This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft File: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft (raw, json) Hash identifier: v50AFrmquMLrm1har7hoZ78jM3FRRmj/JaI8PYB7g20= Subject key identifier: 39:F1:98:83:FA:01:8D:74:C8:46:BB:47:C4:01:C7:90:F7:CC:1B:6A Authority key identifier: 36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9 Certificate issuer: /CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9 Certificate serial: 019B5975F8CE7CA9072B9C236D4590C6CEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft Manifest number: 02A9 Signing time: Fri 26 Dec 2025 07:01:02 +0000 Manifest this update: Fri 26 Dec 2025 07:01:02 +0000 Manifest next update: Sat 27 Dec 2025 07:01:02 +0000 Files and hashes: 1: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl (hash: fnWlwGPuxF9Waj9Vwm4zDHDCIjWkdb3kNMpCnzEB+qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:f8:ce:7c:a9:07:2b:9c:23:6d:45:90:c6:ce:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9 Validity Not Before: Dec 26 07:01:02 2025 GMT Not After : Dec 27 07:01:02 2025 GMT Subject: CN=39f19883fa018d74c846bb47c401c790f7cc1b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:ce:ea:57:8d:d2:cc:27:ae:3e:38:ea:f6: 9f:d4:4a:d1:e9:a5:73:98:05:78:c7:2b:e4:7f:7f: c2:51:78:07:73:45:af:fc:3d:a8:6a:6a:1d:aa:54: 18:c0:0b:e6:a7:7e:f6:88:0c:69:65:9b:15:7c:29: e7:d8:ab:de:90:0c:a3:ee:cb:1a:3f:2c:71:b7:7d: 1f:0f:11:15:02:00:e0:57:21:8f:dc:a5:b7:34:52: bf:49:22:85:99:76:bf:a5:29:52:5c:bc:9f:18:d4: 16:49:ae:c7:68:35:be:c3:b0:af:23:df:af:5a:e5: 6b:8e:2f:39:b1:2c:64:70:93:e0:1d:d0:e2:09:cb: 92:88:cc:a6:85:47:f0:7e:e8:59:6e:6e:85:e8:42: d3:8b:62:47:d1:8f:5d:a6:62:20:b6:92:66:88:6f: f4:31:6d:76:c0:cd:96:d4:e0:2c:96:b8:ba:4b:c2: fb:20:25:3f:3f:af:89:df:1e:ab:97:83:6d:09:23: 06:23:f8:11:41:4a:4a:72:97:06:c8:98:49:4c:75: 18:a5:13:e8:0b:70:1a:a9:65:45:56:07:ed:73:4c: 70:51:36:91:10:7f:31:30:7c:40:45:dd:0b:fc:a1: b2:71:7f:11:04:3e:a0:0b:9f:05:2a:ae:91:d4:85: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F1:98:83:FA:01:8D:74:C8:46:BB:47:C4:01:C7:90:F7:CC:1B:6A X509v3 Authority Key Identifier: keyid:36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:af:a4:00:02:bb:c8:7b:0e:c4:fc:28:18:fb:73:77:b3:bb: 4b:fc:f8:e0:4e:33:e5:51:19:c9:d4:fe:ef:a4:ef:7b:bd:1b: b8:1d:4e:42:d6:4c:a6:4f:10:14:59:10:0f:a8:d9:68:9d:a8: 4d:02:f2:2d:f6:fb:d0:80:47:2c:2d:bd:29:7f:5d:74:97:13: ee:bd:6c:53:ac:7c:b8:78:39:4d:a9:a1:92:74:43:35:4b:b1: 3d:d1:1f:c4:84:37:98:12:8d:64:cf:02:92:b9:26:09:b6:ad: 98:bf:75:1f:7a:44:16:79:6a:2a:b0:33:a7:72:67:d7:81:93: 36:1f:68:e1:c2:0e:56:b1:1d:5d:c4:44:7d:58:80:f9:29:36: a2:85:5f:32:3a:6b:c8:24:37:0a:2b:9c:7b:e6:9b:72:6a:7b: 2b:e0:02:24:83:3d:04:b7:7e:ab:c3:80:c7:76:a1:e9:a3:1b: 79:c8:53:a4:3e:64:69:88:d9:69:f4:2d:55:da:3a:3d:17:58: d4:40:af:bf:79:bb:1f:44:c6:66:d2:6b:1f:e7:04:e4:e0:18: e2:8c:ad:26:de:c5:b4:be:d2:81:a4:7d:1f:20:26:cd:6d:32: 56:31:6e:18:54:68:87:b8:fd:f7:1d:75:31:59:09:c0:e3:92: ec:fe:a2:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfjOfKkHK5wjbUWQxs6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NGQ0ODhiOGM3MzFiOTFkNGE1YTJiOTBhNjY2Y2VlYmMw ZTE4YzkwHhcNMjUxMjI2MDcwMTAyWhcNMjUxMjI3MDcwMTAyWjAzMTEwLwYDVQQD EygzOWYxOTg4M2ZhMDE4ZDc0Yzg0NmJiNDdjNDAxYzc5MGY3Y2MxYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlfO6leN0swnrj446vaf1ErR6aVz mAV4xyvkf3/CUXgHc0Wv/D2oamodqlQYwAvmp372iAxpZZsVfCnn2KvekAyj7ssa Pyxxt30fDxEVAgDgVyGP3KW3NFK/SSKFmXa/pSlSXLyfGNQWSa7HaDW+w7CvI9+v WuVrji85sSxkcJPgHdDiCcuSiMymhUfwfuhZbm6F6ELTi2JH0Y9dpmIgtpJmiG/0 MW12wM2W1OAslri6S8L7ICU/P6+J3x6rl4NtCSMGI/gRQUpKcpcGyJhJTHUYpRPo C3AaqWVFVgftc0xwUTaREH8xMHxARd0L/KGycX8RBD6gC58FKq6R1IXg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnxmIP6AY10yEa7R8QBx5D3zBtqMB8GA1UdIwQY MBaAFDZNSIuMcxuR1KWiuQpmbO68DhjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84N2YyYTAtZTA3Zi00ZDEwLWFhOWIt MmQwNmViN2YyOTlmLzEvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS84N2YyYTAtZTA3Zi00ZDEwLWFhOWItMmQwNmViN2YyOTlm LzEvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq+kAAK7 yHsOxPwoGPtzd7O7S/z44E4z5VEZydT+76Tve70buB1OQtZMpk8QFFkQD6jZaJ2o TQLyLfb70IBHLC29KX9ddJcT7r1sU6x8uHg5TamhknRDNUuxPdEfxIQ3mBKNZM8C krkmCbatmL91H3pEFnlqKrAzp3Jn14GTNh9o4cIOVrEdXcREfViA+Sk2ooVfMjpr yCQ3Ciuce+abcmp7K+ACJIM9BLd+q8OAx3ah6aMbechTpD5kaYjZafQtVdo6PRdY 1ECvv3m7H0TGZtJrH+cE5OAY4oytJt7FtL7SgaR9HyAmzW0yVjFuGFRoh7j99x11 MVkJwOOS7P6iyQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:59:56 2025 by rpki-client