This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json) Hash identifier: +8JbmLBbGT3xz6vkdI/Pml4KryZt7qIHfVCy3u3f9Nk= Subject key identifier: 6D:3A:C1:85:D6:CC:A4:76:CD:60:5F:BD:AD:68:83:0F:FB:0F:7D:40 Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991 Certificate serial: 019AF31C517DD858FE36F4CB07F03AF1BAEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft Manifest number: 12E8 Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: 0FVNgMUqees88Xq9vSg00OH8LDVOeL5N5S/rvUI48tc=) 2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:51:7d:d8:58:fe:36:f4:cb:07:f0:3a:f1:ba:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991 Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=6d3ac185d6cca476cd605fbdad68830ffb0f7d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:dd:a1:0a:57:d1:d6:3f:5b:ab:7a:13:09: 59:67:4a:aa:6f:12:f7:85:0e:74:2d:f7:15:8c:18: 6b:4e:20:df:77:57:9a:9c:46:fd:80:f1:0d:6e:95: 28:36:aa:ae:dc:74:89:32:aa:4f:dd:99:f9:42:27: 26:00:16:c6:48:b3:32:e5:ed:cb:04:97:db:82:e0: 39:2f:0c:60:51:a2:d2:07:c8:e2:6f:bf:ea:dc:a2: 88:3e:e4:46:cf:6f:58:80:57:7e:e8:45:f7:32:fa: b3:90:7a:8d:c9:d5:f3:63:34:c9:35:21:b1:ef:3f: 66:43:b4:b1:59:d9:b6:4e:a8:ce:81:1f:97:89:7f: c9:57:7b:8a:f7:3c:9c:d5:75:c4:a8:2d:1a:8b:d1: f2:74:d6:a6:b8:83:e7:a8:16:4e:bf:b7:0a:54:c7: 60:20:24:21:5e:f5:12:65:02:f3:6d:e7:02:cb:40: 32:86:28:d3:e2:8e:69:3b:c0:55:e4:2a:b0:d3:cd: 42:c3:57:e8:e3:a1:f3:d1:63:3c:52:eb:28:58:57: ad:3c:6d:fe:e7:09:7f:21:57:e6:3c:20:4d:f2:37: 15:aa:9a:cd:b9:fa:c5:4d:3d:29:b8:2a:03:67:86: 7e:c0:24:4d:29:d2:48:c4:02:db:3e:a7:8a:de:ab: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3A:C1:85:D6:CC:A4:76:CD:60:5F:BD:AD:68:83:0F:FB:0F:7D:40 X509v3 Authority Key Identifier: keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:df:c3:d2:4b:f8:16:e2:e8:14:1c:95:58:66:27:fb:ba:4e: a7:ee:14:76:56:30:59:8d:72:a6:41:09:59:e4:12:9b:85:12: 85:43:01:29:56:67:70:cd:e0:22:3f:68:d4:e4:2b:a6:c7:74: a6:d4:90:59:f2:f7:e7:0a:1c:1e:21:59:1f:ac:05:4c:ae:fd: 76:02:27:d4:a2:e0:d7:6f:f6:e1:cb:61:0a:af:54:4e:b7:4f: 80:12:6e:a6:05:fd:03:47:10:3f:84:c4:9a:0c:a0:24:6e:81: ff:c0:1b:e0:3b:34:17:95:42:a7:7d:12:26:a6:1a:0f:0a:37: 91:8e:b2:45:41:fd:5b:e2:8c:f5:05:bb:db:99:3e:2e:10:e4: b9:62:6a:b2:a8:63:5a:15:37:13:73:97:07:95:62:56:58:51: 95:9f:8a:63:4c:8d:b8:a8:f9:bc:67:4d:13:dd:46:2e:56:9a: 67:14:59:94:ef:46:41:eb:8a:c6:0c:c7:66:32:bd:37:c8:40: fa:5f:75:83:36:7b:27:75:ab:04:93:54:f2:b1:f0:b1:63:37: 0b:86:03:b0:0d:86:03:f2:b2:21:32:cd:cf:f3:cc:d8:10:03: c7:da:fe:18:a3:71:0a:80:67:7a:fe:c7:ad:5e:de:3f:fa:88: 34:5f:e0:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFF92Fj+NvTLB/A68bruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYTkwZTdkYWYxNWMxN2MxYjlhYmM1NzIxNTdiYzdkOTE3 YjM5OTEwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD Eyg2ZDNhYzE4NWQ2Y2NhNDc2Y2Q2MDVmYmRhZDY4ODMwZmZiMGY3ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nbdoQpX0dY/W6t6EwlZZ0qqbxL3 hQ50LfcVjBhrTiDfd1eanEb9gPENbpUoNqqu3HSJMqpP3Zn5QicmABbGSLMy5e3L BJfbguA5LwxgUaLSB8jib7/q3KKIPuRGz29YgFd+6EX3MvqzkHqNydXzYzTJNSGx 7z9mQ7SxWdm2TqjOgR+XiX/JV3uK9zyc1XXEqC0ai9HydNamuIPnqBZOv7cKVMdg ICQhXvUSZQLzbecCy0AyhijT4o5pO8BV5Cqw081Cw1fo46Hz0WM8UusoWFetPG3+ 5wl/IVfmPCBN8jcVqprNufrFTT0puCoDZ4Z+wCRNKdJIxALbPqeK3qtqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG06wYXWzKR2zWBfva1ogw/7D31AMB8GA1UdIwQY MBaAFJypDn2vFcF8G5q8VyFXvH2RezmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2Ut NmU0NTlhNThlMWQ2LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2UtNmU0NTlhNThlMWQ2 LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiN/D0kv4 FuLoFByVWGYn+7pOp+4UdlYwWY1ypkEJWeQSm4UShUMBKVZncM3gIj9o1OQrpsd0 ptSQWfL35wocHiFZH6wFTK79dgIn1KLg12/24cthCq9UTrdPgBJupgX9A0cQP4TE mgygJG6B/8Ab4Ds0F5VCp30SJqYaDwo3kY6yRUH9W+KM9QW725k+LhDkuWJqsqhj WhU3E3OXB5ViVlhRlZ+KY0yNuKj5vGdNE91GLlaaZxRZlO9GQeuKxgzHZjK9N8hA +l91gzZ7J3WrBJNU8rHwsWM3C4YDsA2GA/KyITLNz/PM2BADx9r+GKNxCoBnev7H rV7eP/qINF/gBA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:23 2025 by rpki-client