This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json) Hash identifier: eJM2+ZIKGd2QFtzCxsX3BLf+MSfROW8yd3fKpoIRlU0= Subject key identifier: D5:AD:6C:C3:E2:BD:8D:FE:59:FF:06:A1:54:B9:86:3F:96:E0:BE:07 Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Certificate serial: 019AF2402FBBEC1C57A447F2D8A023B5116E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:01:24 +0000 Manifest this update: Sat 06 Dec 2025 06:01:24 +0000 Manifest next update: Sun 07 Dec 2025 06:01:24 +0000 Files and hashes: 1: F76FpI_z3pp7FvEBXhJ_sZMIEq4.roa (hash: 1qsVc/WLV0a8wJB91bXtNOSX8a5UYSQoJwoErMzZDKk=) 2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: PipAJRdVdmmReVcwkiNs286Z+MPZCXtMDDV8PpAe4EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2f:bb:ec:1c:57:a4:47:f2:d8:a0:23:b5:11:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Validity Not Before: Dec 6 06:01:24 2025 GMT Not After : Dec 7 06:01:24 2025 GMT Subject: CN=d5ad6cc3e2bd8dfe59ff06a154b9863f96e0be07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:e8:f5:77:1f:6f:92:b7:20:b4:a8:99:41: 75:b6:a5:34:aa:32:97:c6:c5:b5:96:15:4a:4f:8a: ce:69:09:1e:42:a9:95:94:e0:ef:7c:a6:89:b3:e0: 15:82:03:32:44:97:95:04:95:01:6f:7a:0f:04:cf: 79:8d:a3:e7:cd:8c:d9:0d:cb:39:6e:65:cf:40:1a: f7:a1:52:81:6d:05:bb:6e:83:6a:e7:e8:69:9a:5c: 35:ea:b5:00:d6:22:0f:c6:1a:22:57:ef:06:07:9e: 91:81:20:dc:ba:ca:f0:39:90:1a:a4:7c:0a:fe:91: c3:f4:9d:47:7b:67:a5:a9:b1:20:cd:f2:52:94:5c: e2:a9:b8:05:a8:51:0c:ab:a3:07:09:18:2f:c5:ea: 79:76:24:ef:f7:1f:c9:ad:87:5a:7d:31:68:e5:6a: 74:bf:64:97:04:b2:16:5f:e4:c5:77:b5:5e:4a:17: c3:1d:e5:84:04:0b:3a:ad:93:f5:b4:86:33:28:81: 49:4b:83:63:a6:22:2e:af:eb:7a:b8:55:a1:e1:a8: 8d:4c:e4:43:b1:71:f2:f9:61:86:a5:3e:b9:fd:89: a3:66:cf:ee:79:9a:4c:c2:b8:e0:29:24:23:71:43: 3c:58:c1:7d:35:10:d2:16:e4:78:3e:bb:90:c2:6a: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AD:6C:C3:E2:BD:8D:FE:59:FF:06:A1:54:B9:86:3F:96:E0:BE:07 X509v3 Authority Key Identifier: keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bc:8c:c1:66:1f:fb:6d:c4:73:d3:44:8a:e0:6c:a6:1f:fd: 49:47:ae:f8:26:20:36:59:91:66:af:91:b4:a3:f9:f1:08:8a: a9:b7:92:c7:b9:81:bb:9d:ef:08:45:7e:a0:9f:b0:e8:c5:e6: 8e:3b:9a:8f:c3:86:f1:ea:95:57:37:dd:a3:5f:4e:aa:1d:b8: b4:c2:37:30:ef:3e:75:16:78:25:ee:70:a5:85:e1:63:4c:41: 4a:05:c6:a9:31:aa:20:63:d0:ad:6f:7f:bf:48:24:10:17:b2: ae:b9:6d:50:9e:e7:2d:04:d0:d4:07:36:e5:d1:b9:7c:4e:ee: 89:2f:79:76:56:1c:1f:54:61:24:d0:c8:ae:1c:a2:e3:76:ab: f3:73:64:46:09:f2:0b:8a:9a:15:c4:d3:87:41:7d:70:33:8d: a3:66:1f:eb:47:e5:3b:3e:fb:33:0f:4c:b0:57:5a:00:6d:1a: e3:a1:3b:4a:18:52:12:e8:2e:c7:3e:2f:4c:6b:cf:94:da:9d: 8a:51:10:f0:e6:2e:4a:e8:18:5e:ea:dd:e4:c6:5a:1a:12:29: 76:a2:e5:c8:1d:22:98:0f:bb:a1:20:72:84:5c:b3:2c:fc:42: 0c:cc:5b:77:3a:34:2e:a2:29:68:69:71:ab:1e:92:ea:7b:10: 7b:2f:a1:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQC+77BxXpEfy2KAjtRFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy ZTMzYTgwHhcNMjUxMjA2MDYwMTI0WhcNMjUxMjA3MDYwMTI0WjAzMTEwLwYDVQQD EyhkNWFkNmNjM2UyYmQ4ZGZlNTlmZjA2YTE1NGI5ODYzZjk2ZTBiZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z7o9Xcfb5K3ILSomUF1tqU0qjKX xsW1lhVKT4rOaQkeQqmVlODvfKaJs+AVggMyRJeVBJUBb3oPBM95jaPnzYzZDcs5 bmXPQBr3oVKBbQW7boNq5+hpmlw16rUA1iIPxhoiV+8GB56RgSDcusrwOZAapHwK /pHD9J1He2elqbEgzfJSlFziqbgFqFEMq6MHCRgvxep5diTv9x/JrYdafTFo5Wp0 v2SXBLIWX+TFd7VeShfDHeWEBAs6rZP1tIYzKIFJS4NjpiIur+t6uFWh4aiNTORD sXHy+WGGpT65/YmjZs/ueZpMwrjgKSQjcUM8WMF9NRDSFuR4PruQwmqqqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWtbMPivY3+Wf8GoVS5hj+W4L4HMB8GA1UdIwQY MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5 LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLyMwWYf +23Ec9NEiuBsph/9SUeu+CYgNlmRZq+RtKP58QiKqbeSx7mBu53vCEV+oJ+w6MXm jjuaj8OG8eqVVzfdo19Oqh24tMI3MO8+dRZ4Je5wpYXhY0xBSgXGqTGqIGPQrW9/ v0gkEBeyrrltUJ7nLQTQ1Ac25dG5fE7uiS95dlYcH1RhJNDIrhyi43ar83NkRgny C4qaFcTTh0F9cDONo2Yf60flOz77Mw9MsFdaAG0a46E7ShhSEuguxz4vTGvPlNqd ilEQ8OYuSugYXurd5MZaGhIpdqLlyB0imA+7oSByhFyzLPxCDMxbdzo0LqIpaGlx qx6S6nsQey+hYA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:36 2025 by rpki-client