This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json) Hash identifier: HyRNwtBSpQOdAn231Mz9ThVp8PVFENUDpxt59bpri2Y= Subject key identifier: 6C:61:6C:74:D4:2C:BC:4A:1D:A0:55:B2:B6:A4:89:12:85:64:51:E4 Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8 Certificate serial: 019B2399A8AF9B6E59BD32FB2F06B95235AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft Manifest number: 117A Signing time: Mon 15 Dec 2025 20:00:31 +0000 Manifest this update: Mon 15 Dec 2025 20:00:31 +0000 Manifest next update: Tue 16 Dec 2025 20:00:31 +0000 Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=) 2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=) 3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: s7OG89DMGWvgshL6vSLOubm6g6H/JYdqq6tdrzAAXu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:a8:af:9b:6e:59:bd:32:fb:2f:06:b9:52:35:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8 Validity Not Before: Dec 15 20:00:31 2025 GMT Not After : Dec 16 20:00:31 2025 GMT Subject: CN=6c616c74d42cbc4a1da055b2b6a48912856451e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:70:56:5b:da:99:b3:ca:f7:19:16:10:c3:d5: d5:c8:9c:3a:99:2f:3a:4c:36:79:de:55:86:17:cd: f7:22:1c:b7:c4:69:ee:ff:88:8b:39:99:14:3b:92: b5:f4:0d:00:c0:96:aa:66:77:a4:aa:d6:f9:db:10: b9:ec:ce:1e:69:d3:ca:17:a4:0d:5c:a6:0f:ac:d0: f1:6b:cf:5e:e4:f0:25:b9:ec:a4:36:05:40:01:8d: 91:92:3f:4c:45:9f:ee:12:0d:f7:11:ba:a9:72:20: 67:c1:92:eb:0e:23:9b:39:b8:72:28:cd:cd:67:8d: fd:c1:ca:3a:c3:6e:32:b1:d6:0d:a3:9f:1a:9a:85: 57:4a:70:30:a8:70:2c:01:51:45:22:10:df:11:0e: 5e:db:47:b5:22:68:52:f6:68:87:c6:aa:6e:0b:82: fb:e9:3d:67:69:aa:e8:26:82:ed:23:8c:d0:38:7c: 06:45:ad:14:84:07:c3:af:e0:f8:0e:a6:3c:59:3e: db:33:93:89:89:2b:c0:00:ef:c3:d9:fa:fe:a8:f4: 25:a7:44:72:55:86:cd:63:e4:49:29:d3:29:0d:38: 81:29:f5:e5:22:40:55:d9:90:9f:c5:14:29:ce:f4: c4:5e:47:d2:ca:3a:81:eb:4d:cc:a6:80:8d:40:5a: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:61:6C:74:D4:2C:BC:4A:1D:A0:55:B2:B6:A4:89:12:85:64:51:E4 X509v3 Authority Key Identifier: keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:6b:76:78:87:0c:74:51:a7:15:97:f0:6a:a3:70:46:67:7b: 18:cb:50:4c:24:3a:b4:8a:19:d9:b5:3c:77:a7:48:29:f1:cb: 5a:73:51:72:60:72:1e:3b:2b:39:63:fb:9a:1a:8b:ec:46:f0: 21:94:f6:59:f5:1b:96:f3:49:e5:9b:fa:7e:66:f7:04:0b:1d: 29:9c:95:bd:84:cb:6f:d3:e1:e1:cd:96:a4:c5:f8:d2:d3:91: a8:e1:92:0a:1e:84:d6:2c:98:b7:bb:72:48:14:6f:6a:59:ab: 57:d5:3f:d5:d0:e4:b1:0e:b7:8a:66:7f:aa:46:26:9f:9e:c3: 4a:41:cf:f0:c1:3c:b0:54:62:f0:91:44:e8:29:78:55:24:58: 31:39:e4:41:18:71:b2:33:c5:34:86:c4:96:36:76:66:c0:95: 3d:58:41:07:cc:8b:04:1b:df:a5:d4:07:bf:cd:82:0a:4d:2e: 08:88:bc:72:f0:70:0a:7e:56:bb:cd:23:39:7f:ea:b3:39:87: 04:9e:4b:4a:c6:3c:0f:fd:f7:b5:c4:f1:98:f8:dc:b9:3a:96: f1:6f:af:01:f5:1f:62:a1:fc:9d:40:b7:3c:b1:4f:31:51:02: 5e:de:bc:e7:e6:82:f6:7d:51:b4:0d:34:73:83:4b:2a:44:6e: 64:09:b3:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmaivm25ZvTL7Lwa5UjWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYThhMTMyNTE5YTI0Mjk0OTQ5NzM2M2I4Y2FhMzNlNzJj NjczZjgwHhcNMjUxMjE1MjAwMDMxWhcNMjUxMjE2MjAwMDMxWjAzMTEwLwYDVQQD Eyg2YzYxNmM3NGQ0MmNiYzRhMWRhMDU1YjJiNmE0ODkxMjg1NjQ1MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXBWW9qZs8r3GRYQw9XVyJw6mS86 TDZ53lWGF833Ihy3xGnu/4iLOZkUO5K19A0AwJaqZnekqtb52xC57M4eadPKF6QN XKYPrNDxa89e5PAlueykNgVAAY2Rkj9MRZ/uEg33EbqpciBnwZLrDiObObhyKM3N Z439wco6w24ysdYNo58amoVXSnAwqHAsAVFFIhDfEQ5e20e1ImhS9miHxqpuC4L7 6T1naaroJoLtI4zQOHwGRa0UhAfDr+D4DqY8WT7bM5OJiSvAAO/D2fr+qPQlp0Ry VYbNY+RJKdMpDTiBKfXlIkBV2ZCfxRQpzvTEXkfSyjqB603MpoCNQForLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxhbHTULLxKHaBVsrakiRKFZFHkMB8GA1UdIwQY MBaAFJyooTJRmiQpSUlzY7jKoz5yxnP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWIt MDBjZDg2YWY4NDlkLzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWItMDBjZDg2YWY4NDlk LzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2t2eIcM dFGnFZfwaqNwRmd7GMtQTCQ6tIoZ2bU8d6dIKfHLWnNRcmByHjsrOWP7mhqL7Ebw IZT2WfUblvNJ5Zv6fmb3BAsdKZyVvYTLb9Ph4c2WpMX40tORqOGSCh6E1iyYt7ty SBRvalmrV9U/1dDksQ63imZ/qkYmn57DSkHP8ME8sFRi8JFE6Cl4VSRYMTnkQRhx sjPFNIbEljZ2ZsCVPVhBB8yLBBvfpdQHv82CCk0uCIi8cvBwCn5Wu80jOX/qszmH BJ5LSsY8D/33tcTxmPjcuTqW8W+vAfUfYqH8nUC3PLFPMVECXt685+aC9n1RtA00 c4NLKkRuZAmzvg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:08:20 2025 by rpki-client