This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json) Hash identifier: qjaGgeyijae3b+K3qP8VPwwtMuj+YakuS+FJPv1zvFg= Subject key identifier: 8E:54:F4:05:6C:4D:19:FA:8F:E0:40:F4:A1:15:65:EE:DB:7C:87:3E Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e Certificate serial: 019B45817A2AFAA8130320C546436071AECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 10:01:11 +0000 Manifest this update: Mon 22 Dec 2025 10:01:11 +0000 Manifest next update: Tue 23 Dec 2025 10:01:11 +0000 Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=) 2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: 3dkV/iw1cb83S8xY/f+fsnckz8hEu/hjaf6DC3by/Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:7a:2a:fa:a8:13:03:20:c5:46:43:60:71:ae:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e Validity Not Before: Dec 22 10:01:11 2025 GMT Not After : Dec 23 10:01:11 2025 GMT Subject: CN=8e54f4056c4d19fa8fe040f4a11565eedb7c873e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:83:7b:f3:3f:9f:2d:96:48:24:93:52:bc: 81:bb:af:5f:bd:e2:af:15:e2:bc:61:79:dd:df:0a: 0a:f0:c1:4c:34:4b:0f:14:16:88:b4:bb:c0:6a:e9: 38:10:56:ac:18:7e:02:5e:5e:88:df:1e:fd:7c:60: 85:c4:72:3e:09:f7:67:a9:0d:cf:75:a3:46:67:9b: c4:31:2b:89:1b:7e:77:f5:3b:8b:d7:da:01:62:bc: 6f:4f:aa:9d:2a:da:8b:37:dc:40:53:d9:4e:68:ec: 3a:09:9a:89:b8:c6:8e:f7:a7:ce:04:a6:b8:70:ec: e8:d4:61:4f:8b:af:a5:73:d2:fb:35:4f:42:00:bc: 8e:11:37:b3:49:0f:cd:f9:cb:24:70:3f:38:b5:70: 68:f3:8f:68:52:8a:e0:16:2f:47:d0:16:22:42:14: 4f:71:91:3d:b7:8b:c3:c6:8b:55:13:02:b8:2b:7f: 28:9c:89:77:53:ff:08:84:ad:2b:df:61:39:05:6d: ca:7c:b4:fa:cd:00:e7:67:68:93:ad:90:7e:96:c4: 39:34:a3:c7:f4:05:10:09:f9:b9:62:5c:73:60:37: 7a:da:98:bc:4b:87:0d:58:32:9e:ee:85:39:90:14: aa:ee:55:c9:6d:88:30:60:bc:48:f1:82:4e:bd:13: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:54:F4:05:6C:4D:19:FA:8F:E0:40:F4:A1:15:65:EE:DB:7C:87:3E X509v3 Authority Key Identifier: keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:73:52:34:4f:0d:6e:0a:3b:c9:25:e7:65:77:03:21:50:ea: 1a:f5:36:b4:b3:06:15:c6:05:5b:bc:5c:3e:88:e3:6a:55:c4: f4:51:b8:b2:7a:06:20:6b:2c:0c:9d:02:14:51:25:96:c3:98: 01:0d:37:c9:44:82:12:cb:f2:34:8f:42:8e:89:8b:5b:25:1e: 0c:b0:b6:5f:7a:69:ba:22:3a:3c:06:b3:bd:4f:a1:db:2e:7d: af:0c:92:11:af:3c:21:7d:4d:00:08:ca:7a:a8:71:4c:a1:28: be:50:f9:a7:97:ad:b0:74:5a:ab:2e:8c:09:d2:c2:fc:1f:3a: 29:51:b3:32:db:65:cc:bf:21:ba:8b:f6:80:a9:93:30:b0:1b: e5:ef:61:53:01:a2:4c:1f:d3:14:33:9a:b6:93:d2:d2:0b:e3: 94:20:55:7e:ed:65:7e:97:d2:88:3b:91:8a:a4:e1:01:af:7f: 65:9c:58:46:12:94:03:6e:5f:04:8a:fc:f1:1b:7e:d9:e9:5a: f2:ac:b2:71:00:2f:3e:5a:c1:79:dc:72:1c:2e:be:b2:33:b3: e6:01:f6:3b:4a:6b:f2:59:4d:2b:2d:88:8c:53:8a:36:8f:33: 60:b4:5b:a5:16:9d:87:c7:35:4c:0f:28:0b:89:0b:61:31:0c: 9e:2e:9d:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgXoq+qgTAyDFRkNgca7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNjE0MDNhYzY5ZTI4NzRmNTYyMmQ3ZWU1NjhlOGU0OWYw NjRjMmUwHhcNMjUxMjIyMTAwMTExWhcNMjUxMjIzMTAwMTExWjAzMTEwLwYDVQQD Eyg4ZTU0ZjQwNTZjNGQxOWZhOGZlMDQwZjRhMTE1NjVlZWRiN2M4NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufODe/M/ny2WSCSTUryBu69fveKv FeK8YXnd3woK8MFMNEsPFBaItLvAauk4EFasGH4CXl6I3x79fGCFxHI+CfdnqQ3P daNGZ5vEMSuJG3539TuL19oBYrxvT6qdKtqLN9xAU9lOaOw6CZqJuMaO96fOBKa4 cOzo1GFPi6+lc9L7NU9CALyOETezSQ/N+cskcD84tXBo849oUorgFi9H0BYiQhRP cZE9t4vDxotVEwK4K38onIl3U/8IhK0r32E5BW3KfLT6zQDnZ2iTrZB+lsQ5NKPH 9AUQCfm5YlxzYDd62pi8S4cNWDKe7oU5kBSq7lXJbYgwYLxI8YJOvRNF5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5U9AVsTRn6j+BA9KEVZe7bfIc+MB8GA1UdIwQY MBaAFJ5hQDrGnih09WItfuVo6OSfBkwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0Yzgt ZTNkMDQ1NDgzNDEyLzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lY2EzMjctZDU4Zi00OTFjLTk0YzgtZTNkMDQ1NDgzNDEy LzEvbm1GQU9zYWVLSFQxWWkxLTVXam81SjhHVEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3NSNE8N bgo7ySXnZXcDIVDqGvU2tLMGFcYFW7xcPojjalXE9FG4snoGIGssDJ0CFFEllsOY AQ03yUSCEsvyNI9CjomLWyUeDLC2X3ppuiI6PAazvU+h2y59rwySEa88IX1NAAjK eqhxTKEovlD5p5etsHRaqy6MCdLC/B86KVGzMttlzL8huov2gKmTMLAb5e9hUwGi TB/TFDOatpPS0gvjlCBVfu1lfpfSiDuRiqThAa9/ZZxYRhKUA25fBIr88Rt+2ela 8qyycQAvPlrBedxyHC6+sjOz5gH2O0pr8llNKy2IjFOKNo8zYLRbpRadh8c1TA8o C4kLYTEMni6dCw== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:39 2025 by rpki-client