This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json) Hash identifier: VWPXW2N20OD7qqh8KD3RLp+zOvSiT1iJm6vbTH8rm54= Subject key identifier: 23:16:D3:1D:2E:A2:7C:56:C9:DE:A2:A9:C4:EF:B3:4E:33:1A:81:CF Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3 Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3 Certificate serial: 019AF57784AB823D2DA075400DCD752955A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 21:00:41 +0000 Manifest this update: Sat 06 Dec 2025 21:00:41 +0000 Manifest next update: Sun 07 Dec 2025 21:00:41 +0000 Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: srU986X5ahhwKyefogWaIcGDwvc+V8stoR5hf59zN4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:84:ab:82:3d:2d:a0:75:40:0d:cd:75:29:55:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3 Validity Not Before: Dec 6 21:00:41 2025 GMT Not After : Dec 7 21:00:41 2025 GMT Subject: CN=2316d31d2ea27c56c9dea2a9c4efb34e331a81cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:26:05:70:36:80:7b:d4:60:b6:10:1f:91: 12:3d:c6:5d:d7:9c:63:64:9b:19:b7:0e:5a:bf:b4: 7c:c0:53:06:ba:bc:17:b8:bc:74:84:62:a5:29:00: 39:b4:27:b7:b2:8d:89:c3:63:4c:9c:33:d4:42:19: 80:63:f3:e8:89:72:4f:86:4a:e5:ae:c8:6e:9d:8b: 22:b6:46:ad:05:0e:f4:b1:70:4a:d8:c5:4a:80:1f: 9a:9f:c7:35:1d:e1:ad:83:c6:d8:45:00:74:6f:7e: 48:ac:05:93:f5:d6:77:4f:44:96:a5:82:94:6f:12: ff:6a:96:35:52:a3:0a:e0:66:ab:0f:04:39:bd:a4: 44:fa:f5:35:c7:ee:4d:ad:5b:ac:8a:d1:ac:45:67: 89:9d:50:25:cd:45:6e:0f:18:56:ce:f4:34:57:cf: 7d:8f:95:c6:3e:97:16:8e:07:f2:f4:c3:28:13:0f: 4a:b4:e4:af:6c:7f:44:26:cb:09:4c:65:33:cf:a9: 5d:f0:58:d0:bb:12:fb:e1:bd:7f:31:f1:9b:65:a0: 78:7b:c0:1e:e8:3b:82:77:a1:fa:88:43:d6:89:70: 9f:93:49:9e:03:0b:ec:6a:98:57:30:ea:94:d3:70: ce:5f:12:44:f7:43:d5:bb:99:f1:3f:49:f0:44:56: 39:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:D3:1D:2E:A2:7C:56:C9:DE:A2:A9:C4:EF:B3:4E:33:1A:81:CF X509v3 Authority Key Identifier: keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:86:f4:73:5d:4b:ce:7c:e6:50:72:4a:5a:22:c2:70:e3:2a: f0:47:fd:e4:8c:33:53:a2:a9:54:79:7b:ff:2b:df:76:28:6c: 9c:64:7e:53:52:10:5e:4a:54:97:33:d3:17:8d:f8:c7:43:82: 5d:06:c6:60:61:9f:cb:f7:4d:0f:74:60:1b:78:11:84:7a:f5: 1a:07:fd:6d:50:96:0f:6a:ea:9b:0b:2f:2d:82:cb:e0:24:90: 18:d2:e6:82:fb:7d:8d:0d:3d:6d:66:48:8f:f2:f2:56:36:bc: e0:51:86:61:de:a5:96:61:69:a2:59:46:48:2e:7c:5d:0b:a5: 54:c5:95:0b:a1:e0:bf:20:47:9a:37:aa:7e:66:17:ae:03:77: 69:4e:65:76:2e:4a:a9:3e:27:51:07:36:2f:1f:47:96:62:84: f8:45:4e:9c:c9:c7:c8:b0:c7:ff:df:ff:de:af:b8:17:be:d0: 7f:91:ae:22:cb:c5:ec:d3:0c:ea:4c:bb:ee:f7:2a:c1:34:b7: 76:94:b7:68:53:01:f3:24:26:1e:af:70:d4:37:9d:ef:b1:7e: 11:e3:1c:ff:af:4f:51:ae:51:a0:9b:56:fc:23:0b:3e:8a:7a: be:9d:ef:ec:2d:bb:45:c1:e9:8a:83:74:8e:68:dd:bc:68:4e: ea:5c:73:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4Srgj0toHVADc11KVWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjMyMjk0NGIwNDhiNzA1N2U0NWVkMmNiMzQxYjU2MGUw YWM2YzMwHhcNMjUxMjA2MjEwMDQxWhcNMjUxMjA3MjEwMDQxWjAzMTEwLwYDVQQD EygyMzE2ZDMxZDJlYTI3YzU2YzlkZWEyYTljNGVmYjM0ZTMzMWE4MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6kmBXA2gHvUYLYQH5ESPcZd15xj ZJsZtw5av7R8wFMGurwXuLx0hGKlKQA5tCe3so2Jw2NMnDPUQhmAY/PoiXJPhkrl rshunYsitkatBQ70sXBK2MVKgB+an8c1HeGtg8bYRQB0b35IrAWT9dZ3T0SWpYKU bxL/apY1UqMK4GarDwQ5vaRE+vU1x+5NrVusitGsRWeJnVAlzUVuDxhWzvQ0V899 j5XGPpcWjgfy9MMoEw9KtOSvbH9EJssJTGUzz6ld8FjQuxL74b1/MfGbZaB4e8Ae 6DuCd6H6iEPWiXCfk0meAwvsaphXMOqU03DOXxJE90PVu5nxP0nwRFY58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMW0x0uonxWyd6iqcTvs04zGoHPMB8GA1UdIwQY MBaAFJzzIpRLBItwV+Re0ss0G1YOCsbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzkt YjNjNWMwOTMzZDk3LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzktYjNjNWMwOTMzZDk3 LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYb0c11L znzmUHJKWiLCcOMq8Ef95IwzU6KpVHl7/yvfdihsnGR+U1IQXkpUlzPTF434x0OC XQbGYGGfy/dND3RgG3gRhHr1Ggf9bVCWD2rqmwsvLYLL4CSQGNLmgvt9jQ09bWZI j/LyVja84FGGYd6llmFpollGSC58XQulVMWVC6HgvyBHmjeqfmYXrgN3aU5ldi5K qT4nUQc2Lx9HlmKE+EVOnMnHyLDH/9//3q+4F77Qf5GuIsvF7NMM6ky77vcqwTS3 dpS3aFMB8yQmHq9w1Ded77F+EeMc/69PUa5RoJtW/CMLPop6vp3v7C27RcHpioN0 jmjdvGhO6lxzng== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:39 2025 by rpki-client