This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json) Hash identifier: NCybaL4QNPZXfm2C7AMQqxBa7kzv3Kzy8YyfmRQ2+Hw= Subject key identifier: 33:00:38:79:79:96:07:EB:15:BE:BE:3E:CA:C9:6F:CF:B4:B5:D0:64 Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Certificate serial: 019B3D2340884434EB07FEBCD1AEBD7487CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft Manifest number: 1107 Signing time: Sat 20 Dec 2025 19:01:19 +0000 Manifest this update: Sat 20 Dec 2025 19:01:19 +0000 Manifest next update: Sun 21 Dec 2025 19:01:19 +0000 Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=) 2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=) 3: DfN89u0ZvthZxMTnUcXpfMOlKTs.roa (hash: msvl5pQNrCHYRzIqm+ZhzceMHlWNrK7pVc4fvVU8Aig=) 4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: x0VJpNFwYPZr/T1UWi4EFvfyRw+cBmdSKKw8UGDss7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:40:88:44:34:eb:07:fe:bc:d1:ae:bd:74:87:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Validity Not Before: Dec 20 19:01:19 2025 GMT Not After : Dec 21 19:01:19 2025 GMT Subject: CN=33003879799607eb15bebe3ecac96fcfb4b5d064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:47:aa:2d:ea:3d:99:aa:6a:51:70:21:0d: ca:29:25:c5:5a:e5:e1:47:00:8f:75:c2:61:12:f8: 43:2b:76:c2:a8:d0:5a:74:26:6a:e1:15:7f:c8:36: 10:35:c9:6d:bd:b8:c6:92:bc:32:9c:7d:93:bf:f5: ae:fe:6f:a5:38:7d:01:b2:d4:73:e5:8a:91:ca:29: d5:8b:54:94:54:ed:f1:b1:01:8d:ba:76:8a:92:64: fe:f8:9f:7f:0c:59:39:46:93:89:f9:89:70:fe:c9: e8:d4:59:16:83:e4:b8:72:73:31:30:e9:99:29:3a: c4:55:b6:27:68:ac:03:2b:c1:4f:a9:21:f1:00:97: d4:e4:71:a7:41:fa:90:15:2d:53:6a:0a:4d:25:40: 82:f4:85:c2:01:67:84:d5:3f:9c:51:ad:34:9e:d8: 95:e2:85:f2:97:e3:69:a4:29:50:61:d3:aa:77:ec: ff:66:b1:95:f4:ba:30:b3:58:ad:98:d0:a5:a3:60: 7f:ab:4d:38:08:f9:ad:33:ef:ed:3d:64:91:02:41: 29:0e:c6:88:98:85:48:e9:73:52:53:a2:c7:13:4e: 24:69:ca:35:49:35:15:af:27:93:c2:01:b8:c0:8c: fa:50:de:7b:a8:36:54:2a:a1:97:ca:69:99:48:b0: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:38:79:79:96:07:EB:15:BE:BE:3E:CA:C9:6F:CF:B4:B5:D0:64 X509v3 Authority Key Identifier: keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:61:5c:b0:89:0d:46:90:68:b4:eb:4c:a6:dc:9e:a2:b7:46: 49:ec:4f:c6:8a:7a:c9:5d:a9:67:8f:6c:d1:7e:0f:c4:01:e1: 52:a0:10:47:5e:66:96:70:ed:ab:ed:e1:b5:4c:d5:e2:a8:b5: 2f:9d:91:04:5b:28:af:3a:3e:98:49:ea:d8:de:4b:b8:a4:92: 9e:96:ca:0b:f2:93:c6:96:41:48:e8:d3:fd:64:a6:44:1d:45: 8e:a5:b2:6c:1c:85:6b:6f:ee:ad:2d:73:f3:77:1a:0f:39:00: c9:e7:fc:f9:77:6d:a3:40:a4:87:a4:2e:00:f1:92:24:93:b5: 39:be:fc:47:db:6d:87:44:f6:93:d0:57:dc:3b:f6:c3:37:bd: 5f:aa:1d:8f:4b:5d:20:39:73:81:22:06:c4:49:3e:24:31:52: 48:22:29:bd:d4:b0:8d:74:d0:d3:2b:03:73:07:3c:72:58:8a: 13:57:b8:6e:c8:b9:c4:d7:32:7f:30:d8:bb:59:da:8a:98:7f: 62:72:72:97:21:4e:08:a0:7b:6c:5f:e6:da:04:7d:f4:98:7b: 41:f0:5a:c9:f8:19:3e:59:36:f7:e0:6a:ee:8a:a5:46:9d:c4: 72:f4:84:3c:02:89:72:c6:88:9e:fe:0c:46:cf:c0:59:04:f2: be:93:81:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0CIRDTrB/680a69dIfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDQxZTllNzA1YWRhM2Y5YzFlODI3Y2QyNzZkYmQwOTc0 ODc2MDgwHhcNMjUxMjIwMTkwMTE5WhcNMjUxMjIxMTkwMTE5WjAzMTEwLwYDVQQD EygzMzAwMzg3OTc5OTYwN2ViMTViZWJlM2VjYWM5NmZjZmI0YjVkMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGpHqi3qPZmqalFwIQ3KKSXFWuXh RwCPdcJhEvhDK3bCqNBadCZq4RV/yDYQNcltvbjGkrwynH2Tv/Wu/m+lOH0BstRz 5YqRyinVi1SUVO3xsQGNunaKkmT++J9/DFk5RpOJ+Ylw/sno1FkWg+S4cnMxMOmZ KTrEVbYnaKwDK8FPqSHxAJfU5HGnQfqQFS1TagpNJUCC9IXCAWeE1T+cUa00ntiV 4oXyl+NppClQYdOqd+z/ZrGV9Lows1itmNClo2B/q004CPmtM+/tPWSRAkEpDsaI mIVI6XNSU6LHE04kaco1STUVryeTwgG4wIz6UN57qDZUKqGXymmZSLCi3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMAOHl5lgfrFb6+PsrJb8+0tdBkMB8GA1UdIwQY MBaAFJ5EHp5wWto/nB6CfNJ229CXSHYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWIt OTMyZDE2YjA4ZGYwLzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWItOTMyZDE2YjA4ZGYw LzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mFcsIkN RpBotOtMptyeordGSexPxop6yV2pZ49s0X4PxAHhUqAQR15mlnDtq+3htUzV4qi1 L52RBFsorzo+mEnq2N5LuKSSnpbKC/KTxpZBSOjT/WSmRB1FjqWybByFa2/urS1z 83caDzkAyef8+Xdto0Ckh6QuAPGSJJO1Ob78R9tth0T2k9BX3Dv2wze9X6odj0td IDlzgSIGxEk+JDFSSCIpvdSwjXTQ0ysDcwc8cliKE1e4bsi5xNcyfzDYu1naiph/ YnJylyFOCKB7bF/m2gR99Jh7QfBayfgZPlk29+Bq7oqlRp3EcvSEPAKJcsaInv4M Rs/AWQTyvpOBaA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:08 2025 by rpki-client