This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json) Hash identifier: wBn1PyhvIvKeusq053faLRx496a/YZPQF7LaSq3UIck= Subject key identifier: 62:31:5A:43:F4:33:5D:BC:88:21:45:43:62:C5:2E:E5:43:BD:80:C7 Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Certificate serial: 019B19BC07FB24793F95A116D9580E369229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft Manifest number: 1272 Signing time: Sat 13 Dec 2025 22:01:51 +0000 Manifest this update: Sat 13 Dec 2025 22:01:51 +0000 Manifest next update: Sun 14 Dec 2025 22:01:51 +0000 Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: /H6cHWHchdrZsD10ys9gTBUjAXGTNX+qXAR/f5GZ3yo=) 2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:07:fb:24:79:3f:95:a1:16:d9:58:0e:36:92:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Validity Not Before: Dec 13 22:01:51 2025 GMT Not After : Dec 14 22:01:51 2025 GMT Subject: CN=62315a43f4335dbc8821454362c52ee543bd80c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:9a:f7:61:33:d0:87:48:3f:8d:a6:01:8f: bf:14:2b:71:17:70:61:c7:5c:a6:c1:1b:2e:0f:77: d4:0d:05:78:35:a8:2b:21:72:84:c6:9a:76:e8:d8: 80:d5:f8:43:b7:d9:46:38:7b:b2:10:78:db:09:1c: 4b:6a:7c:d8:e8:1a:67:5d:be:ff:e2:c3:d9:11:73: 75:ed:cd:2d:46:4a:4f:e3:c0:f7:0b:51:77:dc:79: f3:81:ce:2b:e0:16:30:7f:0a:03:5d:5c:67:79:3d: 20:37:78:a3:30:d3:f0:1b:ef:3e:2f:88:58:9f:ce: e7:c1:fb:72:74:88:f3:c1:f1:47:86:dd:a3:e9:d0: c8:01:ad:83:11:2c:e6:d6:7a:70:c0:31:ed:20:3f: ce:21:30:6c:95:26:00:69:d9:65:a1:53:55:52:f3: a0:1e:47:70:88:cd:5b:57:61:39:12:66:45:ec:ba: 0c:e3:55:4e:db:c0:61:f9:c0:9f:46:2d:c7:25:79: ce:55:09:54:b6:9c:c6:fb:eb:66:1f:7e:84:16:24: c6:03:8b:36:94:2f:40:df:8f:5b:22:44:5e:50:bc: f0:76:f6:2c:c7:34:a5:01:00:4c:ed:ce:4c:bc:68: 36:32:54:d2:ca:a6:8c:42:9e:cf:2a:32:04:7a:5f: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:31:5A:43:F4:33:5D:BC:88:21:45:43:62:C5:2E:E5:43:BD:80:C7 X509v3 Authority Key Identifier: keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f9:e7:1d:8a:63:ca:1a:e3:75:4a:22:f2:10:14:4f:15:03: 30:ac:a6:1f:88:29:89:d9:07:37:fa:d2:ad:c3:22:69:15:fb: e9:45:ba:10:d7:73:b7:c5:08:ce:37:d0:05:cd:d6:bf:22:37: 0b:a3:63:f2:4b:6a:da:e5:7c:be:7d:74:1b:ed:3d:ca:23:41: 97:f1:3f:9e:e6:f8:aa:b0:11:b2:15:04:7e:9c:cd:f1:bf:b4: 96:13:11:bc:46:e1:f9:57:dd:db:80:2d:60:c9:8e:38:a7:2b: 3f:59:22:82:cb:e2:a5:c0:ea:b3:07:98:88:fc:25:8e:34:80: a0:84:02:c3:53:4c:5f:59:83:df:32:c1:55:55:a1:a9:84:1f: d1:cb:77:0e:31:41:80:6a:c1:0d:bb:68:3c:eb:f0:30:f5:c6: 6c:ed:82:87:0e:ed:93:14:e6:82:97:dd:c2:40:c9:3b:97:a4: ef:01:2f:b9:ba:7c:b3:46:4d:f1:aa:0d:b3:c2:e9:3e:f6:d8: 7e:56:10:aa:c0:67:5a:72:f0:19:05:e2:7e:31:5a:d0:f6:fe: 73:f8:54:a0:59:37:37:4a:bc:5b:66:4d:54:b8:14:31:b6:ef: 14:c1:81:92:3f:f3:36:aa:cb:01:f0:b1:d4:ce:ec:c0:13:f5: bf:96:4e:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvAf7JHk/laEW2VgONpIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz NGRiZTgwHhcNMjUxMjEzMjIwMTUxWhcNMjUxMjE0MjIwMTUxWjAzMTEwLwYDVQQD Eyg2MjMxNWE0M2Y0MzM1ZGJjODgyMTQ1NDM2MmM1MmVlNTQzYmQ4MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ya92Ez0IdIP42mAY+/FCtxF3Bh x1ymwRsuD3fUDQV4NagrIXKExpp26NiA1fhDt9lGOHuyEHjbCRxLanzY6BpnXb7/ 4sPZEXN17c0tRkpP48D3C1F33Hnzgc4r4BYwfwoDXVxneT0gN3ijMNPwG+8+L4hY n87nwftydIjzwfFHht2j6dDIAa2DESzm1npwwDHtID/OITBslSYAadlloVNVUvOg HkdwiM1bV2E5EmZF7LoM41VO28Bh+cCfRi3HJXnOVQlUtpzG++tmH36EFiTGA4s2 lC9A349bIkReULzwdvYsxzSlAQBM7c5MvGg2MlTSyqaMQp7PKjIEel+9KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIxWkP0M128iCFFQ2LFLuVDvYDHMB8GA1UdIwQY MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevnnHYpj yhrjdUoi8hAUTxUDMKymH4gpidkHN/rSrcMiaRX76UW6ENdzt8UIzjfQBc3WvyI3 C6Nj8ktq2uV8vn10G+09yiNBl/E/nub4qrARshUEfpzN8b+0lhMRvEbh+Vfd24At YMmOOKcrP1kigsvipcDqsweYiPwljjSAoIQCw1NMX1mD3zLBVVWhqYQf0ct3DjFB gGrBDbtoPOvwMPXGbO2Chw7tkxTmgpfdwkDJO5ek7wEvubp8s0ZN8aoNs8LpPvbY flYQqsBnWnLwGQXifjFa0Pb+c/hUoFk3N0q8W2ZNVLgUMbbvFMGBkj/zNqrLAfCx 1M7swBP1v5ZOvQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:45 2025 by rpki-client