This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json) Hash identifier: 3JDwBKtwp9EM59Z/1sDjCHOqrkLZ00Fu3XzLiosNM9Y= Subject key identifier: F8:2C:0C:B2:03:33:79:0B:83:AA:61:7C:4C:09:06:25:34:8B:68:B4 Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Certificate serial: 019AF42E5F15F8DCE4574BE815E1AAE98615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft Manifest number: 0385 Signing time: Sat 06 Dec 2025 15:01:10 +0000 Manifest this update: Sat 06 Dec 2025 15:01:10 +0000 Manifest next update: Sun 07 Dec 2025 15:01:10 +0000 Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=) 2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: OZv60yOBuXoeIBVqJVGa++iHAV19h3PX4/ZvPm+bQ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:5f:15:f8:dc:e4:57:4b:e8:15:e1:aa:e9:86:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Validity Not Before: Dec 6 15:01:10 2025 GMT Not After : Dec 7 15:01:10 2025 GMT Subject: CN=f82c0cb20333790b83aa617c4c090625348b68b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:1d:b2:5a:75:70:dd:d7:4b:ce:4d:01:d3: ec:c0:34:f1:87:6b:46:aa:1e:90:23:46:b6:bf:48: 1a:8a:96:b5:07:37:5b:78:46:be:4d:09:97:9c:d7: 9b:92:e0:85:22:c4:1f:7d:f9:d6:6a:d4:8f:20:78: cf:6e:03:b3:62:e2:55:b6:63:76:f6:29:96:e1:23: 43:c5:7c:17:e1:26:79:68:36:ad:fa:0a:4d:a5:b4: 81:f6:97:a8:08:d9:5d:6b:6a:ac:4d:87:c4:a9:6e: c1:f4:dc:51:9a:87:79:18:6a:bd:b6:c7:6e:6f:a1: 36:91:e6:d7:08:b6:75:c4:05:12:45:b1:13:1c:21: 99:c9:a1:cb:fb:0f:35:1e:6d:63:d1:48:43:09:2b: db:a3:b9:d0:3d:08:44:b6:23:7d:b5:d4:a1:b4:0b: a9:cb:f7:dc:81:cd:6d:b6:2a:6c:8c:15:19:10:4a: ef:90:3a:75:e0:c3:e8:13:c7:4e:07:b7:89:ee:00: b9:48:01:5f:d6:3b:fa:e8:da:5b:34:0e:92:c2:dc: a4:6e:71:13:b2:4d:61:90:63:36:f5:d0:f1:5a:ad: a1:71:73:6b:29:97:de:8b:4d:32:72:a2:8d:78:cf: a9:93:5f:b3:9e:bd:68:ff:d8:83:54:2e:a9:f8:a5: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2C:0C:B2:03:33:79:0B:83:AA:61:7C:4C:09:06:25:34:8B:68:B4 X509v3 Authority Key Identifier: keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:67:80:dd:12:ee:b2:47:9f:e0:0b:91:42:8c:b8:43:de:ea: 07:a6:02:4e:32:62:36:1e:96:ce:f2:8a:0d:27:19:d7:a6:eb: 2c:a4:f0:73:ab:6c:2f:a3:ef:fa:64:c7:ff:cb:a5:26:08:0e: b4:e0:82:86:1f:55:6d:b5:39:74:4a:a0:9b:58:44:19:77:ae: ef:b2:5d:97:6d:83:c9:65:a9:32:0f:b5:78:b7:f9:a7:15:7c: a9:ec:19:88:f0:68:c2:69:98:04:1f:4d:f5:1b:c9:d0:f7:d0: b7:74:85:1b:64:e8:47:a9:24:52:29:62:84:5f:a8:d6:c7:79: 76:c2:38:28:23:63:8e:7c:67:b8:d7:11:d1:56:46:5f:ea:84: ad:40:1c:0f:20:1d:7a:31:a6:a4:5b:8e:eb:13:67:a3:0e:29: 9d:e6:1d:0f:37:65:c2:60:5f:b1:90:12:82:7c:e4:ff:3b:8f: 3d:d9:64:dc:f7:4d:49:a8:fd:b3:09:35:78:61:23:a3:e7:b5: f1:a8:33:91:41:ac:43:8f:e2:ab:af:85:b7:3d:81:66:7d:b6: 08:97:b8:2f:aa:e5:44:c9:8b:16:32:9c:90:fe:22:e0:de:e8: 43:14:46:a0:ed:b3:6f:20:cb:1d:02:b1:ab:d0:77:65:6a:4f: 3c:91:50:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ll8V+NzkV0voFeGq6YYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl M2U3MzMwHhcNMjUxMjA2MTUwMTEwWhcNMjUxMjA3MTUwMTEwWjAzMTEwLwYDVQQD EyhmODJjMGNiMjAzMzM3OTBiODNhYTYxN2M0YzA5MDYyNTM0OGI2OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKQdslp1cN3XS85NAdPswDTxh2tG qh6QI0a2v0gaipa1BzdbeEa+TQmXnNebkuCFIsQfffnWatSPIHjPbgOzYuJVtmN2 9imW4SNDxXwX4SZ5aDat+gpNpbSB9peoCNlda2qsTYfEqW7B9NxRmod5GGq9tsdu b6E2kebXCLZ1xAUSRbETHCGZyaHL+w81Hm1j0UhDCSvbo7nQPQhEtiN9tdShtAup y/fcgc1ttipsjBUZEErvkDp14MPoE8dOB7eJ7gC5SAFf1jv66NpbNA6SwtykbnET sk1hkGM29dDxWq2hcXNrKZfei00ycqKNeM+pk1+znr1o/9iDVC6p+KXTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgsDLIDM3kLg6phfEwJBiU0i2i0MB8GA1UdIwQY MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2eA3RLu skef4AuRQoy4Q97qB6YCTjJiNh6WzvKKDScZ16brLKTwc6tsL6Pv+mTH/8ulJggO tOCChh9VbbU5dEqgm1hEGXeu77Jdl22DyWWpMg+1eLf5pxV8qewZiPBowmmYBB9N 9RvJ0PfQt3SFG2ToR6kkUilihF+o1sd5dsI4KCNjjnxnuNcR0VZGX+qErUAcDyAd ejGmpFuO6xNnow4pneYdDzdlwmBfsZASgnzk/zuPPdlk3PdNSaj9swk1eGEjo+e1 8agzkUGsQ4/iq6+Ftz2BZn22CJe4L6rlRMmLFjKckP4i4N7oQxRGoO2zbyDLHQKx q9B3ZWpPPJFQhg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:16 2025 by rpki-client