This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json) Hash identifier: fUGp+iLYKuJYBGSmDv1lYGCPoyJnvn5usIRO6OYHAsU= Subject key identifier: 6D:47:84:C4:48:65:CE:CE:09:5F:2D:01:4E:CE:70:2F:FF:F3:7D:75 Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9 Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9 Certificate serial: 019B360EC79868EFBE8F63C34104FDDEC8C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft Manifest number: 176B Signing time: Fri 19 Dec 2025 10:01:36 +0000 Manifest this update: Fri 19 Dec 2025 10:01:36 +0000 Manifest next update: Sat 20 Dec 2025 10:01:36 +0000 Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: hpN5gH93ddo0odfHMzgUNgKA5YgTwdKIBPV5C53TZ+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:c7:98:68:ef:be:8f:63:c3:41:04:fd:de:c8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9 Validity Not Before: Dec 19 10:01:36 2025 GMT Not After : Dec 20 10:01:36 2025 GMT Subject: CN=6d4784c44865cece095f2d014ece702ffff37d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:a2:54:67:c5:93:21:2a:46:ce:28:85:21: 4b:42:72:ad:19:8d:ad:b5:9b:5d:a3:9a:92:90:c1: 33:b9:bc:a8:f4:03:38:40:e3:99:53:f1:7a:4c:93: c6:3e:b0:e5:a2:fc:25:94:e6:31:53:c1:cf:b0:a1: 35:14:88:60:2b:73:70:9d:4a:03:c4:dc:c4:73:35: 0d:61:db:9c:9a:43:da:c7:03:ee:b0:e5:e9:cc:bf: a4:4d:53:ce:26:db:19:0a:56:80:07:b9:d9:11:91: 1e:d8:d7:cd:60:5c:2f:61:cd:73:81:fb:08:16:5f: 0b:40:fc:ca:ab:02:8a:9b:17:10:a1:8a:1e:9c:ef: 6e:de:c6:b7:ed:e6:a9:cf:c5:ae:93:2c:ab:47:a4: b5:e3:dd:67:53:5d:4f:8c:f3:5e:88:b8:7c:4b:6d: 1c:7d:d8:9f:72:dd:d7:90:f5:0d:28:b5:a9:71:b6: 6c:16:01:0c:11:ad:e6:02:ed:cb:92:7b:50:57:d0: 85:bd:6a:8b:a1:47:2f:c8:2b:85:e2:2b:44:fe:2d: a9:e3:28:43:95:f3:bf:b3:ef:ab:26:76:2d:2f:0f: ae:f4:98:97:5a:76:57:e9:70:59:7f:d2:b8:40:34: e4:b2:93:4d:56:ac:ca:9f:a1:c9:92:2c:4f:62:16: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:84:C4:48:65:CE:CE:09:5F:2D:01:4E:CE:70:2F:FF:F3:7D:75 X509v3 Authority Key Identifier: keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2e:71:b3:07:d7:de:31:96:02:26:16:e9:cc:72:b0:f8:57: 93:cc:0a:72:91:96:1b:66:54:47:14:61:b2:a3:21:47:ad:64: 38:63:96:bb:10:3c:b4:de:43:2f:c4:15:c1:2f:85:be:63:86: 7a:99:8e:68:cd:f9:34:d5:44:e0:e8:77:47:62:2a:3b:51:ac: 2e:b0:12:7b:d9:38:bc:7d:80:ca:f5:c6:6f:62:6e:aa:d3:3a: 5c:5c:e6:b8:18:49:f4:6f:92:a9:ce:81:b2:8b:a4:e7:25:54: 49:c4:50:4d:f8:bf:14:0b:af:58:1d:eb:e0:68:de:08:c4:9b: 86:55:15:49:f4:f6:33:69:30:18:d9:c6:8c:72:3c:c6:e0:5f: 95:7b:ab:4b:c3:2f:bd:94:23:a1:32:d3:a8:35:ec:25:81:28: b8:15:ef:be:67:06:68:71:f4:43:42:0d:84:32:6c:f7:89:f7: 6f:1d:3d:a0:90:30:f1:85:70:50:72:26:60:e1:99:ee:20:a0: 6d:cf:5e:19:90:44:a6:29:05:8f:fb:8e:81:fa:f5:62:d0:78: 94:84:40:eb:a7:ad:ba:25:a7:01:27:59:a3:27:93:74:eb:ac: b4:f2:1e:01:23:8d:2d:58:71:cb:8d:78:09:33:bf:c5:a3:fe: 61:2d:03:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DseYaO++j2PDQQT93sjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTg5NGYxZDc3MzFlOTk2MTcxOWJlMWVkOTk4NDY4ZmNi YWJlYTkwHhcNMjUxMjE5MTAwMTM2WhcNMjUxMjIwMTAwMTM2WjAzMTEwLwYDVQQD Eyg2ZDQ3ODRjNDQ4NjVjZWNlMDk1ZjJkMDE0ZWNlNzAyZmZmZjM3ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPWiVGfFkyEqRs4ohSFLQnKtGY2t tZtdo5qSkMEzubyo9AM4QOOZU/F6TJPGPrDlovwllOYxU8HPsKE1FIhgK3NwnUoD xNzEczUNYducmkPaxwPusOXpzL+kTVPOJtsZClaAB7nZEZEe2NfNYFwvYc1zgfsI Fl8LQPzKqwKKmxcQoYoenO9u3sa37eapz8WukyyrR6S1491nU11PjPNeiLh8S20c fdifct3XkPUNKLWpcbZsFgEMEa3mAu3LkntQV9CFvWqLoUcvyCuF4itE/i2p4yhD lfO/s++rJnYtLw+u9JiXWnZX6XBZf9K4QDTkspNNVqzKn6HJkixPYhZnPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1HhMRIZc7OCV8tAU7OcC//8311MB8GA1UdIwQY MBaAFJzolPHXcx6ZYXGb4e2ZhGj8ur6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xZjk2OWMtZTM4Ny00NmZkLTg2MjQt ZGM3ZjBjMDk0YjM5LzEvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xZjk2OWMtZTM4Ny00NmZkLTg2MjQtZGM3ZjBjMDk0YjM5 LzEvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy5xswfX 3jGWAiYW6cxysPhXk8wKcpGWG2ZURxRhsqMhR61kOGOWuxA8tN5DL8QVwS+FvmOG epmOaM35NNVE4Oh3R2IqO1GsLrASe9k4vH2AyvXGb2JuqtM6XFzmuBhJ9G+Sqc6B souk5yVUScRQTfi/FAuvWB3r4GjeCMSbhlUVSfT2M2kwGNnGjHI8xuBflXurS8Mv vZQjoTLTqDXsJYEouBXvvmcGaHH0Q0INhDJs94n3bx09oJAw8YVwUHImYOGZ7iCg bc9eGZBEpikFj/uOgfr1YtB4lIRA66etuiWnASdZoyeTdOustPIeASONLVhxy414 CTO/xaP+YS0Dtw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:29 2025 by rpki-client