This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json) Hash identifier: 5gFB36/YwI7vL0BuapGIn1ePLDUFcYCBV6Q58UbqkIA= Subject key identifier: 7D:88:04:E3:26:C3:0C:36:7F:4D:62:C1:E0:7D:8C:B9:6B:C7:B7:58 Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c Certificate serial: 019B40C8698BF87EE1197A0B131C32E16C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft Manifest number: 0A83 Signing time: Sun 21 Dec 2025 12:00:34 +0000 Manifest this update: Sun 21 Dec 2025 12:00:34 +0000 Manifest next update: Mon 22 Dec 2025 12:00:34 +0000 Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=) 2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: RZlg3b7BXTA4egiz0JiZ9tkTQiTMxL+1Gz/zhXNyEdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:69:8b:f8:7e:e1:19:7a:0b:13:1c:32:e1:6c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c Validity Not Before: Dec 21 12:00:34 2025 GMT Not After : Dec 22 12:00:34 2025 GMT Subject: CN=7d8804e326c30c367f4d62c1e07d8cb96bc7b758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:8e:9e:4a:3b:43:a0:d9:7b:31:57:12:49: 47:a0:8d:cc:ee:c7:7f:79:98:11:27:7c:0a:43:ff: 5c:83:42:3f:88:72:97:a4:c9:63:01:28:88:06:aa: 7a:19:f3:96:13:a4:63:00:fc:82:55:10:c4:52:21: 7f:0c:99:cd:cb:75:9f:e1:11:29:aa:96:39:4d:f2: bc:37:92:19:ed:4c:a1:00:23:14:34:4a:36:1f:b6: c9:c3:86:a3:6c:45:1b:1f:fc:13:3a:c5:a3:b8:4b: 15:4e:3f:b0:b1:03:63:17:26:49:58:09:b8:80:89: 04:8f:f8:e2:e5:aa:a3:ce:4d:62:26:a9:ed:8f:f1: ea:3d:f4:64:f9:2d:cb:62:11:6c:f8:a2:a1:3e:b4: 55:83:b9:9b:6b:bb:0d:70:a6:c2:e6:06:60:3d:4d: 8c:e7:09:dd:14:62:bd:cf:f6:44:ef:68:a2:83:ea: c4:db:db:92:39:0c:46:7b:a6:8c:de:3d:19:43:c5: 83:9b:8a:37:59:cc:58:fe:f4:97:f4:c3:e9:dc:34: 4a:33:99:55:dd:fe:97:61:60:43:d5:22:f3:2e:50: 3b:39:24:f8:86:ff:55:47:67:d2:ca:a4:c1:43:6e: dd:c1:cb:27:a6:3b:c9:17:34:57:99:e5:96:77:ac: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:88:04:E3:26:C3:0C:36:7F:4D:62:C1:E0:7D:8C:B9:6B:C7:B7:58 X509v3 Authority Key Identifier: keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:85:8e:22:19:9f:76:e3:21:be:c7:e2:4c:8c:4c:19:e2:fc: 85:96:31:29:66:c7:53:fe:a3:ea:5b:3a:46:42:60:7e:0b:00: 69:32:4c:cf:94:6a:7d:d6:1b:de:1a:e2:72:7a:48:ed:14:b9: 11:7f:3b:80:e9:17:b9:fb:cd:4f:83:34:4c:a6:7d:7b:f0:16: 46:6d:ad:4a:58:c4:78:7d:67:8d:2b:5a:14:50:78:bc:10:b7: 54:d0:0f:9e:25:dc:58:1a:d8:9d:6f:ce:c1:82:3d:53:7d:1d: e3:3f:8d:a3:6a:92:d5:54:8e:a7:f1:65:ee:03:96:ae:63:25: a1:01:e3:68:d9:72:34:c2:73:17:f8:79:96:89:db:ee:30:ef: 7d:27:aa:4d:7b:54:21:9e:88:c9:4c:b5:6d:bc:93:6b:7f:46: f1:f4:69:51:29:cf:84:a9:e8:04:c5:7e:6e:19:06:09:ce:81: 00:87:1d:ad:d5:0b:32:d6:19:97:3e:69:ab:9d:6d:6b:64:54: b4:f8:71:2c:a8:d6:3d:78:dc:65:e8:c5:21:6c:2c:b0:42:c2: da:de:4f:b7:99:51:00:4b:ac:40:19:6b:e1:2e:f4:a2:ff:b8: be:22:d5:ac:72:8a:b6:00:28:fb:70:55:ad:66:bd:34:d0:cf: 9a:38:9a:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyGmL+H7hGXoLExwy4WyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh MGZjOGMwHhcNMjUxMjIxMTIwMDM0WhcNMjUxMjIyMTIwMDM0WjAzMTEwLwYDVQQD Eyg3ZDg4MDRlMzI2YzMwYzM2N2Y0ZDYyYzFlMDdkOGNiOTZiYzdiNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5KOnko7Q6DZezFXEklHoI3M7sd/ eZgRJ3wKQ/9cg0I/iHKXpMljASiIBqp6GfOWE6RjAPyCVRDEUiF/DJnNy3Wf4REp qpY5TfK8N5IZ7UyhACMUNEo2H7bJw4ajbEUbH/wTOsWjuEsVTj+wsQNjFyZJWAm4 gIkEj/ji5aqjzk1iJqntj/HqPfRk+S3LYhFs+KKhPrRVg7mba7sNcKbC5gZgPU2M 5wndFGK9z/ZE72iig+rE29uSOQxGe6aM3j0ZQ8WDm4o3WcxY/vSX9MPp3DRKM5lV 3f6XYWBD1SLzLlA7OST4hv9VR2fSyqTBQ27dwcsnpjvJFzRXmeWWd6wxyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2IBOMmwww2f01iweB9jLlrx7dYMB8GA1UdIwQY MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4WOIhmf duMhvsfiTIxMGeL8hZYxKWbHU/6j6ls6RkJgfgsAaTJMz5RqfdYb3hricnpI7RS5 EX87gOkXufvNT4M0TKZ9e/AWRm2tSljEeH1njStaFFB4vBC3VNAPniXcWBrYnW/O wYI9U30d4z+No2qS1VSOp/Fl7gOWrmMloQHjaNlyNMJzF/h5lonb7jDvfSeqTXtU IZ6IyUy1bbyTa39G8fRpUSnPhKnoBMV+bhkGCc6BAIcdrdULMtYZlz5pq51ta2RU tPhxLKjWPXjcZejFIWwssELC2t5Pt5lRAEusQBlr4S70ov+4viLVrHKKtgAo+3BV rWa9NNDPmjiaVA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:52 2025 by rpki-client