This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json) Hash identifier: QqFKuJiLjOOXbZhIgO2ng8WM9lBHfh479q5LA1oK990= Subject key identifier: EF:10:7F:B8:F2:D1:C4:89:C9:8C:01:1C:EA:6E:69:B5:24:32:9D:D9 Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa Certificate serial: 019B3AFDEB3FF0141DF69A6975CCA16E5E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft Manifest number: 0614 Signing time: Sat 20 Dec 2025 09:01:17 +0000 Manifest this update: Sat 20 Dec 2025 09:01:17 +0000 Manifest next update: Sun 21 Dec 2025 09:01:17 +0000 Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: htvuD0TPQSSJB3lXUL+H5LLMWW1LCByS85MYTsM3SGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:eb:3f:f0:14:1d:f6:9a:69:75:cc:a1:6e:5e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa Validity Not Before: Dec 20 09:01:17 2025 GMT Not After : Dec 21 09:01:17 2025 GMT Subject: CN=ef107fb8f2d1c489c98c011cea6e69b524329dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:9a:b1:df:c7:9e:fb:69:ea:0b:39:48:b0: ad:0d:fe:90:7a:a6:5c:a7:23:6b:a9:3c:d8:92:04: bc:86:a9:e7:af:8c:92:28:f8:84:1c:29:8b:4a:a8: 58:c9:6d:fc:7a:d1:17:fc:44:8c:cb:0e:c3:92:30: fc:af:84:f4:73:ad:bb:1e:e8:f7:65:0c:2e:07:61: 22:c8:9b:74:60:fc:66:40:b6:93:0a:5f:2f:2e:bd: ba:36:00:7e:f6:94:f5:03:a0:94:76:2b:bc:3e:ee: b6:40:57:c7:70:92:df:fc:c7:c7:e4:4c:e3:dc:39: e7:20:22:c5:36:7c:cc:cd:d2:e3:f6:63:de:b3:47: a0:73:a5:08:7c:dd:fc:38:12:25:b0:57:8d:87:63: c4:f2:da:8b:99:46:a0:b4:cf:bc:75:36:b2:48:10: 77:67:ef:c0:27:b6:82:af:b8:3d:79:4c:73:fb:70: 93:82:80:ba:d8:1b:4f:91:35:c3:4a:91:7c:8a:4c: 92:e3:31:8a:4f:0c:98:8b:42:32:b0:1c:23:9c:4a: 83:0e:c1:c5:bd:a6:9a:88:f9:94:52:2c:d4:44:a4: d9:ed:8d:a1:02:b0:02:fa:c3:a6:ad:ff:29:ab:83: aa:3a:a4:fd:ab:55:a1:69:4b:bf:59:31:cb:95:92: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:10:7F:B8:F2:D1:C4:89:C9:8C:01:1C:EA:6E:69:B5:24:32:9D:D9 X509v3 Authority Key Identifier: keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2c:8a:67:95:3d:eb:cf:bb:07:a2:23:52:ea:d8:ec:be:b7: de:5a:6c:fd:83:0e:1f:2e:87:af:d9:1d:c0:d6:eb:aa:f2:06: ec:ef:67:10:8b:d8:84:da:82:e1:f1:30:39:dd:c3:c9:42:e0: 94:65:fe:cc:f4:c4:ff:3b:de:1c:cb:80:7e:52:28:b0:31:a4: 9b:4c:4a:37:f6:27:7e:a4:07:c3:7c:82:ed:98:e8:aa:0b:24: da:b0:1f:26:cc:43:66:12:84:2c:8a:45:25:8d:30:31:36:5c: 8e:f7:f7:1a:33:d6:af:e9:a9:7c:4b:b1:a1:b9:58:0c:83:04: 46:43:d9:4a:c7:03:06:6a:59:9c:cb:71:dc:9d:d0:0a:bc:ff: 07:b3:62:da:a2:fb:34:14:8f:55:13:b7:bd:df:67:a2:c0:d3: 39:00:63:3b:0e:2a:64:ac:fc:8e:3b:04:9c:86:0f:03:14:0b: 5c:cf:95:ea:d0:1d:7d:1f:f8:14:8d:b7:4a:73:a9:29:46:12: a3:8f:98:b0:15:a5:ac:6f:b8:4d:94:bf:82:f4:79:df:f1:cc: 19:ea:56:42:98:31:f1:b0:ed:90:16:5e:c9:a2:e9:7f:d7:bb: 7b:57:9c:7a:a1:ad:4d:b6:db:5d:62:28:72:28:17:a3:e4:c9: bb:9e:c7:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/es/8BQd9pppdcyhbl6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjA1ZDRiZDVkNDJiNDE3NWFjYzYzNGFjY2YwZmZhMTg3 M2YwYWEwHhcNMjUxMjIwMDkwMTE3WhcNMjUxMjIxMDkwMTE3WjAzMTEwLwYDVQQD EyhlZjEwN2ZiOGYyZDFjNDg5Yzk4YzAxMWNlYTZlNjliNTI0MzI5ZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl2asd/Hnvtp6gs5SLCtDf6QeqZc pyNrqTzYkgS8hqnnr4ySKPiEHCmLSqhYyW38etEX/ESMyw7DkjD8r4T0c627Huj3 ZQwuB2EiyJt0YPxmQLaTCl8vLr26NgB+9pT1A6CUdiu8Pu62QFfHcJLf/MfH5Ezj 3DnnICLFNnzMzdLj9mPes0egc6UIfN38OBIlsFeNh2PE8tqLmUagtM+8dTaySBB3 Z+/AJ7aCr7g9eUxz+3CTgoC62BtPkTXDSpF8ikyS4zGKTwyYi0IysBwjnEqDDsHF vaaaiPmUUizURKTZ7Y2hArAC+sOmrf8pq4OqOqT9q1WhaUu/WTHLlZJybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8Qf7jy0cSJyYwBHOpuabUkMp3ZMB8GA1UdIwQY MBaAFJzwXUvV1CtBdazGNKzPD/oYc/CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEt OGJiYTVmYTNjMzE3LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEtOGJiYTVmYTNjMzE3 LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECyKZ5U9 68+7B6IjUurY7L633lps/YMOHy6Hr9kdwNbrqvIG7O9nEIvYhNqC4fEwOd3DyULg lGX+zPTE/zveHMuAflIosDGkm0xKN/YnfqQHw3yC7Zjoqgsk2rAfJsxDZhKELIpF JY0wMTZcjvf3GjPWr+mpfEuxoblYDIMERkPZSscDBmpZnMtx3J3QCrz/B7Ni2qL7 NBSPVRO3vd9nosDTOQBjOw4qZKz8jjsEnIYPAxQLXM+V6tAdfR/4FI23SnOpKUYS o4+YsBWlrG+4TZS/gvR53/HMGepWQpgx8bDtkBZeyaLpf9e7e1eceqGtTbbbXWIo cigXo+TJu57HGw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:12:19 2025 by rpki-client