This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json) Hash identifier: +CYE6nfdn4pGmzbFBa/0eduUvn3e3+Z0espQ9xZZ99A= Subject key identifier: E0:D4:FC:FD:17:D7:BA:66:B8:FF:25:BC:BD:F5:74:22:97:34:2B:E5 Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8 Certificate serial: 019B6AD7805BE566159F2A4861FD0C273335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft Manifest number: 03A3 Signing time: Mon 29 Dec 2025 16:01:06 +0000 Manifest this update: Mon 29 Dec 2025 16:01:06 +0000 Manifest next update: Tue 30 Dec 2025 16:01:06 +0000 Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=) 2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: FDrZZS2DYJp1Z4GHPB2HlMOOKB04mrQwLqz6KBrEZEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:80:5b:e5:66:15:9f:2a:48:61:fd:0c:27:33:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8 Validity Not Before: Dec 29 16:01:06 2025 GMT Not After : Dec 30 16:01:06 2025 GMT Subject: CN=e0d4fcfd17d7ba66b8ff25bcbdf5742297342be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:d6:56:d2:56:d8:95:5b:08:b1:14:ae:60: d6:ca:4f:c5:2e:c6:b5:11:7f:18:34:37:a2:ad:3f: a8:9e:71:45:82:b9:8e:24:db:c6:25:3b:04:8d:14: 2d:3f:7b:5d:45:99:0e:47:bb:a2:b1:cf:5a:7d:4a: ce:54:fe:72:13:5d:4f:c1:ce:ee:9c:2d:7f:6e:a0: 80:49:a7:bc:ad:76:3d:76:ec:fb:18:de:ab:cf:26: f3:7f:ee:b4:4b:50:57:6a:3d:c1:f2:f8:5e:6e:59: 66:8e:34:70:e2:60:58:a8:31:f2:f3:38:a7:4c:b9: ac:4c:45:09:e0:77:45:70:b9:15:78:b2:2f:11:ca: cd:66:59:18:91:78:0d:ff:92:a0:99:83:c8:82:fe: 9a:9b:b8:fe:24:5f:76:c0:ca:13:77:e6:59:89:63: 74:9e:8e:e4:47:40:de:04:72:2d:32:57:3a:55:c9: 5f:84:64:41:6a:56:c1:fc:e4:1b:de:a1:f8:1b:d6: 6f:e6:29:7f:5a:8b:ef:a2:f4:ce:4f:1d:c7:45:b2: 1a:d3:a8:fe:1e:4d:25:02:7a:54:4d:1e:8b:23:13: f3:48:a9:0d:ca:7a:4a:6f:0e:e3:e6:a2:51:d3:ad: 7f:da:b4:3f:5d:b9:53:1b:fc:0b:7b:b9:36:e6:2e: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D4:FC:FD:17:D7:BA:66:B8:FF:25:BC:BD:F5:74:22:97:34:2B:E5 X509v3 Authority Key Identifier: keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6b:1b:9e:48:7a:b2:cf:13:7c:d2:6e:18:6c:2f:9d:dd:d1: 9b:da:cc:59:4d:f1:75:0d:30:8f:cb:f7:34:e2:f7:84:11:da: 08:a3:8f:c4:ee:82:e7:d6:69:a1:75:c6:10:61:b7:82:7d:df: 54:84:d6:49:a8:f5:6a:bf:42:19:01:58:1b:93:eb:54:9b:b3: dc:d8:8d:0a:9a:7b:29:d3:fc:24:88:7b:cf:f5:3e:15:36:74: 31:06:cb:b5:aa:c4:a4:ae:3e:e6:03:4c:43:34:1a:86:57:37: fa:55:c6:9c:bf:59:39:c2:5c:49:5c:df:5e:ae:c6:5f:00:e7: 4d:7a:e9:6f:2f:18:2d:4c:6c:a8:8d:10:f3:34:d2:ed:0b:68: 70:11:cb:a0:af:4c:07:fd:ae:73:78:b7:e5:8c:66:17:c7:41: 85:d0:53:89:87:7a:56:77:9f:84:38:b2:bc:e5:db:36:ed:03: 25:ea:6d:51:ab:e7:35:5c:56:bb:09:48:4a:d3:22:a9:f6:b5: 61:80:47:25:98:25:97:11:97:68:41:66:54:2d:b2:19:66:02: a7:37:7c:1a:6f:c3:b5:6d:84:fc:b7:27:03:ab:97:18:c6:8d: fa:6b:41:3e:ab:37:c0:93:e1:e5:48:e7:44:84:78:ff:52:8f: e8:0d:12:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq14Bb5WYVnypIYf0MJzM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UxNjAwZjUwNzM1OTYwZjg2ZDYyMWNkNGY1ZjU5Zjg3 OWEwZTgwHhcNMjUxMjI5MTYwMTA2WhcNMjUxMjMwMTYwMTA2WjAzMTEwLwYDVQQD EyhlMGQ0ZmNmZDE3ZDdiYTY2YjhmZjI1YmNiZGY1NzQyMjk3MzQyYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvfWVtJW2JVbCLEUrmDWyk/FLsa1 EX8YNDeirT+onnFFgrmOJNvGJTsEjRQtP3tdRZkOR7uisc9afUrOVP5yE11Pwc7u nC1/bqCASae8rXY9duz7GN6rzybzf+60S1BXaj3B8vhebllmjjRw4mBYqDHy8zin TLmsTEUJ4HdFcLkVeLIvEcrNZlkYkXgN/5KgmYPIgv6am7j+JF92wMoTd+ZZiWN0 no7kR0DeBHItMlc6VclfhGRBalbB/OQb3qH4G9Zv5il/WovvovTOTx3HRbIa06j+ Hk0lAnpUTR6LIxPzSKkNynpKbw7j5qJR061/2rQ/XblTG/wLe7k25i6dowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODU/P0X17pmuP8lvL31dCKXNCvlMB8GA1UdIwQY MBaAFJzOFgD1BzWWD4bWIc1PX1n4eaDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTIt ZGYzMmEyNWM1ZjJmLzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTItZGYzMmEyNWM1ZjJm LzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2sbnkh6 ss8TfNJuGGwvnd3Rm9rMWU3xdQ0wj8v3NOL3hBHaCKOPxO6C59ZpoXXGEGG3gn3f VITWSaj1ar9CGQFYG5PrVJuz3NiNCpp7KdP8JIh7z/U+FTZ0MQbLtarEpK4+5gNM QzQahlc3+lXGnL9ZOcJcSVzfXq7GXwDnTXrpby8YLUxsqI0Q8zTS7QtocBHLoK9M B/2uc3i35YxmF8dBhdBTiYd6VnefhDiyvOXbNu0DJeptUavnNVxWuwlIStMiqfa1 YYBHJZgllxGXaEFmVC2yGWYCpzd8Gm/DtW2E/LcnA6uXGMaN+mtBPqs3wJPh5Ujn RIR4/1KP6A0Seg== -----END CERTIFICATE-----Generated at Mon Dec 29 20:58:12 2025 by rpki-client