This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json) Hash identifier: mcSzQpUWIChdk8acI7UF0f6QjFqj/vUxuNJwLwzrNIg= Subject key identifier: C2:3A:CB:88:F0:53:4D:33:AE:BF:01:3B:11:C1:3C:62:DC:A0:CF:7D Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Certificate serial: 019AF12E134CA71D03621FF8800CF3058042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft Manifest number: 125D Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: dIWN7rSdfL5nANiOYxc7f0fMBmH6S1fDkCIbo9Qqqyk=) 2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:13:4c:a7:1d:03:62:1f:f8:80:0c:f3:05:80:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=c23acb88f0534d33aebf013b11c13c62dca0cf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:65:b6:f9:fd:a5:39:5b:88:1f:81:31:d3: 14:e4:21:75:36:db:8d:4b:5b:d9:e7:73:86:9f:7c: 5f:73:24:3d:77:3d:e0:f0:53:5c:fb:d3:ad:d6:5d: 0a:d9:00:14:a2:84:5c:e2:cf:f5:39:98:9c:b0:6c: 1b:07:63:b0:1e:4f:e9:49:e1:dd:c9:13:c9:27:cd: 81:24:4f:6b:39:80:55:41:98:e5:92:dc:ce:9a:31: bc:a5:ee:d2:e7:b3:4f:8e:23:76:7a:7b:10:47:e4: 7a:56:b5:46:2b:31:f6:77:ed:7e:4d:9b:75:09:7d: 38:54:ba:11:3d:86:95:5b:2d:13:a2:b6:4d:b6:1d: 83:de:28:b6:c6:19:71:71:15:95:37:9b:81:72:6e: 70:df:34:ee:72:ab:73:95:72:84:e2:1a:4a:12:a4: 8a:65:8c:7d:69:13:aa:6c:97:f9:e1:cc:24:ac:c3: c1:9e:43:c8:fe:8b:c7:5f:0a:b9:c2:16:cd:72:b0: 8f:84:7e:ca:67:d3:9c:6a:d3:f1:1b:6c:f4:a2:af: 90:8c:0a:25:49:47:83:25:ab:e0:4e:85:80:33:39: e8:7f:fe:97:59:f7:ec:be:a5:2a:e7:68:13:bd:0c: 06:5d:9e:de:c3:cb:7d:d6:0b:52:4e:d3:c8:31:bb: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:CB:88:F0:53:4D:33:AE:BF:01:3B:11:C1:3C:62:DC:A0:CF:7D X509v3 Authority Key Identifier: keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4a:e4:8b:45:62:fd:0b:61:a8:04:f4:e9:17:ae:93:23:ff: 3f:ae:d1:d7:ce:54:9e:e9:00:6f:29:2d:74:96:6c:a9:28:4c: 5f:e4:29:35:0e:70:fc:26:b5:cb:5b:1f:57:31:1c:75:41:0e: af:c8:fe:c7:3e:25:18:93:66:df:df:9a:fb:da:fc:5f:88:da: 54:94:6b:d1:69:a3:4e:84:fd:e3:fe:a9:55:17:0c:9c:c3:4e: 84:30:e7:46:b1:7f:8e:a8:b3:2d:4b:a6:2d:36:94:10:64:c5: 9c:60:ad:77:7a:49:78:af:3c:8d:ae:f8:d4:34:8b:8f:83:ad: 2d:c5:13:e6:be:3e:4a:ad:0a:3a:d6:3b:81:94:21:e3:9b:20: 3b:49:2f:79:ca:3b:a2:0b:42:3b:2b:49:c9:05:a8:a4:25:37: c9:e2:fc:1c:1c:74:b3:b8:e0:ac:ed:8c:8d:93:b2:b3:fb:3c: 23:78:5c:e6:ea:77:4e:7a:e5:40:e7:68:69:48:ad:95:4d:89: f0:3c:0e:3e:bd:19:11:77:00:1a:63:1a:fc:00:7f:f2:45:62: fb:5d:fc:b7:b0:8d:69:b9:39:f0:49:9e:a2:bb:f2:63:7a:a0: 4f:e1:42:2a:66:20:95:07:0b:06:b1:94:31:45:6b:dd:1b:8c: 89:7b:20:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhNMpx0DYh/4gAzzBYBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz NGRiZTgwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD EyhjMjNhY2I4OGYwNTM0ZDMzYWViZjAxM2IxMWMxM2M2MmRjYTBjZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTBltvn9pTlbiB+BMdMU5CF1NtuN S1vZ53OGn3xfcyQ9dz3g8FNc+9Ot1l0K2QAUooRc4s/1OZicsGwbB2OwHk/pSeHd yRPJJ82BJE9rOYBVQZjlktzOmjG8pe7S57NPjiN2ensQR+R6VrVGKzH2d+1+TZt1 CX04VLoRPYaVWy0TorZNth2D3ii2xhlxcRWVN5uBcm5w3zTucqtzlXKE4hpKEqSK ZYx9aROqbJf54cwkrMPBnkPI/ovHXwq5whbNcrCPhH7KZ9OcatPxG2z0oq+QjAol SUeDJavgToWAMznof/6XWffsvqUq52gTvQwGXZ7ew8t91gtSTtPIMbsizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI6y4jwU00zrr8BOxHBPGLcoM99MB8GA1UdIwQY MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMErki0Vi /QthqAT06ReukyP/P67R185UnukAbyktdJZsqShMX+QpNQ5w/Ca1y1sfVzEcdUEO r8j+xz4lGJNm39+a+9r8X4jaVJRr0WmjToT94/6pVRcMnMNOhDDnRrF/jqizLUum LTaUEGTFnGCtd3pJeK88ja741DSLj4OtLcUT5r4+Sq0KOtY7gZQh45sgO0kveco7 ogtCOytJyQWopCU3yeL8HBx0s7jgrO2MjZOys/s8I3hc5up3TnrlQOdoaUitlU2J 8DwOPr0ZEXcAGmMa/AB/8kVi+138t7CNabk58EmeorvyY3qgT+FCKmYglQcLBrGU MUVr3RuMiXsgXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:50 2025 by rpki-client