This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json) Hash identifier: YO8WVlswhJjFuRncD8VlHDQsInvOTtKSLTW5jw+xDPs= Subject key identifier: CF:46:2D:F8:A0:90:00:47:6D:54:FE:FF:99:88:1A:31:16:F7:A8:FF Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Certificate serial: 019B747F5F0864EA50885EC21E6C2C7C5CFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft Manifest number: 048D Signing time: Wed 31 Dec 2025 13:01:02 +0000 Manifest this update: Wed 31 Dec 2025 13:01:02 +0000 Manifest next update: Thu 01 Jan 2026 13:01:02 +0000 Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=) 2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: hfrC4IIXN1G4et31Niq89s2EY8ADErLWMbIRPi/Rjfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:5f:08:64:ea:50:88:5e:c2:1e:6c:2c:7c:5c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Validity Not Before: Dec 31 13:01:02 2025 GMT Not After : Jan 1 13:01:02 2026 GMT Subject: CN=cf462df8a09000476d54feff99881a3116f7a8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:e6:f0:f9:b4:bd:8d:b4:2c:94:49:7f:74: f0:d9:03:7d:21:75:6a:19:ac:8c:f1:f7:bd:0a:b4: 5d:c3:f5:e1:7a:38:c5:c1:26:c7:3d:e5:16:1d:4b: b5:56:c6:62:c3:3f:8e:43:bd:51:36:a2:e1:fa:c0: bf:52:c9:0a:c2:68:b9:21:d8:e6:6b:47:33:f2:e6: 89:05:3c:41:a4:0e:7d:1e:52:be:a9:bf:0f:d7:f3: 9e:12:6c:50:54:fd:9e:b8:b4:92:6a:6f:20:74:ea: da:67:10:08:d8:0c:33:6f:bf:c5:e3:d8:46:e0:68: 2b:34:8f:c9:1d:66:66:44:aa:79:43:3c:45:97:f3: 88:da:5d:e3:2b:9e:39:55:fa:5d:92:d3:4d:42:c2: 3d:ba:7b:e0:26:b8:74:a0:dd:cf:eb:65:7a:49:66: c8:34:61:77:81:71:db:0c:f2:f8:c9:ab:c0:b9:54: a5:07:7d:ea:cc:f4:cf:af:f8:3c:15:ed:16:d3:28: 71:6d:df:9f:19:68:a5:20:3f:8e:c5:fc:71:c6:cb: b9:55:27:bb:8c:23:29:4d:78:42:9f:f4:1e:8e:06: 84:4f:ff:28:f4:7d:a9:30:7e:ff:04:51:29:57:f8: 94:17:9f:63:2b:f8:d8:a1:1a:5a:d0:92:37:d3:a1: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:46:2D:F8:A0:90:00:47:6D:54:FE:FF:99:88:1A:31:16:F7:A8:FF X509v3 Authority Key Identifier: keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3b:68:fe:b8:cf:9c:3f:12:73:65:b9:49:7f:ed:15:3e:fb: 3c:4b:ce:ec:54:e7:fd:58:43:04:53:68:da:0f:1b:e7:09:41: b5:54:73:f7:2a:ce:c3:ea:5c:b4:c3:2e:51:e2:98:28:79:b2: 7a:9e:22:57:55:48:1c:c0:58:75:66:3a:48:ba:5c:90:4c:e8: df:8a:45:62:88:13:b9:07:60:1c:6e:07:aa:df:d8:61:ea:75: 33:c5:05:1f:ba:90:19:3e:cb:5a:93:f2:82:5d:78:96:90:4d: 11:be:0f:d1:5a:03:a9:a6:0c:79:38:30:85:2e:08:b4:c3:ac: 2e:48:1c:7a:6d:83:08:41:83:f3:1b:84:85:a1:da:c7:e2:2d: 6a:38:c7:d2:51:a3:61:b3:04:8e:a7:bc:d3:a9:0a:56:3c:f8: ab:d8:2e:7e:92:7f:41:5b:7c:99:b5:87:a7:66:4f:cb:26:ad: 7a:6d:a5:e8:f0:96:f6:9f:a0:d5:68:7f:af:f4:52:cc:7b:d3: c5:e8:ac:db:90:e1:64:a0:a2:04:48:db:d7:e1:99:00:ec:fe: ba:9c:ea:77:62:2e:be:33:e3:19:57:d9:48:e1:f1:45:3a:36: b7:8e:f0:5b:07:3d:b9:6c:d7:8d:08:4a:4a:42:57:00:74:5a: 88:bc:6b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0f18IZOpQiF7CHmwsfFz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTJhYTUzZDMyOTBhYTgwMzc5OTM1MzM1ZGI5ZmNjM2Zm ZDI5YWEwHhcNMjUxMjMxMTMwMTAyWhcNMjYwMTAxMTMwMTAyWjAzMTEwLwYDVQQD EyhjZjQ2MmRmOGEwOTAwMDQ3NmQ1NGZlZmY5OTg4MWEzMTE2ZjdhOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXTm8Pm0vY20LJRJf3Tw2QN9IXVq GayM8fe9CrRdw/XhejjFwSbHPeUWHUu1VsZiwz+OQ71RNqLh+sC/UskKwmi5Idjm a0cz8uaJBTxBpA59HlK+qb8P1/OeEmxQVP2euLSSam8gdOraZxAI2Awzb7/F49hG 4GgrNI/JHWZmRKp5QzxFl/OI2l3jK545VfpdktNNQsI9unvgJrh0oN3P62V6SWbI NGF3gXHbDPL4yavAuVSlB33qzPTPr/g8Fe0W0yhxbd+fGWilID+Oxfxxxsu5VSe7 jCMpTXhCn/QejgaET/8o9H2pMH7/BFEpV/iUF59jK/jYoRpa0JI306HiXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9GLfigkABHbVT+/5mIGjEW96j/MB8GA1UdIwQY MBaAFJySqlPTKQqoA3mTUzXbn8w//SmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt NDUwMzk1ZmI4OGZhLzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjItNDUwMzk1ZmI4OGZh LzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTto/rjP nD8Sc2W5SX/tFT77PEvO7FTn/VhDBFNo2g8b5wlBtVRz9yrOw+pctMMuUeKYKHmy ep4iV1VIHMBYdWY6SLpckEzo34pFYogTuQdgHG4Hqt/YYep1M8UFH7qQGT7LWpPy gl14lpBNEb4P0VoDqaYMeTgwhS4ItMOsLkgcem2DCEGD8xuEhaHax+ItajjH0lGj YbMEjqe806kKVjz4q9gufpJ/QVt8mbWHp2ZPyyatem2l6PCW9p+g1Wh/r/RSzHvT xeis25DhZKCiBEjb1+GZAOz+upzqd2IuvjPjGVfZSOHxRTo2t47wWwc9uWzXjQhK SkJXAHRaiLxr7A== -----END CERTIFICATE-----Generated at Wed Dec 31 21:07:58 2025 by rpki-client