This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json) Hash identifier: kTuQKSek5xFiL2K7q9LZTgb+L8DWNMbK/z0owxL97Bg= Subject key identifier: 73:D4:F0:4B:EF:60:6E:8F:3E:30:43:9E:A5:2D:E1:0A:9E:6C:65:CC Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c Certificate serial: 019B27AD611E22C22778A47FC1EC87372E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft Manifest number: 0A76 Signing time: Tue 16 Dec 2025 15:00:32 +0000 Manifest this update: Tue 16 Dec 2025 15:00:32 +0000 Manifest next update: Wed 17 Dec 2025 15:00:32 +0000 Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=) 2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: bBNRfXSpXKlENbgL2yppWogUHI4QolVyHl41hJiPikc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:61:1e:22:c2:27:78:a4:7f:c1:ec:87:37:2e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c Validity Not Before: Dec 16 15:00:32 2025 GMT Not After : Dec 17 15:00:32 2025 GMT Subject: CN=73d4f04bef606e8f3e30439ea52de10a9e6c65cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0f:c7:cb:d1:5c:67:5e:2b:46:6a:96:28:e8: f5:4b:2b:3b:46:4b:ab:5a:4c:8d:c4:d8:30:9a:be: 07:15:df:a5:62:f8:ef:30:70:d0:4c:45:d3:7c:74: 16:c9:97:aa:9e:41:26:eb:6f:72:cb:0f:f4:cf:d5: f0:a1:8b:37:a2:64:10:e5:15:a6:86:e8:3f:c7:e7: 48:f3:a5:b9:dd:db:46:e5:23:99:74:fe:1d:3d:be: 9f:db:d5:5d:82:b6:e2:5f:91:19:e8:35:a2:aa:8e: 7a:7c:02:b3:61:b0:9f:c5:f1:d2:dc:12:7b:43:2c: 7c:d9:95:8b:f1:86:69:80:3f:60:67:44:cc:09:f6: 66:a3:97:91:8e:76:a7:3c:47:27:a0:57:4f:63:42: 59:4a:15:5d:cd:d8:6d:40:99:fa:6d:98:38:1d:37: 98:83:43:74:a1:09:7e:7e:2c:49:de:ad:d4:8b:1c: 06:9a:3b:37:95:35:ad:fc:9d:89:ca:9c:3f:9b:7c: 74:38:31:76:4a:a3:87:84:63:5d:dd:05:d7:43:87: 01:3f:be:ba:54:4e:ca:d6:72:01:60:90:f0:ef:92: eb:2a:b6:70:7a:a8:49:85:30:9e:eb:ff:0e:23:71: 42:e0:7d:92:79:88:b3:3f:8a:13:18:45:69:39:65: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D4:F0:4B:EF:60:6E:8F:3E:30:43:9E:A5:2D:E1:0A:9E:6C:65:CC X509v3 Authority Key Identifier: keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:42:e5:72:c0:31:24:aa:81:d9:b6:09:6f:9c:91:4d:aa:b5: 8c:ef:c5:d7:82:f0:7f:ff:b6:9f:7c:a5:c7:d2:cf:0a:71:e3: 63:dc:3a:84:33:ca:73:6d:fd:51:e0:7a:45:18:69:e8:77:89: a8:f3:1d:fd:dd:9a:f9:4b:55:dd:a9:66:cb:a2:d8:18:e5:c0: 99:58:74:76:ef:ef:ba:f4:53:9a:44:9d:3c:ea:1f:5e:98:db: ad:25:83:84:8e:34:10:da:56:af:57:73:89:b8:b7:b4:0b:ca: cd:c8:cf:22:2c:63:b6:af:e5:e9:73:f4:55:2f:de:7a:9f:2b: 8e:b5:83:81:bf:c9:4e:68:11:b2:69:27:8d:e3:b7:f6:93:8c: 23:c7:ac:f7:0f:b6:b0:5f:ba:ad:61:5b:5f:ab:80:c0:4d:ed: 60:31:f6:a3:9b:c3:82:a1:7f:62:98:ae:37:ce:89:49:22:50: 90:13:f1:fc:42:eb:bf:34:89:07:79:49:82:aa:ad:8b:fe:dc: f9:2a:c6:82:d6:81:99:81:29:e2:1a:f8:8e:ec:62:4a:dd:3a: 3f:26:69:22:78:b3:f8:0f:55:48:86:f8:c8:05:9a:04:5c:b2: 1b:dc:0a:80:a9:f6:ba:42:6e:18:f8:87:9c:fd:a0:1d:66:4b: 34:5c:53:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrWEeIsIneKR/weyHNy5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh MGZjOGMwHhcNMjUxMjE2MTUwMDMyWhcNMjUxMjE3MTUwMDMyWjAzMTEwLwYDVQQD Eyg3M2Q0ZjA0YmVmNjA2ZThmM2UzMDQzOWVhNTJkZTEwYTllNmM2NWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg/Hy9FcZ14rRmqWKOj1Sys7Rkur WkyNxNgwmr4HFd+lYvjvMHDQTEXTfHQWyZeqnkEm629yyw/0z9XwoYs3omQQ5RWm hug/x+dI86W53dtG5SOZdP4dPb6f29VdgrbiX5EZ6DWiqo56fAKzYbCfxfHS3BJ7 Qyx82ZWL8YZpgD9gZ0TMCfZmo5eRjnanPEcnoFdPY0JZShVdzdhtQJn6bZg4HTeY g0N0oQl+fixJ3q3UixwGmjs3lTWt/J2Jypw/m3x0ODF2SqOHhGNd3QXXQ4cBP766 VE7K1nIBYJDw75LrKrZweqhJhTCe6/8OI3FC4H2SeYizP4oTGEVpOWUXpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPU8EvvYG6PPjBDnqUt4QqebGXMMB8GA1UdIwQY MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACELlcsAx JKqB2bYJb5yRTaq1jO/F14Lwf/+2n3ylx9LPCnHjY9w6hDPKc239UeB6RRhp6HeJ qPMd/d2a+UtV3almy6LYGOXAmVh0du/vuvRTmkSdPOofXpjbrSWDhI40ENpWr1dz ibi3tAvKzcjPIixjtq/l6XP0VS/eep8rjrWDgb/JTmgRsmknjeO39pOMI8es9w+2 sF+6rWFbX6uAwE3tYDH2o5vDgqF/YpiuN86JSSJQkBPx/ELrvzSJB3lJgqqti/7c +SrGgtaBmYEp4hr4juxiSt06PyZpIniz+A9VSIb4yAWaBFyyG9wKgKn2ukJuGPiH nP2gHWZLNFxTsQ== -----END CERTIFICATE-----Generated at Tue Dec 16 20:24:14 2025 by rpki-client