This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft File: nmg0rjVjCgTHjyd2BSUmePtkXEU.mft (raw, json) Hash identifier: 8ZDFYP/F6usbIdt/sKVMXvlAP5GjNQ/e8rH45mfxkG0= Subject key identifier: E2:F5:47:EC:97:22:3A:52:C8:4F:85:3D:87:2D:1A:82:22:C3:4F:B6 Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45 Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45 Certificate serial: 019B3C7F51BB0811D2C62835FFFB67A75882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft Manifest number: 0AB8 Signing time: Sat 20 Dec 2025 16:02:15 +0000 Manifest this update: Sat 20 Dec 2025 16:02:15 +0000 Manifest next update: Sun 21 Dec 2025 16:02:15 +0000 Files and hashes: 1: nmg0rjVjCgTHjyd2BSUmePtkXEU.crl (hash: S8jxJukXoi76LDrqkl9t3OwvtgDsaR38ycPmTw5PlDg=) 2: udQIyLLEg9QQXb-UkTqLHg_TlmY.roa (hash: tqfLE5OeUFZI9sRR907kQS3AlAfPN5yiahDFaxm0yMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:51:bb:08:11:d2:c6:28:35:ff:fb:67:a7:58:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45 Validity Not Before: Dec 20 16:02:15 2025 GMT Not After : Dec 21 16:02:15 2025 GMT Subject: CN=e2f547ec97223a52c84f853d872d1a8222c34fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:60:bc:cc:e4:5b:66:f8:1a:bc:e9:f9:11: 36:78:cb:31:57:e8:d1:1e:92:75:29:8f:4f:1d:32: 4a:dd:16:5d:05:57:4c:11:c8:55:a0:c4:86:cc:f1: 29:19:75:62:35:8f:fc:02:1b:ac:8c:07:42:85:2a: 1b:d9:e0:0f:4e:ed:07:47:5d:07:6f:4f:f2:76:d8: f3:52:f0:6a:7c:6a:7e:01:50:f5:5f:44:30:5d:3e: bf:93:12:9a:ef:26:be:03:7c:47:7a:d9:0f:24:72: a7:d0:ec:be:a4:fe:03:61:0d:49:0a:12:06:53:8a: f6:ce:18:73:6c:7e:7b:68:7b:84:9d:af:d1:80:d6: 2a:19:c8:f3:0f:09:39:b0:25:bc:dd:69:3d:5f:0d: 09:e9:a5:b4:b5:f3:ff:b5:e5:f7:a8:25:bb:7b:37: bf:f3:fe:95:88:07:af:96:46:9b:5c:76:83:ca:7b: 3d:06:88:db:3c:db:26:7f:62:bd:b5:3a:d4:84:eb: 58:7d:95:41:f4:aa:00:ce:33:9b:1e:ed:e0:cf:59: e0:00:bd:59:8c:24:ec:2b:4f:d5:ff:b5:09:a3:cd: 29:17:5b:78:9a:16:c9:c7:3d:a0:6d:1b:c9:39:1a: 35:a8:34:f4:dc:e7:4b:5b:4a:fc:aa:61:b2:8a:b4: 46:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F5:47:EC:97:22:3A:52:C8:4F:85:3D:87:2D:1A:82:22:C3:4F:B6 X509v3 Authority Key Identifier: keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3c:b5:0e:38:41:c6:d1:59:63:e8:cf:ea:1a:fd:11:18:c2: ed:95:c3:51:c0:14:ba:59:d4:31:85:98:fd:52:e1:bb:d9:84: f6:56:c0:b5:a1:5c:49:df:d7:d0:42:c6:f1:af:a9:02:f1:d9: 1f:16:2c:d6:f9:3c:74:92:c6:1f:8d:7c:fd:7f:71:22:14:4d: c7:75:f8:ac:ab:cf:42:0b:b5:2f:e6:be:9d:31:38:1d:6c:88: 43:d1:17:6d:bc:26:79:48:37:5b:15:1a:05:e7:11:61:e3:be: 83:12:7e:fa:4d:cf:93:83:b9:9d:c3:12:e3:5c:12:d7:1a:c1: 1d:7b:fc:66:dc:1c:0c:23:fb:71:5c:2f:e9:a9:c3:c6:90:a3: d1:2f:19:c1:57:e3:62:d9:ed:0d:b2:67:9b:b1:6c:cf:ba:fb: 89:e0:c1:bb:c2:99:06:25:e5:85:3c:f7:84:5c:49:fa:1f:fd: 92:d9:93:c5:a7:ae:60:9f:ca:bf:62:f2:40:be:0b:b7:7c:89: 69:42:b4:12:7a:19:9c:60:23:38:c4:4a:ed:98:cb:d2:d8:9a: f2:25:f0:66:07:7d:28:55:f2:2a:83:c3:88:b2:c4:18:b3:10: cd:6c:21:a4:2b:a3:7a:bb:74:2a:96:42:a5:7e:32:fa:85:02: c4:d2:7c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f1G7CBHSxig1//tnp1iCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2 NDVjNDUwHhcNMjUxMjIwMTYwMjE1WhcNMjUxMjIxMTYwMjE1WjAzMTEwLwYDVQQD EyhlMmY1NDdlYzk3MjIzYTUyYzg0Zjg1M2Q4NzJkMWE4MjIyYzM0ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3hgvMzkW2b4Grzp+RE2eMsxV+jR HpJ1KY9PHTJK3RZdBVdMEchVoMSGzPEpGXViNY/8AhusjAdChSob2eAPTu0HR10H b0/ydtjzUvBqfGp+AVD1X0QwXT6/kxKa7ya+A3xHetkPJHKn0Oy+pP4DYQ1JChIG U4r2zhhzbH57aHuEna/RgNYqGcjzDwk5sCW83Wk9Xw0J6aW0tfP/teX3qCW7eze/ 8/6ViAevlkabXHaDyns9BojbPNsmf2K9tTrUhOtYfZVB9KoAzjObHu3gz1ngAL1Z jCTsK0/V/7UJo80pF1t4mhbJxz2gbRvJORo1qDT03OdLW0r8qmGyirRGlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL1R+yXIjpSyE+FPYctGoIiw0+2MB8GA1UdIwQY MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt NTI3OTg0ZmMxMTgxLzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczy1DjhB xtFZY+jP6hr9ERjC7ZXDUcAUulnUMYWY/VLhu9mE9lbAtaFcSd/X0ELG8a+pAvHZ HxYs1vk8dJLGH418/X9xIhRNx3X4rKvPQgu1L+a+nTE4HWyIQ9EXbbwmeUg3WxUa BecRYeO+gxJ++k3Pk4O5ncMS41wS1xrBHXv8ZtwcDCP7cVwv6anDxpCj0S8ZwVfj YtntDbJnm7Fsz7r7ieDBu8KZBiXlhTz3hFxJ+h/9ktmTxaeuYJ/Kv2LyQL4Lt3yJ aUK0EnoZnGAjOMRK7ZjL0tia8iXwZgd9KFXyKoPDiLLEGLMQzWwhpCujert0KpZC pX4y+oUCxNJ8GQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:03:29 2025 by rpki-client