This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json) Hash identifier: jpsDl/Z+iFzGya8ngth14qgzvSMkqPjOHZMXvUPtDns= Subject key identifier: EE:4C:FB:4B:E8:C7:46:37:C5:00:79:D4:B0:E5:5C:BC:06:D0:05:AA Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Certificate serial: 019AF209771E04C649438DCCF530ADC765AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft Manifest number: 0B3F Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: Q2IqxedeslQMbHM/2+IPi8IKAU58yXtS61OEnxyn6vY=) 2: _1qhZEmD1ZR0wevnSQ5eeTD9plU.roa (hash: ZVkFLKtKLY5Jyd68UAmKFP29SRBsL9mEyi4TVzPBvdA=) 3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:77:1e:04:c6:49:43:8d:cc:f5:30:ad:c7:65:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=ee4cfb4be8c74637c50079d4b0e55cbc06d005aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9d:48:a3:1e:a8:f3:4e:1f:fc:20:7e:8a:b2: a1:ba:b7:96:f4:20:c0:16:39:19:b8:ea:9f:78:c2: 45:29:16:49:20:6f:b5:43:14:36:27:55:5c:b7:18: ac:df:95:df:95:da:5c:73:de:ae:bf:4a:b0:82:1c: 5e:c3:6c:68:8a:81:ab:f3:4e:10:3a:a3:f5:09:2e: 16:7f:7c:2c:02:25:1b:5a:01:1e:d4:22:8d:de:9e: d0:5e:34:91:98:bf:e7:6d:99:98:47:fd:63:83:d9: 8a:bb:a3:ce:e1:1a:0e:ae:ae:ce:87:83:19:6e:8c: bf:44:05:c2:b8:63:c9:20:c9:49:d0:2f:b8:bb:70: da:a8:11:9e:c4:1d:26:eb:47:04:7a:cb:f0:e2:45: cc:5e:52:63:b4:5b:18:ad:90:ed:db:92:6b:6e:1d: bc:a1:27:2c:95:31:05:88:56:ca:e5:67:3b:03:37: ce:44:89:71:6b:86:b0:76:ee:74:65:87:0f:da:db: 62:c3:bc:13:9e:f8:5f:2c:df:f0:4d:79:83:13:86: 49:a6:02:c3:0b:25:d4:fa:87:cd:34:9b:41:f8:37: e9:a6:bd:76:4e:4b:f7:6f:9f:eb:9e:61:1a:b1:b6: 21:75:f1:1e:8f:4f:07:47:a2:8a:dd:f0:24:64:ca: a3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:FB:4B:E8:C7:46:37:C5:00:79:D4:B0:E5:5C:BC:06:D0:05:AA X509v3 Authority Key Identifier: keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c6:5e:09:79:87:57:96:91:27:e8:95:73:b5:52:99:ff:b4: 39:b3:43:fb:5f:fc:48:e0:6f:f0:cd:f2:d4:fa:ca:f6:e2:fa: 07:d0:75:37:2f:8b:21:37:e2:dc:70:ac:d0:ba:3e:f0:4b:78: 29:88:e3:5f:a3:76:ab:4a:9c:08:4b:51:13:d4:3d:45:13:e4: b7:57:9a:7e:07:bc:47:6d:a7:6f:16:4a:f0:7a:8e:59:91:6a: 36:bb:0e:9d:51:bb:cc:e0:55:9c:56:c7:f2:86:ae:9b:44:3d: b0:0b:19:32:73:d0:e0:8b:f3:39:12:3b:07:f1:c2:ee:43:b8: 53:a0:7d:81:ad:ac:50:02:bd:6e:56:e7:0f:9d:a2:c8:8c:b3: d0:17:96:67:dc:01:5b:7c:24:53:02:e7:c5:f1:6d:76:50:9a: 1b:7f:bb:81:2f:9d:4b:8a:88:d0:f5:b9:d0:dd:9b:47:08:74: ab:fe:0a:ac:b8:9f:f0:d2:07:71:9e:41:b3:83:59:a8:5b:b8: d8:60:94:c5:eb:36:d2:63:ba:ad:40:f7:2a:9b:42:f4:9b:6a: 19:ec:07:0a:50:09:51:6e:34:d2:7d:9a:af:ea:2b:fe:e6:47: 1b:cc:22:6d:7f:b0:9f:2f:a6:4f:e2:82:dd:3b:33:9a:ce:24: eb:54:cf:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXceBMZJQ43M9TCtx2WuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDYxNDJjZTMyOTBhYjY3ODZkM2QzMGYyNmI1ZTQxZmQ2 ODRkZGUwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EyhlZTRjZmI0YmU4Yzc0NjM3YzUwMDc5ZDRiMGU1NWNiYzA2ZDAwNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J1Iox6o804f/CB+irKhureW9CDA FjkZuOqfeMJFKRZJIG+1QxQ2J1Vctxis35Xfldpcc96uv0qwghxew2xoioGr804Q OqP1CS4Wf3wsAiUbWgEe1CKN3p7QXjSRmL/nbZmYR/1jg9mKu6PO4RoOrq7Oh4MZ boy/RAXCuGPJIMlJ0C+4u3DaqBGexB0m60cEesvw4kXMXlJjtFsYrZDt25Jrbh28 oScslTEFiFbK5Wc7AzfORIlxa4awdu50ZYcP2ttiw7wTnvhfLN/wTXmDE4ZJpgLD CyXU+ofNNJtB+Dfppr12Tkv3b5/rnmEasbYhdfEej08HR6KK3fAkZMqj3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5M+0vox0Y3xQB51LDlXLwG0AWqMB8GA1UdIwQY MBaAFDZGFCzjKQq2eG09MPJrXkH9aE3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTct ZDMwODU0MmExZDg2LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTctZDMwODU0MmExZDg2 LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcZeCXmH V5aRJ+iVc7VSmf+0ObND+1/8SOBv8M3y1PrK9uL6B9B1Ny+LITfi3HCs0Lo+8Et4 KYjjX6N2q0qcCEtRE9Q9RRPkt1eafge8R22nbxZK8HqOWZFqNrsOnVG7zOBVnFbH 8oaum0Q9sAsZMnPQ4IvzORI7B/HC7kO4U6B9ga2sUAK9blbnD52iyIyz0BeWZ9wB W3wkUwLnxfFtdlCaG3+7gS+dS4qI0PW50N2bRwh0q/4KrLif8NIHcZ5Bs4NZqFu4 2GCUxes20mO6rUD3KptC9JtqGewHClAJUW400n2ar+or/uZHG8wibX+wny+mT+KC 3Tszms4k61TPEg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:57 2025 by rpki-client