This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json) Hash identifier: PG4UP3nYoEiTYoObeOyCzLiUmUltQrUXlvvWWmULWeM= Subject key identifier: C1:94:7E:17:42:27:57:4D:30:76:A7:15:01:14:24:C5:A9:B5:34:A6 Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45 Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45 Certificate serial: 019B481511E1C5872F55E3F6FFBCCF6F4447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft Manifest number: 0ABE Signing time: Mon 22 Dec 2025 22:01:38 +0000 Manifest this update: Mon 22 Dec 2025 22:01:38 +0000 Manifest next update: Tue 23 Dec 2025 22:01:38 +0000 Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: LTEZTvCgHL95kFj7E5zE+IVbrby3NXJwg2uFL6ac/0w=) 2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:11:e1:c5:87:2f:55:e3:f6:ff:bc:cf:6f:44:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45 Validity Not Before: Dec 22 22:01:38 2025 GMT Not After : Dec 23 22:01:38 2025 GMT Subject: CN=c1947e174227574d3076a715011424c5a9b534a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:e2:86:1d:3d:12:78:71:f8:e6:f0:ea:66: 33:4a:9b:0a:33:ff:8d:70:97:43:3f:81:53:59:93: b1:54:ee:aa:45:31:80:1f:fa:e2:7e:22:42:e1:c2: 81:ae:0c:d2:c0:30:d5:24:e1:91:f7:d6:bd:f8:43: bd:44:60:dc:63:7c:78:7f:75:93:26:f0:74:f2:95: 21:0f:40:fa:e6:8d:c9:99:dd:e2:e9:fa:cc:c0:6d: fa:78:8b:84:46:5e:1b:f4:b3:f2:a3:6e:d5:42:24: b7:0d:e5:9b:88:5b:6a:46:ff:78:02:97:22:e5:ea: 5e:15:d4:10:f3:a0:d0:8c:a2:df:df:61:15:d6:a6: 84:2b:6c:2e:78:b8:12:f2:39:d5:0b:0e:dc:5c:f9: a4:6d:5d:8e:e2:47:28:2a:ba:ce:a8:67:a1:71:9e: 0c:80:97:9a:e7:ea:fd:91:61:d4:07:73:0a:9c:4a: f5:b4:40:84:40:cc:bb:f7:2d:5b:45:ff:a3:a5:26: 7e:ca:dc:f9:49:26:52:cb:f8:c4:ca:c6:b5:82:bd: c9:5a:47:b8:4e:01:e4:63:b0:c3:14:d6:0e:fc:fc: 33:f7:34:53:46:58:d2:9f:24:0d:12:c7:a6:93:cc: c5:df:c2:82:04:eb:14:6a:46:75:4e:34:7c:64:12: 84:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:7E:17:42:27:57:4D:30:76:A7:15:01:14:24:C5:A9:B5:34:A6 X509v3 Authority Key Identifier: keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a9:fe:55:11:d0:9e:7c:88:59:6f:41:75:fa:7e:25:c5:7c: ca:c2:3a:03:bc:b9:3a:40:47:94:6e:fb:dd:89:2c:b6:30:47: 94:38:bd:9c:4d:0d:bc:fa:d9:3f:a4:87:03:25:c8:5a:d7:d9: c4:a1:09:0f:9d:92:6e:56:f6:d2:0a:be:0d:8d:84:cb:15:a3: 34:aa:a4:30:e9:96:58:e4:6b:bd:00:bf:c6:87:ab:f2:36:39: a0:e0:64:c3:ab:c1:76:22:50:34:e5:52:cd:7d:c7:4c:16:96: 86:5a:e6:14:1d:a1:ed:25:a3:4d:d4:33:a4:cf:01:19:56:a6: dd:d2:fc:58:a4:c8:1d:b1:90:d9:72:5b:db:80:63:f7:99:aa: e8:00:5c:94:93:80:09:67:61:62:b3:e1:22:44:b1:77:ba:dc: 2a:a0:8a:4a:bd:e5:24:52:58:d3:84:d2:10:0f:d2:7f:49:4a: fe:59:95:9d:15:03:5c:fb:41:9a:7e:a8:d6:80:45:52:b6:e4: f0:59:0a:0d:08:7e:cb:32:12:db:76:3f:71:7f:fa:96:ff:96: 67:f4:2a:c4:f3:e7:a5:47:ed:5d:22:4b:2e:6a:51:7d:28:7c: 51:a5:57:3c:a5:ed:fd:bd:52:90:6f:d0:02:1b:22:65:1d:8f: 8b:43:2a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFRHhxYcvVeP2/7zPb0RHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2 NDVjNDUwHhcNMjUxMjIyMjIwMTM4WhcNMjUxMjIzMjIwMTM4WjAzMTEwLwYDVQQD EyhjMTk0N2UxNzQyMjc1NzRkMzA3NmE3MTUwMTE0MjRjNWE5YjUzNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPXihh09Enhx+Obw6mYzSpsKM/+N cJdDP4FTWZOxVO6qRTGAH/rifiJC4cKBrgzSwDDVJOGR99a9+EO9RGDcY3x4f3WT JvB08pUhD0D65o3Jmd3i6frMwG36eIuERl4b9LPyo27VQiS3DeWbiFtqRv94Apci 5epeFdQQ86DQjKLf32EV1qaEK2wueLgS8jnVCw7cXPmkbV2O4kcoKrrOqGehcZ4M gJea5+r9kWHUB3MKnEr1tECEQMy79y1bRf+jpSZ+ytz5SSZSy/jEysa1gr3JWke4 TgHkY7DDFNYO/Pwz9zRTRljSnyQNEsemk8zF38KCBOsUakZ1TjR8ZBKE0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGUfhdCJ1dNMHanFQEUJMWptTSmMB8GA1UdIwQY MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKn+VRHQ nnyIWW9Bdfp+JcV8ysI6A7y5OkBHlG773YkstjBHlDi9nE0NvPrZP6SHAyXIWtfZ xKEJD52Sblb20gq+DY2EyxWjNKqkMOmWWORrvQC/xoer8jY5oOBkw6vBdiJQNOVS zX3HTBaWhlrmFB2h7SWjTdQzpM8BGVam3dL8WKTIHbGQ2XJb24Bj95mq6ABclJOA CWdhYrPhIkSxd7rcKqCKSr3lJFJY04TSEA/Sf0lK/lmVnRUDXPtBmn6o1oBFUrbk 8FkKDQh+yzIS23Y/cX/6lv+WZ/QqxPPnpUftXSJLLmpRfSh8UaVXPKXt/b1SkG/Q AhsiZR2Pi0MquA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:37:46 2025 by rpki-client