This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json) Hash identifier: AsRlPw1VL3x3w33Sku5SRZDa1ktB08SDbQ+Hyu6xaPs= Subject key identifier: DC:A7:AD:08:AC:95:BB:1D:F3:2E:38:01:34:DF:85:69:CE:1C:F1:28 Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe Certificate serial: 019B1CF3306E35E865818E71A5F5E5DC287E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft Manifest number: 0733 Signing time: Sun 14 Dec 2025 13:00:58 +0000 Manifest this update: Sun 14 Dec 2025 13:00:58 +0000 Manifest next update: Mon 15 Dec 2025 13:00:58 +0000 Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: p1npBZdd0RTIm4OXVxi1ij9WdRkMnU2JDO5Wgq6QZ3s=) 2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:30:6e:35:e8:65:81:8e:71:a5:f5:e5:dc:28:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe Validity Not Before: Dec 14 13:00:58 2025 GMT Not After : Dec 15 13:00:58 2025 GMT Subject: CN=dca7ad08ac95bb1df32e380134df8569ce1cf128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:11:33:57:4e:96:96:f4:5e:15:75:df:c2:a2: 64:e8:f1:95:5f:3d:d7:e0:ea:42:a5:9a:7d:27:ea: bf:de:85:f2:f3:cd:30:0d:9e:97:96:9b:fc:62:ce: 98:25:a3:d6:55:d8:7c:06:f0:6f:de:5f:eb:20:47: 8f:ed:9f:4c:da:40:cd:c5:56:5b:dd:98:3d:60:29: c5:fe:81:00:1d:5b:38:d2:82:97:b2:ad:eb:c2:a3: 18:7b:87:31:bc:fc:6f:93:82:73:4f:54:c3:6c:83: 8c:3d:1d:dd:f5:23:6c:61:87:8f:3a:75:2d:7f:80: d9:af:c1:d4:27:89:cd:e6:2d:5b:2b:5f:e3:ea:d7: 40:96:cf:e9:56:d6:6a:c3:90:79:11:ac:61:01:76: 0e:c4:d7:d3:a0:1f:5f:4d:2e:04:3d:33:82:2b:b7: 13:c9:d9:aa:99:ad:c5:04:31:d5:40:f0:76:e3:70: c0:1a:59:3b:94:4d:6f:32:f9:e4:01:7e:29:05:9e: 24:37:d2:11:23:88:4f:71:0a:0e:fd:06:0b:be:72: ba:a3:ca:b5:a8:0b:2e:f6:b3:2c:b5:01:24:61:e0: 04:de:d0:69:22:3f:11:03:9a:0a:2f:54:37:03:62: 31:96:84:a1:6a:bd:07:ca:36:b5:f6:74:e8:32:94: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A7:AD:08:AC:95:BB:1D:F3:2E:38:01:34:DF:85:69:CE:1C:F1:28 X509v3 Authority Key Identifier: keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:ba:de:9c:43:23:29:73:70:24:f2:d9:12:fc:15:fc:54:fb: 81:f6:44:09:6b:b9:20:9a:5f:3e:40:11:31:ff:d6:e4:8b:ed: 51:ed:57:c8:5d:58:56:51:23:2d:b1:20:50:b8:d2:bf:3f:63: b4:74:83:b8:bc:4a:77:de:b8:15:bd:dc:22:83:9c:2a:11:12: 1e:a4:38:14:86:54:ea:82:68:de:01:ca:30:e3:4e:78:2a:1a: 87:25:9c:94:37:10:14:7c:e4:f5:07:b2:7d:a8:30:e4:00:d6: d6:5e:ec:19:18:8f:17:6e:dc:ea:30:cd:8b:48:ae:53:3c:3e: 23:44:91:49:4c:2b:ec:28:b0:89:c0:e1:05:41:0a:68:0f:a0: 59:b2:b5:7b:22:f1:88:77:cf:32:d8:9e:75:f8:5e:a1:b5:c9: f1:a3:c6:ce:c5:76:88:33:4e:ef:0c:2f:bd:3f:09:57:48:3b: c2:c5:ac:a7:30:c0:24:a3:fe:32:9a:cc:40:7a:a1:54:03:d3: 3f:4d:35:00:19:42:2a:2f:e4:18:25:13:40:80:43:97:c2:7b: 9d:1c:8f:28:88:6f:a6:7f:b6:aa:41:7c:7f:59:b2:b4:d1:aa: 0f:76:5a:af:61:97:28:fa:5b:98:f0:e3:c3:4a:9f:53:88:0a: 8e:6c:e8:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8zBuNehlgY5xpfXl3Ch+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2Y1M2YxZTBhZTZmNWYzM2RiY2Y4MGVhOGM3NDFmNjgy NDg1ZmUwHhcNMjUxMjE0MTMwMDU4WhcNMjUxMjE1MTMwMDU4WjAzMTEwLwYDVQQD EyhkY2E3YWQwOGFjOTViYjFkZjMyZTM4MDEzNGRmODU2OWNlMWNmMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hEzV06WlvReFXXfwqJk6PGVXz3X 4OpCpZp9J+q/3oXy880wDZ6Xlpv8Ys6YJaPWVdh8BvBv3l/rIEeP7Z9M2kDNxVZb 3Zg9YCnF/oEAHVs40oKXsq3rwqMYe4cxvPxvk4JzT1TDbIOMPR3d9SNsYYePOnUt f4DZr8HUJ4nN5i1bK1/j6tdAls/pVtZqw5B5EaxhAXYOxNfToB9fTS4EPTOCK7cT ydmqma3FBDHVQPB243DAGlk7lE1vMvnkAX4pBZ4kN9IRI4hPcQoO/QYLvnK6o8q1 qAsu9rMstQEkYeAE3tBpIj8RA5oKL1Q3A2IxloShar0Hyja19nToMpQBXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNynrQislbsd8y44ATTfhWnOHPEoMB8GA1UdIwQY MBaAFJzPU/Hgrm9fM9vPgOqMdB9oJIX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUt YWY2MzVkODc1NTc1LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUtYWY2MzVkODc1NTc1 LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA37renEMj KXNwJPLZEvwV/FT7gfZECWu5IJpfPkARMf/W5IvtUe1XyF1YVlEjLbEgULjSvz9j tHSDuLxKd964Fb3cIoOcKhESHqQ4FIZU6oJo3gHKMONOeCoahyWclDcQFHzk9Qey fagw5ADW1l7sGRiPF27c6jDNi0iuUzw+I0SRSUwr7CiwicDhBUEKaA+gWbK1eyLx iHfPMtiedfheobXJ8aPGzsV2iDNO7wwvvT8JV0g7wsWspzDAJKP+MprMQHqhVAPT P001ABlCKi/kGCUTQIBDl8J7nRyPKIhvpn+2qkF8f1mytNGqD3Zar2GXKPpbmPDj w0qfU4gKjmzowQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:29 2025 by rpki-client