This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json) Hash identifier: yxacemh2ZtTXJ12R6JEZhBHx/HwUtR3ZNfVkEHqfAaw= Subject key identifier: 82:A1:4E:CA:92:4C:1B:73:2E:54:F8:CA:BF:1B:8F:02:FA:AC:0F:4C Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3 Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3 Certificate serial: 019B3231D00043D1B0BE770EC66A8C5589BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft Manifest number: 1043 Signing time: Thu 18 Dec 2025 16:01:23 +0000 Manifest this update: Thu 18 Dec 2025 16:01:23 +0000 Manifest next update: Fri 19 Dec 2025 16:01:23 +0000 Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=) 2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=) 3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: YSPWblZKbXIB11h3Dd+xZMMr+x5KPRWZiqF380GT9mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:d0:00:43:d1:b0:be:77:0e:c6:6a:8c:55:89:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3 Validity Not Before: Dec 18 16:01:23 2025 GMT Not After : Dec 19 16:01:23 2025 GMT Subject: CN=82a14eca924c1b732e54f8cabf1b8f02faac0f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:23:e3:0c:66:eb:45:d7:06:07:a7:60:0b: 8b:bb:b1:22:31:f2:ff:84:99:8e:35:cd:21:57:41: 9d:b2:92:43:b3:4c:1f:38:49:5f:a8:45:81:59:97: 98:e5:de:aa:ff:ca:7f:d5:2d:90:85:7a:bd:a2:b0: 6c:1c:aa:9a:e9:d8:c0:28:b1:17:84:04:95:97:bc: 7a:3a:eb:c5:77:d9:53:76:34:df:3f:0a:02:2f:c2: 83:b3:ab:d3:d6:45:c1:37:28:d2:b8:8c:0c:06:81: a3:7c:10:63:c1:02:22:1d:46:ad:34:9a:4b:0b:09: 66:7b:04:fd:c7:ed:67:8d:1b:ee:29:2b:f2:6d:d8: 02:63:ed:02:c9:77:45:0d:87:18:e1:cc:ea:92:43: b6:c0:ac:97:5a:07:48:c9:cc:41:13:04:8c:70:18: bd:26:f9:be:8c:f0:79:3d:cc:6f:f6:0b:3b:16:20: 87:3b:bf:49:6f:2b:e4:ea:b4:c5:f3:8c:1c:af:d3: d3:65:11:15:d4:7d:e5:f1:eb:45:1c:53:05:21:dc: 52:d6:15:c0:7b:38:4a:6b:d4:8e:3a:27:00:fd:41: 76:83:20:b2:45:6e:04:1e:d6:08:a5:73:4a:46:50: 72:14:c1:c2:b6:2b:8f:c6:cc:0b:dd:3e:1e:53:e8: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A1:4E:CA:92:4C:1B:73:2E:54:F8:CA:BF:1B:8F:02:FA:AC:0F:4C X509v3 Authority Key Identifier: keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c3:a8:63:fa:d8:59:6b:f4:66:0b:80:74:a9:54:9d:36:b9: 9e:92:bc:50:ab:0f:f7:ce:46:78:a5:c7:0e:fe:93:bb:5a:32: e3:83:89:19:3d:cf:81:ba:d4:44:57:09:b1:ad:85:97:e4:50: 5f:4e:25:cc:df:4d:6e:65:89:6d:66:1d:f2:5c:fb:c7:d8:b3: b2:60:e4:47:07:7c:63:ab:dd:f0:d4:ab:e0:c6:d5:b3:13:72: df:13:e4:df:d0:98:da:d7:db:ad:02:d9:db:a5:08:d6:a5:d0: 31:7b:c7:c5:62:33:d4:27:ee:d5:10:4f:7e:6a:a4:8b:f2:59: 9e:d8:e7:d1:10:53:d9:6f:92:aa:cb:f8:d5:de:6e:44:a3:78: f2:4e:a7:df:0c:fe:ad:ae:58:b2:72:64:09:78:bc:97:e4:7e: 11:ce:b6:bc:e0:d7:ff:aa:4a:e9:56:f4:1b:34:5a:a9:96:62: d5:92:6f:df:ff:1e:91:b0:dd:f2:af:42:10:d3:5b:ff:ce:e7: 9a:f0:2b:ff:0a:8a:c0:77:88:8f:dc:58:20:c4:c6:17:85:35: 47:31:ce:32:0a:b5:96:f9:41:fa:ea:fa:b8:72:b0:69:70:14: b8:17:8e:54:48:98:e8:e2:6c:0f:7d:82:c6:23:53:14:03:18: 86:34:24:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMdAAQ9GwvncOxmqMVYm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl MzZlZDMwHhcNMjUxMjE4MTYwMTIzWhcNMjUxMjE5MTYwMTIzWjAzMTEwLwYDVQQD Eyg4MmExNGVjYTkyNGMxYjczMmU1NGY4Y2FiZjFiOGYwMmZhYWMwZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzMj4wxm60XXBgenYAuLu7EiMfL/ hJmONc0hV0GdspJDs0wfOElfqEWBWZeY5d6q/8p/1S2QhXq9orBsHKqa6djAKLEX hASVl7x6OuvFd9lTdjTfPwoCL8KDs6vT1kXBNyjSuIwMBoGjfBBjwQIiHUatNJpL CwlmewT9x+1njRvuKSvybdgCY+0CyXdFDYcY4czqkkO2wKyXWgdIycxBEwSMcBi9 Jvm+jPB5Pcxv9gs7FiCHO79Jbyvk6rTF84wcr9PTZREV1H3l8etFHFMFIdxS1hXA ezhKa9SOOicA/UF2gyCyRW4EHtYIpXNKRlByFMHCtiuPxswL3T4eU+hB1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKhTsqSTBtzLlT4yr8bjwL6rA9MMB8GA1UdIwQY MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3 LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsOoY/rY WWv0ZguAdKlUnTa5npK8UKsP985GeKXHDv6Tu1oy44OJGT3PgbrURFcJsa2Fl+RQ X04lzN9NbmWJbWYd8lz7x9izsmDkRwd8Y6vd8NSr4MbVsxNy3xPk39CY2tfbrQLZ 26UI1qXQMXvHxWIz1Cfu1RBPfmqki/JZntjn0RBT2W+Sqsv41d5uRKN48k6n3wz+ ra5YsnJkCXi8l+R+Ec62vODX/6pK6Vb0GzRaqZZi1ZJv3/8ekbDd8q9CENNb/87n mvAr/wqKwHeIj9xYIMTGF4U1RzHOMgq1lvlB+ur6uHKwaXAUuBeOVEiY6OJsD32C xiNTFAMYhjQk0w== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:15 2025 by rpki-client