This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json) Hash identifier: uig8xYHG11NU90HcdoGu/X8lMDRyTMhGfMFSgjaljOg= Subject key identifier: 41:C4:DD:62:01:9E:AF:E0:4B:B9:E1:B9:FE:1D:A4:A3:B3:5A:04:B7 Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20 Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20 Certificate serial: 019B3BD9A76B51B9D0DDE76E36337065437E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft Manifest number: 094F Signing time: Sat 20 Dec 2025 13:01:18 +0000 Manifest this update: Sat 20 Dec 2025 13:01:18 +0000 Manifest next update: Sun 21 Dec 2025 13:01:18 +0000 Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=) 2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: EcepBSD3uWgDVrwpEHDmL/QTdjtz46wetM9DU8/nUkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:a7:6b:51:b9:d0:dd:e7:6e:36:33:70:65:43:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20 Validity Not Before: Dec 20 13:01:18 2025 GMT Not After : Dec 21 13:01:18 2025 GMT Subject: CN=41c4dd62019eafe04bb9e1b9fe1da4a3b35a04b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:b0:c8:a2:1d:47:f4:6a:83:43:00:f4:1b: 10:44:97:76:67:5d:2a:0b:b7:0e:a2:74:41:2f:48: 2c:6c:2f:27:9c:ae:d8:8f:b9:9a:de:22:28:f4:ac: 7b:e3:ee:3d:96:3a:04:a5:56:c9:c4:34:fd:9e:1d: c4:6f:d2:8f:45:10:0c:f6:b8:3f:f8:82:1d:f3:37: d4:c4:40:0f:dc:67:10:62:a2:ce:9f:21:db:9a:76: 3c:68:8c:fc:7c:e2:03:23:77:78:2c:9c:f0:61:4c: d0:be:44:07:e5:0f:ee:db:17:39:b4:f8:fb:ab:43: 41:e6:9d:33:de:8c:5e:e5:1e:27:c9:66:19:49:56: cf:d7:6b:46:c2:49:5a:4a:2b:f0:8b:85:8e:0e:48: d9:ea:4d:bc:0a:b2:8d:cf:96:b9:11:f1:97:8c:09: 7a:e8:39:d9:bd:24:37:f9:96:dc:0f:bf:75:f9:de: aa:6c:52:91:b9:4b:d1:fc:6e:47:a3:eb:75:69:9d: cf:15:7c:6c:a2:87:5d:62:d2:76:55:22:6a:1f:76: 8b:12:af:ee:c2:8a:cf:47:db:9b:29:54:a2:c2:fe: 97:0e:ae:b2:d9:a4:c9:3b:7a:39:47:11:d1:a3:cd: 6f:de:1f:58:da:8c:48:36:a1:2d:17:e8:c6:9f:54: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:DD:62:01:9E:AF:E0:4B:B9:E1:B9:FE:1D:A4:A3:B3:5A:04:B7 X509v3 Authority Key Identifier: keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:96:52:52:f9:0a:6f:20:1b:26:b2:41:0a:86:8e:99:3a:d3: 4e:bb:e2:a2:5d:00:c7:db:20:db:ae:65:c5:4c:0a:bb:18:0d: 34:21:d4:8f:25:cb:87:fd:19:5b:3f:fe:59:21:b1:d8:5e:f5: 5a:b4:b5:e3:f3:69:8e:54:d1:14:88:2a:81:ec:bc:35:e5:4b: ab:48:50:a1:68:a9:b2:3f:49:8b:0c:d0:cf:f3:5f:eb:16:1e: 9b:3a:41:77:f3:5d:cd:f4:eb:a5:73:57:9f:91:88:1e:6a:71: c1:1e:31:5b:9a:ac:bf:57:db:31:d2:13:33:9b:a8:67:f8:62: b2:ac:85:6c:59:5b:e4:3e:26:4a:03:bd:98:5a:d4:4d:6a:64: 63:46:1a:f1:90:24:30:c2:c7:d6:2e:d2:41:b3:d6:c3:08:15: 6c:e5:fe:b8:6d:02:1b:6b:aa:ae:d2:b2:c9:61:f6:63:0b:e5: d7:14:12:e6:57:87:d9:8b:ee:28:bb:69:e8:be:20:1c:5b:29: 6e:7e:db:c0:71:7e:b7:d9:17:bc:14:32:bc:49:2b:29:65:02: 45:10:85:81:53:f6:00:6b:48:55:38:03:5e:ca:5b:aa:c8:9f: fd:f3:d3:14:0a:78:f2:6b:c8:31:da:ea:03:f2:94:d9:d6:c6: 95:df:a2:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72adrUbnQ3eduNjNwZUN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzI2ZjE4Y2Y5NmI4NmE0NTA2YjNiODRjY2M0NGQzYjM1 MDZhMjAwHhcNMjUxMjIwMTMwMTE4WhcNMjUxMjIxMTMwMTE4WjAzMTEwLwYDVQQD Eyg0MWM0ZGQ2MjAxOWVhZmUwNGJiOWUxYjlmZTFkYTRhM2IzNWEwNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy++wyKIdR/Rqg0MA9BsQRJd2Z10q C7cOonRBL0gsbC8nnK7Yj7ma3iIo9Kx74+49ljoEpVbJxDT9nh3Eb9KPRRAM9rg/ +IId8zfUxEAP3GcQYqLOnyHbmnY8aIz8fOIDI3d4LJzwYUzQvkQH5Q/u2xc5tPj7 q0NB5p0z3oxe5R4nyWYZSVbP12tGwklaSivwi4WODkjZ6k28CrKNz5a5EfGXjAl6 6DnZvSQ3+ZbcD791+d6qbFKRuUvR/G5Ho+t1aZ3PFXxsooddYtJ2VSJqH3aLEq/u worPR9ubKVSiwv6XDq6y2aTJO3o5RxHRo81v3h9Y2oxINqEtF+jGn1Rd7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHE3WIBnq/gS7nhuf4dpKOzWgS3MB8GA1UdIwQY MBaAFJzCbxjPlrhqRQazuEzMRNOzUGogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQt MDEzOTg5NDJmYjVhLzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQtMDEzOTg5NDJmYjVh LzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapZSUvkK byAbJrJBCoaOmTrTTrviol0Ax9sg265lxUwKuxgNNCHUjyXLh/0ZWz/+WSGx2F71 WrS14/NpjlTRFIgqgey8NeVLq0hQoWipsj9JiwzQz/Nf6xYemzpBd/NdzfTrpXNX n5GIHmpxwR4xW5qsv1fbMdITM5uoZ/hisqyFbFlb5D4mSgO9mFrUTWpkY0Ya8ZAk MMLH1i7SQbPWwwgVbOX+uG0CG2uqrtKyyWH2Ywvl1xQS5leH2YvuKLtp6L4gHFsp bn7bwHF+t9kXvBQyvEkrKWUCRRCFgVP2AGtIVTgDXspbqsif/fPTFAp48mvIMdrq A/KU2dbGld+iaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:01:08 2025 by rpki-client