This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json) Hash identifier: 8+qNpYJ1arIL3kmQkoYNpMIHNhKxNTO6mB17mPbbJ+8= Subject key identifier: 8A:E1:1D:45:A7:87:53:D1:ED:9C:DB:93:E2:D2:26:7B:AC:E1:C6:D1 Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4 Certificate serial: 019AF49C5F163A20A8A79B2D3234412A4014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft Manifest number: 1653 Signing time: Sat 06 Dec 2025 17:01:19 +0000 Manifest this update: Sat 06 Dec 2025 17:01:19 +0000 Manifest next update: Sun 07 Dec 2025 17:01:19 +0000 Files and hashes: 1: KpbjIIUZw0-XxCl1KqQDZ_EUKkY.roa (hash: KJWoFU4L0w8L8ZUG5csCrTHWK3udD7xALiAnkocVeD0=) 2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: PEujs+9tnSZmX3+ZU9G7MAqfehKhv668QeAzv7e5lGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5f:16:3a:20:a8:a7:9b:2d:32:34:41:2a:40:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4 Validity Not Before: Dec 6 17:01:19 2025 GMT Not After : Dec 7 17:01:19 2025 GMT Subject: CN=8ae11d45a78753d1ed9cdb93e2d2267bace1c6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:59:19:bf:3d:ca:d8:a2:62:d1:78:aa:ef:6b: 45:c4:a0:0a:d0:90:81:1d:ba:bf:9c:5c:d5:49:41: 05:b2:c3:e5:0d:95:cc:3e:1c:0b:90:57:eb:62:10: 92:7f:25:c1:6a:39:a0:6b:81:dd:09:61:da:7d:ad: 68:de:61:b2:47:0b:57:b2:00:68:d0:8b:fb:b0:15: 42:20:1e:7b:73:31:45:78:4f:3a:1d:de:72:61:4f: 78:d2:0b:58:41:f5:2c:ab:24:54:19:87:cc:03:34: 85:fa:a2:d1:56:52:df:31:d8:52:ec:af:71:b9:a3: b9:e3:ad:b0:a9:75:2a:8f:f2:2f:75:15:34:8e:2c: 2b:e4:b5:84:dd:1b:b7:ca:d9:24:70:95:02:9a:74: bc:f0:43:b9:b7:17:e7:4f:89:8f:d4:1f:fc:3d:76: c8:d9:76:bf:4f:c8:a0:28:37:c6:0b:a0:fa:e0:05: 76:20:09:11:8f:19:03:cf:9d:c4:11:6c:63:60:ce: 0f:41:c1:67:96:99:4a:5b:d4:4c:e3:e9:07:f3:33: 89:05:79:cd:4b:52:b0:f6:c9:b6:65:93:c7:a2:45: 97:db:2e:12:f0:38:46:ba:84:11:27:cf:cf:04:2c: ef:04:56:7e:55:89:e0:ad:2c:50:1b:e0:1a:cd:88: 11:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:1D:45:A7:87:53:D1:ED:9C:DB:93:E2:D2:26:7B:AC:E1:C6:D1 X509v3 Authority Key Identifier: keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a8:e8:2c:78:f8:37:f8:ff:1e:fa:b7:1b:19:17:c7:54:2f: be:c0:4c:65:d7:ce:08:d6:91:a2:27:0d:f7:44:08:d0:30:7d: 38:01:57:33:2c:85:b7:ad:aa:70:00:41:7a:fc:c9:1d:13:70: 36:da:17:c2:b6:39:3d:1c:34:26:bd:d5:a6:17:03:79:df:56: 39:7d:9b:d3:53:f2:ce:f2:b3:47:f0:dc:9f:5c:a1:65:36:2e: cd:fc:40:09:5f:4c:d5:01:93:36:09:b1:99:62:a3:b3:57:a1: 11:46:f9:4d:ae:32:03:5a:05:86:c6:c8:ed:f5:9c:b0:7e:8c: 8d:c9:0a:2d:f7:ac:d4:33:1c:d0:64:18:36:c6:96:bc:1c:25: a1:b2:a5:81:83:1a:4e:1a:03:b4:4e:9c:0d:e8:56:11:f4:c8: 27:f7:05:42:fe:3b:a2:7d:a3:03:b3:ed:95:87:27:d1:50:ca: f4:4a:a0:27:c4:56:3c:d2:a2:ee:79:1b:5e:86:a5:f8:2c:e4: 26:43:07:4b:fd:9e:68:89:3c:0f:97:4f:32:d2:b7:57:35:96: c5:01:eb:95:9a:ca:7b:ec:8e:3f:82:15:04:26:2d:46:b0:7c: da:62:cb:5f:30:4f:2e:fd:d8:56:c3:88:ca:55:16:4b:71:cc: e8:3f:65:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nF8WOiCop5stMjRBKkAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGFkYTM1Mjk4MmEzMTliNTRkNWU0ODNkMzQ0MjYzNDY3 MzNlYTQwHhcNMjUxMjA2MTcwMTE5WhcNMjUxMjA3MTcwMTE5WjAzMTEwLwYDVQQD Eyg4YWUxMWQ0NWE3ODc1M2QxZWQ5Y2RiOTNlMmQyMjY3YmFjZTFjNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VkZvz3K2KJi0Xiq72tFxKAK0JCB Hbq/nFzVSUEFssPlDZXMPhwLkFfrYhCSfyXBajmga4HdCWHafa1o3mGyRwtXsgBo 0Iv7sBVCIB57czFFeE86Hd5yYU940gtYQfUsqyRUGYfMAzSF+qLRVlLfMdhS7K9x uaO5462wqXUqj/IvdRU0jiwr5LWE3Ru3ytkkcJUCmnS88EO5txfnT4mP1B/8PXbI 2Xa/T8igKDfGC6D64AV2IAkRjxkDz53EEWxjYM4PQcFnlplKW9RM4+kH8zOJBXnN S1Kw9sm2ZZPHokWX2y4S8DhGuoQRJ8/PBCzvBFZ+VYngrSxQG+AazYgRmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrhHUWnh1PR7Zzbk+LSJnus4cbRMB8GA1UdIwQY MBaAFJ2K2jUpgqMZtU1eSD00QmNGcz6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQt ZWQ0YTEzOGM0MTEzLzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQtZWQ0YTEzOGM0MTEz LzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKjoLHj4 N/j/Hvq3GxkXx1QvvsBMZdfOCNaRoicN90QI0DB9OAFXMyyFt62qcABBevzJHRNw NtoXwrY5PRw0Jr3VphcDed9WOX2b01PyzvKzR/Dcn1yhZTYuzfxACV9M1QGTNgmx mWKjs1ehEUb5Ta4yA1oFhsbI7fWcsH6MjckKLfes1DMc0GQYNsaWvBwlobKlgYMa ThoDtE6cDehWEfTIJ/cFQv47on2jA7PtlYcn0VDK9EqgJ8RWPNKi7nkbXoal+Czk JkMHS/2eaIk8D5dPMtK3VzWWxQHrlZrKe+yOP4IVBCYtRrB82mLLXzBPLv3YVsOI ylUWS3HM6D9l8g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:30 2025 by rpki-client