This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json) Hash identifier: emBdcOqQS2oQZEUOjPQiScGhoSwnd56mHVVE5uPhAeo= Subject key identifier: CF:97:56:56:C5:F7:55:69:25:4F:DC:52:A3:20:E8:54:92:6D:65:48 Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a Certificate serial: 019AF208A2597C9463A05DD2844447361D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft Manifest number: 0218 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=) 2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=) 3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: n6Gm+N5a0YyHpp8yq6RhCzlZ7dSKt+fvoI9wAtD0BTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a2:59:7c:94:63:a0:5d:d2:84:44:47:36:1d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=cf975656c5f75569254fdc52a320e854926d6548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:cc:5c:94:39:be:81:ce:59:21:22:0f:66: 1f:b7:69:ba:45:52:9a:3a:8e:89:db:0b:68:d3:07: 24:77:d2:c4:03:ec:13:9b:55:a8:86:e6:16:be:12: 40:c6:b3:f0:65:c3:b2:4d:a1:a1:ca:d4:63:26:44: 75:c3:c3:cb:18:ef:2b:c0:64:96:81:64:01:85:6f: 04:b3:cc:c2:b2:f6:e5:e9:bc:4f:76:c9:21:e7:65: 4f:6b:94:c2:55:aa:76:3b:ef:e2:3c:12:ec:b7:de: 85:d2:2c:1a:b6:92:cc:07:b8:35:46:10:b8:37:33: 52:51:75:66:e6:d3:07:e7:32:7d:e5:10:bf:7a:ae: 31:33:51:5b:6e:c7:e1:38:8f:8d:78:83:d8:e3:ff: 3d:28:d6:d1:db:87:e6:1d:6f:26:bf:1f:38:47:af: 63:a6:69:b5:92:f7:81:e2:78:5a:4e:47:44:f2:94: ee:71:79:2a:4a:94:eb:95:4f:96:84:c4:38:af:ed: ed:41:ec:7d:72:52:75:af:8a:7f:5f:1f:15:ab:4d: e3:61:52:cb:08:25:d2:1d:d4:d9:13:ac:6d:1c:22: d3:a9:24:7f:21:63:7c:d5:14:f8:89:fe:81:2c:2f: 89:fc:fb:20:d1:37:2c:d2:6b:40:b3:6c:ad:ad:13: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:56:56:C5:F7:55:69:25:4F:DC:52:A3:20:E8:54:92:6D:65:48 X509v3 Authority Key Identifier: keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3a:23:34:65:18:8a:08:f8:4f:44:98:34:28:91:f1:bf:38: 69:8d:31:e1:63:ea:73:82:c2:0b:eb:4c:8c:da:08:c1:bb:4a: 7b:60:f0:38:7e:4c:9b:c7:13:69:b1:8f:72:d4:be:3a:d0:78: c9:c0:bb:e7:57:84:7d:3c:ef:ab:d3:a1:d9:dc:3a:eb:63:6a: da:16:2d:97:ef:a9:9e:6d:0b:3c:9d:ae:7d:ec:a2:48:2d:2a: fc:80:ba:48:a3:ec:47:22:e8:29:9a:24:8f:e8:fe:0b:20:ce: 10:2d:43:c9:cd:cb:66:6f:27:7d:3d:51:15:50:e8:71:4f:e4: 22:a7:80:32:41:a3:b0:d4:27:51:e2:d3:4a:22:d9:02:b8:c7: b4:25:d2:d2:da:8d:3c:22:ea:28:d9:05:82:1c:31:4b:6f:f7: 7d:ba:90:18:d6:42:fb:07:29:df:bf:e8:5e:48:ed:d4:dc:73: d5:90:10:a6:45:3f:5b:55:ad:6d:e4:5c:b6:39:8e:99:24:50: 72:d1:57:d3:56:71:54:2a:0c:28:fd:2c:de:8e:68:cb:fe:03: 46:78:56:65:62:c3:d8:57:c8:29:08:52:ef:ba:97:92:db:4e: 5b:36:c2:09:2b:5a:30:0c:f8:c6:5f:a7:21:b0:db:ca:3f:52: d9:b8:e1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKJZfJRjoF3ShERHNh03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNmZmY2I1YjVlMmRlNDU1MWFjZjliNDVhZjI0MmRiOTQ1 ODRlNWEwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EyhjZjk3NTY1NmM1Zjc1NTY5MjU0ZmRjNTJhMzIwZTg1NDkyNmQ2NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI3MXJQ5voHOWSEiD2Yft2m6RVKa Oo6J2wto0wckd9LEA+wTm1WohuYWvhJAxrPwZcOyTaGhytRjJkR1w8PLGO8rwGSW gWQBhW8Es8zCsvbl6bxPdskh52VPa5TCVap2O+/iPBLst96F0iwatpLMB7g1RhC4 NzNSUXVm5tMH5zJ95RC/eq4xM1FbbsfhOI+NeIPY4/89KNbR24fmHW8mvx84R69j pmm1kveB4nhaTkdE8pTucXkqSpTrlU+WhMQ4r+3tQex9clJ1r4p/Xx8Vq03jYVLL CCXSHdTZE6xtHCLTqSR/IWN81RT4if6BLC+J/Psg0Tcs0mtAs2ytrRNzJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+XVlbF91VpJU/cUqMg6FSSbWVIMB8GA1UdIwQY MBaAFJxv/LW14t5FUaz5tFryQtuUWE5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2Et ZjJmMDk1NWRhMWFkLzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2EtZjJmMDk1NWRhMWFk LzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjojNGUY igj4T0SYNCiR8b84aY0x4WPqc4LCC+tMjNoIwbtKe2DwOH5Mm8cTabGPctS+OtB4 ycC751eEfTzvq9Oh2dw662Nq2hYtl++pnm0LPJ2ufeyiSC0q/IC6SKPsRyLoKZok j+j+CyDOEC1Dyc3LZm8nfT1RFVDocU/kIqeAMkGjsNQnUeLTSiLZArjHtCXS0tqN PCLqKNkFghwxS2/3fbqQGNZC+wcp37/oXkjt1Nxz1ZAQpkU/W1WtbeRctjmOmSRQ ctFX01ZxVCoMKP0s3o5oy/4DRnhWZWLD2FfIKQhS77qXkttOWzbCCStaMAz4xl+n IbDbyj9S2bjhuA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:51 2025 by rpki-client