This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json) Hash identifier: Qxv6l9OviIqARUqG4MYW/5TGq+nKL9D7lxZmF7KqdY0= Subject key identifier: 58:94:39:F6:F9:59:2D:30:1A:E5:43:C9:CF:D8:A8:D6:37:F6:E2:74 Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3 Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3 Certificate serial: 019B3DC7709528E1FDD52161B76418D22F16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft Manifest number: 1049 Signing time: Sat 20 Dec 2025 22:00:39 +0000 Manifest this update: Sat 20 Dec 2025 22:00:39 +0000 Manifest next update: Sun 21 Dec 2025 22:00:39 +0000 Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=) 2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=) 3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: QXbkfdD1uhXfZEl1QKSJCPDTUC9/21/hgGEIlITB85I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:70:95:28:e1:fd:d5:21:61:b7:64:18:d2:2f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3 Validity Not Before: Dec 20 22:00:39 2025 GMT Not After : Dec 21 22:00:39 2025 GMT Subject: CN=589439f6f9592d301ae543c9cfd8a8d637f6e274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:bb:2d:8e:ff:8d:29:73:54:2c:14:29:bd: 77:48:1a:28:10:90:1e:a6:81:bf:86:f1:97:68:2d: 73:af:58:6e:26:24:c4:40:ba:8f:d3:60:87:7f:bb: 76:39:de:a5:d1:36:f8:9f:29:a8:ff:6e:99:90:81: 72:dd:12:97:f1:79:3b:42:2a:e7:f3:2a:74:ed:4d: 79:42:2b:d5:12:74:b2:e6:70:6f:0c:ff:18:c7:bc: 37:72:08:d9:c7:ee:d9:99:c6:bf:7a:44:d1:d6:dc: ac:ab:9e:fd:7f:df:d0:e9:fb:38:7a:16:37:6f:d0: 08:97:47:46:06:fb:fd:cf:fe:b5:b7:d9:7e:8e:87: 95:a9:09:b4:2d:44:6c:c8:26:e4:5b:33:85:64:38: cc:1b:70:de:36:47:1a:14:11:33:36:8c:20:8d:1b: 47:e6:5d:92:3f:1f:a3:90:21:b7:7c:fe:78:ea:32: 4f:be:32:b8:36:1d:61:3b:22:cd:d8:bb:c1:24:44: a4:8b:01:60:a2:64:22:23:84:43:43:c7:4f:94:cc: d6:c1:95:4f:cc:ee:7a:b5:9f:fb:ba:03:db:30:b9: ce:9d:17:35:fe:66:fd:5f:bb:f3:8d:ba:84:58:24: b6:d1:4a:31:71:55:f2:61:78:56:7c:5c:59:75:2b: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:94:39:F6:F9:59:2D:30:1A:E5:43:C9:CF:D8:A8:D6:37:F6:E2:74 X509v3 Authority Key Identifier: keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b8:92:03:fc:39:7d:15:98:8a:85:fa:80:67:12:6e:1f:68: d3:9a:ab:4e:74:28:af:eb:84:61:a8:60:05:7d:e6:81:e1:7c: 4e:f3:ab:3d:c0:37:a5:eb:41:cf:43:aa:16:9a:4f:a6:a3:c2: 31:c3:39:01:9a:ee:e8:c0:4c:87:72:1e:7d:3c:f4:b2:b4:65: 4a:c6:e7:ba:33:a4:b3:8d:0f:2d:e8:6c:b8:a4:4e:66:a6:89: 28:43:39:4a:36:42:67:21:c9:83:1f:88:69:f8:a8:98:b7:b3: 63:3a:59:1a:c8:c2:6e:95:d7:8b:a7:07:24:6f:69:65:d1:b5: 8f:14:c7:0a:8f:03:31:d7:a3:7e:f8:5b:3a:1e:3a:61:11:94: c7:4e:ce:12:10:2d:b1:db:46:3e:3f:b5:5e:44:de:2c:d7:b9: 1c:ab:b4:e9:59:e1:21:6b:09:57:5c:1f:bd:6d:d8:4e:61:06: 8f:bf:15:8c:6f:18:98:c0:66:2b:26:e4:81:ec:06:a3:8a:d1: 67:9a:a2:a7:06:9b:41:56:4a:fa:b9:c8:db:c4:7d:8e:0a:e9: 04:e3:fb:08:d4:b2:c4:cc:d3:d5:19:15:cc:8d:9f:62:d8:a7: 63:5d:56:4d:19:82:7a:ba:a3:46:b6:60:43:d8:b7:ac:54:8c: 8a:bb:5b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3CVKOH91SFht2QY0i8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl MzZlZDMwHhcNMjUxMjIwMjIwMDM5WhcNMjUxMjIxMjIwMDM5WjAzMTEwLwYDVQQD Eyg1ODk0MzlmNmY5NTkyZDMwMWFlNTQzYzljZmQ4YThkNjM3ZjZlMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4O7LY7/jSlzVCwUKb13SBooEJAe poG/hvGXaC1zr1huJiTEQLqP02CHf7t2Od6l0Tb4nymo/26ZkIFy3RKX8Xk7Qirn 8yp07U15QivVEnSy5nBvDP8Yx7w3cgjZx+7Zmca/ekTR1tysq579f9/Q6fs4ehY3 b9AIl0dGBvv9z/61t9l+joeVqQm0LURsyCbkWzOFZDjMG3DeNkcaFBEzNowgjRtH 5l2SPx+jkCG3fP546jJPvjK4Nh1hOyLN2LvBJESkiwFgomQiI4RDQ8dPlMzWwZVP zO56tZ/7ugPbMLnOnRc1/mb9X7vzjbqEWCS20UoxcVXyYXhWfFxZdSvI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiUOfb5WS0wGuVDyc/YqNY39uJ0MB8GA1UdIwQY MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3 LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7iSA/w5 fRWYioX6gGcSbh9o05qrTnQor+uEYahgBX3mgeF8TvOrPcA3petBz0OqFppPpqPC McM5AZru6MBMh3IefTz0srRlSsbnujOks40PLehsuKROZqaJKEM5SjZCZyHJgx+I afiomLezYzpZGsjCbpXXi6cHJG9pZdG1jxTHCo8DMdejfvhbOh46YRGUx07OEhAt sdtGPj+1XkTeLNe5HKu06VnhIWsJV1wfvW3YTmEGj78VjG8YmMBmKybkgewGo4rR Z5qipwabQVZK+rnI28R9jgrpBOP7CNSyxMzT1RkVzI2fYtinY11WTRmCerqjRrZg Q9i3rFSMirtbyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:00 2025 by rpki-client