This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json) Hash identifier: TcaBtV4sKU0ax8tc04oXZKH2S17aAt609iYAakzZH2M= Subject key identifier: 8F:68:A8:29:F6:67:D9:32:DB:7A:94:F4:D4:A5:4D:26:79:5D:AB:62 Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Certificate serial: 019B4091F74C6F41747B817AA09F15D2515F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft Manifest number: 0C7C Signing time: Sun 21 Dec 2025 11:01:06 +0000 Manifest this update: Sun 21 Dec 2025 11:01:06 +0000 Manifest next update: Mon 22 Dec 2025 11:01:06 +0000 Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=) 2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: /HV8hXbue00slBPBm71MUfmZQlT1v4Np0BRDeegz9IQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:f7:4c:6f:41:74:7b:81:7a:a0:9f:15:d2:51:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80 Validity Not Before: Dec 21 11:01:06 2025 GMT Not After : Dec 22 11:01:06 2025 GMT Subject: CN=8f68a829f667d932db7a94f4d4a54d26795dab62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:5c:bb:bb:e2:37:b3:b4:6a:19:87:57:2c: 57:99:3d:2b:e6:23:3d:c4:07:0d:dd:42:ad:8c:32: e8:98:63:6c:89:81:3f:5b:4d:de:ca:a6:fa:b0:51: dc:8d:1a:73:e7:c0:a9:e7:35:c3:71:6d:2d:de:e3: f1:4a:aa:e2:27:98:d8:90:18:b1:1c:9f:ea:db:c1: f9:68:7c:d5:92:32:ea:eb:1f:80:fa:c5:50:af:ca: 6f:1f:c1:b7:50:5e:1e:19:ec:79:f4:8d:f9:42:62: b7:21:3d:3e:0a:e4:b2:62:a2:10:27:1f:46:b8:61: 84:57:3f:39:e7:09:d1:0a:21:63:88:eb:a5:f0:0c: 9e:a0:a2:ce:11:44:b1:62:ee:75:e5:67:f8:a7:ed: 39:ae:ef:a0:22:41:83:95:4d:17:36:c5:05:36:f4: 58:02:4b:78:9e:c5:55:a3:b4:2f:a6:7f:5e:51:fe: 0f:46:8f:f7:92:71:62:fa:9b:19:6e:13:7f:9d:64: 25:f9:28:b1:29:56:b9:cd:5d:9b:e5:02:e0:bd:20: b2:bc:69:c0:1b:35:44:e4:d5:99:b6:21:fd:87:66: 65:65:f4:7a:ec:5e:4d:b1:14:83:fe:1a:a3:4d:11: 6c:2e:7e:15:15:ca:54:7e:e4:5e:a5:7b:79:51:1d: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:68:A8:29:F6:67:D9:32:DB:7A:94:F4:D4:A5:4D:26:79:5D:AB:62 X509v3 Authority Key Identifier: keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c6:5b:9d:54:c2:e8:de:37:ec:c6:0a:b2:45:85:2b:b2:b4: 3b:9e:75:31:27:6b:61:40:b3:f4:e5:9f:e1:64:68:05:8c:96: 28:c5:47:2b:e4:04:01:aa:8a:6d:65:d8:f5:ef:65:f5:ef:d4: 84:84:62:6c:00:6e:cf:f6:8e:fa:b1:92:02:bc:9f:9c:75:0b: 9e:ca:79:2f:d1:0d:fc:8e:eb:b4:00:88:df:1d:95:68:93:6b: cd:bf:9d:b3:7f:6e:63:eb:e4:79:c6:56:13:93:70:1a:3e:06: 5c:ef:a7:d4:a6:a8:1b:34:ae:79:af:cb:9c:a0:2b:8b:c7:50: de:e5:a2:e4:fb:29:c8:39:de:65:bf:2f:5a:7b:e4:3a:b6:a5: 5f:9a:b1:62:7b:4a:8a:32:6f:d7:0b:fa:0e:e0:c3:78:4e:da: 91:33:8c:97:04:35:3e:3c:37:2f:df:10:16:13:a5:85:e3:79: ee:2e:bd:6a:0a:0b:c5:9b:53:c3:43:68:53:63:34:9d:75:13: 0d:e3:49:65:3d:4c:36:ca:e7:df:1f:cb:f5:ee:f5:f8:5c:b9: b8:84:05:1a:32:f0:6c:2b:64:0c:e3:ec:45:9b:db:83:8f:ca: f4:6a:85:3d:23:85:38:8c:68:4c:3e:22:13:37:51:c8:9c:06: 94:f2:e6:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkfdMb0F0e4F6oJ8V0lFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGQ1NTQwYmRjZDMzMDUyYmMwMGZmZjI2NjMzOGJmM2Nj ODJhODAwHhcNMjUxMjIxMTEwMTA2WhcNMjUxMjIyMTEwMTA2WjAzMTEwLwYDVQQD Eyg4ZjY4YTgyOWY2NjdkOTMyZGI3YTk0ZjRkNGE1NGQyNjc5NWRhYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RBcu7viN7O0ahmHVyxXmT0r5iM9 xAcN3UKtjDLomGNsiYE/W03eyqb6sFHcjRpz58Cp5zXDcW0t3uPxSqriJ5jYkBix HJ/q28H5aHzVkjLq6x+A+sVQr8pvH8G3UF4eGex59I35QmK3IT0+CuSyYqIQJx9G uGGEVz855wnRCiFjiOul8AyeoKLOEUSxYu515Wf4p+05ru+gIkGDlU0XNsUFNvRY Akt4nsVVo7Qvpn9eUf4PRo/3knFi+psZbhN/nWQl+SixKVa5zV2b5QLgvSCyvGnA GzVE5NWZtiH9h2ZlZfR67F5NsRSD/hqjTRFsLn4VFcpUfuRepXt5UR3szwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9oqCn2Z9ky23qU9NSlTSZ5XatiMB8GA1UdIwQY MBaAFJwNVUC9zTMFK8AP/yZjOL88yCqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUt MTZmYzlkNDRlYzdkLzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUtMTZmYzlkNDRlYzdk LzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8ZbnVTC 6N437MYKskWFK7K0O551MSdrYUCz9OWf4WRoBYyWKMVHK+QEAaqKbWXY9e9l9e/U hIRibABuz/aO+rGSAryfnHULnsp5L9EN/I7rtACI3x2VaJNrzb+ds39uY+vkecZW E5NwGj4GXO+n1KaoGzSuea/LnKAri8dQ3uWi5PspyDneZb8vWnvkOralX5qxYntK ijJv1wv6DuDDeE7akTOMlwQ1Pjw3L98QFhOlheN57i69agoLxZtTw0NoU2M0nXUT DeNJZT1MNsrn3x/L9e71+Fy5uIQFGjLwbCtkDOPsRZvbg4/K9GqFPSOFOIxoTD4i EzdRyJwGlPLmtg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:06 2025 by rpki-client