This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json) Hash identifier: yfXnG5OBzEPa3rlOAX3zybHrhjAF1GEyGQa/SkhSC1U= Subject key identifier: CF:B5:52:F5:97:70:A5:2E:16:F4:D7:43:E6:0E:3F:37:1E:B1:8A:34 Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04 Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104 Certificate serial: 019B3BA274BBA51C3152EF1BEB1D5B9C3A2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft Manifest number: 0CFC Signing time: Sat 20 Dec 2025 12:01:00 +0000 Manifest this update: Sat 20 Dec 2025 12:01:00 +0000 Manifest next update: Sun 21 Dec 2025 12:01:00 +0000 Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=) 2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: nl3X9bca4SulHr/VKpeooBZXwAY0I4g45BTD5BBkDvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:74:bb:a5:1c:31:52:ef:1b:eb:1d:5b:9c:3a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3646213198899edfa8b42add473ada218748e104 Validity Not Before: Dec 20 12:01:00 2025 GMT Not After : Dec 21 12:01:00 2025 GMT Subject: CN=cfb552f59770a52e16f4d743e60e3f371eb18a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:37:c8:c9:1b:2e:70:1a:b9:43:25:87:b9: 59:a3:d7:89:82:c0:20:81:a4:b4:58:d2:db:47:41: 78:1e:3f:d8:06:f3:73:e9:7c:bf:04:4e:3d:22:1b: 1b:2a:20:46:4d:91:bc:a3:e9:c6:49:ce:e4:7c:9c: 28:01:4b:21:f3:94:a0:0d:b4:8a:47:d1:fc:52:59: d7:e3:0d:ef:ae:64:60:e9:3a:5d:b8:8a:c6:59:cc: 89:bb:b8:ab:c3:b2:04:1f:7f:69:59:e8:fe:dd:e5: 32:ae:cf:61:84:4c:ff:21:98:eb:5c:fa:32:f4:85: bd:93:e9:df:bf:3f:16:1e:c5:1c:77:5e:dd:a5:6a: 39:09:d6:a0:f0:6c:04:27:d4:e5:ac:f5:2a:11:25: 54:eb:ba:80:62:44:41:35:06:34:30:00:cf:d8:b3: 4d:4f:e9:da:08:61:8b:5a:69:e1:e9:fe:ed:9a:af: 23:d0:d3:3a:0d:83:c8:7a:65:1b:ef:0f:f9:c9:bb: 48:d6:4d:66:53:45:72:b6:11:4a:a5:d7:fb:92:26: 2c:8a:8c:47:dd:c8:50:e9:9f:ad:0a:2a:57:ab:bc: 06:bc:1f:68:1a:1b:6b:25:83:30:cd:08:76:60:89: b6:a8:58:06:67:3f:83:e0:d4:d0:df:9b:b5:d8:8b: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B5:52:F5:97:70:A5:2E:16:F4:D7:43:E6:0E:3F:37:1E:B1:8A:34 X509v3 Authority Key Identifier: keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f3:d4:77:e3:d5:44:07:34:22:57:1e:7e:df:84:98:3c:dc: 43:1c:ad:1a:3b:34:96:7c:9a:81:6e:02:20:a6:05:e0:aa:d9: 8c:68:12:0e:ce:94:32:80:b2:83:50:33:e6:ba:7c:31:b9:a8: bd:6a:88:1a:52:11:d1:98:08:f8:93:16:3c:aa:ad:98:1a:9f: b1:5c:8a:0a:99:cb:b4:c6:b3:99:c9:46:cb:64:98:55:ff:ad: ae:39:6f:35:08:20:45:c2:c9:aa:2f:1e:c0:a5:84:39:09:e8: be:e6:e0:d9:a7:a6:da:24:ae:df:17:79:8b:5f:0f:83:4e:2c: 66:5d:28:aa:76:30:8a:5c:85:20:cd:37:03:4a:29:7e:e4:24: 84:60:82:44:4f:5f:56:ac:46:09:ac:f8:1e:55:be:f6:36:ab: 3d:58:45:fb:0a:a7:fa:64:c1:73:77:fc:40:0e:c6:00:f4:3a: 6d:1e:c6:a1:09:c0:70:a4:71:d4:be:e0:f6:d2:61:d3:45:8e: 81:8a:5d:c1:0d:55:e6:90:a7:6f:b9:78:07:fa:3a:0d:7b:70: 57:16:50:f4:55:ea:df:5c:17:4a:1a:df:49:5d:7e:8c:1a:ae: 3f:cb:87:0e:6f:b0:7e:0e:b7:8f:3d:e2:c7:b8:07:2a:f1:82: 6f:cd:6f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onS7pRwxUu8b6x1bnDotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDYyMTMxOTg4OTllZGZhOGI0MmFkZDQ3M2FkYTIxODc0 OGUxMDQwHhcNMjUxMjIwMTIwMTAwWhcNMjUxMjIxMTIwMTAwWjAzMTEwLwYDVQQD EyhjZmI1NTJmNTk3NzBhNTJlMTZmNGQ3NDNlNjBlM2YzNzFlYjE4YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04o3yMkbLnAauUMlh7lZo9eJgsAg gaS0WNLbR0F4Hj/YBvNz6Xy/BE49IhsbKiBGTZG8o+nGSc7kfJwoAUsh85SgDbSK R9H8UlnX4w3vrmRg6TpduIrGWcyJu7irw7IEH39pWej+3eUyrs9hhEz/IZjrXPoy 9IW9k+nfvz8WHsUcd17dpWo5Cdag8GwEJ9TlrPUqESVU67qAYkRBNQY0MADP2LNN T+naCGGLWmnh6f7tmq8j0NM6DYPIemUb7w/5ybtI1k1mU0VythFKpdf7kiYsioxH 3chQ6Z+tCipXq7wGvB9oGhtrJYMwzQh2YIm2qFgGZz+D4NTQ35u12It7xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+1UvWXcKUuFvTXQ+YOPzcesYo0MB8GA1UdIwQY MBaAFDZGITGYiZ7fqLQq3Uc62iGHSOEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmIt MDZkYzM4YjU3NTM1LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmItMDZkYzM4YjU3NTM1 LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPPUd+PV RAc0Ilceft+EmDzcQxytGjs0lnyagW4CIKYF4KrZjGgSDs6UMoCyg1Az5rp8Mbmo vWqIGlIR0ZgI+JMWPKqtmBqfsVyKCpnLtMazmclGy2SYVf+trjlvNQggRcLJqi8e wKWEOQnovubg2aem2iSu3xd5i18Pg04sZl0oqnYwilyFIM03A0opfuQkhGCCRE9f VqxGCaz4HlW+9jarPVhF+wqn+mTBc3f8QA7GAPQ6bR7GoQnAcKRx1L7g9tJh00WO gYpdwQ1V5pCnb7l4B/o6DXtwVxZQ9FXq31wXShrfSV1+jBquP8uHDm+wfg63jz3i x7gHKvGCb81v1w== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:18 2025 by rpki-client