This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: 52Mtes97+ARPaGaOl+zJFIF88QC7TjqfCLtKQ29jTBk= Subject key identifier: 9E:5E:24:3D:55:39:79:33:B6:FE:5E:7A:1A:1D:22:DC:E1:07:3A:5E Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019AED1933C86C38B0EC7C35B068C06285F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 112D Signing time: Fri 05 Dec 2025 06:00:43 +0000 Manifest this update: Fri 05 Dec 2025 06:00:43 +0000 Manifest next update: Sat 06 Dec 2025 06:00:43 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: e-BLTmUZr4RQnQtoII2qK120t20.roa (hash: R8x94sW5eyjEsBywxnIhAGd8cj5zCs/8K4KlXN7U2TU=) 7: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 8: iXL5qQtRrkVLG9gYfHh5fVQ7T3g.roa (hash: /S4PPFIysWBHzoFOGmeyMQ0/WpKIWbdNqRJ+yMWrBac=) 9: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 10: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: GybOhcJ7xMcG3fR300oeH6WEs/LUyVhTaoC76vYnhkw=) 11: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 12: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 13: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:19:33:c8:6c:38:b0:ec:7c:35:b0:68:c0:62:85:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Dec 5 06:00:43 2025 GMT Not After : Dec 6 06:00:43 2025 GMT Subject: CN=9e5e243d55397933b6fe5e7a1a1d22dce1073a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:a6:8b:04:38:42:ff:e1:ee:f9:9c:75:5c: 6a:7a:3c:4c:5d:51:3a:13:c8:41:c1:9d:75:ee:5c: 5a:ce:d8:64:7b:7a:90:ba:5c:86:f5:4c:cd:c8:56: ff:0d:4f:f6:21:bc:04:83:e8:3b:a6:40:44:dd:a5: 3f:7f:4d:98:5e:85:f3:c9:a8:60:2a:0e:28:91:65: f3:3d:e3:46:a5:13:ed:5a:bc:3f:3d:64:67:de:01: 27:bf:f8:3b:4d:e5:9b:f7:36:85:31:c0:ee:71:b6: 99:f7:5d:ac:58:a8:26:56:63:c6:c0:8b:43:4e:05: 81:c6:0f:7c:a9:ee:48:91:fc:9f:a5:d4:bd:96:c9: 34:0d:18:47:35:96:67:93:8b:59:25:67:6e:98:79: 55:85:14:3e:b5:c0:b6:e3:d6:43:20:5f:94:b1:2b: 8e:0f:6d:26:4f:d5:73:12:a5:33:47:3b:66:29:88: 0e:b3:05:38:44:3c:13:c5:48:5a:99:41:96:0b:32: 59:15:a3:12:28:c2:5e:de:23:88:ff:ca:b9:e9:5f: 62:ec:04:54:e9:fe:33:89:a5:6a:4a:72:86:ab:ac: 90:91:a0:7e:2c:a5:9c:b5:f2:99:c9:fc:55:d3:f6: 9c:06:1c:0b:f0:67:e9:36:0e:35:97:83:8e:0a:35: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5E:24:3D:55:39:79:33:B6:FE:5E:7A:1A:1D:22:DC:E1:07:3A:5E X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:08:ea:47:34:b8:be:56:f9:22:81:4f:1b:85:61:25:7a:74: db:92:46:2d:f9:6d:7b:52:43:4e:09:f1:b3:a7:ba:2e:61:4d: 09:f4:48:53:25:e1:98:49:6c:85:d9:56:b4:dc:a6:22:4f:60: 02:fc:1c:53:a1:ae:51:f2:ef:35:a1:c9:f4:fe:01:18:02:39: 02:7c:f1:24:fd:9e:e8:dc:0b:7d:28:fa:85:e6:13:b9:c8:e1: a1:89:b4:31:4c:20:09:ad:8a:17:57:ec:2c:80:19:60:24:0e: f8:50:a6:0a:08:b0:9b:18:89:4f:05:1a:90:89:d1:40:e2:a0: 71:68:fe:e8:dc:47:4e:24:69:92:5b:00:78:81:5a:af:f8:33: 9e:e0:62:a8:67:69:33:dc:b9:ff:61:47:0b:41:8b:9c:d7:0c: 9e:60:ac:76:cd:ea:4e:36:63:9b:f0:3a:92:5f:8d:32:f8:55: e5:b9:95:f5:da:31:8f:1f:5d:df:43:a1:f1:8a:bb:7a:99:66: c3:d7:8f:ea:a0:41:db:4c:31:9b:91:83:54:6e:30:39:ce:21: fb:03:19:2c:97:df:bb:89:88:4c:c0:86:62:51:7b:1d:a0:b9: e8:c5:4a:a3:ea:4d:3b:96:98:f8:ed:df:5c:bd:c0:2b:dd:c3: 7f:29:a2:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrtGTPIbDiw7Hw1sGjAYoX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUxMjA1MDYwMDQzWhcNMjUxMjA2MDYwMDQzWjAzMTEwLwYDVQQD Eyg5ZTVlMjQzZDU1Mzk3OTMzYjZmZTVlN2ExYTFkMjJkY2UxMDczYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2imiwQ4Qv/h7vmcdVxqejxMXVE6 E8hBwZ117lxazthke3qQulyG9UzNyFb/DU/2IbwEg+g7pkBE3aU/f02YXoXzyahg Kg4okWXzPeNGpRPtWrw/PWRn3gEnv/g7TeWb9zaFMcDucbaZ912sWKgmVmPGwItD TgWBxg98qe5IkfyfpdS9lsk0DRhHNZZnk4tZJWdumHlVhRQ+tcC249ZDIF+UsSuO D20mT9VzEqUzRztmKYgOswU4RDwTxUhamUGWCzJZFaMSKMJe3iOI/8q56V9i7ARU 6f4ziaVqSnKGq6yQkaB+LKWctfKZyfxV0/acBhwL8GfpNg41l4OOCjWIOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5eJD1VOXkztv5eehodItzhBzpeMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQjqRzS4 vlb5IoFPG4VhJXp025JGLflte1JDTgnxs6e6LmFNCfRIUyXhmElshdlWtNymIk9g AvwcU6GuUfLvNaHJ9P4BGAI5AnzxJP2e6NwLfSj6heYTucjhoYm0MUwgCa2KF1fs LIAZYCQO+FCmCgiwmxiJTwUakInRQOKgcWj+6NxHTiRpklsAeIFar/gznuBiqGdp M9y5/2FHC0GLnNcMnmCsds3qTjZjm/A6kl+NMvhV5bmV9doxjx9d30Oh8Yq7eplm w9eP6qBB20wxm5GDVG4wOc4h+wMZLJffu4mITMCGYlF7HaC56MVKo+pNO5aY+O3f XL3AK93Dfymi2w== -----END CERTIFICATE-----Generated at Fri Dec 5 09:32:37 2025 by rpki-client