This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json) Hash identifier: 23+iwe2cEUxV11iKTv7Yxsq5rAk3Qsb2ZQfyARt2xfU= Subject key identifier: 68:F2:F7:15:31:88:46:49:F8:9F:BD:22:98:CA:95:FC:B6:6B:D7:9D Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20 Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220 Certificate serial: 019B0E5C2CF2FF3A03EC44427E287ED1AC20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft Manifest number: 0A8C Signing time: Thu 11 Dec 2025 17:01:20 +0000 Manifest this update: Thu 11 Dec 2025 17:01:20 +0000 Manifest next update: Fri 12 Dec 2025 17:01:20 +0000 Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: 9uq644mqyOgh9c/nrDelnzMUSYoCDZXO6DScuAiY3do=) 2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:2c:f2:ff:3a:03:ec:44:42:7e:28:7e:d1:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220 Validity Not Before: Dec 11 17:01:20 2025 GMT Not After : Dec 12 17:01:20 2025 GMT Subject: CN=68f2f71531884649f89fbd2298ca95fcb66bd79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:d4:53:1d:e4:2d:55:c7:47:bf:ac:05:d7: 18:7f:4c:86:d5:8d:e2:0c:c9:e8:81:21:44:74:d7: c3:44:14:b2:a4:cb:ef:d3:e9:90:80:12:36:50:07: 02:d5:c6:c5:9a:88:60:ea:a2:c4:78:fe:18:ea:ef: f2:8d:73:a7:61:f7:39:18:94:fe:6c:bf:3c:48:c9: a7:70:ad:aa:b0:41:0d:5c:32:cf:51:8c:2c:b5:97: 08:02:4f:90:0a:ca:33:b7:89:a3:49:3f:ee:f3:83: e6:83:98:52:7d:79:45:4e:09:ec:0e:32:e5:69:5b: 93:50:c9:66:ff:30:3c:0d:d7:d5:5a:67:80:78:0c: fd:92:a6:30:7b:c4:36:9a:50:32:da:79:0f:1e:ce: 73:03:ee:87:ed:b1:ce:e5:9a:f6:b9:71:95:41:bc: 47:d5:45:af:d7:5e:a8:1e:06:be:e4:42:ed:8f:f9: 67:a2:de:9f:de:55:81:16:98:f9:0a:dc:97:6b:76: d1:a5:27:b1:6a:cc:8f:2a:75:91:7c:60:a9:cf:21: 46:69:39:7e:54:65:98:ae:ed:7b:8a:a7:e9:f3:6f: 00:52:38:f4:9a:3f:a6:99:5e:12:fe:1f:ff:b6:fc: 26:e9:ee:a0:e8:c0:a6:16:7a:71:04:86:3f:24:c3: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F2:F7:15:31:88:46:49:F8:9F:BD:22:98:CA:95:FC:B6:6B:D7:9D X509v3 Authority Key Identifier: keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b0:72:8a:bc:32:54:3c:7b:91:e1:0b:6d:f2:91:2d:8e:22: 5f:61:6c:c2:b5:e6:02:c6:49:3e:9d:b2:e5:c7:df:1a:bb:90: 00:96:71:a9:95:1a:1b:66:36:ad:05:dd:bd:27:60:28:db:6c: dc:08:98:c3:20:28:32:9c:72:2a:11:18:a0:3e:8f:89:df:08: ba:a8:c1:ba:bf:12:cd:1d:40:db:8a:ed:e8:33:5e:00:cd:7f: 4a:60:b4:37:ab:ce:db:07:f9:05:23:f4:1c:e1:28:fb:3c:5e: 4d:a7:3b:27:54:a4:e0:1f:cd:4f:b7:a8:ca:87:59:7d:07:da: cc:fa:12:1b:df:76:1d:db:23:08:6b:99:9d:7a:ee:46:40:6b: 9b:84:b2:7e:11:bb:6b:18:29:c2:b3:a7:df:40:1c:95:db:f5: 98:72:5a:0c:dc:7a:35:c8:20:e6:01:d2:e4:e1:50:61:6b:62: e8:f9:1e:18:cd:0d:4d:dc:0c:0c:a9:cd:d4:2d:54:63:bf:fb: 01:44:f2:40:58:5c:07:8b:dd:e0:74:2c:9e:1d:87:a7:1d:6b: ea:e9:d3:42:5b:2c:15:b2:a3:93:84:ca:ae:1d:c9:f8:3a:30: df:a4:01:98:d8:13:bb:df:65:51:82:4a:c1:ce:65:38:d8:db: cd:34:e2:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXCzy/zoD7ERCfih+0awgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMGUzMDgwNzkyY2ZhOWYxNWYwM2ViM2ZkNzZjYTY4Yzhj ZGUyMjAwHhcNMjUxMjExMTcwMTIwWhcNMjUxMjEyMTcwMTIwWjAzMTEwLwYDVQQD Eyg2OGYyZjcxNTMxODg0NjQ5Zjg5ZmJkMjI5OGNhOTVmY2I2NmJkNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMfUUx3kLVXHR7+sBdcYf0yG1Y3i DMnogSFEdNfDRBSypMvv0+mQgBI2UAcC1cbFmohg6qLEeP4Y6u/yjXOnYfc5GJT+ bL88SMmncK2qsEENXDLPUYwstZcIAk+QCsozt4mjST/u84Pmg5hSfXlFTgnsDjLl aVuTUMlm/zA8DdfVWmeAeAz9kqYwe8Q2mlAy2nkPHs5zA+6H7bHO5Zr2uXGVQbxH 1UWv116oHga+5ELtj/lnot6f3lWBFpj5CtyXa3bRpSexasyPKnWRfGCpzyFGaTl+ VGWYru17iqfp828AUjj0mj+mmV4S/h//tvwm6e6g6MCmFnpxBIY/JMPcMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjy9xUxiEZJ+J+9IpjKlfy2a9edMB8GA1UdIwQY MBaAFJ0OMIB5LPqfFfA+s/12ymjIzeIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYt MjZmMzkzODQ4NzRmLzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYtMjZmMzkzODQ4NzRm LzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrByirwy VDx7keELbfKRLY4iX2FswrXmAsZJPp2y5cffGruQAJZxqZUaG2Y2rQXdvSdgKNts 3AiYwyAoMpxyKhEYoD6Pid8IuqjBur8SzR1A24rt6DNeAM1/SmC0N6vO2wf5BSP0 HOEo+zxeTac7J1Sk4B/NT7eoyodZfQfazPoSG992HdsjCGuZnXruRkBrm4SyfhG7 axgpwrOn30Acldv1mHJaDNx6Ncgg5gHS5OFQYWti6PkeGM0NTdwMDKnN1C1UY7/7 AUTyQFhcB4vd4HQsnh2Hpx1r6unTQlssFbKjk4TKrh3J+Dow36QBmNgTu99lUYJK wc5lONjbzTTihg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:06 2025 by rpki-client