This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json) Hash identifier: BauorWzx3ocHV/X0Zu9BoJeM1OFpaVRWc+ujd5uwoMI= Subject key identifier: 83:CF:C3:34:38:20:43:FD:E5:29:6C:C0:3E:56:C9:E2:92:4A:A7:1F Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0 Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0 Certificate serial: 019AF49C4F4F4C92833C71AA6CD7DE8A4FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft Manifest number: 0268 Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: 1NRlXmqedgDoHxdLwKara7My/es8+YpZjJ0pZ2khd3s=) 2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4f:4f:4c:92:83:3c:71:aa:6c:d7:de:8a:4f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0 Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=83cfc334382043fde5296cc03e56c9e2924aa71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:fc:46:63:33:b0:f0:65:43:a5:a3:8d:fc: 5b:1c:31:49:b7:a8:d6:58:aa:6f:3c:b1:c7:ce:8a: b5:15:7f:b9:c6:1c:b3:de:07:b0:73:b7:b4:d1:a6: ea:2f:a0:4c:56:03:0c:54:c2:90:6e:65:30:2f:c1: a0:48:29:dc:66:99:26:bc:dc:ee:a5:aa:18:1d:da: 4c:c7:12:14:3f:f9:b5:49:db:1a:4b:78:59:82:71: 20:9f:a2:f4:4f:89:d4:19:e0:95:35:6f:68:c9:66: 02:cd:80:2a:61:84:36:b3:3e:5c:2c:55:12:e8:0e: 94:44:e9:83:15:27:ab:5f:2a:af:73:30:28:26:da: c0:1e:a7:ef:0b:a0:fd:8a:58:e2:25:bd:28:53:ce: 1e:d3:fd:f3:1c:2e:e3:53:e1:86:91:14:68:a8:17: 88:3e:d3:e3:9b:e1:63:0d:87:50:f1:1e:03:fe:76: 75:80:92:06:1b:67:ed:0f:18:37:bd:29:90:ab:84: 96:c9:24:1f:a6:50:e1:53:2a:91:96:61:3a:c3:0b: af:a8:8e:7f:22:ec:37:f1:b5:05:c1:c3:9e:4e:14: ee:47:bd:1f:2e:b8:8d:21:5a:ce:bd:97:92:68:52: 06:82:6c:ce:be:3f:0b:49:6c:98:80:87:f0:9d:be: a5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CF:C3:34:38:20:43:FD:E5:29:6C:C0:3E:56:C9:E2:92:4A:A7:1F X509v3 Authority Key Identifier: keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:67:e2:68:47:33:eb:8b:11:3d:53:21:80:ca:b4:32:ac:68: 93:ce:ef:7e:15:7d:69:fc:db:bf:4a:10:d2:95:95:cd:0f:35: d4:af:e9:16:9f:48:74:fd:21:4f:b6:cd:8e:73:ea:7d:15:1a: 59:ab:92:be:79:5f:bd:6d:e3:4d:fb:0c:5a:74:3d:38:65:15: 4c:3d:91:cf:52:b7:e8:c0:66:7c:37:1d:0e:49:b5:8e:4a:bd: c9:11:4c:78:29:d8:44:4c:47:70:60:15:5e:46:22:9f:14:90: b0:70:3b:84:da:d5:96:49:ff:2d:8b:70:6e:35:8a:62:b3:e9: 1e:30:95:71:62:0f:52:90:8b:f6:99:73:82:3e:86:f1:de:b1: e4:bc:88:60:21:48:dc:4c:9b:e0:03:e9:c4:82:55:e9:7d:24: 53:81:3e:f2:d3:5e:01:35:11:d2:38:d8:d3:2f:a2:87:ed:6d: 93:fc:da:a9:0b:a0:11:e1:da:4b:e9:46:5b:56:7a:f4:f8:21: ae:09:d6:b4:eb:60:41:6b:30:75:c0:cc:d6:96:88:84:59:7a: 94:a1:e2:f8:dc:b3:b8:7e:69:6f:03:e8:fe:2d:2b:fe:0b:58: 16:aa:43:ee:0a:c3:ae:3e:55:af:79:99:b4:30:cd:83:24:ae: 21:18:ad:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nE9PTJKDPHGqbNfeik/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTE5M2M5NDJhMDcwZWI2ZTdiNzZkMzNjMTE3MGMxYWJh YWFiYzAwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD Eyg4M2NmYzMzNDM4MjA0M2ZkZTUyOTZjYzAzZTU2YzllMjkyNGFhNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaz8RmMzsPBlQ6WjjfxbHDFJt6jW WKpvPLHHzoq1FX+5xhyz3gewc7e00abqL6BMVgMMVMKQbmUwL8GgSCncZpkmvNzu paoYHdpMxxIUP/m1SdsaS3hZgnEgn6L0T4nUGeCVNW9oyWYCzYAqYYQ2sz5cLFUS 6A6UROmDFSerXyqvczAoJtrAHqfvC6D9iljiJb0oU84e0/3zHC7jU+GGkRRoqBeI PtPjm+FjDYdQ8R4D/nZ1gJIGG2ftDxg3vSmQq4SWySQfplDhUyqRlmE6wwuvqI5/ Iuw38bUFwcOeThTuR70fLriNIVrOvZeSaFIGgmzOvj8LSWyYgIfwnb6lUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPPwzQ4IEP95SlswD5WyeKSSqcfMB8GA1UdIwQY MBaAFJyRk8lCoHDrbnt20zwRcMGrqqvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUt Y2UwZTk3YmFiNmE3LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUtY2UwZTk3YmFiNmE3 LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2fiaEcz 64sRPVMhgMq0Mqxok87vfhV9afzbv0oQ0pWVzQ811K/pFp9IdP0hT7bNjnPqfRUa WauSvnlfvW3jTfsMWnQ9OGUVTD2Rz1K36MBmfDcdDkm1jkq9yRFMeCnYRExHcGAV XkYinxSQsHA7hNrVlkn/LYtwbjWKYrPpHjCVcWIPUpCL9plzgj6G8d6x5LyIYCFI 3Eyb4APpxIJV6X0kU4E+8tNeATUR0jjY0y+ih+1tk/zaqQugEeHaS+lGW1Z69Pgh rgnWtOtgQWswdcDM1paIhFl6lKHi+NyzuH5pbwPo/i0r/gtYFqpD7grDrj5Vr3mZ tDDNgySuIRitOw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:07 2025 by rpki-client