This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json) Hash identifier: 5b4o/qwSzQqZhjQW8VxnnJO+nxrh78wd+9AN0fmwv48= Subject key identifier: 13:08:51:22:2E:37:EA:8C:2E:6C:BD:F6:8B:00:4F:23:3A:00:74:CC Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Certificate serial: 019B1E3D0026032EB4207CE7A1C912927FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft Manifest number: 10F7 Signing time: Sun 14 Dec 2025 19:01:12 +0000 Manifest this update: Sun 14 Dec 2025 19:01:12 +0000 Manifest next update: Mon 15 Dec 2025 19:01:12 +0000 Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=) 2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=) 3: DfN89u0ZvthZxMTnUcXpfMOlKTs.roa (hash: msvl5pQNrCHYRzIqm+ZhzceMHlWNrK7pVc4fvVU8Aig=) 4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: 8wtaLDwcK1bFoi64LX5L/tIviX1dsr+54pzjlf/E8i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:00:26:03:2e:b4:20:7c:e7:a1:c9:12:92:7f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Validity Not Before: Dec 14 19:01:12 2025 GMT Not After : Dec 15 19:01:12 2025 GMT Subject: CN=130851222e37ea8c2e6cbdf68b004f233a0074cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:e0:47:1d:5e:ed:27:33:bb:96:37:28:ee: fd:33:fe:30:47:a9:72:9d:96:88:1e:a7:c9:e0:19: cc:53:08:8f:1b:b4:87:3e:b7:cb:7b:91:b5:6f:3a: 88:3e:74:bc:52:b8:c6:62:23:a1:e3:94:40:82:75: 98:a2:57:9f:e6:79:c0:cc:8d:e7:cb:d6:0a:af:a6: 32:05:a8:5d:10:dc:b5:60:78:d8:c1:80:36:f6:27: e4:0c:c3:2e:4e:09:91:24:86:61:93:97:ce:4c:ff: ad:61:1a:9d:9e:32:97:d2:92:f4:10:2b:46:d1:62: 0c:f9:cd:5a:f9:07:24:43:d8:53:ff:70:b8:89:d4: 48:0a:5f:0f:49:e6:46:53:03:85:d3:cb:c8:9f:a1: 46:e8:ee:42:8e:e4:46:3b:82:c0:97:af:7b:7c:ba: 05:07:e5:cc:4e:6a:78:3d:f2:19:f6:32:43:72:39: 76:c4:ed:25:da:ae:95:a3:f5:21:86:03:29:93:3e: d9:fc:1b:b7:85:bc:53:45:f4:03:3b:5e:37:8a:d1: 21:31:05:4c:71:29:73:06:75:c4:8d:d3:6f:4f:35: 1d:79:54:36:c3:d8:e4:6a:21:09:95:b1:74:70:b0: 01:c4:fc:c8:3d:03:46:1c:3a:ee:3b:7a:d7:99:d8: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:51:22:2E:37:EA:8C:2E:6C:BD:F6:8B:00:4F:23:3A:00:74:CC X509v3 Authority Key Identifier: keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e5:e6:ae:eb:22:e6:51:fa:f3:bb:a3:fb:69:f7:10:4b:c7: 99:4d:7c:77:8a:2f:64:eb:89:0a:f0:06:a8:48:74:cf:f4:63: fd:b1:c7:52:5a:11:41:e9:f6:6b:8d:6f:32:fc:d4:c4:ba:6c: 3a:fe:ce:24:3d:40:34:58:4c:a1:33:20:65:d6:94:79:82:90: 60:ea:c4:b2:fa:e3:b0:e5:90:c3:6e:26:30:d4:9b:c9:42:5f: 98:82:be:88:a2:87:b4:42:c7:6f:1e:02:6d:29:68:c8:c2:bb: c8:12:ba:77:c5:3f:50:1d:17:28:8d:70:cd:26:5e:9f:4f:46: 86:63:96:51:25:6d:3c:37:b1:6d:49:20:1d:ae:19:d9:2a:1b: 1a:b4:f1:86:57:c4:59:08:f2:8e:5e:ff:37:7b:aa:df:30:25: 73:13:65:35:29:e4:89:27:fd:a2:f1:9e:a9:a4:6c:08:a5:58: 5c:46:6a:a6:d0:fa:44:39:78:93:60:32:e0:ca:aa:bf:86:86: 74:e0:0c:00:5f:8f:7d:65:5f:a1:d2:d8:9f:8e:89:cb:5f:4c: 2d:c1:e2:de:c8:91:28:ff:83:15:17:bf:be:51:a4:1c:fb:ee: 3f:2c:f6:f4:69:23:bc:80:ee:8f:61:2f:25:86:a0:ce:33:6f: 42:88:93:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePQAmAy60IHznockSkn/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDQxZTllNzA1YWRhM2Y5YzFlODI3Y2QyNzZkYmQwOTc0 ODc2MDgwHhcNMjUxMjE0MTkwMTEyWhcNMjUxMjE1MTkwMTEyWjAzMTEwLwYDVQQD EygxMzA4NTEyMjJlMzdlYThjMmU2Y2JkZjY4YjAwNGYyMzNhMDA3NGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5TgRx1e7Sczu5Y3KO79M/4wR6ly nZaIHqfJ4BnMUwiPG7SHPrfLe5G1bzqIPnS8UrjGYiOh45RAgnWYolef5nnAzI3n y9YKr6YyBahdENy1YHjYwYA29ifkDMMuTgmRJIZhk5fOTP+tYRqdnjKX0pL0ECtG 0WIM+c1a+QckQ9hT/3C4idRICl8PSeZGUwOF08vIn6FG6O5CjuRGO4LAl697fLoF B+XMTmp4PfIZ9jJDcjl2xO0l2q6Vo/UhhgMpkz7Z/Bu3hbxTRfQDO143itEhMQVM cSlzBnXEjdNvTzUdeVQ2w9jkaiEJlbF0cLABxPzIPQNGHDruO3rXmdigqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMIUSIuN+qMLmy99osATyM6AHTMMB8GA1UdIwQY MBaAFJ5EHp5wWto/nB6CfNJ229CXSHYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWIt OTMyZDE2YjA4ZGYwLzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWItOTMyZDE2YjA4ZGYw LzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleXmrusi 5lH687uj+2n3EEvHmU18d4ovZOuJCvAGqEh0z/Rj/bHHUloRQen2a41vMvzUxLps Ov7OJD1ANFhMoTMgZdaUeYKQYOrEsvrjsOWQw24mMNSbyUJfmIK+iKKHtELHbx4C bSloyMK7yBK6d8U/UB0XKI1wzSZen09GhmOWUSVtPDexbUkgHa4Z2SobGrTxhlfE WQjyjl7/N3uq3zAlcxNlNSnkiSf9ovGeqaRsCKVYXEZqptD6RDl4k2Ay4Mqqv4aG dOAMAF+PfWVfodLYn46Jy19MLcHi3siRKP+DFRe/vlGkHPvuPyz29GkjvIDuj2Ev JYagzjNvQoiTag== -----END CERTIFICATE-----Generated at Sun Dec 14 21:14:46 2025 by rpki-client