This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json) Hash identifier: ywYwd5vk9Q2HfZgOX1YsQd+gI3eXMypuVm4gFxuhvXs= Subject key identifier: C4:A7:2B:8F:8F:0F:6A:54:57:69:DB:FC:86:E1:47:36:12:6B:CF:39 Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8 Certificate serial: 019AF163D6CEB92EFB4F57F0BE26004745F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft Manifest number: 1160 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=) 2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=) 3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: Z+/YWhF5ZFTTtDLU/m5Exc/Jht9B9zz7L+CFpb/bTjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d6:ce:b9:2e:fb:4f:57:f0:be:26:00:47:45:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8 Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=c4a72b8f8f0f6a545769dbfc86e14736126bcf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:51:35:5f:8c:94:f0:be:c6:b7:14:52:c3: b8:25:5e:87:13:9e:8b:a5:4c:9f:57:e4:f6:2a:41: 26:e7:78:ca:3d:38:f4:5b:a9:2e:b9:83:2b:5c:ae: e4:70:c3:cc:15:69:76:5e:40:df:b5:14:76:a3:95: 2c:a9:5d:c5:ec:40:aa:53:c4:1a:e9:b4:5f:2a:cf: 0f:d7:72:fa:25:b9:b4:43:d8:af:de:2b:60:a1:d9: 90:4d:c3:49:fb:33:fe:e7:55:6b:d3:99:05:4e:12: b6:b0:01:15:0d:08:30:db:51:96:c0:58:09:f1:ab: 2d:4c:aa:54:05:ff:2d:1f:2e:15:e1:17:0d:08:3b: 75:5e:32:f8:5a:6e:de:b1:c9:20:31:7f:e5:e1:12: e6:3b:c5:74:95:9f:70:be:37:bc:0e:d5:e2:a0:1e: c4:04:23:c8:d5:c9:ae:7a:62:d8:2a:cc:5a:ac:75: fe:60:91:06:bf:15:9f:71:df:7a:1b:be:42:d9:86: ae:98:d8:dc:26:e7:e7:3e:02:f9:d0:50:e0:a2:b1: 11:7f:38:1f:89:ed:0d:a5:0e:cd:cd:4d:14:36:d5: 3b:47:bf:75:b0:1f:84:61:82:11:b3:fc:e6:7d:f3: 0c:b2:d8:0d:3a:5d:9c:c3:16:f0:38:da:64:4b:b0: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A7:2B:8F:8F:0F:6A:54:57:69:DB:FC:86:E1:47:36:12:6B:CF:39 X509v3 Authority Key Identifier: keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4e:df:1a:27:40:6f:81:c4:40:da:ab:14:b4:20:0d:a4:57: c8:aa:98:16:82:cc:6f:4a:b4:be:e3:d3:32:cd:78:1a:6c:04: 12:41:b8:de:ba:ec:d1:34:0d:54:68:c9:f6:4a:88:ff:47:0c: 84:db:57:4e:85:3e:24:c2:c1:9c:63:e4:a1:ef:c9:97:f7:e0: bb:12:0e:f6:ec:9a:08:fc:96:b5:0a:b2:7b:ac:f1:e1:8b:28: e7:70:86:14:f8:5f:ca:2a:eb:62:2f:f0:83:08:d2:29:f6:05: e6:98:cf:32:45:f7:09:e4:b9:4b:81:4e:e5:58:3c:aa:34:0f: 94:da:e9:63:43:5f:01:dd:f8:3f:34:97:05:ca:d1:ed:8e:f3: b9:8a:b7:1d:9e:74:91:87:4c:d4:7a:d3:ca:99:08:b1:a5:1f: f6:18:ff:32:66:b1:0b:44:e3:99:d2:7b:fb:f7:40:5f:2e:86: d7:53:ba:e8:45:12:45:51:be:11:3a:48:e1:46:e6:8d:fc:21: dd:ce:c7:78:22:f4:d7:db:2e:f2:67:67:3b:f0:9d:6f:a1:89: 74:b3:d1:18:af:55:28:11:14:de:9b:6f:98:6f:59:ce:68:7f: 3a:65:55:fb:9d:49:bb:46:7a:74:dc:d8:b6:0e:2e:83:20:59: ca:1c:0c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9bOuS77T1fwviYAR0XzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYThhMTMyNTE5YTI0Mjk0OTQ5NzM2M2I4Y2FhMzNlNzJj NjczZjgwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD EyhjNGE3MmI4ZjhmMGY2YTU0NTc2OWRiZmM4NmUxNDczNjEyNmJjZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL5RNV+MlPC+xrcUUsO4JV6HE56L pUyfV+T2KkEm53jKPTj0W6kuuYMrXK7kcMPMFWl2XkDftRR2o5UsqV3F7ECqU8Qa 6bRfKs8P13L6Jbm0Q9iv3itgodmQTcNJ+zP+51Vr05kFThK2sAEVDQgw21GWwFgJ 8astTKpUBf8tHy4V4RcNCDt1XjL4Wm7esckgMX/l4RLmO8V0lZ9wvje8DtXioB7E BCPI1cmuemLYKsxarHX+YJEGvxWfcd96G75C2YaumNjcJufnPgL50FDgorERfzgf ie0NpQ7NzU0UNtU7R791sB+EYYIRs/zmffMMstgNOl2cwxbwONpkS7CBCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSnK4+PD2pUV2nb/IbhRzYSa885MB8GA1UdIwQY MBaAFJyooTJRmiQpSUlzY7jKoz5yxnP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWIt MDBjZDg2YWY4NDlkLzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWItMDBjZDg2YWY4NDlk LzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIU7fGidA b4HEQNqrFLQgDaRXyKqYFoLMb0q0vuPTMs14GmwEEkG43rrs0TQNVGjJ9kqI/0cM hNtXToU+JMLBnGPkoe/Jl/fguxIO9uyaCPyWtQqye6zx4Yso53CGFPhfyirrYi/w gwjSKfYF5pjPMkX3CeS5S4FO5Vg8qjQPlNrpY0NfAd34PzSXBcrR7Y7zuYq3HZ50 kYdM1HrTypkIsaUf9hj/MmaxC0TjmdJ7+/dAXy6G11O66EUSRVG+ETpI4Ubmjfwh 3c7HeCL019su8mdnO/Cdb6GJdLPRGK9VKBEU3ptvmG9Zzmh/OmVV+51Ju0Z6dNzY tg4ugyBZyhwMGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:20 2025 by rpki-client