This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json) Hash identifier: /ZYWGxp0v5alXnblEEBMQ4zpswzym8i4ZhyrC3HHiHQ= Subject key identifier: 74:0F:01:82:3F:42:56:B5:35:1B:42:32:F5:51:8B:FD:8D:3D:A8:C7 Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20 Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20 Certificate serial: 019AF2768F40A6E84E2A545F23D51B67070D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft Manifest number: 0929 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=) 2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: rksKj8eaN4JPhEjXOOaAQqgL8023tGr3N+k4blLn0Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8f:40:a6:e8:4e:2a:54:5f:23:d5:1b:67:07:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=740f01823f4256b5351b4232f5518bfd8d3da8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:e9:6a:b2:d6:bc:d7:79:c2:49:36:82:1a: f1:02:14:3f:77:6d:1f:3e:b1:e7:72:ac:52:0e:99: 0f:a0:fa:91:bb:bd:b5:0c:bb:00:50:f3:8f:d5:2b: 0c:3f:f9:5b:b9:48:37:81:9b:16:16:8b:bb:da:e4: 07:9b:44:89:87:15:a4:f9:68:b6:bc:14:3e:6e:92: d7:0d:3f:c9:18:98:92:4e:13:52:09:b3:4d:7b:03: 71:f0:8a:c3:5c:85:7d:09:d3:9e:38:64:10:4f:4b: cd:0c:bb:46:0f:e1:0c:ce:87:c4:d9:62:7c:d1:43: cc:3e:83:1f:ca:dd:7d:42:a7:8f:ff:c1:19:15:a9: 50:dc:3a:e3:77:07:6a:a5:63:89:c1:76:2f:ff:e9: c9:99:f7:6b:48:94:dc:be:8a:05:ed:98:39:74:12: 72:30:12:b7:80:51:3c:b0:3a:23:e3:d6:12:63:94: 8f:6b:22:95:9c:de:26:f7:08:c3:c9:f8:be:ef:44: 4a:d9:cc:fa:c8:75:6a:5d:2f:81:ab:71:62:d3:86: 5a:dc:bf:45:14:3d:bb:b3:8c:3d:90:8e:cd:96:91: e0:e8:d7:d0:4b:22:89:e9:38:30:1f:9a:e4:41:62: cf:14:a0:49:90:f2:52:15:e7:cf:c9:2c:b6:12:07: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:01:82:3F:42:56:B5:35:1B:42:32:F5:51:8B:FD:8D:3D:A8:C7 X509v3 Authority Key Identifier: keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d6:6b:e6:0d:40:76:a2:f1:0f:17:c8:83:60:7d:f6:dd:59: d0:70:1a:51:4e:12:8e:7e:1d:cb:c4:fa:45:2d:f4:86:11:7a: 0e:88:8c:47:77:e5:a9:57:4e:1b:ca:0a:63:3a:97:a2:17:61: f7:f1:9c:3b:53:5f:2b:fc:cc:e6:e0:ab:98:3d:3f:32:b2:d7: c2:dd:9b:10:a8:87:3d:d4:cd:a9:7a:c6:cd:58:14:2c:16:5e: 30:06:10:cb:b3:c3:9a:bf:7c:da:8c:c8:83:c7:da:8c:89:e4: b1:2e:d6:ef:53:78:62:98:ca:53:05:d4:e8:22:ee:3e:72:96: 57:55:03:86:24:41:af:a8:84:3f:c8:8a:18:64:6b:a7:04:95: 8c:17:e9:28:c0:f1:ee:e5:f5:70:8c:25:bf:4c:2d:e5:73:ed: c1:13:8f:a0:9b:a8:f4:e9:bd:9d:1e:21:6b:5f:7a:b2:74:36: c0:28:b3:01:84:d9:6b:d0:a8:5b:6b:dc:43:6a:08:12:ae:e5: f7:20:84:fc:68:f0:97:e5:92:15:e4:ba:1f:59:71:c1:a6:d7: 48:06:b7:82:6e:77:ac:94:3f:f4:6f:a7:5f:e8:a6:86:01:2d: 3e:b3:cc:09:07:36:64:67:4a:7f:6b:82:cb:d7:e1:72:a3:39: ac:d4:01:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo9ApuhOKlRfI9UbZwcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzI2ZjE4Y2Y5NmI4NmE0NTA2YjNiODRjY2M0NGQzYjM1 MDZhMjAwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD Eyg3NDBmMDE4MjNmNDI1NmI1MzUxYjQyMzJmNTUxOGJmZDhkM2RhOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4vparLWvNd5wkk2ghrxAhQ/d20f PrHncqxSDpkPoPqRu721DLsAUPOP1SsMP/lbuUg3gZsWFou72uQHm0SJhxWk+Wi2 vBQ+bpLXDT/JGJiSThNSCbNNewNx8IrDXIV9CdOeOGQQT0vNDLtGD+EMzofE2WJ8 0UPMPoMfyt19QqeP/8EZFalQ3DrjdwdqpWOJwXYv/+nJmfdrSJTcvooF7Zg5dBJy MBK3gFE8sDoj49YSY5SPayKVnN4m9wjDyfi+70RK2cz6yHVqXS+Bq3Fi04Za3L9F FD27s4w9kI7NlpHg6NfQSyKJ6TgwH5rkQWLPFKBJkPJSFefPySy2Egf1AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQPAYI/Qla1NRtCMvVRi/2NPajHMB8GA1UdIwQY MBaAFJzCbxjPlrhqRQazuEzMRNOzUGogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQt MDEzOTg5NDJmYjVhLzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQtMDEzOTg5NDJmYjVh LzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadZr5g1A dqLxDxfIg2B99t1Z0HAaUU4Sjn4dy8T6RS30hhF6DoiMR3flqVdOG8oKYzqXohdh 9/GcO1NfK/zM5uCrmD0/MrLXwt2bEKiHPdTNqXrGzVgULBZeMAYQy7PDmr982ozI g8fajInksS7W71N4YpjKUwXU6CLuPnKWV1UDhiRBr6iEP8iKGGRrpwSVjBfpKMDx 7uX1cIwlv0wt5XPtwROPoJuo9Om9nR4ha196snQ2wCizAYTZa9CoW2vcQ2oIEq7l 9yCE/Gjwl+WSFeS6H1lxwabXSAa3gm53rJQ/9G+nX+imhgEtPrPMCQc2ZGdKf2uC y9fhcqM5rNQBfA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:27 2025 by rpki-client