This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json) Hash identifier: ZCY2xBximEQ3UeU/3//3Cp0iTBv1MG2HGXmTCmiv5uk= Subject key identifier: D8:5D:6F:20:C3:1B:A7:05:5F:72:E4:AA:5A:53:A6:FC:E0:1E:27:BE Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83 Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583 Certificate serial: 019AF19BB954223FAC4D36E10D576EF78640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: ryWcerRsKyvzeiIMdtEo4PyLGFRqf+rZrii5Q/W/JW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b9:54:22:3f:ac:4d:36:e1:0d:57:6e:f7:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583 Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=d85d6f20c31ba7055f72e4aa5a53a6fce01e27be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:8d:05:f4:9f:e8:31:a9:06:e9:68:f9:13: 1f:8c:7e:68:92:bc:7a:3e:09:60:b6:64:28:ad:a2: 8b:02:67:6f:40:9a:aa:ab:9a:3f:85:d4:d7:c7:af: f7:00:29:dc:28:53:29:20:ab:17:8f:fe:18:b3:a0: 27:8d:09:3e:48:4f:71:1c:63:55:0a:c1:9b:4d:97: 6a:11:1d:8a:c0:90:c8:48:a1:ff:4f:41:40:f4:1e: 38:2f:94:6a:ee:16:99:0e:28:2b:0b:f1:b3:be:3d: cc:ba:cd:b3:df:ec:2f:9d:f2:ec:ca:66:78:02:8e: 81:f4:1b:df:7d:92:7f:9c:3d:6d:90:d4:54:6e:65: 00:6e:24:a9:90:11:67:7b:3b:01:94:ec:ce:b6:17: 53:e3:2c:ce:4a:1f:6c:f9:ae:e3:c4:d6:ff:e5:f9: 7c:d2:32:7d:8d:f7:15:53:59:87:26:5e:2b:80:5c: c3:ec:4b:f8:f4:84:b0:42:37:18:d7:a6:cf:cb:11: 0e:3e:44:5e:2b:d5:ae:da:bc:f3:e2:f6:53:b5:07: 54:18:a0:c7:c3:a6:17:03:49:53:e6:30:43:8e:57: ef:b6:26:50:ff:86:6d:b0:e9:dd:b6:36:d8:94:8b: a6:6e:cb:1d:97:74:45:99:4a:ef:cc:c8:61:88:12: d1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5D:6F:20:C3:1B:A7:05:5F:72:E4:AA:5A:53:A6:FC:E0:1E:27:BE X509v3 Authority Key Identifier: keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:03:dd:d0:fa:7b:60:40:3c:3e:87:e8:ca:51:11:14:3a:bd: af:45:d4:08:9a:a4:e8:59:ca:4a:79:9c:c8:83:f6:98:e8:f6: e1:15:d6:f3:e0:7c:68:cb:8f:ce:ae:0c:19:0e:25:07:08:0a: 55:1b:1f:c5:06:a0:7d:75:f3:5d:6b:b8:45:a8:a5:2f:4e:8f: d9:44:8d:6f:1b:1e:a6:1e:18:9c:2a:f9:d6:6e:17:08:a4:a0: ee:41:00:a7:8f:e0:67:4d:fa:3a:38:bc:2b:a5:0f:d8:49:e7: 56:d2:0f:e6:98:35:f6:69:4f:91:88:7a:42:3b:90:e8:4a:6a: f7:0a:7a:c1:d1:2a:b0:f1:50:b0:5c:49:9a:d6:94:c7:df:70: 45:ff:01:08:9d:07:66:66:58:24:2b:29:24:9f:51:96:3c:8c: 1a:71:55:42:af:b2:62:35:b3:ca:66:ba:66:1b:1a:ac:f9:88: 8e:41:30:8e:c0:b5:02:b8:62:77:35:6d:dd:55:d7:2f:52:fd: cc:50:f3:ba:63:3c:1a:fe:e2:68:f3:1b:bc:b0:2b:39:17:15: b3:48:60:15:b1:79:ac:cb:d1:29:03:45:0f:2b:b3:50:69:1f: 04:f2:24:e8:54:b9:67:8a:a8:64:6a:53:d5:d8:ae:d5:7e:e8: 78:1c:53:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7lUIj+sTTbhDVdu94ZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDJiYWFmYjZmYmFhYmZlOGZhODRkZDI2OWY1YmEyOTIw ZjE1ODMwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD EyhkODVkNmYyMGMzMWJhNzA1NWY3MmU0YWE1YTUzYTZmY2UwMWUyN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu72NBfSf6DGpBulo+RMfjH5okrx6 PglgtmQoraKLAmdvQJqqq5o/hdTXx6/3ACncKFMpIKsXj/4Ys6AnjQk+SE9xHGNV CsGbTZdqER2KwJDISKH/T0FA9B44L5Rq7haZDigrC/Gzvj3Mus2z3+wvnfLsymZ4 Ao6B9BvffZJ/nD1tkNRUbmUAbiSpkBFnezsBlOzOthdT4yzOSh9s+a7jxNb/5fl8 0jJ9jfcVU1mHJl4rgFzD7Ev49ISwQjcY16bPyxEOPkReK9Wu2rzz4vZTtQdUGKDH w6YXA0lT5jBDjlfvtiZQ/4ZtsOndtjbYlIumbssdl3RFmUrvzMhhiBLRSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhdbyDDG6cFX3LkqlpTpvzgHie+MB8GA1UdIwQY MBaAFJwCuq+2+6q/6PqE3SafW6KSDxWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iOTQ3ZGEtZTJmMi00Y2RkLWFiMzAt NjI0Y2QxOWUxYWFkLzEvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9iOTQ3ZGEtZTJmMi00Y2RkLWFiMzAtNjI0Y2QxOWUxYWFk LzEvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAygPd0Pp7 YEA8PofoylERFDq9r0XUCJqk6FnKSnmcyIP2mOj24RXW8+B8aMuPzq4MGQ4lBwgK VRsfxQagfXXzXWu4RailL06P2USNbxseph4YnCr51m4XCKSg7kEAp4/gZ036Oji8 K6UP2EnnVtIP5pg19mlPkYh6QjuQ6Epq9wp6wdEqsPFQsFxJmtaUx99wRf8BCJ0H ZmZYJCspJJ9RljyMGnFVQq+yYjWzyma6ZhsarPmIjkEwjsC1ArhidzVt3VXXL1L9 zFDzumM8Gv7iaPMbvLArORcVs0hgFbF5rMvRKQNFDyuzUGkfBPIk6FS5Z4qoZGpT 1diu1X7oeBxTuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:29 2025 by rpki-client