This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json) Hash identifier: 5aLoQfJWBU+b8NC3GGbWG7RoVjrFLNlZsRisB4YiM10= Subject key identifier: 3B:3B:0D:92:84:01:81:F9:F3:C2:FB:80:76:5C:B0:B8:83:AA:B6:D7 Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a Certificate serial: 019AF3892197017EEA819D429A9C4067830A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: ejq+E1kHiTPeGCboLuW1ZOFV0VnzqNGnZiLDOsOdpyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:21:97:01:7e:ea:81:9d:42:9a:9c:40:67:83:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=3b3b0d92840181f9f3c2fb80765cb0b883aab6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:57:9a:4e:59:4f:bd:41:8b:8a:56:f6:73:7f: 35:d9:b3:40:73:f2:ca:85:e4:e2:54:5a:5a:a9:c8: bb:f6:f4:be:3f:bd:73:78:d0:ea:d4:9c:3f:38:96: 32:d7:47:10:80:4e:27:1e:62:b8:53:83:9b:f4:96: 34:e6:74:e9:b4:44:4a:89:f4:35:f2:0d:8e:0c:84: 45:ee:03:2c:af:02:a3:18:97:57:b0:23:d1:01:d2: 7f:0a:f9:a0:52:c0:4e:52:5d:4c:43:28:50:0b:a9: ed:34:f8:df:a6:93:62:23:7c:e7:a2:84:93:ad:27: f7:38:01:26:f4:06:64:4e:42:f4:00:57:3a:77:53: 2b:c9:32:2e:f1:c2:35:c4:68:d8:46:4a:ee:33:f8: e2:64:36:ed:6a:ed:d5:55:d4:f3:cf:ce:da:b1:1f: 59:c8:be:ad:5a:c1:df:c3:b4:a8:ec:ec:3a:92:e9: f8:43:05:0b:14:b1:26:37:da:29:b2:04:91:16:4a: 88:e1:ce:b6:80:36:c9:2a:16:ab:a8:2f:1e:b2:ee: 1c:5c:6f:29:26:4e:20:a5:91:f3:ba:dd:0d:83:97: bb:99:2c:cb:91:ac:58:24:21:ca:1e:9e:f9:50:06: cc:20:3a:49:7b:fa:e1:a8:5e:51:0b:84:b5:2b:da: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3B:0D:92:84:01:81:F9:F3:C2:FB:80:76:5C:B0:B8:83:AA:B6:D7 X509v3 Authority Key Identifier: keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:35:0f:48:71:84:02:58:17:ea:fe:51:c2:e6:3a:ab:12:8a: b7:b0:85:f1:e4:c5:e2:62:f8:65:68:e1:2a:28:87:58:fc:84: b4:01:57:9e:f1:22:d3:ce:d8:68:f3:c5:f4:bb:19:c2:f4:76: 6e:85:c1:2f:74:bc:07:5c:43:83:99:2a:27:09:e7:ed:ac:3d: 4e:db:5c:57:aa:13:d8:90:c4:93:95:60:14:f5:c4:e2:7a:26: 50:cf:d6:9e:d6:ba:9f:4b:43:d7:43:e3:dc:87:60:8b:a0:36: ea:2f:c0:4a:53:7f:62:b1:8c:f9:76:ab:e9:ef:90:e3:16:9f: 96:89:b3:64:50:54:1f:4e:5b:c4:a9:9c:09:80:3e:0f:15:aa: 45:40:09:e7:b7:b3:d7:32:6c:7f:d9:72:8b:df:fd:37:47:39: d4:b2:55:6d:77:80:01:0f:74:48:4b:c0:d4:5c:29:66:17:2e: d1:6a:1b:4d:55:15:12:54:b8:df:17:04:a1:18:be:53:b9:de: 18:63:c0:ff:df:9c:62:a2:3c:62:f7:ff:dd:67:a9:de:4d:13: 09:b7:74:a5:d8:b4:28:2f:c5:75:8d:21:ed:5d:19:7c:39:fe: 25:57:1c:97:ad:f2:0e:1a:ec:81:4b:a5:58:83:21:c0:41:91: b5:cb:db:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSGXAX7qgZ1CmpxAZ4MKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz YTA1N2EwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EygzYjNiMGQ5Mjg0MDE4MWY5ZjNjMmZiODA3NjVjYjBiODgzYWFiNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FeaTllPvUGLilb2c3812bNAc/LK heTiVFpaqci79vS+P71zeNDq1Jw/OJYy10cQgE4nHmK4U4Ob9JY05nTptERKifQ1 8g2ODIRF7gMsrwKjGJdXsCPRAdJ/CvmgUsBOUl1MQyhQC6ntNPjfppNiI3znooST rSf3OAEm9AZkTkL0AFc6d1MryTIu8cI1xGjYRkruM/jiZDbtau3VVdTzz87asR9Z yL6tWsHfw7So7Ow6kun4QwULFLEmN9opsgSRFkqI4c62gDbJKharqC8esu4cXG8p Jk4gpZHzut0Ng5e7mSzLkaxYJCHKHp75UAbMIDpJe/rhqF5RC4S1K9qSjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDs7DZKEAYH588L7gHZcsLiDqrbXMB8GA1UdIwQY MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt NDAxMGEzNmQ5Y2RkLzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTUPSHGE AlgX6v5RwuY6qxKKt7CF8eTF4mL4ZWjhKiiHWPyEtAFXnvEi087YaPPF9LsZwvR2 boXBL3S8B1xDg5kqJwnn7aw9TttcV6oT2JDEk5VgFPXE4nomUM/Wnta6n0tD10Pj 3Idgi6A26i/ASlN/YrGM+Xar6e+Q4xaflomzZFBUH05bxKmcCYA+DxWqRUAJ57ez 1zJsf9lyi9/9N0c51LJVbXeAAQ90SEvA1FwpZhcu0WobTVUVElS43xcEoRi+U7ne GGPA/9+cYqI8Yvf/3Wep3k0TCbd0pdi0KC/FdY0h7V0ZfDn+JVccl63yDhrsgUul WIMhwEGRtcvbOA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:38 2025 by rpki-client