:6e:e4:f3:ff:49:5f:32:9e:1b:d2:e2: d7:31:9e:9a:d4:c9:a1:2a:04:c4:0b:b1:f9:66:75: 47:a5:50:21:42:5c:c5:01:d7:5e:8c:3d:e3:be:24: ec:12:d3:8b:74:63:70:3e:bc:47:bb:b3:08:8b:bc: ba:f6:6a:65:ca:e1:21:ee:33:80:59:6d:db:4e:8e: c0:98:a4:74:62:e5:6e:51:63:fe:87:97:1b:30:15: 40:42:b8:9d:70:fa:81:c6:e1:a4:12:14:eb:d9:bf: 9e:6d:ba:8f:51:07:a0:d7:80:09:8f:05:10:c7:ba: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0C:11:70:A3:CE:41:99:A6:94:1B:95:F1:86:E3:51:BE:9F:FF:CA X509v3 Authority Key Identifier: keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e4:1c:3c:cf:b2:b3:6e:fd:13:b3:5d:bd:d8:fd:b5:c9:ed: 78:61:9c:49:0c:d5:d1:1e:1e:6f:4f:81:21:b9:9f:06:a6:90: f5:cc:ad:95:01:5b:8f:51:c3:d8:bc:4c:87:8a:8e:39:52:fd: 36:5f:88:5b:c4:0f:67:a3:6d:b2:61:13:f9:07:31:0d:e4:de: 57:bf:46:3c:5b:79:d8:d9:af:90:91:4f:fd:50:07:06:78:cb: a4:c4:4a:eb:c4:70:58:e4:0e:1f:75:09:a9:44:b6:a0:ff:a5: 5c:fe:58:7f:3f:d5:a5:1f:1a:ae:fa:2f:be:ba:a1:ff:70:49: e7:bb:9f:d9:9d:f0:18:68:39:8a:cc:d2:8b:e6:d3:ed:5e:f4: 2d:33:e9:c4:01:1b:e8:78:55:7c:bb:88:82:9e:6b:d1:b5:63: 61:90:aa:50:0e:32:2b:10:5f:aa:e8:7f:f8:cc:6d:7d:13:5f: 1f:6e:1d:30:65:87:53:a9:49:8f:b8:cf:e5:d4:db:f7:0c:84: cd:9e:d5:a4:cc:70:ba:fc:81:ee:24:d1:6f:88:6b:a5:e5:1d: f4:bc:b5:c7:df:56:58:28:e5:6f:d0:c4:c2:df:d4:32:01:38: 14:dc:b8:10:d4:ed:c9:84:95:84:03:da:9c:34:da:8e:a4:a7: 85:6d:e7:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmurSy387lKP37l5+DsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTg5NGYxZDc3MzFlOTk2MTcxOWJlMWVkOTk4NDY4ZmNi YWJlYTkwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhlMzBjMTE3MGEzY2U0MTk5YTY5NDFiOTVmMTg2ZTM1MWJlOWZmZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4WitXOQC/u5Tq/Ph5GybQdUiqrx sBenObUi+CRZpp3wi8aakBDo0dLcL3eZqtmLjIkg8ApY/Oh5BWj1NFBXnVE+n+L2 k1bq6nxmIp3+JGcU3nhsvQcbXiMgeH6eixVXdlpJv1oSRCrt6T/Z4gO3xfHcMYcy kFDQTTnzPkJ2uv4s2+Wi94iuTIf6buTz/0lfMp4b0uLXMZ6a1MmhKgTEC7H5ZnVH pVAhQlzFAddejD3jviTsEtOLdGNwPrxHu7MIi7y69mplyuEh7jOAWW3bTo7AmKR0 YuVuUWP+h5cbMBVAQridcPqBxuGkEhTr2b+ebbqPUQeg14AJjwUQx7qWlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMMEXCjzkGZppQblfGG41G+n//KMB8GA1UdIwQY MBaAFJzolPHXcx6ZYXGb4e2ZhGj8ur6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xZjk2OWMtZTM4Ny00NmZkLTg2MjQt ZGM3ZjBjMDk0YjM5LzEvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xZjk2OWMtZTM4Ny00NmZkLTg2MjQtZGM3ZjBjMDk0YjM5 LzEvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOQcPM+y s279E7Ndvdj9tcnteGGcSQzV0R4eb0+BIbmfBqaQ9cytlQFbj1HD2LxMh4qOOVL9 Nl+IW8QPZ6NtsmET+QcxDeTeV79GPFt52NmvkJFP/VAHBnjLpMRK68RwWOQOH3UJ qUS2oP+lXP5Yfz/VpR8arvovvrqh/3BJ57uf2Z3wGGg5iszSi+bT7V70LTPpxAEb 6HhVfLuIgp5r0bVjYZCqUA4yKxBfquh/+MxtfRNfH24dMGWHU6lJj7jP5dTb9wyE zZ7VpMxwuvyB7iTRb4hrpeUd9Ly1x99WWCjlb9DEwt/UMgE4FNy4ENTtyYSVhAPa nDTajqSnhW3nRg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:11 2025 by rpki-client