This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json) Hash identifier: iWOYBorhB7jVOVCUgXJjXeqPJRJBNzXt3RfGwLMvFvw= Subject key identifier: F3:3C:BA:74:D7:87:92:1F:D9:D0:5E:B2:BD:57:E3:EB:17:58:F2:C5 Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c Certificate serial: 019B44A52C83FA5E40A14710AB2350A8B0B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft Manifest number: 0A85 Signing time: Mon 22 Dec 2025 06:00:33 +0000 Manifest this update: Mon 22 Dec 2025 06:00:33 +0000 Manifest next update: Tue 23 Dec 2025 06:00:33 +0000 Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=) 2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: g+rNVnIxdd4mHJKIN6livITZdffOOOx6bOxenfrruYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:2c:83:fa:5e:40:a1:47:10:ab:23:50:a8:b0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c Validity Not Before: Dec 22 06:00:33 2025 GMT Not After : Dec 23 06:00:33 2025 GMT Subject: CN=f33cba74d787921fd9d05eb2bd57e3eb1758f2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:f9:a1:6c:df:a8:d9:23:3c:39:78:1e:3a: 97:b0:75:ea:fd:cc:cc:4d:37:a7:17:d1:72:4e:3e: d8:21:0b:4e:49:de:35:85:f8:99:79:2c:a4:10:01: 5c:9b:e0:01:1f:06:a5:cf:47:ff:91:ef:b2:a9:3c: d7:52:5d:f2:85:fa:b7:02:f9:bd:44:9a:6b:0d:4d: cd:60:9c:2a:0d:64:c4:19:b7:8c:88:f0:07:25:4e: 64:43:ae:8f:0b:e7:f5:44:a8:c7:99:6b:16:18:a8: c9:fb:ba:07:81:b6:4f:96:59:76:1a:8c:4c:96:08: b8:f5:6a:b4:81:d1:99:08:b6:54:78:ab:cf:8e:c8: f0:f7:65:22:08:5f:f5:20:19:23:53:04:c6:3f:3c: 0f:05:6b:53:de:59:2b:cd:d7:9a:d1:86:63:b2:f3: 00:10:49:9c:0f:4a:85:80:a0:bb:d0:c7:c0:33:db: 47:94:2d:4d:f0:b5:bf:ab:3f:c2:8e:45:bc:da:e8: ed:c8:7c:80:37:06:00:bd:65:d7:44:17:4e:19:97: bc:03:d8:69:70:4c:90:92:36:10:3c:63:10:1a:04: 2e:69:e5:34:c7:41:ca:70:1b:af:7d:0c:0e:48:a9: b5:68:e0:b2:94:18:e3:59:20:bc:a3:ab:1a:21:ac: 33:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3C:BA:74:D7:87:92:1F:D9:D0:5E:B2:BD:57:E3:EB:17:58:F2:C5 X509v3 Authority Key Identifier: keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c2:00:66:8d:ec:dc:f5:14:ee:75:2f:50:dc:90:9c:07:62: f4:ff:77:e9:0d:60:d1:64:4f:83:ce:32:fd:03:8f:01:bb:57: 2b:a8:da:d7:d4:be:d9:9e:df:82:42:02:fa:a4:a1:67:3f:01: 19:02:29:5b:ac:6a:e3:e9:36:88:e0:b1:5c:3a:2b:0a:41:e8: c2:7a:31:ea:b4:c3:b0:7f:6c:d0:da:f1:96:b3:6a:39:a7:b7: a0:17:31:56:84:c2:b7:71:b9:b4:65:5c:d9:c0:8e:09:cb:e1: e6:e6:23:55:66:83:97:20:6c:86:b9:e4:d4:0a:1b:84:aa:03: 47:49:80:e9:92:89:98:66:45:ec:be:d4:83:d3:1b:a5:a4:ab: 7f:f2:59:73:e3:f7:6d:48:cc:e2:e1:8f:ac:98:36:74:f5:43: ab:a6:97:72:7f:eb:e4:80:3b:cd:47:da:af:7c:7e:77:87:b2: 51:53:21:31:7d:18:cf:39:9c:22:22:41:82:b8:9e:c3:5d:dd: e4:c7:e0:8d:94:9a:31:4c:1b:19:29:6b:8a:5b:6b:17:0e:dd: f1:f6:7b:32:f8:01:d7:fc:81:95:97:8a:e0:44:bf:0d:9d:05: 1a:37:75:f9:05:83:83:9b:c9:2c:03:0f:81:70:60:9f:70:c3: b3:36:02:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpSyD+l5AoUcQqyNQqLC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh MGZjOGMwHhcNMjUxMjIyMDYwMDMzWhcNMjUxMjIzMDYwMDMzWjAzMTEwLwYDVQQD EyhmMzNjYmE3NGQ3ODc5MjFmZDlkMDVlYjJiZDU3ZTNlYjE3NThmMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/v5oWzfqNkjPDl4HjqXsHXq/czM TTenF9FyTj7YIQtOSd41hfiZeSykEAFcm+ABHwalz0f/ke+yqTzXUl3yhfq3Avm9 RJprDU3NYJwqDWTEGbeMiPAHJU5kQ66PC+f1RKjHmWsWGKjJ+7oHgbZPlll2GoxM lgi49Wq0gdGZCLZUeKvPjsjw92UiCF/1IBkjUwTGPzwPBWtT3lkrzdea0YZjsvMA EEmcD0qFgKC70MfAM9tHlC1N8LW/qz/CjkW82ujtyHyANwYAvWXXRBdOGZe8A9hp cEyQkjYQPGMQGgQuaeU0x0HKcBuvfQwOSKm1aOCylBjjWSC8o6saIawzPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPM8unTXh5If2dBesr1X4+sXWPLFMB8GA1UdIwQY MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcIAZo3s 3PUU7nUvUNyQnAdi9P936Q1g0WRPg84y/QOPAbtXK6ja19S+2Z7fgkIC+qShZz8B GQIpW6xq4+k2iOCxXDorCkHownox6rTDsH9s0NrxlrNqOae3oBcxVoTCt3G5tGVc 2cCOCcvh5uYjVWaDlyBshrnk1AobhKoDR0mA6ZKJmGZF7L7Ug9MbpaSrf/JZc+P3 bUjM4uGPrJg2dPVDq6aXcn/r5IA7zUfar3x+d4eyUVMhMX0YzzmcIiJBgriew13d 5MfgjZSaMUwbGSlriltrFw7d8fZ7MvgB1/yBlZeK4ES/DZ0FGjd1+QWDg5vJLAMP gXBgn3DDszYCdg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:51:50 2025 by rpki-client