This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json) Hash identifier: j1CFrCkqqlN4Tp/BMMJQh8BTL8jqlwMREuWfYk++bS0= Subject key identifier: 34:8D:56:8E:D2:2B:EB:FE:E3:95:D4:0A:47:53:8F:96:9C:3E:91:90 Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78 Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978 Certificate serial: 019B38A26D061B101BDB32EB12F80485BC3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft Manifest number: 091C Signing time: Fri 19 Dec 2025 22:02:07 +0000 Manifest this update: Fri 19 Dec 2025 22:02:07 +0000 Manifest next update: Sat 20 Dec 2025 22:02:07 +0000 Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: OMu1nM0wv9VqYaJXbubDs5afcKnKTssPOdi3kStmo/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:6d:06:1b:10:1b:db:32:eb:12:f8:04:85:bc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978 Validity Not Before: Dec 19 22:02:07 2025 GMT Not After : Dec 20 22:02:07 2025 GMT Subject: CN=348d568ed22bebfee395d40a47538f969c3e9190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:d9:41:dd:64:21:2c:72:e8:e7:6f:c2:5c: be:23:08:66:47:fb:40:6b:b6:8d:1a:46:ba:80:46: 99:d6:ee:a0:77:1e:4e:06:91:52:cc:07:a4:5d:16: 22:0a:cd:06:06:a7:21:a6:6f:6c:a9:50:d8:4b:9f: c7:90:4b:4e:d2:2f:e9:e7:4a:64:54:a8:f1:45:1c: c8:17:a2:34:08:e4:d2:57:ec:ab:36:b2:07:b2:0a: f5:4d:ee:47:28:21:20:ea:c3:77:3f:0c:fc:51:b3: 46:1f:9c:19:f8:64:07:b2:d7:c7:d3:e7:dc:50:10: 88:8c:8d:2b:b1:f7:8c:cb:4f:77:e2:87:95:cf:ce: 22:74:5b:d8:9e:44:04:28:10:93:3a:de:e5:a8:55: 2c:8e:a4:20:4e:87:69:fb:d5:2c:87:8b:93:38:e6: c2:d1:9d:68:e5:b7:9f:ce:7e:f8:da:b1:db:e2:88: ba:5a:c7:7d:e4:ae:ec:4b:8d:7c:0a:ef:2e:08:2a: 92:91:10:f7:8e:cd:d7:a1:97:15:02:7c:36:89:c3: 07:84:4b:a2:19:f3:b3:0e:fd:22:56:4e:10:76:73: 69:99:ff:85:51:c7:e0:ac:17:3a:f9:76:68:08:cc: 11:37:09:96:61:62:0b:7c:73:54:33:68:64:ed:07: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8D:56:8E:D2:2B:EB:FE:E3:95:D4:0A:47:53:8F:96:9C:3E:91:90 X509v3 Authority Key Identifier: keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b4:92:65:ed:5e:a2:0b:2e:68:aa:b0:2c:0f:14:34:4c:de: 5c:61:1c:f2:44:18:f2:16:f3:e2:1f:99:40:70:b1:bd:8e:5f: 23:79:20:18:1c:72:c8:38:f6:65:ca:a7:cb:a2:4a:2d:06:b7: ff:76:37:12:00:b2:d9:db:94:84:d9:ad:d8:05:3c:02:52:c9: e5:61:a3:a2:0b:16:69:fa:1e:3b:d2:28:74:60:ce:a3:1c:1e: 05:93:ee:00:c6:81:56:2f:35:29:ed:b3:1f:44:1d:f0:e1:22: 48:e2:f4:f0:b7:ef:71:ba:f2:20:7e:f6:7c:46:38:74:25:55: 80:62:1e:fd:82:39:e6:5d:f0:61:42:c9:e9:fb:28:ff:61:fb: 40:98:00:58:2d:df:ca:68:ec:72:3d:09:bd:63:27:76:60:48: 0d:2f:fe:77:7f:72:fb:6b:d1:60:e8:3e:c3:e2:48:f2:3d:b0: 90:12:67:91:2c:58:d7:f1:30:69:09:de:63:b5:5e:3e:27:26: 0b:3f:5b:e1:86:4b:eb:01:ea:09:e9:85:3b:27:10:1a:04:52: d6:aa:38:c4:87:29:d2:78:8c:8b:3a:73:37:0a:d4:6d:f9:b2: a4:13:6f:21:48:4e:cf:99:31:27:43:3e:29:91:ed:67:a2:b9: 85:f9:97:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4om0GGxAb2zLrEvgEhbw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjk4ODk2YTg4YWU4ZjM1NDBhZWI3N2VjYTFmMWE5NGJi ZDY5NzgwHhcNMjUxMjE5MjIwMjA3WhcNMjUxMjIwMjIwMjA3WjAzMTEwLwYDVQQD EygzNDhkNTY4ZWQyMmJlYmZlZTM5NWQ0MGE0NzUzOGY5NjljM2U5MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfvZQd1kISxy6Odvwly+IwhmR/tA a7aNGka6gEaZ1u6gdx5OBpFSzAekXRYiCs0GBqchpm9sqVDYS5/HkEtO0i/p50pk VKjxRRzIF6I0COTSV+yrNrIHsgr1Te5HKCEg6sN3Pwz8UbNGH5wZ+GQHstfH0+fc UBCIjI0rsfeMy0934oeVz84idFvYnkQEKBCTOt7lqFUsjqQgTodp+9Ush4uTOObC 0Z1o5befzn742rHb4oi6Wsd95K7sS418Cu8uCCqSkRD3js3XoZcVAnw2icMHhEui GfOzDv0iVk4QdnNpmf+FUcfgrBc6+XZoCMwRNwmWYWILfHNUM2hk7QfvoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSNVo7SK+v+45XUCkdTj5acPpGQMB8GA1UdIwQY MBaAFJz5iJaoiujzVArrd+yh8alLvWl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUt NzNkMDE0ZTgzNDliLzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUtNzNkMDE0ZTgzNDli LzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLSSZe1e ogsuaKqwLA8UNEzeXGEc8kQY8hbz4h+ZQHCxvY5fI3kgGBxyyDj2Zcqny6JKLQa3 /3Y3EgCy2duUhNmt2AU8AlLJ5WGjogsWafoeO9IodGDOoxweBZPuAMaBVi81Ke2z H0Qd8OEiSOL08LfvcbryIH72fEY4dCVVgGIe/YI55l3wYULJ6fso/2H7QJgAWC3f ymjscj0JvWMndmBIDS/+d39y+2vRYOg+w+JI8j2wkBJnkSxY1/EwaQneY7VePicm Cz9b4YZL6wHqCemFOycQGgRS1qo4xIcp0niMizpzNwrUbfmypBNvIUhOz5kxJ0M+ KZHtZ6K5hfmXxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:15:57 2025 by rpki-client