This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json) Hash identifier: 5Xz8Vq0olJnIsuzM49TkkBUitSfWW+JME3RxWe9NN/M= Subject key identifier: 94:60:80:FF:54:EA:A1:A0:DF:2F:F0:52:70:5F:5D:18:6B:68:24:86 Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3 Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3 Certificate serial: 019B3CEC589912B8360AA98E2BA0A5913FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 18:01:20 +0000 Manifest this update: Sat 20 Dec 2025 18:01:20 +0000 Manifest next update: Sun 21 Dec 2025 18:01:20 +0000 Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: GlSS6LvxidjGjCJH433VmRq23uVA/S9LGfUNyePYO9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:58:99:12:b8:36:0a:a9:8e:2b:a0:a5:91:3f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3 Validity Not Before: Dec 20 18:01:20 2025 GMT Not After : Dec 21 18:01:20 2025 GMT Subject: CN=946080ff54eaa1a0df2ff052705f5d186b682486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:02:ba:f8:87:51:99:d9:b8:c4:2c:33:25:88: b7:10:bf:66:8f:71:ee:3e:de:4e:03:0f:87:3a:5e: f5:cb:ee:5c:25:ef:d8:b4:b6:e8:a1:9e:34:03:92: b7:16:d7:67:45:5c:f4:c5:99:b4:d6:2b:f7:15:15: 62:e6:ff:05:b8:47:a4:2c:7f:e7:5c:5c:40:f2:4d: 21:e4:45:90:e9:e4:e9:9b:43:22:89:9f:f5:77:ee: 5b:e4:d4:bb:5b:de:8a:44:49:6f:fe:45:c0:50:58: a8:09:39:75:1d:11:17:c7:c6:88:35:46:e8:e4:72: 9a:d2:ae:13:8c:b9:d4:aa:67:d1:8e:b1:a7:fb:d9: f8:95:ee:e3:21:59:61:b4:84:61:70:ae:06:f5:b7: ab:b1:0c:7c:60:f2:eb:68:e5:2e:2c:38:13:3d:a2: 11:83:bb:5f:2a:e9:68:c3:3a:45:5e:50:d1:83:06: c2:1f:5c:14:a4:1f:58:de:47:14:8a:6d:9c:78:f4: 78:e3:d4:29:f2:b0:61:ce:53:e1:92:bb:75:41:0b: df:50:9e:10:ef:87:15:5e:e1:df:39:a4:16:98:99: e7:27:91:43:f5:f2:4a:cb:e6:33:a4:d6:72:2a:20: 0c:a9:1a:64:b6:81:ff:42:d4:40:41:94:26:fc:73: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:60:80:FF:54:EA:A1:A0:DF:2F:F0:52:70:5F:5D:18:6B:68:24:86 X509v3 Authority Key Identifier: keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0a:46:c8:1d:14:47:56:d7:10:e3:8e:11:36:03:7c:1a:68: b6:27:20:63:f5:24:82:55:72:44:bf:91:21:e2:8f:c3:e5:88: fd:b5:19:84:af:6b:a7:97:52:72:5a:31:53:2c:8d:a8:de:0e: 1f:89:e1:5b:06:96:f4:49:d5:9a:dc:59:e7:a6:91:4c:20:4e: 0a:1a:ae:b7:14:f5:75:e6:2b:3a:3a:ee:8f:22:94:3f:9f:08: ae:db:e0:6b:8e:ab:28:51:0a:06:0e:a6:c5:00:47:c4:63:86: 3f:11:c6:af:64:d5:d6:6d:ab:b3:53:b4:9d:1e:ff:17:f6:ac: 46:04:01:47:b3:e5:68:b1:8a:cc:5c:d6:d2:f6:29:46:24:d3: 7e:13:d2:ed:b8:cd:fb:c9:b1:35:84:4f:55:73:b8:da:f8:3d: 5a:dd:b2:65:2d:90:18:10:0e:43:7a:a6:4e:97:b4:51:0f:a3: 92:98:48:df:eb:84:45:de:0d:e6:7a:f5:e9:c7:a8:54:a7:21: 18:69:50:0b:1f:b2:a0:83:eb:1d:d4:73:9d:da:2b:fa:11:d8: d6:04:1a:ab:26:f8:c2:02:7f:6e:9d:9f:9a:d8:6a:8d:ac:65: 81:29:9b:35:a6:7f:af:f7:10:98:70:7f:f8:32:e8:d0:a4:04: f7:41:ae:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FiZErg2CqmOK6ClkT/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjMyMjk0NGIwNDhiNzA1N2U0NWVkMmNiMzQxYjU2MGUw YWM2YzMwHhcNMjUxMjIwMTgwMTIwWhcNMjUxMjIxMTgwMTIwWjAzMTEwLwYDVQQD Eyg5NDYwODBmZjU0ZWFhMWEwZGYyZmYwNTI3MDVmNWQxODZiNjgyNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wK6+IdRmdm4xCwzJYi3EL9mj3Hu Pt5OAw+HOl71y+5cJe/YtLbooZ40A5K3FtdnRVz0xZm01iv3FRVi5v8FuEekLH/n XFxA8k0h5EWQ6eTpm0MiiZ/1d+5b5NS7W96KRElv/kXAUFioCTl1HREXx8aINUbo 5HKa0q4TjLnUqmfRjrGn+9n4le7jIVlhtIRhcK4G9bersQx8YPLraOUuLDgTPaIR g7tfKulowzpFXlDRgwbCH1wUpB9Y3kcUim2cePR449Qp8rBhzlPhkrt1QQvfUJ4Q 74cVXuHfOaQWmJnnJ5FD9fJKy+YzpNZyKiAMqRpktoH/QtRAQZQm/HM4QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRggP9U6qGg3y/wUnBfXRhraCSGMB8GA1UdIwQY MBaAFJzzIpRLBItwV+Re0ss0G1YOCsbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzkt YjNjNWMwOTMzZDk3LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzktYjNjNWMwOTMzZDk3 LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwpGyB0U R1bXEOOOETYDfBpoticgY/UkglVyRL+RIeKPw+WI/bUZhK9rp5dScloxUyyNqN4O H4nhWwaW9EnVmtxZ56aRTCBOChqutxT1deYrOjrujyKUP58Irtvga46rKFEKBg6m xQBHxGOGPxHGr2TV1m2rs1O0nR7/F/asRgQBR7PlaLGKzFzW0vYpRiTTfhPS7bjN +8mxNYRPVXO42vg9Wt2yZS2QGBAOQ3qmTpe0UQ+jkphI3+uERd4N5nr16ceoVKch GGlQCx+yoIPrHdRzndor+hHY1gQaqyb4wgJ/bp2fmthqjaxlgSmbNaZ/r/cQmHB/ +DLo0KQE90Gusg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:13 2025 by rpki-client