This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json) Hash identifier: Wfdz39Me6kAj4Db23gpOunLh826ZnjCpV/0Pcr/Ex8c= Subject key identifier: E7:3F:80:CE:20:77:85:2D:2B:A7:93:EE:5E:07:07:01:A8:94:40:F0 Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3 Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3 Certificate serial: 019B3EDAAFD66A8299B6A2446EFC1BEDD3C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft Manifest number: 1785 Signing time: Sun 21 Dec 2025 03:01:17 +0000 Manifest this update: Sun 21 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: Dgwf/SN2gTc+Ww3EELftBvCl2YnSu6HSOA7YsIqqlj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:af:d6:6a:82:99:b6:a2:44:6e:fc:1b:ed:d3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3 Validity Not Before: Dec 21 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=e73f80ce2077852d2ba793ee5e070701a89440f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:d6:b1:e4:04:ba:e0:7e:50:5a:3c:c2:f5: 59:84:46:43:f7:e1:1c:1f:e5:23:86:d8:08:a5:12: ae:81:f7:ac:2a:f8:69:1f:fc:89:5b:94:a8:13:2e: 3d:ed:a9:7f:58:2e:70:00:46:15:b3:46:a2:9c:f8: 7b:c9:09:83:e4:aa:a9:dc:c2:97:b5:ee:0f:7b:97: ee:97:3c:93:2e:28:96:ee:0d:00:66:3e:6b:93:06: a3:f0:1b:ed:60:2b:ca:bb:1d:ce:c1:3a:1e:a0:a1: 19:31:7c:7a:d8:5a:08:0c:5c:2f:05:fd:61:b2:d5: 67:99:c2:5c:71:f3:54:0c:b9:3a:f2:b7:68:64:f5: 76:a9:17:26:83:6c:cf:fa:c2:3a:aa:fa:74:d3:6b: e9:34:be:bc:99:ee:a8:38:d3:fa:0a:12:47:e0:20: fc:fd:bf:ea:78:70:27:9e:a2:d2:89:6b:aa:83:88: ae:c4:c7:de:74:e2:c5:1a:89:36:58:6a:3d:59:6c: fb:c0:a3:27:8a:99:5e:19:e3:5c:f0:c5:7b:9c:9f: 1d:52:b7:3d:f8:a4:35:47:b3:28:d9:ea:c9:ac:bf: df:75:1a:2d:1a:2b:3c:82:f0:ff:1a:6f:d8:e9:f9: 69:be:c1:23:6a:74:0b:32:ab:2e:74:6f:83:f2:08: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:80:CE:20:77:85:2D:2B:A7:93:EE:5E:07:07:01:A8:94:40:F0 X509v3 Authority Key Identifier: keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:96:bf:57:94:d7:a1:86:cf:20:d3:2d:fa:c7:b4:3f:b9:50: 3c:55:41:87:31:1b:cc:cf:05:dd:00:2a:ba:2f:2a:7f:d1:4d: 6b:67:fa:88:f6:5b:b8:b4:02:ac:5d:dc:2f:08:6e:66:ba:13: 5d:67:47:91:67:ff:46:27:9d:f0:de:0b:17:63:44:d5:7d:51: cc:62:71:ff:69:11:d0:82:69:6a:5b:d1:6b:d7:2f:05:02:2d: 3f:ff:0f:03:c1:79:c2:18:c6:64:7a:56:e5:3f:b4:f1:d7:4f: a2:47:fd:1e:7d:86:3d:0b:37:21:2a:05:5c:db:76:50:e9:9f: b7:37:93:58:43:9b:7e:16:ab:f9:84:9a:bd:4d:bc:c7:38:f5: 1d:02:d7:89:25:99:9f:7d:c8:50:3a:0d:60:20:e7:74:8d:ee: be:ff:d9:45:55:2d:99:4e:f8:f1:cb:fe:b3:f9:5f:6e:22:b1: aa:86:16:43:35:00:9d:47:f8:f6:80:47:36:19:cf:93:e6:fb: d1:3f:bf:22:d6:fd:11:0f:68:32:08:83:87:9b:69:88:ed:6e: c1:55:d6:c9:7b:4a:d4:a8:90:85:0e:d5:13:23:44:c1:92:45: 6c:c3:ca:6d:18:2c:f5:17:b9:2e:ba:66:1c:bf:a2:74:51:d2: 56:aa:f9:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2q/WaoKZtqJEbvwb7dPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjMyMjk0NGIwNDhiNzA1N2U0NWVkMmNiMzQxYjU2MGUw YWM2YzMwHhcNMjUxMjIxMDMwMTE3WhcNMjUxMjIyMDMwMTE3WjAzMTEwLwYDVQQD EyhlNzNmODBjZTIwNzc4NTJkMmJhNzkzZWU1ZTA3MDcwMWE4OTQ0MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuirWseQEuuB+UFo8wvVZhEZD9+Ec H+UjhtgIpRKugfesKvhpH/yJW5SoEy497al/WC5wAEYVs0ainPh7yQmD5Kqp3MKX te4Pe5fulzyTLiiW7g0AZj5rkwaj8BvtYCvKux3OwToeoKEZMXx62FoIDFwvBf1h stVnmcJccfNUDLk68rdoZPV2qRcmg2zP+sI6qvp002vpNL68me6oONP6ChJH4CD8 /b/qeHAnnqLSiWuqg4iuxMfedOLFGok2WGo9WWz7wKMnipleGeNc8MV7nJ8dUrc9 +KQ1R7Mo2erJrL/fdRotGis8gvD/Gm/Y6flpvsEjanQLMqsudG+D8ghecwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc/gM4gd4UtK6eT7l4HBwGolEDwMB8GA1UdIwQY MBaAFJzzIpRLBItwV+Re0ss0G1YOCsbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzkt YjNjNWMwOTMzZDk3LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzktYjNjNWMwOTMzZDk3 LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopa/V5TX oYbPINMt+se0P7lQPFVBhzEbzM8F3QAqui8qf9FNa2f6iPZbuLQCrF3cLwhuZroT XWdHkWf/Ried8N4LF2NE1X1RzGJx/2kR0IJpalvRa9cvBQItP/8PA8F5whjGZHpW 5T+08ddPokf9Hn2GPQs3ISoFXNt2UOmftzeTWEObfhar+YSavU28xzj1HQLXiSWZ n33IUDoNYCDndI3uvv/ZRVUtmU748cv+s/lfbiKxqoYWQzUAnUf49oBHNhnPk+b7 0T+/Itb9EQ9oMgiDh5tpiO1uwVXWyXtK1KiQhQ7VEyNEwZJFbMPKbRgs9Re5Lrpm HL+idFHSVqr5Sw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:40:21 2025 by rpki-client