This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json) Hash identifier: rjzs0pDp8XCFpV+IpKg9iURNBxXsefza6PxEf9kVSlw= Subject key identifier: 2A:D6:6F:ED:A7:2A:5E:26:D3:D5:45:36:A0:ED:2D:15:9B:15:30:37 Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04 Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204 Certificate serial: 019B37FCA507558836D1F33410BF86EDD1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft Manifest number: 1229 Signing time: Fri 19 Dec 2025 19:01:02 +0000 Manifest this update: Fri 19 Dec 2025 19:01:02 +0000 Manifest next update: Sat 20 Dec 2025 19:01:02 +0000 Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=) 2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=) 3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=) 4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: dr6THI2uABu5Dh5rmb46GY4EBrUiPa+8yaxzQf73DJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:a5:07:55:88:36:d1:f3:34:10:bf:86:ed:d1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204 Validity Not Before: Dec 19 19:01:02 2025 GMT Not After : Dec 20 19:01:02 2025 GMT Subject: CN=2ad66feda72a5e26d3d54536a0ed2d159b153037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:44:45:06:6f:7d:fc:e4:c4:2f:b0:09:1a: e7:7e:d7:27:07:66:67:26:bf:20:ea:6c:c1:e8:eb: 1d:55:4e:0e:ca:ca:77:98:ff:88:13:ca:e6:ec:f2: c8:c5:03:8a:be:cf:e4:d0:7a:e6:55:88:18:af:ee: 31:00:8e:60:21:f2:74:3a:f2:f6:a1:4c:b2:35:21: 86:3a:22:40:ca:bf:e8:82:07:d4:77:01:7a:fb:31: 37:52:d5:f1:fe:ad:04:6f:86:30:d8:8b:44:a9:23: be:73:54:68:da:c3:25:be:da:75:20:b1:f7:07:61: 44:c5:2f:97:c6:84:9d:f5:7f:34:fc:68:15:ae:2a: 44:1f:9f:c2:28:de:ad:77:86:8e:af:e8:2f:2e:72: 21:18:ba:81:c8:e7:7e:c4:6c:f5:2c:e7:61:e3:d2: 11:87:af:d8:95:ff:04:79:23:a0:7f:f7:6d:f7:7d: 8a:46:b0:80:65:91:85:f9:68:ca:27:85:f8:d8:13: 94:97:ab:b0:96:e5:bd:5e:c6:e5:a0:d5:f7:c4:bb: bd:82:17:11:89:e8:e7:ba:4e:02:97:9c:bb:d1:17: 99:2e:b3:f2:72:a5:2d:c5:39:2d:14:d1:a5:46:aa: 0a:48:a8:ce:0e:50:85:42:4d:34:54:42:7a:4f:1a: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:6F:ED:A7:2A:5E:26:D3:D5:45:36:A0:ED:2D:15:9B:15:30:37 X509v3 Authority Key Identifier: keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:76:f8:f7:b2:bf:4e:da:f6:73:c8:ea:0f:85:18:d7:ad:c8: 25:25:3c:89:a7:24:4a:36:3c:f0:a3:b6:02:fe:29:f4:27:ad: 33:8f:d6:b2:ef:6c:75:79:f2:b3:ab:1c:69:46:09:76:06:34: c2:22:40:87:76:7a:e7:85:03:f7:8c:bf:88:e6:24:03:14:1c: f0:e6:e4:9e:10:e8:7a:fc:22:89:52:1f:21:bc:85:6c:71:76: 5f:cb:29:3e:23:c8:f1:96:db:96:49:91:f3:99:71:e9:30:fa: ce:ba:36:38:22:33:bb:33:ab:f8:b3:85:0a:3c:1f:bd:d8:af: ff:d5:df:ab:55:98:63:00:9f:00:6d:5b:7a:39:23:fa:f2:8f: de:ee:0f:15:d6:a8:45:21:7d:6f:a1:4c:e7:6f:cf:37:89:f7: 0b:22:08:d8:83:1d:d5:65:01:38:e4:63:a2:b4:25:84:97:3b: 15:09:10:1c:62:6d:5f:b8:3b:3e:c7:65:af:ef:da:8b:76:5f: 0c:20:03:46:cd:11:79:55:72:cc:68:20:02:40:b1:af:97:4d: 1a:d7:27:5c:4e:0c:cb:84:95:63:31:1b:61:2b:2e:b0:2d:9f: 83:46:42:7c:fb:b6:19:df:48:33:22:8d:20:59:20:1e:0c:c7: 3c:20:61:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/KUHVYg20fM0EL+G7dGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDJjYTQ2Njg4YTgzN2I1NzUyMzRjZTZhMWEzMjY1ODdk NmMyMDQwHhcNMjUxMjE5MTkwMTAyWhcNMjUxMjIwMTkwMTAyWjAzMTEwLwYDVQQD EygyYWQ2NmZlZGE3MmE1ZTI2ZDNkNTQ1MzZhMGVkMmQxNTliMTUzMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufBERQZvffzkxC+wCRrnftcnB2Zn Jr8g6mzB6OsdVU4Oysp3mP+IE8rm7PLIxQOKvs/k0HrmVYgYr+4xAI5gIfJ0OvL2 oUyyNSGGOiJAyr/oggfUdwF6+zE3UtXx/q0Eb4Yw2ItEqSO+c1Ro2sMlvtp1ILH3 B2FExS+XxoSd9X80/GgVripEH5/CKN6td4aOr+gvLnIhGLqByOd+xGz1LOdh49IR h6/Ylf8EeSOgf/dt932KRrCAZZGF+WjKJ4X42BOUl6uwluW9XsbloNX3xLu9ghcR iejnuk4Cl5y70ReZLrPycqUtxTktFNGlRqoKSKjODlCFQk00VEJ6TxoXlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrWb+2nKl4m09VFNqDtLRWbFTA3MB8GA1UdIwQY MBaAFJ5CykZoioN7V1I0zmoaMmWH1sIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTIt MzI5YmEzODhiN2NmLzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTItMzI5YmEzODhiN2Nm LzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3b497K/ Ttr2c8jqD4UY163IJSU8iackSjY88KO2Av4p9CetM4/Wsu9sdXnys6scaUYJdgY0 wiJAh3Z654UD94y/iOYkAxQc8ObknhDoevwiiVIfIbyFbHF2X8spPiPI8ZbblkmR 85lx6TD6zro2OCIzuzOr+LOFCjwfvdiv/9Xfq1WYYwCfAG1bejkj+vKP3u4PFdao RSF9b6FM52/PN4n3CyII2IMd1WUBOORjorQlhJc7FQkQHGJtX7g7Psdlr+/ai3Zf DCADRs0ReVVyzGggAkCxr5dNGtcnXE4My4SVYzEbYSsusC2fg0ZCfPu2Gd9IMyKN IFkgHgzHPCBhIg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:14:10 2025 by rpki-client