This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json) Hash identifier: dvR2FkbiprixeRX23FgVv+jku7YzqFqX2NZrFlT7rjc= Subject key identifier: 02:97:2B:F9:68:F2:06:5D:78:57:84:97:57:D1:88:AE:1F:1B:CE:B2 Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Certificate serial: 019B4ADE5DE53D89AF0B9CB4E1AADD6243E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft Manifest number: 0B6D Signing time: Tue 23 Dec 2025 11:00:45 +0000 Manifest this update: Tue 23 Dec 2025 11:00:45 +0000 Manifest next update: Wed 24 Dec 2025 11:00:45 +0000 Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: vcJ7ahXhxZfT6DyvyH7kcFSFUAJgH2jA1aoCZQNJ/AQ=) 2: _1qhZEmD1ZR0wevnSQ5eeTD9plU.roa (hash: ZVkFLKtKLY5Jyd68UAmKFP29SRBsL9mEyi4TVzPBvdA=) 3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:5d:e5:3d:89:af:0b:9c:b4:e1:aa:dd:62:43:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde Validity Not Before: Dec 23 11:00:45 2025 GMT Not After : Dec 24 11:00:45 2025 GMT Subject: CN=02972bf968f2065d7857849757d188ae1f1bceb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:50:d1:66:fe:ee:91:c2:09:66:b6:77:d9: 8d:54:b2:b7:7a:18:25:d2:22:ee:ee:b0:31:7f:e1: c5:46:9c:db:dc:20:67:d7:df:2a:a6:b3:f1:ba:9f: 79:54:87:d7:85:f7:11:e5:59:6c:40:42:99:9b:fb: ae:df:3d:5f:8e:7e:f7:c1:06:f7:d8:50:28:fb:26: 55:d9:8b:34:33:55:ac:96:bd:22:a4:0a:ef:c9:2a: 8b:fc:17:82:83:d4:b7:3e:25:78:5e:0f:e7:75:87: 96:8e:f8:7b:b9:0a:e4:f1:5a:ad:fa:38:e1:d8:08: 45:c6:df:b7:fb:33:31:54:a1:c7:e8:8b:26:c5:f1: 7e:7b:59:1c:28:0a:a2:68:a4:9e:09:24:15:e7:81: 35:eb:3c:0d:dd:9d:d3:7f:4a:3d:f1:6b:16:ac:fe: 35:b5:0d:57:3a:60:64:10:1b:63:b0:f9:f0:ea:8f: 25:14:94:fc:78:89:40:d7:6f:0e:08:29:7a:f9:24: c5:8b:85:64:24:ec:0a:f6:02:0e:d4:2f:05:cf:97: 10:28:fa:18:2f:fa:9a:16:0a:8e:10:a8:9c:30:62: a1:ec:d0:7f:01:ca:56:cb:66:4e:65:30:12:55:b9: e4:45:e7:66:33:6d:a2:25:43:56:20:58:32:a4:51: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:2B:F9:68:F2:06:5D:78:57:84:97:57:D1:88:AE:1F:1B:CE:B2 X509v3 Authority Key Identifier: keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8a:a6:b8:d9:eb:1b:45:2f:ee:f8:6c:4d:c2:36:2b:85:de: 57:35:20:27:f0:1b:41:70:26:7b:dc:d0:bb:1c:76:f0:d7:6d: 04:56:df:1a:21:33:c5:e8:b7:14:21:a6:7f:f2:0b:53:fe:96: 9a:25:c6:c9:b6:39:7f:4f:cb:d1:77:9a:ba:dd:68:75:74:c5: dc:b1:7d:fa:21:e5:7b:ed:6d:91:f0:f0:9c:54:52:52:dc:31: ca:cb:dd:51:41:ab:e9:d8:87:09:27:ed:65:e3:17:84:35:3b: ff:61:54:51:db:fb:ca:df:0b:58:49:65:9d:f6:ad:ba:92:f9: 23:a5:d7:63:e9:39:af:c7:57:1d:27:08:13:c0:c0:42:28:c6: 0c:2f:6b:11:1b:1e:da:bd:eb:75:1a:e7:d1:9c:28:aa:85:bd: e4:b8:df:fc:20:48:52:b6:87:8a:1a:18:c3:d9:bf:bd:a9:53: 55:54:f2:b1:71:3d:ca:97:6f:c4:c4:28:69:66:93:d8:0b:36: be:f2:37:70:a1:22:37:cb:33:b4:05:fc:9f:55:81:c3:76:af: be:55:ac:8b:0f:42:19:29:38:e6:4c:cf:fd:96:48:46:7b:6c: f3:c1:0b:b5:3f:b1:a7:f5:1f:c6:43:5b:d1:77:b4:5e:8b:2f: 6b:0b:b5:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3l3lPYmvC5y04ardYkPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDYxNDJjZTMyOTBhYjY3ODZkM2QzMGYyNmI1ZTQxZmQ2 ODRkZGUwHhcNMjUxMjIzMTEwMDQ1WhcNMjUxMjI0MTEwMDQ1WjAzMTEwLwYDVQQD EygwMjk3MmJmOTY4ZjIwNjVkNzg1Nzg0OTc1N2QxODhhZTFmMWJjZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4NQ0Wb+7pHCCWa2d9mNVLK3ehgl 0iLu7rAxf+HFRpzb3CBn198qprPxup95VIfXhfcR5VlsQEKZm/uu3z1fjn73wQb3 2FAo+yZV2Ys0M1Wslr0ipArvySqL/BeCg9S3PiV4Xg/ndYeWjvh7uQrk8Vqt+jjh 2AhFxt+3+zMxVKHH6IsmxfF+e1kcKAqiaKSeCSQV54E16zwN3Z3Tf0o98WsWrP41 tQ1XOmBkEBtjsPnw6o8lFJT8eIlA128OCCl6+STFi4VkJOwK9gIO1C8Fz5cQKPoY L/qaFgqOEKicMGKh7NB/AcpWy2ZOZTASVbnkRedmM22iJUNWIFgypFGLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKXK/lo8gZdeFeEl1fRiK4fG86yMB8GA1UdIwQY MBaAFDZGFCzjKQq2eG09MPJrXkH9aE3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTct ZDMwODU0MmExZDg2LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTctZDMwODU0MmExZDg2 LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYqmuNnr G0Uv7vhsTcI2K4XeVzUgJ/AbQXAme9zQuxx28NdtBFbfGiEzxei3FCGmf/ILU/6W miXGybY5f0/L0Xeaut1odXTF3LF9+iHle+1tkfDwnFRSUtwxysvdUUGr6diHCSft ZeMXhDU7/2FUUdv7yt8LWEllnfatupL5I6XXY+k5r8dXHScIE8DAQijGDC9rERse 2r3rdRrn0ZwoqoW95Ljf/CBIUraHihoYw9m/valTVVTysXE9ypdvxMQoaWaT2As2 vvI3cKEiN8sztAX8n1WBw3avvlWsiw9CGSk45kzP/ZZIRnts88ELtT+xp/UfxkNb 0Xe0Xosvawu1bA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:03:57 2025 by rpki-client