This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json) Hash identifier: PCkHl6s0cKl3puGMk+mdPa4P40UynTvvU/fa6p3Rw+c= Subject key identifier: 73:1E:65:A6:F2:29:BA:5A:D1:CE:89:99:E9:B6:F1:C7:A1:A3:C2:19 Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a Certificate serial: 019B2E8B817D796297A341510A2388A3D20F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 23:00:53 +0000 Manifest this update: Wed 17 Dec 2025 23:00:53 +0000 Manifest next update: Thu 18 Dec 2025 23:00:53 +0000 Files and hashes: 1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=) 2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: CXjJUGsYoQ+/NhFThOsrW/I8CN0LxmrJARxEfNLXUgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:81:7d:79:62:97:a3:41:51:0a:23:88:a3:d2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a Validity Not Before: Dec 17 23:00:53 2025 GMT Not After : Dec 18 23:00:53 2025 GMT Subject: CN=731e65a6f229ba5ad1ce8999e9b6f1c7a1a3c219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:97:85:39:d1:ef:a9:c5:6c:53:54:05:3e: 85:10:ad:b9:a8:44:79:1b:74:94:73:fc:44:bc:15: 39:0f:8e:a1:2a:7e:f4:43:93:35:7b:6d:b1:65:de: 5a:92:66:f3:e7:51:b5:bb:52:be:db:ea:40:70:37: b1:a5:2c:26:c0:fc:f8:62:26:5c:cd:14:08:b5:d7: af:8c:2d:41:c6:38:9e:36:1d:2e:85:43:7d:69:bc: 73:dd:49:a5:65:e1:08:eb:cd:19:1f:0f:50:1f:06: 0d:02:82:76:19:f8:b9:43:41:79:60:b1:a8:cd:ed: 0b:d3:ca:e1:56:5f:a1:bf:75:68:d2:05:68:54:01: b1:71:06:a6:15:e1:ea:01:49:78:26:f5:a7:c2:51: 75:c7:97:ac:82:df:1c:dd:11:98:4d:4e:d7:8a:53: c5:d1:18:07:82:b5:20:64:f7:37:2f:26:16:04:91: 0b:70:d5:ca:aa:98:93:d2:0f:9b:59:c9:43:49:49: 97:e9:da:cd:dd:19:f6:d2:0f:a3:6b:fd:45:d1:84: e6:67:c8:40:4f:a8:67:e0:d6:ed:bf:bb:33:66:8d: ca:77:72:9b:27:a9:77:7a:7b:34:e9:16:45:df:70: 0c:43:21:c0:7c:8e:a5:80:87:b3:5e:46:d0:ce:1f: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1E:65:A6:F2:29:BA:5A:D1:CE:89:99:E9:B6:F1:C7:A1:A3:C2:19 X509v3 Authority Key Identifier: keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7b:cc:5c:cb:e1:31:50:d5:b8:14:5a:2a:f7:3d:d3:68:d2: 23:1d:b5:67:db:0a:f6:9f:8d:7e:1e:85:d5:a8:e1:06:1a:bc: 77:18:72:9c:aa:b5:b2:1b:e6:02:f1:5f:d8:4a:a3:c9:77:6b: e4:f0:45:91:3d:94:b9:e6:20:4b:79:17:4e:78:51:df:d3:35: 28:ca:89:fd:9a:3d:b0:96:61:0b:49:4e:7f:fb:29:ea:dd:22: 5b:b6:27:d2:99:d7:49:4e:7e:6e:e8:90:57:22:68:ad:8a:06: 5b:32:a4:83:3f:0a:b7:f7:e7:61:74:fe:46:36:57:0a:4b:80: 56:35:fb:61:ef:34:57:74:17:b5:b4:09:55:42:a9:d2:50:28: ee:c8:80:15:f4:b2:45:03:70:54:6b:f2:9f:53:68:24:7e:86: 9c:86:bf:ac:9b:da:dc:c3:48:db:6e:9f:9b:04:42:ba:69:25: 67:4a:b2:23:4b:e9:63:31:d2:61:a7:e8:e5:95:75:e8:90:65: a1:0f:bd:64:91:17:e3:e6:e8:12:54:55:7f:61:b8:bd:dd:7c: cd:bf:ca:a0:8b:fb:ce:52:15:9c:6e:5e:71:fd:f0:a7:72:06: 5b:c7:96:7d:6e:ac:28:e2:09:b4:30:6f:c0:f7:38:c1:46:64: 5f:26:4d:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui4F9eWKXo0FRCiOIo9IPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz YTA1N2EwHhcNMjUxMjE3MjMwMDUzWhcNMjUxMjE4MjMwMDUzWjAzMTEwLwYDVQQD Eyg3MzFlNjVhNmYyMjliYTVhZDFjZTg5OTllOWI2ZjFjN2ExYTNjMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvaXhTnR76nFbFNUBT6FEK25qER5 G3SUc/xEvBU5D46hKn70Q5M1e22xZd5akmbz51G1u1K+2+pAcDexpSwmwPz4YiZc zRQItdevjC1BxjieNh0uhUN9abxz3UmlZeEI680ZHw9QHwYNAoJ2Gfi5Q0F5YLGo ze0L08rhVl+hv3Vo0gVoVAGxcQamFeHqAUl4JvWnwlF1x5esgt8c3RGYTU7XilPF 0RgHgrUgZPc3LyYWBJELcNXKqpiT0g+bWclDSUmX6drN3Rn20g+ja/1F0YTmZ8hA T6hn4Nbtv7szZo3Kd3KbJ6l3ens06RZF33AMQyHAfI6lgIezXkbQzh/P7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMeZabyKbpa0c6Jmem28ceho8IZMB8GA1UdIwQY MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt NDAxMGEzNmQ5Y2RkLzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3vMXMvh MVDVuBRaKvc902jSIx21Z9sK9p+Nfh6F1ajhBhq8dxhynKq1shvmAvFf2EqjyXdr 5PBFkT2UueYgS3kXTnhR39M1KMqJ/Zo9sJZhC0lOf/sp6t0iW7Yn0pnXSU5+buiQ VyJorYoGWzKkgz8Kt/fnYXT+RjZXCkuAVjX7Ye80V3QXtbQJVUKp0lAo7siAFfSy RQNwVGvyn1NoJH6GnIa/rJva3MNI226fmwRCumklZ0qyI0vpYzHSYafo5ZV16JBl oQ+9ZJEX4+boElRVf2G4vd18zb/KoIv7zlIVnG5ecf3wp3IGW8eWfW6sKOIJtDBv wPc4wUZkXyZNtA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:45:53 2025 by rpki-client