This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json) Hash identifier: aM3AwP1DAgVGSQjKc0L+5KVFxzP4xsDRUzXUoYshFM4= Subject key identifier: F3:C7:A6:E1:93:AA:34:F9:9B:1E:0A:9A:A4:29:DE:D6:81:4E:F1:80 Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Certificate serial: 019AF208BC32B451130440CC6D3A5EE9EEB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft Manifest number: 1098 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=) 2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: IgXM0Wrfmv3npg3Dk8vPDN09Z0OtNnKVcq7ywBG4fTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bc:32:b4:51:13:04:40:cc:6d:3a:5e:e9:ee:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=f3c7a6e193aa34f99b1e0a9aa429ded6814ef180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:6c:57:56:97:ea:de:29:77:87:0e:36:26: b5:a0:25:9b:00:d2:19:d1:af:9a:aa:fb:fe:3f:eb: 21:a7:06:3f:6c:83:6e:37:83:3c:d0:b4:eb:d9:c9: 63:64:e1:88:a5:1d:e5:97:22:bb:d9:1a:5a:c7:bf: 6f:e3:d9:e3:ef:5e:74:88:1f:14:c1:9b:93:15:dd: ea:2a:b3:22:02:7c:0a:c8:63:4b:47:cd:a7:8b:3a: 94:6e:05:64:59:e9:f2:84:e3:ad:42:4c:04:05:35: 4d:46:49:ff:b6:e2:24:41:0a:40:4d:c3:68:c4:81: ff:21:eb:f3:e4:d4:22:e2:6f:cf:1e:5b:2b:d7:92: 5e:5a:95:3c:1c:2f:7d:02:1e:f4:62:d2:ac:cb:51: 1d:4e:b5:03:e8:d7:3f:f3:56:f4:e9:03:8e:0e:ae: ad:e8:8a:97:91:d2:64:f5:ee:01:35:33:2f:d7:9a: 11:ed:0b:30:5e:01:ba:24:dd:2e:f3:52:ce:2b:48: 27:b9:bc:b7:98:e6:63:5b:8a:61:3c:a8:6b:58:49: 7d:38:80:c8:4b:fe:7a:1d:0d:e8:4b:74:a9:db:50: be:25:a8:75:2a:01:18:39:bd:b5:7c:0d:14:df:9f: c6:51:2a:2e:0a:72:e4:30:86:c9:93:1d:ec:b1:1f: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:A6:E1:93:AA:34:F9:9B:1E:0A:9A:A4:29:DE:D6:81:4E:F1:80 X509v3 Authority Key Identifier: keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f7:b9:f6:30:31:5f:91:64:58:59:ec:68:03:6d:50:22:06: 4e:28:c2:b5:5c:68:88:98:ae:68:4c:9b:50:44:d4:96:09:9b: 35:86:8d:4b:ab:b3:fa:e4:3a:41:70:fb:dc:4c:8c:35:8d:e4: 56:6b:26:26:ba:de:49:65:ee:5e:46:84:19:a4:68:c3:1c:12: 7a:d4:3f:56:46:2d:48:4c:16:d5:f5:b7:45:85:3d:86:87:c0: 9a:3b:11:7c:b8:13:bd:7c:d8:46:05:2e:0b:a8:35:72:ec:db: 3c:0a:89:ce:da:18:19:12:6d:b0:dd:b5:bb:34:fa:aa:b5:e2: b6:0f:4b:c0:37:05:da:26:85:7a:6f:79:50:57:70:db:8f:a9: b2:a7:06:e0:23:c1:dd:a2:bd:3f:cd:ff:d6:5d:61:70:1c:88: a8:bd:51:c7:19:63:30:45:bd:20:dc:b7:03:fd:be:7d:61:e3: 3a:3f:0d:dc:42:66:30:67:0c:33:f6:2f:ad:c8:63:2b:b5:61: ef:87:7c:29:ae:8d:22:75:95:e4:43:57:9d:9e:5c:08:57:27: 5a:7a:75:4b:25:a4:09:da:8a:83:ee:ac:4d:87:bc:ce:54:fb: 19:57:b7:3b:bf:c9:9f:04:4a:30:73:ed:68:58:a7:68:91:23: 19:7e:b0:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLwytFETBEDMbTpe6e6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy OTJmZDkwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EyhmM2M3YTZlMTkzYWEzNGY5OWIxZTBhOWFhNDI5ZGVkNjgxNGVmMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTJsV1aX6t4pd4cONia1oCWbANIZ 0a+aqvv+P+shpwY/bINuN4M80LTr2cljZOGIpR3llyK72Rpax79v49nj7150iB8U wZuTFd3qKrMiAnwKyGNLR82nizqUbgVkWenyhOOtQkwEBTVNRkn/tuIkQQpATcNo xIH/Ievz5NQi4m/PHlsr15JeWpU8HC99Ah70YtKsy1EdTrUD6Nc/81b06QOODq6t 6IqXkdJk9e4BNTMv15oR7QswXgG6JN0u81LOK0gnuby3mOZjW4phPKhrWEl9OIDI S/56HQ3oS3Sp21C+Jah1KgEYOb21fA0U35/GUSouCnLkMIbJkx3ssR8uawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPHpuGTqjT5mx4KmqQp3taBTvGAMB8GA1UdIwQY MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcve59jAx X5FkWFnsaANtUCIGTijCtVxoiJiuaEybUETUlgmbNYaNS6uz+uQ6QXD73EyMNY3k VmsmJrreSWXuXkaEGaRowxwSetQ/VkYtSEwW1fW3RYU9hofAmjsRfLgTvXzYRgUu C6g1cuzbPAqJztoYGRJtsN21uzT6qrXitg9LwDcF2iaFem95UFdw24+psqcG4CPB 3aK9P83/1l1hcByIqL1RxxljMEW9INy3A/2+fWHjOj8N3EJmMGcMM/YvrchjK7Vh 74d8Ka6NInWV5ENXnZ5cCFcnWnp1SyWkCdqKg+6sTYe8zlT7GVe3O7/JnwRKMHPt aFinaJEjGX6w4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:40 2025 by rpki-client