This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json) Hash identifier: 8MgPvsHuDS8tTn/U6nlsKyQCJ65UrmJgAMVW+bvqlhY= Subject key identifier: C2:76:CF:D2:7A:BA:5F:77:7A:F9:D1:09:42:2A:CC:9A:49:F5:44:D0 Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce Certificate serial: 019B329F096F9DBE22B69D9FF6E419E197B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft Manifest number: 0EFA Signing time: Thu 18 Dec 2025 18:00:41 +0000 Manifest this update: Thu 18 Dec 2025 18:00:41 +0000 Manifest next update: Fri 19 Dec 2025 18:00:41 +0000 Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=) 2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: VYwOhanG558m2A1EiVdCPN0ul1TrtUsaO9wmZMRQhJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9f:09:6f:9d:be:22:b6:9d:9f:f6:e4:19:e1:97:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce Validity Not Before: Dec 18 18:00:41 2025 GMT Not After : Dec 19 18:00:41 2025 GMT Subject: CN=c276cfd27aba5f777af9d109422acc9a49f544d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:26:05:74:45:ad:1e:8c:80:9e:de:38:66: 21:36:43:ff:e9:42:7f:fb:21:26:d6:4c:fa:65:1a: de:cd:99:13:d0:5b:11:ae:6b:82:33:33:3f:43:7f: a4:e5:9b:70:e3:3f:1b:37:82:4b:c1:76:21:35:a5: 3c:d9:d6:ec:b8:d7:6e:a9:38:18:da:71:e6:3f:6f: b7:86:64:8a:2a:c0:ca:e4:90:5c:75:b4:54:51:55: 2e:b3:c6:0f:79:10:d8:58:77:f6:6a:7d:1f:ad:c3: 90:78:5c:31:af:d5:67:be:3f:1b:14:70:6b:16:f1: d0:e1:6d:0e:bf:82:ca:27:60:6b:ed:6f:cc:6c:aa: e0:65:55:20:d3:0a:bd:1c:15:42:1d:1f:fb:d0:0b: a3:1d:29:46:95:21:8b:20:8b:aa:5b:6c:15:d9:97: 8c:6a:bf:1b:b2:50:17:7a:2c:3d:31:4e:83:f1:a3: 84:fb:39:ee:1d:f1:bb:2c:cb:d6:0c:26:e6:d3:fe: 49:d2:3f:ae:f1:fc:44:23:7e:58:16:6f:2b:77:45: 3f:29:2a:02:f6:8a:b4:6c:a7:51:54:52:8c:d6:72: 30:82:e4:ab:8e:24:38:ee:72:88:43:59:ba:23:e2: 20:0e:9a:be:8b:01:06:c3:e8:11:5f:2a:f8:94:cd: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:76:CF:D2:7A:BA:5F:77:7A:F9:D1:09:42:2A:CC:9A:49:F5:44:D0 X509v3 Authority Key Identifier: keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7c:65:bf:cb:10:63:0c:12:6d:1e:d6:6e:86:63:a6:46:6a: 64:4c:56:eb:c7:be:53:ff:80:8d:09:29:b4:c0:03:b4:89:2a: 50:ed:9a:67:e3:dd:b1:c5:f7:bb:40:37:4d:0b:48:97:01:0b: 24:34:c3:42:5b:cc:b0:49:31:95:01:20:51:99:1d:ff:4c:67: 23:eb:64:59:e2:67:15:fa:d4:17:db:21:04:3d:b7:17:8c:65: 28:0a:1c:4f:71:24:9e:df:5f:8c:6d:cd:24:09:31:06:64:2b: cb:37:ba:b3:6d:03:d7:39:8d:41:00:76:26:f6:50:2e:49:c1: 1c:53:8f:9d:ae:75:7a:0b:d1:6e:71:0f:0a:4b:5a:35:e4:f4: 0b:91:a9:d6:78:1b:58:8f:af:92:c8:ab:75:97:19:f5:ed:ec: 4e:66:6c:84:d1:45:11:d9:5a:12:46:35:9e:3b:32:5c:ec:cb: 65:84:cb:0b:7c:7c:1b:d6:b0:68:b9:b3:e7:38:29:43:c0:bc: 94:33:cd:3a:4b:4b:b5:d9:9a:cb:7c:bc:ae:e1:78:d6:63:aa: f8:e4:ba:3b:39:87:a6:3b:c2:9a:53:74:55:20:b4:b6:8e:0e: 4f:8a:8c:81:c5:e6:2e:8f:13:c2:65:8c:b9:f4:40:83:a9:78: d1:e3:c8:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynwlvnb4itp2f9uQZ4Ze4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYWM0ZjYxZjQ2OGI3MjAwMmFiMjVmMTEyZTUyMDExZWQ3 ODJjY2UwHhcNMjUxMjE4MTgwMDQxWhcNMjUxMjE5MTgwMDQxWjAzMTEwLwYDVQQD EyhjMjc2Y2ZkMjdhYmE1Zjc3N2FmOWQxMDk0MjJhY2M5YTQ5ZjU0NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslomBXRFrR6MgJ7eOGYhNkP/6UJ/ +yEm1kz6ZRrezZkT0FsRrmuCMzM/Q3+k5Ztw4z8bN4JLwXYhNaU82dbsuNduqTgY 2nHmP2+3hmSKKsDK5JBcdbRUUVUus8YPeRDYWHf2an0frcOQeFwxr9Vnvj8bFHBr FvHQ4W0Ov4LKJ2Br7W/MbKrgZVUg0wq9HBVCHR/70AujHSlGlSGLIIuqW2wV2ZeM ar8bslAXeiw9MU6D8aOE+znuHfG7LMvWDCbm0/5J0j+u8fxEI35YFm8rd0U/KSoC 9oq0bKdRVFKM1nIwguSrjiQ47nKIQ1m6I+IgDpq+iwEGw+gRXyr4lM3vAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ2z9J6ul93evnRCUIqzJpJ9UTQMB8GA1UdIwQY MBaAFJysT2H0aLcgAqsl8RLlIBHteCzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQt MzcxZmM1YzgwOTUwLzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQtMzcxZmM1YzgwOTUw LzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHxlv8sQ YwwSbR7WboZjpkZqZExW68e+U/+AjQkptMADtIkqUO2aZ+PdscX3u0A3TQtIlwEL JDTDQlvMsEkxlQEgUZkd/0xnI+tkWeJnFfrUF9shBD23F4xlKAocT3Eknt9fjG3N JAkxBmQryze6s20D1zmNQQB2JvZQLknBHFOPna51egvRbnEPCktaNeT0C5Gp1ngb WI+vksirdZcZ9e3sTmZshNFFEdlaEkY1njsyXOzLZYTLC3x8G9awaLmz5zgpQ8C8 lDPNOktLtdmay3y8ruF41mOq+OS6OzmHpjvCmlN0VSC0to4OT4qMgcXmLo8TwmWM ufRAg6l40ePIkQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:21 2025 by rpki-client