This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json) Hash identifier: H1+Rvuz4ladntYuwLroO5O/4m7nr/Hs0a+glfQzzbQo= Subject key identifier: AB:E6:60:91:6C:BE:FC:7D:F3:EB:09:8E:1D:BA:25:31:D0:CB:D8:85 Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba Certificate serial: 019AF12D44CD1F00FD682D46219A4D17187C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft Manifest number: 0754 Signing time: Sat 06 Dec 2025 01:01:07 +0000 Manifest this update: Sat 06 Dec 2025 01:01:07 +0000 Manifest next update: Sun 07 Dec 2025 01:01:07 +0000 Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=) 2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: mpoPfpjA1iY6uCauuZIfZze0zcsaNX8L0M1bH8NXy8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:44:cd:1f:00:fd:68:2d:46:21:9a:4d:17:18:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba Validity Not Before: Dec 6 01:01:07 2025 GMT Not After : Dec 7 01:01:07 2025 GMT Subject: CN=abe660916cbefc7df3eb098e1dba2531d0cbd885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6c:59:39:8a:4a:61:7d:f3:97:7d:db:b6:32: 60:57:ed:c1:b8:f2:bf:b3:ec:80:86:c5:4a:8f:66: 5d:85:71:34:a8:26:e4:d3:55:27:fd:52:91:f4:17: 45:28:f6:d0:fc:76:d7:95:b0:19:b2:29:0f:51:90: f2:2e:2f:ee:5a:e9:cf:92:ae:ca:9d:7f:ea:5c:32: 7c:72:5d:3a:9f:84:a3:5a:52:52:d6:da:a3:10:54: 78:b6:43:93:94:10:e1:6b:0b:2c:4b:7e:5d:a6:ca: 23:bc:3b:87:7e:34:8e:97:ce:be:06:db:ba:a2:d3: c3:47:69:8a:68:22:2a:13:59:4b:22:d8:ec:66:7c: 14:f6:90:06:91:0a:60:bb:75:ac:77:eb:93:03:b3: b3:c2:ca:d5:f4:7b:1d:d8:3e:61:74:99:4a:ee:84: 0e:8e:a0:9a:0b:93:70:25:01:ae:58:12:25:f9:5e: d4:d9:6a:16:ed:6d:f0:0a:69:a5:04:54:50:ed:05: d8:1c:a5:42:31:f3:9d:e1:33:71:1c:3d:a3:43:f7: 6e:72:1b:a9:5a:a5:e4:19:2d:5e:69:2d:01:23:70: 19:34:5f:e5:0c:69:4f:00:39:c7:05:79:a4:81:89: 87:c5:14:f4:b2:35:c8:1b:e4:cd:d4:f8:a8:13:92: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E6:60:91:6C:BE:FC:7D:F3:EB:09:8E:1D:BA:25:31:D0:CB:D8:85 X509v3 Authority Key Identifier: keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6f:ea:ad:21:28:80:8b:03:8c:cc:6e:07:06:3d:ea:86:97: f3:fc:75:1f:87:0c:c9:f6:e2:3a:a4:9c:2c:51:42:10:31:e2: 0a:3f:63:0b:2f:54:33:71:20:df:e8:3b:f5:a5:a7:ac:e9:83: 69:99:ac:34:3e:32:13:5d:f6:e0:f9:14:1b:ac:02:68:36:ba: 89:84:bb:51:d8:6a:60:ed:73:60:f6:cd:30:73:cb:8d:ee:b2: 64:de:20:db:fc:f2:ba:50:11:e1:79:62:a4:08:1b:de:3b:f2: 21:51:8d:76:7e:81:57:09:9c:04:43:20:a0:2b:ba:e7:4c:51: 9f:9e:9c:e1:3c:5b:ac:ba:2a:ed:27:11:c8:4b:d0:9b:5a:10: 8c:a1:3f:9f:7a:73:2d:a6:ee:11:d5:4a:d7:f4:b8:d1:7a:62: 43:58:1f:6a:41:87:22:7a:d9:42:4b:bc:77:0b:c3:80:1e:32: 69:d1:9a:e3:dc:96:15:cc:95:82:3c:d6:12:d4:18:92:74:56: 14:9e:21:29:62:da:9d:e9:3c:01:ad:d8:1c:ce:48:a3:c1:2a: f1:68:25:01:6d:5f:94:12:24:c9:09:c4:8d:15:9c:58:09:73: 33:8d:b9:57:96:4c:91:61:c0:ce:81:f7:ec:1e:61:e5:2f:58: db:90:e8:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUTNHwD9aC1GIZpNFxh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0 YTgwYmEwHhcNMjUxMjA2MDEwMTA3WhcNMjUxMjA3MDEwMTA3WjAzMTEwLwYDVQQD EyhhYmU2NjA5MTZjYmVmYzdkZjNlYjA5OGUxZGJhMjUzMWQwY2JkODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmxZOYpKYX3zl33btjJgV+3BuPK/ s+yAhsVKj2ZdhXE0qCbk01Un/VKR9BdFKPbQ/HbXlbAZsikPUZDyLi/uWunPkq7K nX/qXDJ8cl06n4SjWlJS1tqjEFR4tkOTlBDhawssS35dpsojvDuHfjSOl86+Btu6 otPDR2mKaCIqE1lLItjsZnwU9pAGkQpgu3Wsd+uTA7OzwsrV9Hsd2D5hdJlK7oQO jqCaC5NwJQGuWBIl+V7U2WoW7W3wCmmlBFRQ7QXYHKVCMfOd4TNxHD2jQ/duchup WqXkGS1eaS0BI3AZNF/lDGlPADnHBXmkgYmHxRT0sjXIG+TN1PioE5IKVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvmYJFsvvx98+sJjh26JTHQy9iFMB8GA1UdIwQY MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt YWUwZWE2NjQzYmJkLzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG/qrSEo gIsDjMxuBwY96oaX8/x1H4cMyfbiOqScLFFCEDHiCj9jCy9UM3Eg3+g79aWnrOmD aZmsND4yE1324PkUG6wCaDa6iYS7UdhqYO1zYPbNMHPLje6yZN4g2/zyulAR4Xli pAgb3jvyIVGNdn6BVwmcBEMgoCu650xRn56c4TxbrLoq7ScRyEvQm1oQjKE/n3pz LabuEdVK1/S40XpiQ1gfakGHInrZQku8dwvDgB4yadGa49yWFcyVgjzWEtQYknRW FJ4hKWLanek8Aa3YHM5Io8Eq8WglAW1flBIkyQnEjRWcWAlzM425V5ZMkWHAzoH3 7B5h5S9Y25DolA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:40 2025 by rpki-client