This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json) Hash identifier: EBlPeTBAtYg1egnhcrmHz5WaI/zRN+/0AUdaGybSCbI= Subject key identifier: D1:86:01:60:30:A4:6C:FA:DC:B2:92:2E:6E:55:E4:E7:A8:0F:4B:93 Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd Certificate serial: 019AEFAD27B3D7B92CA63681CC7DC6A42510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 18:01:33 +0000 Manifest this update: Fri 05 Dec 2025 18:01:33 +0000 Manifest next update: Sat 06 Dec 2025 18:01:33 +0000 Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=) 2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: phGwKkdjNLodxKgxO2MGhJHdGnaC6vv9OIuwg+fSVNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ad:27:b3:d7:b9:2c:a6:36:81:cc:7d:c6:a4:25:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd Validity Not Before: Dec 5 18:01:33 2025 GMT Not After : Dec 6 18:01:33 2025 GMT Subject: CN=d186016030a46cfadcb2922e6e55e4e7a80f4b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:e5:eb:1d:18:9a:d9:15:28:60:4c:29:9c: 6d:30:e2:43:51:8f:97:74:dc:a7:97:9f:f0:4f:9b: cc:ea:33:d6:56:93:78:4b:28:f0:5f:c5:42:df:f2: 68:7c:cb:31:23:22:7d:e8:83:52:b7:21:d8:a6:b2: 31:8e:0e:7e:18:db:e8:a4:ee:dd:c5:31:73:6a:b3: 65:77:85:dc:31:a7:52:7b:ac:76:23:ff:ef:44:7c: 9c:7f:80:0a:79:38:e9:8f:09:d3:cf:17:93:bb:ee: df:d8:d0:0a:66:a2:fc:1e:ea:e7:1e:49:9c:55:03: 1c:f1:a3:37:63:61:ba:6d:07:8e:f1:f8:cb:46:d0: ee:2b:23:7f:81:e3:a8:dd:ef:12:b1:0e:a0:c1:ef: 6f:7e:8d:93:94:3f:ec:cf:05:ef:b4:25:ea:56:d6: 5a:1e:6c:b6:0a:38:47:11:e0:cb:2d:ac:47:ad:ad: c7:f9:35:24:3e:68:5a:e3:4a:0a:04:c0:8b:ff:01: af:4b:59:f2:66:df:32:e3:91:9a:62:92:07:38:f5: 5c:e0:c2:d6:67:7d:81:d9:42:e4:f1:4b:a6:f9:36: ad:26:14:bb:89:d1:d6:15:97:56:38:47:32:4a:7f: 14:fb:dc:59:2e:bb:57:8c:5b:c4:3a:9c:2f:45:b2: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:01:60:30:A4:6C:FA:DC:B2:92:2E:6E:55:E4:E7:A8:0F:4B:93 X509v3 Authority Key Identifier: keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:25:2f:92:64:8e:56:85:f5:c0:ad:22:54:c3:2b:32:bf:43: b2:57:da:2b:a3:f1:25:15:02:59:dd:ad:cf:07:fb:46:f5:c5: 3c:31:1f:0f:ca:3c:3e:cb:9d:4a:c8:08:61:86:34:d6:66:23: 3d:33:0c:dd:18:3c:71:c4:e1:22:86:5e:26:2a:c8:3e:0c:5d: 6c:f5:c5:24:08:b3:cc:59:5e:e2:9e:33:6d:0c:7c:58:64:b4: 60:07:6f:b6:6e:11:28:ba:24:df:d5:d3:f5:1c:ff:4b:db:e6: 52:af:ed:6a:b1:5a:c0:6f:bd:43:90:c7:b8:23:61:3d:72:3f: 13:fd:2c:83:22:db:2b:a5:c3:e9:78:2a:8e:6b:ea:c1:f6:b5: 9e:b5:9f:cf:76:f6:bc:57:62:b0:38:59:c3:2d:8f:2b:82:6f: 8d:aa:e8:b6:11:12:c2:9a:13:a4:d1:4f:fa:98:27:59:54:04: 51:df:ea:16:84:38:48:a9:cc:3a:40:c8:1f:f6:18:d7:f0:e9: 6d:8c:20:72:1f:c9:d5:f1:7c:ad:c7:76:55:95:26:c7:19:68: 2a:f3:ac:b5:e1:4a:47:39:4f:75:b7:4f:b5:f6:e7:37:78:2e: fd:92:7d:06:6f:2b:b4:af:b2:c7:68:c3:8a:f9:33:f4:d6:55: 59:5a:31:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrSez17kspjaBzH3GpCUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDI3NGYxMzliZDY2OWFhZWY3NzRkNjUwM2IyOGQ5OTY2 MzdiYmQwHhcNMjUxMjA1MTgwMTMzWhcNMjUxMjA2MTgwMTMzWjAzMTEwLwYDVQQD EyhkMTg2MDE2MDMwYTQ2Y2ZhZGNiMjkyMmU2ZTU1ZTRlN2E4MGY0YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4zl6x0YmtkVKGBMKZxtMOJDUY+X dNynl5/wT5vM6jPWVpN4SyjwX8VC3/JofMsxIyJ96INStyHYprIxjg5+GNvopO7d xTFzarNld4XcMadSe6x2I//vRHycf4AKeTjpjwnTzxeTu+7f2NAKZqL8HurnHkmc VQMc8aM3Y2G6bQeO8fjLRtDuKyN/geOo3e8SsQ6gwe9vfo2TlD/szwXvtCXqVtZa Hmy2CjhHEeDLLaxHra3H+TUkPmha40oKBMCL/wGvS1nyZt8y45GaYpIHOPVc4MLW Z32B2ULk8Uum+TatJhS7idHWFZdWOEcySn8U+9xZLrtXjFvEOpwvRbJg5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGGAWAwpGz63LKSLm5V5OeoD0uTMB8GA1UdIwQY MBaAFJ5CdPE5vWaarvd01lA7KNmWY3u9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQt Mjc3NWRlNTIwMmZiLzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQtMjc3NWRlNTIwMmZi LzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyUvkmSO VoX1wK0iVMMrMr9DslfaK6PxJRUCWd2tzwf7RvXFPDEfD8o8PsudSsgIYYY01mYj PTMM3Rg8ccThIoZeJirIPgxdbPXFJAizzFle4p4zbQx8WGS0YAdvtm4RKLok39XT 9Rz/S9vmUq/tarFawG+9Q5DHuCNhPXI/E/0sgyLbK6XD6Xgqjmvqwfa1nrWfz3b2 vFdisDhZwy2PK4JvjarothESwpoTpNFP+pgnWVQEUd/qFoQ4SKnMOkDIH/YY1/Dp bYwgch/J1fF8rcd2VZUmxxloKvOsteFKRzlPdbdPtfbnN3gu/ZJ9Bm8rtK+yx2jD ivkz9NZVWVoxag== -----END CERTIFICATE-----Generated at Fri Dec 5 23:24:31 2025 by rpki-client