This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json) Hash identifier: D+zJw9a5fS7fqjrZa/J5MBzfdYSw9JS5+wccHdILI74= Subject key identifier: EC:50:ED:00:D5:4F:AF:35:F4:D8:C4:1A:91:DC:7D:02:C9:06:46:8C Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Certificate serial: 019B3E6D973F1F2F39A13F37A4489EB28A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft Manifest number: 0471 Signing time: Sun 21 Dec 2025 01:02:07 +0000 Manifest this update: Sun 21 Dec 2025 01:02:07 +0000 Manifest next update: Mon 22 Dec 2025 01:02:07 +0000 Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=) 2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: CkG/H6IUWOPD44kJiMwcn9WkA8h7wryUDghqd2ioseo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:97:3f:1f:2f:39:a1:3f:37:a4:48:9e:b2:8a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Validity Not Before: Dec 21 01:02:07 2025 GMT Not After : Dec 22 01:02:07 2025 GMT Subject: CN=ec50ed00d54faf35f4d8c41a91dc7d02c906468c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f3:a2:86:71:43:64:1a:7a:48:0a:d0:19:9b: 8b:42:ed:0b:ef:0d:47:69:f9:29:2d:a3:18:d6:9a: 44:51:57:a7:c7:92:8a:92:61:48:93:a9:e8:f9:4b: 3d:9b:0b:c3:81:23:ff:f0:1d:85:19:89:67:18:a7: 3e:93:a7:cf:ab:3d:b2:40:6f:fb:53:ee:3e:98:b9: 9a:92:58:d4:63:05:8a:d5:15:47:ef:b0:f2:6e:7c: 75:a1:c2:0a:46:9c:fe:44:c0:08:3c:84:08:b5:22: 6e:4d:4f:dc:65:19:a4:d6:57:34:ae:a6:c3:b6:fb: f3:c3:73:a1:e9:4c:88:35:ce:ea:50:a6:df:84:6e: 4f:88:20:89:0d:b3:25:d6:9b:33:74:e9:0a:1d:fa: 90:8e:d5:2d:b2:b8:e2:06:1a:3f:fb:a1:ae:27:96: 74:ff:8e:0d:9c:c1:f9:79:6a:83:c4:a4:86:6a:56: af:9e:37:ef:f3:10:c2:7a:b7:56:49:2d:4c:65:d7: 15:90:f8:4b:5e:b0:28:5b:8f:d4:32:43:bc:87:7e: 8e:bb:35:a8:33:95:a4:2c:d9:7c:b7:72:0a:e2:7c: 4d:dd:b9:67:92:e7:ed:e3:39:6a:29:85:68:ef:8d: ec:38:74:68:84:4b:61:78:a7:3e:21:e6:d1:4b:fc: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:50:ED:00:D5:4F:AF:35:F4:D8:C4:1A:91:DC:7D:02:C9:06:46:8C X509v3 Authority Key Identifier: keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5e:ae:e6:04:15:4d:b7:19:64:94:f3:b2:49:4f:4c:59:ad: 5c:2f:67:7c:b6:34:53:d1:65:eb:32:c4:3c:55:b8:f9:fd:69: a9:5e:65:7b:46:14:17:f5:0c:2a:dd:e8:df:04:15:54:1c:97: 2c:47:c6:7b:91:98:68:90:9a:34:d9:4c:0e:b9:7c:94:3d:24: a6:0f:d4:32:ca:d7:66:7f:e5:b7:64:83:6c:c4:22:ac:52:68: bb:f0:4c:91:cc:7d:e7:97:66:a1:ee:38:5c:e6:34:7e:b7:ec: 72:3b:b4:19:aa:55:03:24:15:97:d3:fc:ae:bb:33:71:6d:9f: 90:f5:48:db:89:d7:07:61:12:fe:dc:89:38:fa:48:cb:e6:23: 19:26:a5:3f:7f:78:89:2c:ad:53:2c:8f:12:25:44:e0:bb:04: ef:e8:c3:d2:49:f0:5d:7a:d3:0d:1c:7c:e4:78:c6:b6:06:c8: 29:18:ef:59:da:89:e4:e6:3f:df:c8:3d:fd:3b:46:9a:5a:5b: 16:64:e5:8f:b7:17:ee:21:46:6c:a4:24:e9:1a:39:3d:0c:9c: b1:ca:84:d6:23:e5:01:e6:9c:7d:c7:6d:57:4d:f7:07:83:f6: aa:52:f8:58:db:41:fd:7e:db:b6:7f:23:f2:75:58:80:3d:66: 1f:b0:1e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZc/Hy85oT83pEiesoqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTJhYTUzZDMyOTBhYTgwMzc5OTM1MzM1ZGI5ZmNjM2Zm ZDI5YWEwHhcNMjUxMjIxMDEwMjA3WhcNMjUxMjIyMDEwMjA3WjAzMTEwLwYDVQQD EyhlYzUwZWQwMGQ1NGZhZjM1ZjRkOGM0MWE5MWRjN2QwMmM5MDY0NjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7POihnFDZBp6SArQGZuLQu0L7w1H afkpLaMY1ppEUVenx5KKkmFIk6no+Us9mwvDgSP/8B2FGYlnGKc+k6fPqz2yQG/7 U+4+mLmakljUYwWK1RVH77Dybnx1ocIKRpz+RMAIPIQItSJuTU/cZRmk1lc0rqbD tvvzw3Oh6UyINc7qUKbfhG5PiCCJDbMl1pszdOkKHfqQjtUtsrjiBho/+6GuJ5Z0 /44NnMH5eWqDxKSGalavnjfv8xDCerdWSS1MZdcVkPhLXrAoW4/UMkO8h36OuzWo M5WkLNl8t3IK4nxN3blnkuft4zlqKYVo743sOHRohEtheKc+IebRS/xD3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxQ7QDVT6819NjEGpHcfQLJBkaMMB8GA1UdIwQY MBaAFJySqlPTKQqoA3mTUzXbn8w//SmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt NDUwMzk1ZmI4OGZhLzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjItNDUwMzk1ZmI4OGZh LzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj16u5gQV TbcZZJTzsklPTFmtXC9nfLY0U9Fl6zLEPFW4+f1pqV5le0YUF/UMKt3o3wQVVByX LEfGe5GYaJCaNNlMDrl8lD0kpg/UMsrXZn/lt2SDbMQirFJou/BMkcx955dmoe44 XOY0frfscju0GapVAyQVl9P8rrszcW2fkPVI24nXB2ES/tyJOPpIy+YjGSalP394 iSytUyyPEiVE4LsE7+jD0knwXXrTDRx85HjGtgbIKRjvWdqJ5OY/38g9/TtGmlpb FmTlj7cX7iFGbKQk6Ro5PQycscqE1iPlAeacfcdtV033B4P2qlL4WNtB/X7btn8j 8nVYgD1mH7Ae0g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:22:43 2025 by rpki-client