This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json) Hash identifier: LeTM38GmD/vY9OnoICqj7AKSo4XuZnBbxpZ2yBAAcwA= Subject key identifier: 4C:D6:AC:82:25:86:E6:E5:9B:E0:CB:A0:F4:C5:B1:73:6F:99:F7:27 Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f Certificate serial: 019AF23F715610508D2D0B840605BB0F0305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft Manifest number: 0D73 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=) 2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: RFGg1vumkMj7bbqpyZ03OV1OW3ujvxlHEAveRS59Ihc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:71:56:10:50:8d:2d:0b:84:06:05:bb:0f:03:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=4cd6ac822586e6e59be0cba0f4c5b1736f99f727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:0f:0f:24:b3:2f:c2:47:dc:33:71:59:de: c8:20:20:05:57:39:3b:e4:17:c9:84:e7:64:cd:b1: c4:31:ca:49:bb:3c:f6:df:1e:90:da:67:74:32:28: f7:c5:ba:2c:ec:7f:53:20:99:a6:eb:2f:d7:19:da: cb:95:5f:8d:bb:09:be:8c:0b:a7:ae:d7:d8:22:94: 8a:37:90:d8:4f:93:c6:41:86:de:10:b0:65:f8:53: 24:39:c1:76:a5:61:b6:06:26:66:32:2d:f3:3b:5a: c3:24:d1:d6:19:6f:fc:c2:b4:f7:c7:4f:a2:84:31: 52:de:a8:1b:1b:10:a3:67:a0:1e:52:5e:86:19:24: 00:0f:54:c7:44:e9:dd:2e:f7:60:be:78:13:e9:21: 1c:8c:2b:e7:c2:35:51:2e:6e:50:9a:ad:07:44:30: 38:3a:24:e2:02:de:ef:1c:0c:ed:e0:2c:0b:51:e4: 58:0c:4b:84:83:be:ac:5f:dc:ce:b5:c5:ea:9d:a4: a2:8e:14:38:81:03:67:55:26:a2:e9:ed:ac:77:a4: db:ff:a3:0f:bb:a3:ca:38:e0:ea:cb:90:1e:49:6a: 56:7a:f7:a4:2b:fe:57:46:c5:6d:2a:1a:8f:61:6e: 06:99:1d:d3:2c:10:c2:b9:c8:f0:c9:0e:fe:66:6a: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D6:AC:82:25:86:E6:E5:9B:E0:CB:A0:F4:C5:B1:73:6F:99:F7:27 X509v3 Authority Key Identifier: keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:23:37:25:e5:db:6a:65:bf:1a:9d:e6:53:65:08:72:74:ae: e2:d6:2d:a3:6c:c6:3e:de:00:3f:5e:36:41:67:30:af:72:98: 84:f2:3d:e2:98:f0:5d:7d:d8:1f:de:bd:56:35:7e:9a:ae:e3: a6:7c:94:0e:74:1b:11:db:49:7e:5a:6d:94:fb:c4:fb:f3:83: 7c:0f:5f:c3:a5:5f:f3:d3:b2:0d:9a:72:a9:91:38:be:44:5b: 60:26:d6:a0:28:06:a1:0a:d4:20:a6:00:cd:e3:27:8f:47:fd: 5b:bd:fc:13:e9:03:48:39:2d:fa:ce:11:99:e7:52:44:e8:52: ad:bc:64:bc:f5:4e:1e:10:c0:dd:17:d0:41:62:be:fd:44:9c: 7b:d8:62:d9:de:e6:ae:a0:5f:b8:4b:df:86:f0:b2:7c:8c:59: 8f:53:2b:20:22:15:a4:cd:bc:e6:7f:44:47:ff:7e:03:90:cb: 20:e6:84:16:ab:c5:fe:71:83:49:8e:08:ad:5a:d8:b5:3d:94: 30:7a:d2:66:ad:33:7c:93:b2:27:44:8d:4c:6f:1a:35:22:fb: 8c:d4:66:3b:7d:d6:2d:3f:00:e7:71:57:55:91:c1:83:08:99: a7:29:a4:c8:56:0a:e7:d3:cf:da:c8:c6:a9:9d:7c:16:94:05: c2:f7:75:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3FWEFCNLQuEBgW7DwMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm YzNjMGYwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD Eyg0Y2Q2YWM4MjI1ODZlNmU1OWJlMGNiYTBmNGM1YjE3MzZmOTlmNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujIPDySzL8JH3DNxWd7IICAFVzk7 5BfJhOdkzbHEMcpJuzz23x6Q2md0Mij3xbos7H9TIJmm6y/XGdrLlV+Nuwm+jAun rtfYIpSKN5DYT5PGQYbeELBl+FMkOcF2pWG2BiZmMi3zO1rDJNHWGW/8wrT3x0+i hDFS3qgbGxCjZ6AeUl6GGSQAD1THROndLvdgvngT6SEcjCvnwjVRLm5Qmq0HRDA4 OiTiAt7vHAzt4CwLUeRYDEuEg76sX9zOtcXqnaSijhQ4gQNnVSai6e2sd6Tb/6MP u6PKOODqy5AeSWpWevekK/5XRsVtKhqPYW4GmR3TLBDCucjwyQ7+ZmryMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzWrIIlhublm+DLoPTFsXNvmfcnMB8GA1UdIwQY MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct ZDU2Mzc0ZTExNTdhLzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyM3JeXb amW/Gp3mU2UIcnSu4tYto2zGPt4AP142QWcwr3KYhPI94pjwXX3YH969VjV+mq7j pnyUDnQbEdtJflptlPvE+/ODfA9fw6Vf89OyDZpyqZE4vkRbYCbWoCgGoQrUIKYA zeMnj0f9W738E+kDSDkt+s4RmedSROhSrbxkvPVOHhDA3RfQQWK+/USce9hi2d7m rqBfuEvfhvCyfIxZj1MrICIVpM285n9ER/9+A5DLIOaEFqvF/nGDSY4IrVrYtT2U MHrSZq0zfJOyJ0SNTG8aNSL7jNRmO33WLT8A53FXVZHBgwiZpymkyFYK59PP2sjG qZ18FpQFwvd1mw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:03 2025 by rpki-client