This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json) Hash identifier: FEFDixr+vKh0xAT9WUudsqcxtefMt1oDeojuna3dEQo= Subject key identifier: BE:5A:21:54:F6:BB:9D:FF:9F:3D:CF:F9:82:33:1E:D8:69:81:A4:BE Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Certificate serial: 019B446EBDE62EB7A3DCDB5630B50107F99C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft Manifest number: 0C7E Signing time: Mon 22 Dec 2025 05:01:06 +0000 Manifest this update: Mon 22 Dec 2025 05:01:06 +0000 Manifest next update: Tue 23 Dec 2025 05:01:06 +0000 Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=) 2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: HtGT9AwcrwTJgC0L/tRwqXr0FP36E0UsYlz+fedmYjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:bd:e6:2e:b7:a3:dc:db:56:30:b5:01:07:f9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Validity Not Before: Dec 22 05:01:06 2025 GMT Not After : Dec 23 05:01:06 2025 GMT Subject: CN=be5a2154f6bb9dff9f3dcff982331ed86981a4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:07:e6:fa:1d:c2:8a:24:bf:de:80:c3:33: 34:fd:23:12:ef:12:db:82:af:2c:a7:a6:80:30:6b: 6e:a9:0f:57:3d:40:66:50:96:ec:43:e1:cd:27:28: 34:de:01:f2:21:fa:fd:d6:12:80:42:47:3c:cf:22: 53:fd:d4:1f:63:d5:aa:dd:de:3d:76:49:ec:64:e9: 2c:dc:f2:77:cf:b8:c0:52:63:30:4b:e5:1e:46:0d: 78:bc:2a:48:e6:a3:ba:42:a1:49:28:29:3c:f1:e1: f3:ba:75:45:6d:c9:71:42:7a:61:d2:c3:f1:d4:65: c5:cc:c6:12:4d:6e:7c:ec:93:56:fe:3b:a3:63:f7: 05:96:9c:53:e6:75:b2:3d:04:a7:6b:87:39:66:26: 8a:a7:2b:b4:fc:82:6f:76:dd:e7:53:89:ba:6e:f2: c3:91:c0:12:2e:8c:36:12:ba:8f:be:9a:f1:6f:ce: 11:47:4d:83:4f:21:06:c3:90:92:8c:1d:38:d4:66: 94:e8:b8:a4:c8:40:11:3c:4f:4a:3c:50:28:4d:f2: 4a:5d:f3:7a:3a:a3:76:2b:7e:57:6a:f2:83:bf:a2: c6:a3:c5:aa:4d:ff:ee:a7:e6:fd:ba:22:60:cd:3a: 4b:ad:cd:c6:f4:0c:21:1e:92:15:58:81:b8:48:ea: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5A:21:54:F6:BB:9D:FF:9F:3D:CF:F9:82:33:1E:D8:69:81:A4:BE X509v3 Authority Key Identifier: keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:48:b1:f5:53:df:d7:4a:70:f0:b3:ad:82:df:27:77:39:68: ce:e1:12:fe:48:f2:fd:ff:76:53:27:31:f4:9e:a9:24:4c:e8: 37:6f:06:cc:90:09:22:29:55:d6:7a:b9:98:63:b2:a8:a9:67: fc:b8:c4:d5:0a:46:f5:31:e4:a2:24:e5:a8:ba:4a:96:cf:56: f1:2a:97:2b:6f:0f:e1:5d:1f:8b:0e:ca:09:0b:93:d0:4c:6f: 23:10:6f:f1:20:00:9b:3d:79:2f:8e:70:fc:aa:f9:be:ef:d2: 09:22:c6:7e:85:f2:ee:27:e3:2f:7f:75:32:c0:ed:62:a5:2f: be:17:f5:7e:4c:7a:b1:61:b6:b7:7c:ca:02:b2:16:73:7b:71: 84:55:cb:a0:cb:45:78:38:2a:f6:51:af:8f:81:8f:b3:0d:60: 5b:06:22:53:32:f5:e3:d4:24:f8:5c:79:8d:4f:0d:86:4b:a2: 57:3d:5b:7f:10:b9:b1:d3:bc:6b:e4:81:55:bd:43:20:e4:79: 53:f6:8f:a6:78:c7:5f:ab:bf:cd:19:56:04:aa:0e:21:7d:cf: 74:72:2f:0a:55:47:af:37:15:6d:93:7a:03:c9:ee:a4:1b:be: 13:b0:fb:50:5c:4b:15:d7:33:4d:00:a2:4e:60:7d:ca:e9:11: de:88:22:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbr3mLrej3NtWMLUBB/mcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGQ1NTQwYmRjZDMzMDUyYmMwMGZmZjI2NjMzOGJmM2Nj ODJhODAwHhcNMjUxMjIyMDUwMTA2WhcNMjUxMjIzMDUwMTA2WjAzMTEwLwYDVQQD EyhiZTVhMjE1NGY2YmI5ZGZmOWYzZGNmZjk4MjMzMWVkODY5ODFhNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO8H5vodwookv96AwzM0/SMS7xLb gq8sp6aAMGtuqQ9XPUBmUJbsQ+HNJyg03gHyIfr91hKAQkc8zyJT/dQfY9Wq3d49 dknsZOks3PJ3z7jAUmMwS+UeRg14vCpI5qO6QqFJKCk88eHzunVFbclxQnph0sPx 1GXFzMYSTW587JNW/jujY/cFlpxT5nWyPQSna4c5ZiaKpyu0/IJvdt3nU4m6bvLD kcASLow2ErqPvprxb84RR02DTyEGw5CSjB041GaU6LikyEARPE9KPFAoTfJKXfN6 OqN2K35XavKDv6LGo8WqTf/up+b9uiJgzTpLrc3G9AwhHpIVWIG4SOpaLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5aIVT2u53/nz3P+YIzHthpgaS+MB8GA1UdIwQY MBaAFJwNVUC9zTMFK8AP/yZjOL88yCqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUt MTZmYzlkNDRlYzdkLzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUtMTZmYzlkNDRlYzdk LzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEix9VPf 10pw8LOtgt8ndzlozuES/kjy/f92Uycx9J6pJEzoN28GzJAJIilV1nq5mGOyqKln /LjE1QpG9THkoiTlqLpKls9W8SqXK28P4V0fiw7KCQuT0ExvIxBv8SAAmz15L45w /Kr5vu/SCSLGfoXy7ifjL391MsDtYqUvvhf1fkx6sWG2t3zKArIWc3txhFXLoMtF eDgq9lGvj4GPsw1gWwYiUzL149Qk+Fx5jU8NhkuiVz1bfxC5sdO8a+SBVb1DIOR5 U/aPpnjHX6u/zRlWBKoOIX3PdHIvClVHrzcVbZN6A8nupBu+E7D7UFxLFdczTQCi TmB9yukR3ogifw== -----END CERTIFICATE-----Generated at Mon Dec 22 10:36:07 2025 by rpki-client